Sonrai Cloud Permissions Firewall and WALLy

Sonrai Security provides identity, access and permissions security for AWS, Azure and Google Cloud, with offices in New York and New Brunswick, Canada. It addresses excessive cloud privileges held by humans, machines, AI agents and third parties.

Its Cloud Permissions Firewall enforces least privilege through native controls such as AWS SCPs and GCP or Azure org policies, and the WALLy cloud PAM agent removes unused privileges and enforces just-in-time access with human approval. A customer case shows Global Atlantic cutting fixes from 6 months to 6 days.

• Cloud Permissions Firewall: blocks risky permissions through native cloud policies.
• WALLy PAM agent: removes unused privileges with staged human approval.
• Just-in-time access: grants temporary elevated access via Slack approval.
• AI agent security: limits privileges held by AI agents.
• Third-party access control: governs vendor and partner permissions.
• Privilege Inspector: assesses identity and permission risk.

A Vietnamese bank can remove unused admin privileges in its AWS accounts. A fintech can grant developers just-in-time production access. An outsourcing firm can restrict third-party access to client cloud environments.

Enforces least privilege without disrupting DevOps. Uses native cloud controls instead of agents in workloads. Every automated action requires human approval and is audited. A 14-day free trial is offered.

Multi-cloud identity sprawl and the growth of AI agents with cloud credentials make CIEM and cloud privileged access a priority. Vietnamese enterprises on AWS, Azure or Google Cloud often accumulate over-permissioned roles during rapid migration.

Offices in New York and New Brunswick, Canada. Investors listed include ISTARI, Menlo Ventures, Polaris Partners and TenEleven Ventures. Holds US patents cited on the site. Founding year is not stated on fetched pages.