Companies that use ConductorOne

Source: Analysis of job postings that mention ConductorOne (using the Bloomberry Jobs API)

My analysis shows that ConductorOne is primarily purchased by security leadership, with Directors of Information Security representing 7% of roles and broader security leadership positions scattered throughout the remaining postings. These buyers are focused on strategic priorities around identity governance, access management, and regulatory compliance, particularly SOC 2, PCI DSS, and SOX controls. I noticed that hiring patterns emphasize scaling security programs while maintaining operational velocity.

The day-to-day users are predominantly IAM Analysts (11%) and Information Security Engineers (21%), along with IT Support Specialists (7%). These practitioners use ConductorOne for running user access reviews, managing service principals and managed identities, enforcing least privilege access, and automating provisioning workflows. I found that the platform supports tasks like quarterly access certifications, third-party security reviews, and managing authentication across SSO, MFA, and privileged access scenarios.

The job postings reveal companies struggling with manual identity operations and seeking automation. One role emphasizes moving from "manual configuration toward secure, automated, peer-reviewed code," while another highlights the challenge of "How do we implement ABAC and RBAC to deliver intelligent birthright access?" A third posting notes the need to "enforce strong access controls without slowing down engineers and business teams." These companies want security that enables rather than blocks productivity, with identity governance that scales across growing SaaS portfolios and emerging AI technologies.

Source: Analysis of Linkedin bios of 160 companies that use ConductorOne

I noticed ConductorOne's customers span a remarkably diverse range of operations. They're not confined to one sector. I see food delivery platforms like DoorDash and Instacart, financial services from traditional banks to crypto exchanges like Coinbase, defense technology manufacturers like Anduril, healthcare systems, retailers, and enterprise software companies. What ties them together is that they're all building or operating technology-intensive businesses, even when their primary industry isn't tech. Cargill talks about "raising healthier animals with AI," while traditional insurers like Mercury describe themselves as technology-driven.

The maturity signals are telling. I see substantial employee counts, many between 1,000 and 5,000, with several reaching 10,000 plus. Funding stages lean heavily toward late-stage companies: Series D and beyond, private equity, post-IPO, or established corporations with no recent funding rounds. These aren't scrappy startups. They're scaling enterprises and mature companies managing complex operations across multiple locations and serving thousands to millions of customers.

Source: Analysis of tech stacks from 160 companies that use ConductorOne

I noticed that ConductorOne users are clearly security-conscious, tech-forward companies that prioritize developer productivity and operational efficiency. The presence of Semgrep alongside ConductorOne tells me these organizations take a comprehensive approach to security, combining identity and access management with code security scanning. They're not just checking boxes but building genuine security-first cultures.

The pairing with Golinks is particularly revealing. Companies using internal link shorteners alongside identity management tools are dealing with complex internal systems and lots of employees who need quick access to resources. This suggests mid-to-late stage startups or growth companies with mature ops teams. Similarly, Snowflake's strong correlation indicates these are data-intensive businesses that need sophisticated access controls for their analytics infrastructure. When you're managing who can access what data in a cloud data warehouse, identity management becomes critical. The DX correlation reinforces this picture as these companies measure and optimize developer experience, viewing their engineering teams as strategic assets worth investing in.

My analysis shows these are product-led growth companies in the scale-up phase, likely Series B and beyond. They're beyond the scrappy startup stage where everyone has admin access to everything. The combination of developer tooling, data infrastructure, and security tools suggests engineering-driven organizations that have reached the complexity point where manual access management breaks down. They're growing fast enough that security and compliance can't be afterthoughts but still maintain strong engineering cultures.