Push Security announced a $30 million Series B on April 24, 2025. Redpoint Ventures led the round, joined by new investors Datadog Ventures and B3 Capital, while existing backers Decibel and GV (Google Ventures) also participated. Push said it would use the capital to scale its browser-security platform, expand research and product development, hire employees and enter additional markets.
The financing at a glance
| Item | Detail |
|---|---|
| Announcement date | April 24, 2025 |
| Round | Series B |
| Amount | $30 million |
| Lead investor | Redpoint Ventures |
| New participating investors | Datadog Ventures and B3 Capital |
| Existing participating investors | Decibel and GV (Google Ventures) |
| Stated uses | Platform scaling, research and product development, hiring and international expansion |
Push’s announcement is available at Push Security’s funding release. The company did not disclose a valuation, revenue, customer count or other operating metrics that would independently establish its financial performance.
SecurityWeek reported that the round brought Push’s cumulative funding to $49 million. That $49 million figure is a secondary-source report, not a total stated in the available first-party announcement.
What Push Security sells
Push provides a browser-based identity-security and detection-and-response platform. Its premise is that important identity events occur inside the browser: users enter credentials, approve OAuth access, open SaaS applications, download or upload files, copy data and maintain authenticated sessions.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitches#1 Best Overall
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Identity and browser threat detection
The 2025 announcement said Push detects or intercepts zero-day phishing, credential stuffing, session hijacking, account takeover using stolen credentials or tokens, missing multifactor-authentication controls, non-SSO identities and stolen credentials. Push describes these as product capabilities; the announcement does not provide independent testing of detection rates or false positives.
Posture, enforcement and investigation
The product spans several functions that buyers should distinguish:
- Identity-security posture management: finding weak, unmanaged or non-SSO access paths, including so-called ghost logins.
- Browser detection and response: identifying suspicious activity as a user interacts with a page or session.
- Policy enforcement: applying monitor, warn or block actions to URLs, uploads, downloads, clipboard activity, extensions and other browser events.
- Investigation: using browser telemetry and event context to reconstruct what happened.
Push’s current product page also lists SaaS discovery, AI-application visibility and controls, data-loss controls, browser-extension security, autonomous threat-hunting agents, screenshot capture on detection events and integrations with SIEM, webhook, Slack, Teams, SOAR and REST API systems: https://pushsecurity.com/product/.
Why make the browser a security control point?
Many identity attacks are not just network connections; they are user interactions. An adversary-in-the-middle page can imitate a legitimate login and relay credentials or session cookies. A stolen token can be used in an existing browser session. OAuth abuse, password reuse, malicious extensions and unsanctioned SaaS or AI applications can also appear as ordinary web activity until the surrounding context is examined.
Recommended Free Tools
Rank #2
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Push says browser telemetry can expose identity attacks that traditional tools may miss. A browser extension can observe relevant page, session and data-transfer events and warn or block close to the user’s action. That is a company-positioning claim, not proof that a browser layer catches every attack.
In practice, this approach is intended to complement rather than automatically replace identity and access management, phishing-resistant MFA, endpoint detection and response, secure web gateways, email security, CASB or SaaS-management tools, DLP and SIEM platforms. It also has blind spots when users operate through native applications, mobile devices, unsupported browsers or a browser where the extension is absent.
How Push framed the market problem
Push focuses on identity paths that can remain outside an organization’s main controls:
- Adversary-in-the-middle and reverse-proxy phishing.
- Stolen session tokens and hijacked authenticated sessions.
- Credential reuse and leaked passwords.
- Accounts without phishing-resistant MFA or SSO.
- OAuth consent abuse.
- Malicious or overprivileged browser extensions.
- Shadow SaaS and unsanctioned AI applications.
That creates a distinction between finding an exposure before an incident, detecting behavior during an attack, enforcing a policy and investigating an event afterward. Buyers should ask which of those outcomes a proposed deployment actually delivers.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
What the Series B was meant to fund
Push said the proceeds would support platform scaling, research and product development, strategic hiring and expansion into new markets. Those are stated plans, not evidence that each spending category has already been completed. The release did not give a spending timetable or allocation by category.
Traction disclosed by Push
- Push said its customer base grew 380% year over year in January 2025. The company did not publish the underlying customer count or independent verification for that percentage.
- Push said its platform was deployed on more than 1.5 million endpoints globally. The release does not define whether an endpoint means an active installation, a licensed device or another measure.
- The company said it had more than doubled employee headcount during the preceding year.
- Push announced that Kevin Arsenault, formerly a sales leader at CrowdStrike and Proofpoint, had joined as chief revenue officer.
These are company-reported figures from the funding announcement, not audited financial metrics.
How this round fits earlier financing
Push announced a $15 million financing round in April 2023 alongside new visibility and employee-focused SaaS-security tools. The company did not describe that earlier transaction in the available material as the same type of round, so it should not be treated as identical in structure. SecurityWeek’s reported $49 million cumulative total includes financing beyond the $30 million Series B figure.
Where the product stood by August 2026
Push’s later product scope is broader than the capabilities emphasized in the April 2025 financing release. The current feature list includes:
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Rank #4
- HARDWARE 2FA AND MFA: FIDO Alliance Certified FIDO2 v2.1 with CTAP2 plus legacy U2F and CTAP1 for strong two-factor login and passwordless sign-in on services that support security keys
- BUILDING ACCESS ON ONE CARD: MIFARE DESFire EV2 4K applet with AES encryption adds office door and physical access control alongside digital authentication
- CERTIFIED SECURE ELEMENT: An NXP Common Criteria EAL6+ certified secure controller and Java Card platform protects your keys on a tamper-resistant chip
- DUAL INTERFACE SMART CARD: Contactless NFC ISO 14443 plus ISO 7816 contact reader support in an ISO 7810 ID-1 format that is passive and needs no battery
- SWISS ENGINEERED DESIGN: Built by Cryptnox as a single card for authentication and access control and backed by a 2 year warranty
- AiTM, reverse-proxy, cloned-login-page and Browser-in-the-Browser phishing detection.
- ClickFix and clipboard-injection blocking.
- Session-hijacking and credential-stuffing detection.
- Custom detection rules, URL blocking, threat-hunting agents and event screenshots.
- MFA and SSO posture visibility, non-SSO and ghost-login discovery.
- Password-reuse and leaked-password controls.
- SaaS discovery, shadow-SaaS classification and OAuth-consent monitoring.
- Browser-extension inventory and allowlisting.
- File, download, upload and clipboard controls.
- BYOD and unmanaged-device deployment.
In June 2026, Push announced browser-layer controls for AI applications, including file-upload and download telemetry, clipboard controls and application or domain categorization: https://pushsecurity.com/news/push-ai-visibility-and-control-capabilities. Those are later developments and should not be presented as features announced in the 2025 financing.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Pricing and deployment information
Push’s pricing page, viewed in August 2026, lists a Standard plan at $6 per user per month when billed monthly or $5 per user per month with annual billing, for plans covering up to 500 employees. Enterprise deployments above 500 employees require custom pricing and may receive volume discounts: https://pushsecurity.com/pricing.
Deployment uses a browser extension that can be distributed through mobile-device management, email enrollment or self-enrollment. Push says its architecture is local-first and that routine browsing activity is not transmitted; that is a vendor claim that should be validated through technical, privacy and contractual review.
How Push compares with adjacent security categories
| Category | Typical primary focus | How Push may relate |
|---|---|---|
| IAM and identity-threat detection | Accounts, authentication, authorization and identity events | Adds browser context and user-interaction telemetry |
| EDR/XDR | Hosts, processes and endpoint behavior | Can provide web-session context EDR may not see directly |
| Secure web gateway or remote browser isolation | Web traffic policy and isolation | Overlaps on URL and web controls while emphasizing identity behavior |
| CASB and SaaS management | Cloud applications, access and data governance | Adds browser discovery, OAuth and session-level signals |
| DLP | Preventing sensitive-data movement | Applies controls to browser uploads, downloads and clipboard actions |
| Enterprise browsers and extension management | Managed browser experience and policy | Uses an extension-based browser security layer rather than requiring a new browser |
Push is therefore best evaluated as a browser-layer complement or possible consolidation option, not as a universal replacement for the categories above. Push’s comparison with LayerX describes LayerX as more focused on AI governance and policy enforcement and Push as adding browser attack detection and response; because that comparison is vendor-authored, it is marketing positioning rather than neutral testing: https://pushsecurity.com/resources/layerx-alternative.
Questions a buyer should resolve before signing
Coverage and operations
- Which browser versions, Chromium-based variants, operating systems and private-browsing modes are supported?
- Can the extension be force-installed, and what happens on guest profiles, personal devices or unsupported browsers?
- How does it interact with password managers, passkeys, browser sync and other security extensions?
- What happens when an extension update changes permissions or a legitimate workflow is blocked?
Privacy and data governance
- What is collected locally, what triggers transmission and how long are events retained?
- Can screenshots contain credentials, personal information or sensitive business data?
- Where is data stored, who can access it and how are regional-transfer requirements handled?
- Are employee-monitoring, works-council or BYOD obligations triggered?
Detection quality and integration
- What are false-positive rates, detection latency and block-versus-alert results by browser and operating system?
- Can Push provide independent validation, customer references and incident examples?
- Which SIEM, SOAR, Slack, Teams, webhook and REST API integrations are available in the purchased tier?
- How are multiple identity providers, custom login domains and existing sessions handled?
Commercial fit
- What is the fully loaded cost at the organization’s user count, including enterprise features and support?
- Is the browser extension acceptable for users on BYOD, Chromebooks and unmanaged devices?
- Does the organization need controls for native applications or mobile access that a browser layer cannot provide?
Bottom line for investors and security buyers
The April 2025 event was a genuine $30 million Series B led by Redpoint Ventures, with Datadog Ventures, B3 Capital, Decibel and GV participating. It signals investor interest in browser-based identity security, but the financing itself does not prove detection efficacy, customer economics or product-market leadership. Push’s value depends on whether it can deliver reliable browser coverage, useful response actions, acceptable privacy controls and measurable improvement alongside existing IAM, MFA, endpoint, web, SaaS and data-security systems.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
