Common Fate

Common Fate was a cloud identity and access management company focused on enabling least-privilege access workflows for cloud-native organizations. The company's core premise was that securing complex cloud environments begins with understanding and controlling identity — specifically, which human or machine identities have access to which resources, and for how long that access should persist.

The company developed tooling to streamline the process of requesting, approving, and revoking time-limited, scoped cloud permissions. Their approach centered on making least-privilege access practical for high-velocity software development teams, where friction in security workflows often leads organizations to over-provision access.

Common Fate offered an open-source developer workflow tool that allowed users to request and approve specific, time-boxed permissions with minimal friction.

One of their notable products was "Granted," a tool that addressed AWS IAM Identity Center authentication, including a browser extension designed to mitigate device authentication phishing attacks. The company also published an Identity Risk Index, a free risk assessment offering to help organizations quantify their identity-related exposure.

Common Fate's target market included cloud-native organizations and enterprises with complex cloud environments, particularly software teams operating at scale. The founding team had backgrounds in cloud platform and security consulting, including work with defense prime contractors and enterprise software teams. The company was backed by security and infrastructure-focused venture capital investors.

As of April 2025, Common Fate announced it was winding down operations.