Act

Act is a cybersecurity company that provides a cloud access and attack path visualization platform focused on enforcing least privilege and eliminating excessive permissions across cloud environments. The platform maps attacker entry points through to production data, surfacing step-by-step access chains that security teams can review and act upon. Key capabilities include: - Attack simulation that runs in read-only mode and deploys in under 5 minutes - Identification of real attack scenarios within a customer's actual environment - Visualization of access chains covering external trust relationships, data exfiltration paths, AI agent permissions, vibe-coding risks, and cross-environment attack vectors - Enforcement of least privilege by identifying over-granted permissions and providing actionable remediation guidance Act targets enterprise security teams and CISOs who need to understand and reduce their cloud attack surface. The platform addresses the challenge of excessive permissions granted to both human identities and AI agents, operating at the infrastructure and access layer rather than at runtime. Customers cited include organizations such as Papaya, Hibob, AlphaSense, WestCap, Benchling, Omada Health, Klaviyo, and Armis. The product is offered with a free assessment tier, allowing organizations to run attack simulations and receive confirmed findings without upfront commitment. Act positions its approach as proactive and preventive, aiming to eliminate attack paths at their root rather than detecting threats after the fact.