Material Security
About
Material Security is a cloud workspace security platform that protects Google Workspace and Microsoft 365 environments from email threats, data exposure, account takeovers, and unauthorized OAuth app access. The platform deploys entirely via API without MX record changes and covers email security, file security, OAuth governance, and account takeover prevention in a single product. It is backed by Andreessen Horowitz and protects companies including OpenAI, Figma, Mars, Lyft, and MassMutual.
Details
VenSearch Intelligence
Ideal Customer
- Material Security targets enterprise and high-growth mid-market organizations running Google Workspace or Microsoft 365 as their primary productivity suite.
- Their publicly named customers include well-known enterprises and fast-scaling technology companies — such as OpenAI, Anthropic, Lyft, Figma, DoorDash, Gusto, HackerOne, and Mars — suggesting a sweet spot of companies with dedicated security teams (100+ employees up to large enterprise) that prioritize cloud-first infrastructure.
Key Differentiators
- Material Security differentiates itself as the only threat detection and response platform built in formal partnership with Google, offering capabilities that go beyond inbound email filtering to encompass the full cloud workspace attack surface — email, files, OAuth apps, accounts, and posture — in a single API-based platform that requires no MX record changes and deploys in minutes.
- Unlike traditional secure email gateways (e.g., Proofpoint, Mimecast) that filter at the perimeter, Material operates inside the mailbox and applies message-level access controls so that even after credentials are stolen, attackers cannot unlock sensitive historical messages, password resets, or financial documents.
Industries Served
- Material Security's customer base spans a broad range of industries, with particular concentration in technology, financial services, consumer goods, media, and professional services.
- Named customers include Mars (consumer goods/manufacturing), MassMutual (financial services/insurance), Chubb (insurance), Stripe and Brex (fintech), Roblox, Reddit, Figma, and OpenAI (technology/AI), Lyft and Gopuff (transportation/logistics), and Gusto and PagerDuty (HR/IT SaaS).
Service Coverage
- Material Security is headquartered in Redwood City, California (1003 Main St, Redwood City, CA 94063) and serves customers globally.
- Their platform is entirely cloud-based and deploys via API with no on-premises footprint required, enabling them to serve organizations in any region worldwide.
Partnerships
- Material Security is a Google Cloud Premier Partner — the highest tier of partnership offered to solution providers — reflecting deep API integration with Google Workspace and the fact that the platform is built on Google Cloud Platform (GCP) infrastructure.
- This partnership also allows customers to apply GCP Commit credits toward Material purchases.
Company Size & Ownership
- Material Security was founded in 2017 by Ryan Noon, Abhishek Agrawal, and Chris Park — all former Dropbox engineers — and operated in stealth under the codename 'Stellarite' for three years before publicly launching in 2020.
- The company has approximately 86–89 employees as of late 2025, down from a peak of around 108 in 2023.
Compliance & Certifications
- Material Security holds a SOC 2 Type 2 certification, which is available through their Trust Center at trust.material.security.
- They are also compliant with CCPA and GDPR, as listed in their Trust Center documentation.
Compiled from public sources by VenSearch · Last researched October 14, 2026
Offerings
6 offeringsAccount Security
Material's account security product monitors signals across Google Workspace and Microsoft 365 including forwarding rules, mailbox rule changes, brute force logins, and credential stuffing to detect account takeovers early using behavioral analytics and honeypot signals. It limits the blast radius of compromised accounts by applying message-level access controls so stolen credentials cannot unlock password resets or financial reports. It also detects and remediates persistence mechanisms such as auto-forwarding rules, delegated access, and OAuth grants that attackers establish after gaining access.
Email Security
Material's email security solution connects via API to Google Workspace and Microsoft 365 to detect and remediate inbound threats including BEC, VIP impersonation, credential phishing, quishing, invoice fraud, and ransomware that bypass native controls. It automates the full email threat lifecycle from user report through remediation using similarity matching and agentic AI, reducing phishing triage work by up to 91 percent. It also applies message-level access controls to protect sensitive historical messages inside the mailbox even after an account is compromised.
File Security
Material's file security product automatically discovers and classifies sensitive data across Google Drive and Gmail, maps every sharing permission, and remediates risky or overly broad sharing automatically. It integrates with and augments native Google labeling to enforce consistent data governance policies across all shared drives and mailboxes. File activity is correlated with email and account signals to detect insider risk, data exfiltration, and compromised account access patterns.
Material Platform
The Material platform is a unified cloud workspace security product that covers email threats, file exposure, OAuth app governance, account takeover prevention, and tenant configuration management in a single tool that deploys entirely via API in minutes. It is designed to replace fragmented point solutions by treating email, files, identities, and connected apps as one interconnected attack surface. It supports both Google Workspace and Microsoft 365 environments.
OAuth Remediation Agent
Material's OAuth Remediation Agent continuously monitors third-party app and AI agent OAuth grants across Google Workspace in real time, classifying each connection by risk severity, runtime behavior, vendor trust, and potential blast radius. It can programmatically revoke OAuth tokens instantly upon detecting suspicious activity and messages users in Slack to verify whether an authorization was legitimate. Unlike traditional SSPM tools that poll for snapshots, it provides active threat defense through real-time event streams and automated token revocation.
Posture Management
Material's posture management capability continuously monitors tenant settings across Google Workspace and Microsoft 365 against CIS, NIST, and Material-authored best practices to detect configuration drift the moment it happens rather than at the next audit. It surfaces misconfigurations and provides actionable recommendations to improve security posture. It is part of the unified Material platform and correlates posture signals with email, file, and account activity.
Considering Material Security?
Our team will work with you to determine if Material Security is the right fit for your organization. From research and assessment through procurement negotiation and ongoing vendor management — we handle the entire process at no cost to you.