Capital & investment
Who funds CIAM.
The customer-identity market is being built with very different kinds of money: hundred-million-dollar venture rounds, quiet private-equity roll-ups, hyperscaler divisions that were never separately funded, and a stubborn cohort growing on revenue alone. Here is who has written the cheques, how the field is capitalized, and which vendors are scaling without any.
Vendors tracked
48
Distinct investors
89
Disclosed capital
$2.6B
Largest round
$6.5B
Auth0
How CIAM is capitalized
Funding model is a buying signal in its own right. It shapes pricing discipline, roadmap independence, and how long a vendor is likely to stay in the form you bought it in.
Independent companies running on venture capital. Fastest feature velocity, but pricing and roadmap are tied to growth expectations and an eventual exit.
Owned by a publicly traded company. Stable and well-resourced; the CIAM line competes for attention inside a much larger portfolio.
Majority-owned by private equity. Usually profitable and cash-generative; expect efficiency focus over land-grab innovation.
Grown on revenue, no institutional equity. Tends to mean disciplined pricing and long-term independence, but smaller R&D budgets.
A feature of a larger cloud platform, never separately funded. Cheapest if you already live on that cloud, with roadmap set by the parent.
Community or foundation open source with no standalone CIAM funding story. Free to self-host; commercial support varies.
Growing without venture capital
Not every CIAM vendor is racing a venture clock. Some are bootstrapped from day one; others took capital only after years of profitability. For buyers who value pricing stability and vendor longevity over bleeding-edge velocity, these are worth a look.
Ping Identity
Private-equity owned · profitable · 24 yrs in business
Vista Equity bought it in 2016, IPO'd it (NYSE: PING) in 2019; Thoma Bravo took it private for $2.8B in 2022 and merged ForgeRock into it.
miniOrange
Bootstrapped · profitable · 14 yrs in business
Bootstrapped and profitable since 2012; the company publicly positions itself as investor-free by choice.
CyberArk Identity
Public company · profitable · 8 yrs in business
Part of CyberArk (NASDAQ: CYBR); built on the Idaptive business CyberArk acquired for $70M in 2020.
FusionAuth
Venture-backed · profitable · 8 yrs in business
Bootstrapped and profitable for its first five years; took a single $65M growth round from Updata in late 2023.
Authress
Bootstrapped · 6 yrs in business
Privately held by Rhosys AG (Switzerland); no disclosed institutional funding.
Wristband
Bootstrapped · 4 yrs in business
Bootstrapped by its founders; multi-tenant B2B auth, no institutional funding disclosed.
MojoAuth
Bootstrapped · 2 yrs in business
Bootstrapped passwordless API; ~$680K revenue with an 11-person team (2024).
SSOJet
Bootstrapped · 1 yrs in business
Early-stage enterprise-SSO startup (founded 2025); no disclosed institutional funding.
The investors backing CIAM
Firms that have backed more than one vendor we cover, ranked by portfolio size. Insight Partners stands out as the category's most repeat investor. Names are linked from each vendor's funding section.
- 7 CIAM investments
Y Combinator
Accelerator - 3 CIAM investments
Insight Partners
Venture capital - 2 CIAM investments
Accel
Venture capital - 2 CIAM investments
Blackbird Ventures
Venture capital - 2 CIAM investments
Coatue
Venture capital - 2 CIAM investments
Lightspeed Venture Partners
Venture capital - 2 CIAM investments
Meritech Capital
Venture capital - 2 CIAM investments
Peak XV Partners
Venture capital - 2 CIAM investments
Thoma Bravo
Private equity - 2 CIAM investments
Toba Capital
Venture capital
Single-investment backers (79)
10x Founders (Corbado) · 8-Bit Capital (PropelAuth) · Abstract Ventures (WorkOS) · adesso ventures (Hanko) · Alumni Ventures (Rownd) · Alven (SlashID) · Andreessen Horowitz (Clerk) · Aspire NZ Seed Fund (Authsignal) · Asymmetry Ventures (Rownd) · Aviso Ventures (Authentik) · Balderton Capital (Ory) · BDC Capital (LoginRadius) · Benchmark (Stytch) · Bessemer Venture Partners (Auth0) · Chapter One (BetterAuth) · Craft Ventures (Supabase Auth) · CRV (Clerk) · Cyberstarts (Transmit Security) · Dell Technologies Capital (Descope) · DG Daiwa Ventures (SlashID) · Dovetail Capital (Authsignal) · EQT Private Capital Asia (WSO2 Identity Server) · Evolution Equity Partners (Beyond Identity) · Fairpoint Capital (Curity) · Felicis (Supabase Auth) · Felicis Ventures (Kinde) · Floodgate (Zitadel) · ForgePoint Capital (LoginRadius) · General Atlantic (Transmit Security) · Geodesic (Transmit Security) · GGV Capital (Descope) · Global Founders Capital (Frontegg) · Greenoaks (WorkOS) · GRO Capital (Curity) · Headline (SlashID) · High-Tech Gründerfonds (Hanko) · i3 Equity (Frontegg) · In-Q-Tel (Ory) · Index Ventures (Stytch) · Intel Capital (WSO2 Identity Server) · Irregular Expressions (SuperTokens) · Jessica Livingston (Tesseral) · KKR (ForgeRock) · Koch Disruptive Technologies (Beyond Identity) · Lachy Groom (WorkOS) · Madrona (Clerk) · Microsoft M12 (LoginRadius) · Musha Ventures (SlashID) · New Enterprise Associates (Beyond Identity) · Nexus Venture Partners (Zitadel) · Open Core Ventures (Authentik) · P1 Ventures (BetterAuth) · Pacific Controls (WSO2 Identity Server) · Paul Graham (Tesseral) · PB Holding (Corbado) · Pitango (Frontegg) · Real Ventures (LoginRadius) · Root Ventures (SuperTokens) · Salesforce Ventures (Auth0) · Sapphire Ventures (Auth0) · SignalFire (Strivacity) · Silicon Valley CISO Investments (Descope) · Smart Infrastructure Ventures (Hanko) · Soma Capital (PropelAuth) · Stripe (Clerk) · Stripes (Frontegg) · SYN Ventures (Transmit Security) · Ten Eleven Ventures (Strivacity) · Thrive Capital (Stytch) · Tiger Global (PropelAuth) · Together Fund (Scalekit) · TQ Ventures (SlashID) · Unusual Ventures (Descope) · Updata Partners (FusionAuth) · Vista Equity Partners (Ping Identity) · WestWave Capital (SuperTokens) · Yaletown Partners (LoginRadius) · Z47 (Scalekit)
The age of the field
CIAM as a named category is young, but its roots run back two decades. How long a vendor has been building its identity product is a reasonable proxy for platform maturity and migration risk. Standalone vendors only — platform divisions and community OSS projects are excluded because their founding dates reflect a parent or a community, not a CIAM bet.
| Vendor | Founded | Years | Funding |
|---|---|---|---|
| Ping Identity | 2002 | 24 | Private-equity owned |
| WSO2 Identity Server | 2005 | 21 | Private-equity owned |
| ForgeRock | 2010 | 16 | Private-equity owned |
| LoginRadius | 2012 | 14 | Venture-backed |
| miniOrange | 2012 | 14 | Bootstrapped |
| Auth0 | 2013 | 13 | Public company |
| Transmit Security | 2014 | 12 | Venture-backed |
| Curity | 2015 | 11 | Venture-backed |
| Ory | 2017 | 9 | Venture-backed |
| Authentik | 2018 | 8 | Venture-backed |
| CyberArk Identity | 2018 | 8 | Public company |
| FusionAuth | 2018 | 8 | Venture-backed |
| Clerk | 2019 | 7 | Venture-backed |
| Frontegg | 2019 | 7 | Venture-backed |
| Strivacity | 2019 | 7 | Venture-backed |
| WorkOS | 2019 | 7 | Venture-backed |
| Authress | 2020 | 6 | Bootstrapped |
| Beyond Identity | 2020 | 6 | Venture-backed |
| Corbado | 2020 | 6 | Venture-backed |
| Hanko | 2020 | 6 | Venture-backed |
| Stytch | 2020 | 6 | Public company |
| Supabase Auth | 2020 | 6 | Venture-backed |
| SuperTokens | 2020 | 6 | Venture-backed |
| Zitadel | 2020 | 6 | Venture-backed |
| Authsignal | 2021 | 5 | Venture-backed |
| Logto | 2021 | 5 | Venture-backed |
| PropelAuth | 2021 | 5 | Venture-backed |
| Rownd | 2021 | 5 | Venture-backed |
| Descope | 2022 | 4 | Venture-backed |
| Kinde | 2022 | 4 | Venture-backed |
| SlashID | 2022 | 4 | Venture-backed |
| Wristband | 2022 | 4 | Bootstrapped |
| Scalekit | 2023 | 3 | Venture-backed |
| Stack Auth | 2023 | 3 | Venture-backed |
| BetterAuth | 2024 | 2 | Venture-backed |
| MojoAuth | 2024 | 2 | Bootstrapped |
| Tesseral | 2024 | 2 | Venture-backed |
| SSOJet | 2025 | 1 | Bootstrapped |
Methodology & caveats
Funding figures are compiled from public sources — press releases, filings, and reputable reporting — and are cited on each vendor's profile. Disclosed-capital totals undercount the field: several vendors raised undisclosed rounds, and platform divisions were never separately funded. Private companies do not report revenue, so “profitable” is shown only where a vendor has stated it publicly. Reviewed alongside the rest of the index; see the methodology and browse the full vendor index, filterable by funding model.