Identity is the new perimeter. We treat it that way.
8Layers is building the identity security platform that posture, detection, and compliance teams should have had a decade ago. Inventory without action is just a list.
Why we built 8Layers.
Founded by engineers and operators who lived the limitations of legacy identity tools firsthand.
The founding team has spent years inside the problem 8Layers is solving. Building security analytics platforms, designing detections, and running investigations. They saw the same pattern repeat itself, year after year: the tools that security teams relied on were never designed for identity. They were designed for logs, for endpoints, for networks — with identity bolted on as a tag, an afterthought, a derived field in a SIEM rule.
Modern breaches don't start at the perimeter. They start with a credential, a service account, a federation trust chain that nobody has mapped. By the time an EDR alert fires, the attacker has been inside for weeks. By the time a SIEM rule correlates the dots, the events have already aged out of the detection window.
And the picture keeps shifting. Non-human identities (NHIs) have been quietly outgrowing humans for years. Now AI agents are accelerating that curve, taking actions on behalf of organizations at machine scale, often with credentials and permissions that no one inventoried, no one scored, no one is watching. Most of the stack still treats them as second-class citizens.
8Layers is built to close that gap.A data layer designed for identity, with a temporal engine that doesn't forget, capable of serving posture, detection, and compliance simultaneously — for every identity, human or not.
Detection depth over detection count. An alert that fires must be originated from high-confidence detections with deep correlation logic, so teams have less noise and more clarity.
No vendor dependency. Security teams should have the tools to build detections, define baselines, and manage risk autonomously at their own timeline.
Identity first, always. Posture, detection, and compliance have to be designed to work together from the ground up, and not added as features to a platform that was never built for identity in the first place.
Analysts come first. Every workflow, every alert, every investigation view have to be designed around what a real analyst needs to move faster and with more confidence.
What drives 8Layers.
The principles every architectural and product decision in 8Layers comes back to.
The team behind 8Layers.
Built by engineers and operators who lived the limitations of legacy identity tools, and decided to build the platform they wished existed.
Daniel García Morán
Co-founder & CEO
Co-founder and former VP of Engineering at Devo (formerly Logtrust), where Daniel helped design the cloud-native platform from scratch.
Over 20 years building and scaling global engineering teams, software architectures, and platforms for enterprise and Fortune 500 clients across cybersecurity and data analytics. Focused on what technology should actually deliver: products people trust, teams that own their work, and outcomes that matter.
Security problems are data problems. The reason identity threats stay hidden isn't because attackers got smarter, it's because the data layer underneath was never built to see them. We started from that layer. Everything else follows.
Pedro Palao Gostanza
Co-founder & CTO
Previously Chief Architect at Devo (formerly Logtrust), where he shaped the technological foundation of the platform from its earliest days.
Over 30 years designing distributed systems for security and data analytics. Focused on what he believes as great architecture: systems that don't impose limits on what you can ask of them.
We didn't want to build on top of existing infrastructure and inherit its constraints. 8Layers is built from the ground up for identity, and that changes what's technically possible.
Pablo Carretero Gómez
Co-founder & Chief Security Architect
Previously VP of Architecture & Security at Devo (formerly Logtrust), with roots in banking security at Bankinter and early cybersecurity consulting at S21Sec and KPMG.
Over 20 years of building and auditing security systems across finance and enterprise. Focused on building security that comes from operational reality instead of frameworks designed in a vacuum.
I've seen too many incidents where the identity signal was there: buried under noise, outside the detection window, or simply not correlated. The industry deserves purpose-built tools, not identity features bolted onto something else. We built 8Layers to change the identity paradigm.
Iago Gómez Salgado
Co-founder & Head of Detection Engineering
Previously Lead Cyber Security Researcher at Devo, SOC Manager in a MSSP provider, Cyber Security Analyst for Fortune 500 and IBEX35, and Incident Response Consultant for several Fortune 100.
Over a decade in incident response, threat hunting, and detection engineering, from the frontlines of real attacks. Focused on the conviction that great detection starts with understanding how attackers think and behave.
Threat landscapes shift daily, with a pronounced drift toward cloud identities in recent years. Security tools deliver visibility across networks, email, and endpoints — but cloud environments remain a persistent blind spot. Building a platform to solve that was the natural next step.
Backed by leading
European venture investors.
The next decade of security is decided at the identity layer.
8Layers is being built for that future, in production, in regulated environments, today. If your team manages identity risk, talk to us.