Industries
Company Size
11-50
Company Stage
Series A
Total Funding
$28M
Headquarters
Israel
Founded
2024
See people who can refer or advise you
Help us improve and share your feedback! Did you find this helpful?
Total Funding
$28M
Above
Industry Average
Funded Over
2 Rounds
Industry standards
imper.ai, a pioneer in real-time cyber impersonation prevention, today announced its public launch and $28 million in new funding from Redpoint Ventures and Battery Ventures, with participation from Maple VC, Vessy VC, and Cerca Partners. The company’s platform detects impersonation risk in real-time, ensuring privacy and accuracy across the most commonly used communication platforms such […]
What the Gartner SRM summit confirmed about the identity attack surface. June 11, 2026 by imper.ai Last week imper.ai was at the Gartner Security and Risk Management Summit in National Harbor. A lot of conversations, a few themes that kept repeating. The one that came up most: organizations that thought they had the identity problem covered are realizing they have the authentication problem covered. Those are not the same thing. The gap between them is where the breaches have been happening. Noam Awadish, imper.ai's co-founder and CEO, was on stage Tuesday with Allison Miller, former CISO of UnitedHealth Group, for a session titled "Your Next Breach Will Probably Start With a Fake Employee." The conversation covered why help desk recovery and remote hiring have become the most exploited entry points in enterprise security. Several attendees told Imper.ai, Inc. after the session it was the most directly useful conversation they had at the conference. Allison brought practitioner stories from healthcare and financial services. Noam brought threat research from a live DPRK IT worker detection earlier this year. Neither of them needed a slide full of statistics to make the point land. What Gartner published the same week. The timing was notable. Gartner's "Cybersecurity Threat: Identity Abuse" report, by Akif Khan and James Hoover, published May 28. It classifies identity abuse as a structural threat, names Scattered Spider, ShinyHunters, and LAPSUS$ targeting IT service desk recovery at MGM, Harrods, and M&S, and names DPRK hiring fraud as the second major vector. The recommended control is specific: remove human decision-making from account recovery by implementing workforce identity impersonation detection tools. That framing matters. Not identity verification. Impersonation detection. The distinction is deliberate. Document-plus-selfie verification confirms a face matches an ID at one moment in time. It does not tell you whether the person on the video call is operating from AnyDesk, routing through Astrill VPN, or exhibiting latency that contradicts their stated location. Gartner's Predicts: Identity report from January made this precise observation: conventional IDV tools face severe challenges around workforce deployment and adoption, and mandatory biometrics will be a barrier for many organizations. The same report flags growing interest in tools that aggregate device and network signals without requiring the caller to explicitly identify themselves. That is a different control category from identity verification. It is identity impersonation detection. The "Cybersecurity Threat: Identity Abuse" report also named the dynamic that keeps coming up in sales conversations. Gartner writes that the rise of phishing-resistant MFA is pushing attackers toward credential management and account recovery through vishing, deepfakes, and help desk manipulation. Stronger perimeter authentication increases the pressure on the recovery workflow. This is not an argument against FIDO2. It is a description of where the attack surface shifts when FIDO2 works. On deepfakes: Gartner's companion report, "Cybersecurity Threat: Deepfake Identity Impersonation," published the same day, tells security leaders not to rely on deepfake detection as a control. The reasoning is about signal durability. Deepfake detection inspects what an attacker produces. The accuracy of that inspection degrades as models improve. Infrastructure-layer impersonation detection inspects what an attacker must control: the device, the network, the session environment. Astrill VPN does not become harder to detect because a new generative model ships. Three attack patterns, one detection gap. The conversations at the summit, and the Gartner research, kept arriving at three attack patterns. Help desk vishing: an attacker calls in, impersonates an employee, and gets a credential reset before authentication is ever relevant. Voice phishing was the top initial access vector for cloud compromises in 2025, at 23% of Mandiant cloud investigations. Second overall, at 11% of all Mandiant investigations. (Mandiant M-Trends 2026, each figure separately.) Hiring fraud: a proxy candidate operates a live interview session from attacker-controlled infrastructure. FAMOUS CHOLLIMA's fraudulent employment activity doubled in 2025. (CrowdStrike 2026 Global Threat Report.) In Q1 2026, imper.ai identified four candidates across 600 remote interviews carrying overlapping infrastructure indicators: Astrill VPN, AnyDesk, multi-hop proxy routing, latency inconsistent with any US location. No background check surfaces those signals. Shadow workforce: a legitimate credential, consistently operated by someone who is not the authorized user. Point-in-time verification does not see it. Session-layer impersonation detection does. All three share the same gap. None of the attacks require a technical exploit. All three bypass controls that operate at the authentication layer. All three are resolved by the same detection surface: infrastructure and behavioral signals at the session layer, not document inspection after the fact. Where things stand. The summit confirmed that awareness of this gap is fairly widespread among security leaders. Purchase decisions are a step behind. That is a normal position for a control category that is still being named in analyst research for the first time. The Gartner report sequence over the past six months, four separate workforce identity reports culminating in an explicit recommendation to deploy impersonation detection tools, is moving this from emerging guidance toward audit expectation. The organizations putting a control in place now will have documentation and operational data when the question comes from an auditor. The ones that wait will have a finding. Source notes: Mandiant M-Trends 2026; CrowdStrike 2026 Global Threat Report; Gartner "Cybersecurity Threat: Identity Abuse," May 2026 (Akif Khan, James Hoover); Gartner "Cybersecurity Threat: Deepfake Identity Impersonation," May 2026; Gartner "Predicts: Identity," January 2026; Gartner "Protect Your IT Service Desk Against Social Engineering Attacks," January 2026; imper.ai Threat Research Q1 2026.
imper.ai Recognized in Redpoint's 2026 InfraRed 100. May 27, 2026 by imper.ai Imper.ai, Inc. is proud to announce that imper.ai has been recognized in Redpoint Ventures' 2026 InfraRed 100, an annual list recognizing private companies building the foundational infrastructure of the AI era. Redpoint has backed generational infrastructure companies including Snowflake, Twilio, Stripe, HashiCorp, and Netflix. The problem Imper.ai, Inc. is solving. Voice phishing is now the number one initial infection vector for cloud compromises globally, per Mandiant M-Trends 2026. FAMOUS CHOLLIMA fraudulent employment activity doubled in 2025, per CrowdStrike. These are not edge cases. They are the fastest growing, most successful attack vectors targeting the enterprise today. What makes these attacks effective is the attacker's ability to appear operationally legitimate across every layer. They route traffic through residential proxies and Astrill VPN. They use AnyDesk to remotely control a physical device in the right city. They deploy virtual machines, anti-detect browsers, and virtual audio devices to avoid detection. Controlling credentials is easy. Controlling all of those layers simultaneously, across a live session, is where attackers leave signals. In Q1 2026, imper.ai identified 4 DPRK-affiliated candidates across 600 remote hiring sessions, each exhibiting overlapping infrastructure-layer indicators: Astrill VPN, AnyDesk, multi-hop proxy routing, and geographic latency irreconcilable with claimed location. Read the full threat report here. What Imper.ai, Inc. built. imper.ai is the first purpose-built platform for workforce identity impersonation detection, covering help desk vishing, hiring fraud, and shadow workforce infiltration across the full employee lifecycle. No ID scans. No biometrics. No friction for legitimate employees. "Being named to the InfraRed 100 reflects the urgency of the problem we are solving and the traction we are seeing from organizations that have realized their authentication stack does not cover the human layer," said Noam Awadish, CEO of imper.ai. "The threat actors targeting help desks and hiring pipelines are disciplined, well-resourced, and persistent. We built imper.ai to be the control that stops them."
imper.ai has launched its Workforce Identity Security platform at RSA Conference 2026, raising concerns over a critical vulnerability in enterprise security. The solution addresses attackers bypassing authentication through help desk account recovery and recruitment processes, rather than breaking multi-factor authentication directly. The platform combines an Impersonation Detection Engine, which analyses device integrity and environmental signals, with AI-driven contextual verification using role-based questions drawn from actual work context. Unlike traditional methods, it avoids document uploads or biometric enrollment. Founded by veterans of Israeli intelligence unit 8200 and backed by Redpoint Ventures and Battery Ventures, imper.ai integrates with platforms including ServiceNow, Microsoft Entra and Workday. The company already serves customers in financial services, wholesale and technology sectors. The platform is now generally available.
imper.ai launches first Workforce Identity Security platform at RSAC 2026. PR Newswire Today at 9:04am PDT Purpose-built to stop impersonation and account takeover across the employee lifecycle SAN FRANCISCO, March 24, 2026 /PRNewswire/ - imper.ai today announced the launch of its Workforce Identity Security platform, the first purpose-built solution designed to prevent impersonation and account takeover across the employee lifecycle. The company is making its debut at RSA Conference 2026 at Booth S-1361. As phishing-resistant MFA adoption increases, attackers have shifted tactics. They no longer attempt to break authentication, they bypass it. Help desk account recovery and workforce hiring have become the preferred entry points. Gartner(R) framed the stakes directly in its February 2026 report, Workforce Identity Verification Requires Unique Capabilities: "IDV for workforce helps to mitigate the risk of attackers abusing either your account recovery process or your recruitment process to gain system access. Successful attacks on these critical processes can result in ransomware, theft of intellectual property, or regulatory scrutiny for paying citizens of sanctioned countries." "The workforce identity layer is the most exploited and least defended surface in the enterprise," said Noam Awadish, Co-Founder & CEO, imper.ai. "We are already deployed with customers in financial services, wholesale, and technology. What we see across all of them is the same gap, attackers going around authentication, not through it. imper.ai is built to close that gap across the entire employee lifecycle." NO DOCUMENTS. NO SELFIES. NO ARMS RACE. imper.ai does not rely on document uploads, biometric enrollment, or deepfake detection. Those approaches do not scale to workforce scenarios and create an arms race that defenders cannot consistently win. Instead, imper.ai combines two purpose-built technologies. The Impersonation Detection Engine identifies attacker controlled environments in real time, analyzing device integrity, virtualization artifacts, remote control tooling, VPN patterns, and geolocation signals to produce a dynamic risk score and drive automated policy enforcement. The AI Driven Contextual Verification layer confirms the person behind the session through dynamic, role based questions drawn from actual work context: which shift they worked, which system they accessed before submitting a request, which truck they are assigned that day. Questions an attacker cannot reliably answer at scale. "We verify work familiarity, not personal trivia, not biometrics," said Rom Dudkiewicz, Co-Founder & CTO, imper.ai. "Infrastructure signals and operational context are far harder to fake at scale than a document or a face." STOPPING IMPERSONATION AT THE HELP DESK AND THE HIRING DOOR At the help desk, imper.ai removes agent discretion from account recovery decisions, eliminating the social engineering opportunity that has driven breaches at MGM, Harrods, and Marks & Spencer. Secure self service account recovery reduces both risk and operational cost, particularly for outsourced help desk environments. In hiring, imper.ai assesses the legitimacy of a candidate's environment across multiple interview interactions, building a stronger signal over time to detect impersonation before credentials are ever issued. It integrates directly into platforms including Greenhouse and Workday with no change to recruiter workflow. Across both use cases, imper.ai embeds into existing workflows via native integrations with platforms including ServiceNow, Microsoft Entra, and Workday. Security teams get automated enforcement, risk scoring, and full audit logging. Help desk agents and recruiters operate as usual. The attack surface shrinks. The workflow does not. imper.ai is generally available today. To schedule a demonstration at RSAC 2026, visit imper.ai/rsac-2026 or stop by Booth S-1361. GARTNER is a trademark of Gartner, Inc. and its affiliates. ABOUT IMPER.AI imper.ai is on a mission to stop impersonation and social engineering as viable attack vectors against the enterprise workforce. Founded by veterans of Israeli elite intelligence unit 8200 and backed by Redpoint Ventures and Battery Ventures, the company builds technology that identifies attacker-controlled environments and verifies the humans behind workforce interactions, without disrupting operations. Headquartered in New York. For more information, visit imper.ai. Melissa Riberdy SOURCE Imper.ai This is a paid placement. For further inquiries, please contact PR Newswire directly.
Find jobs on Simplify and start your career today
We update imper.ai's jobs every few hours, so check again soon!Browse all jobs
Industries
Company Size
11-50
Company Stage
Series A
Total Funding
$28M
Headquarters
Israel
Founded
2024
Find jobs on Simplify and start your career today
We update imper.ai's jobs every few hours, so check again soon!Browse all jobs