Malanta

Malanta is developing a pre-attack prevention platform that combines attack-path mapping with identity-centric defense automation to help enterprises transition from reactive breach-response to proactive compromise prevention. The company's core thesis is that most enterprise breaches follow predictable attack chains rooted in identity misconfigurations, excessive privilege, and lateral-movement pathways; by visualizing and automatically hardening these paths before attackers exploit them, defenders can reduce the effective attack surface while cutting false-positive investigation overhead. The platform integrates with enterprise identity systems (Active Directory, cloud identity platforms, PAM solutions) to map transitive privilege relationships, detect risky access patterns, and recommend or enforce remediation at machine speed.

The market context is compelling: enterprise identity attack surface is expanding rapidly as hybrid and multi-cloud infrastructure proliferate. Ransomware gangs, APT groups, and commodity attackers increasingly lead with identity compromise (lateral movement, privilege escalation, insider-risk scenarios) rather than remote code execution. Legacy identity-governance tools are slow, purely detective, and generate alert fatigue; modern enterprises need both visibility and operational velocity. Malanta's positioning as a pre-attack prevention layer fills a gap between SIEM/XDR (which flag compromise activity after the fact) and traditional IDaaS vendors (which manage provisioning and policy but lack attack-path focus).

Malanta has seed-stage traction in Israel's strong cybersecurity ecosystem and has raised venture backing to scale product development and go-to-market execution. The company is privately held and focused on enterprise customers, particularly those with complex, high-privilege identity footprints (financial services, healthcare, critical infrastructure contractors, security-conscious tech firms). Early customer feedback emphasizes the platform's ability to operationalize identity hardening—reducing the time from finding a risky access path to remediating it through automated policy enforcement.

The competitive landscape includes several established players with identity-attack focus: Silverfort (Israeli identity-centric access company, part of Rapid7), Semperis (Active Directory defense), Entro Security (identity threat exposure), and broader identity/access vendors (SailPoint, Okta, Deloitte consulting practices). However, most competitors either focus on detection/alerting rather than automated pre-attack remediation, or operate at broader enterprise identity layers without attack-path specificity. Malanta's differentiation rests on operationalizing remediation and shifting the security paradigm from reactive to proactive.

For defense and national-security adjacency, the dual-use case is material. Compromise of identity systems in defense contractors, critical infrastructure, and government agencies can cascade rapidly through lateral movement and privilege abuse; hardening identity attack paths before breach is a priority for DoD/CISA and for contractors on critical infrastructure or sensitive programs. While Malanta's current positioning is commercial, the underlying defense need is acute and likely to remain a sustained market tailwind as government and critical infrastructure operators raise identity-defense standards.