Teleport

1.1 Identity, mission, product, and headquarters

Teleport is the self-described "AI Infrastructure Identity Company," headquartered at 2100 Franklin St, Suite 400, Oakland, California 94612. The company modernizes identity, access, and policy for infrastructure, positioning the product as a platform that simultaneously improves engineering velocity and raises resilience against identity-based attacks. The company was originally incorporated as Gravitational Inc. and renamed itself Teleport in 2021, migrating from gravitational.com to goteleport.com; the blog post announcing the name change explicitly states that the Teleport product became the company's primary focus. The legal entity retains the Gravitational Inc. corporate name on package-signing certificates (Apple Developer ID QH8AA5B8UP Gravitational Inc.), confirming the corporate continuity. Teleport describes its product as a unified identity layer that replaces fragmented access management systems across servers (SSH), Kubernetes, databases, RDP, web applications, and MCP servers with a certificate-authority model that issues short-lived credentials tied to the identity of the requestor. This architecture aligns with the NIST SP 800-207 Zero Trust Architecture framework, which defines zero trust as eliminating implicit trust based on network location and requiring per-request authentication and authorization. The revenue model, per the public pricing page, is usage-based, metered by Monthly Active Users (MAU), Machine and Workload Identities (MWI), and Teleport Protected Resources (TPR). A free Community Edition exists for companies under 100 employees and $10M in annual revenue, while Enterprise Edition requires commercial engagement. The company is privately held; no revenue, margin, cash, or burn data is publicly disclosed.[CO001, CO002, CO003, CO004, CO005, CO006]

1.2 Founders, leadership, and key-person concentration

Teleport was founded in 2015 by three co-founders who met while working at Rackspace following that company's acquisition of Mailgun, a developer email infrastructure startup the three had built. Ev Kontsevoy serves as CEO and is the primary public voice for the company. Alexander Klizhentas (known as Sasha) serves as CTO. Taylor Wakefield serves as COO. All three remain in active executive roles, as confirmed by the Teleport about page as of the run date. The founders' shared background in cloud infrastructure and developer tooling is the clearest founder-market fit signal available in public sources. Leadership beyond the founding team includes Jeff Bunten as CRO and Diana Jovin as CMO, both of whom appear in external press coverage. Jovin was quoted at RSAC in April 2026 and is cited in the newsroom as CMO. Bunten is listed on the about page as CRO. Key-person risk is material: Kontsevoy is the signatory for all three fundraising announcements, is the named spokesperson for the Agentic Identity Framework launch and the Fortune Cyber 60 announcement, and is cited in every major external interview. No public board membership beyond the investors named at funding rounds is disclosed by the company.[CO007, CO008, CO009, CO010, CO011, CO012]

1.3 Funding history, valuation, and capital structure

Teleport has disclosed three funding rounds totaling $165M. The first was a $25M Series A led by Kleiner Perkins, announced on the company blog when the company was still operating as Gravitational. The Series A blog post named early customers NASDAQ, Splunk, TicketMaster, Mulesoft, and Samsung, and noted the company had recently reached profitability. The Series A was followed by a $30M Series B led by S28 Capital and Kleiner Perkins in 2021; that round followed a quarter with net new ARR up 5x year-over-year and ARR up 2.5x compared to Q2 2020, suggesting the company's revenue was scaling rapidly off a small base. The company did not disclose ARR in dollar terms at that time. The largest round, a $110M Series C led by Bessemer Venture Partners with participation from Insight Venture Partners, was announced in May 2022 at a $1.1B valuation. Bessemer's investment blog (bvp.com) and the Teleport announcement blog both confirm this valuation. The Series C named ARR up 2.8x year-over-year and net new ARR up 4.5x at the time of the round, and came less than a year after the Series B. Mary D'Onofrio from Bessemer joined the board; Matt Koran from Insight joined as a board observer. No public evidence of a subsequent funding round after May 2022 has been identified. The $1.1B valuation mark is therefore approximately four years old as of the run date, and private-market conditions have materially changed since then. GetLatka, a third-party data aggregator, reported in a 2025 snapshot that Teleport raised $140M across two rounds, which differs from the company's disclosed $165M across three rounds. GetLatka also estimated the company's 2024 revenue at $49M and headcount at approximately 246 as of late 2025; these figures are unconfirmed third-party estimates and should not be treated as verified financial data.[CO013, CO014, CO015, CO016, CO017, CO018]

1.4 Milestones, scale, and product evolution

Teleport's milestone history shows a company that moved from a developer-focused access tool to a full infrastructure identity platform over roughly a decade. The open-source Teleport project was made public in 2016 on GitHub under the AGPLv3 license; the repository had accumulated over 15,000 stars by the time of the June 2024 community license blog post. The company added Kubernetes access, database access (PostgreSQL, MongoDB, MySQL), Windows RDP access, and most recently MCP server access across successive major releases. Teleport 16 (June 2024) and Teleport 17 (October 2024) are the most recent major versions, with Teleport adopting an annual major-release cadence. Named customer logos that appear in official materials include NASDAQ, Snowflake, DoorDash, IBM (Instana), Carta, GoTo, Exness, KnowBe4, Turo, Gladly, ThredUP, ExtraHop, and others. The case-study page lists more than a dozen detailed case studies, and the careers page references "more than 600 customers around the globe." The company received recognition in 2025 and 2026 from the Fortune Cyber 60 list (October 2025) and the Citizens Securities Cyber 66 list (April 2026). In January 2026 Teleport launched the Agentic Identity Framework, an AI-focused roadmap for securing AI agents in production infrastructure. In June 2026 Teleport announced Beams, a new product providing trusted runtimes for AI agents at beams.run.[CO024, CO025, CO026, CO027, CO028, CO029]

1.5 License change, FedRAMP positioning gap, and adverse signals

The most material recent adverse development is the June 2024 community license change. Starting with Teleport 16, the company switched compiled Community Edition binaries and container images from Apache 2.0 to a commercial license. The new license allows free commercial use only for companies with fewer than 100 employees and under $10M in annual revenue. The AGPLv3 license on the source code repository was not changed, meaning large companies can still compile from source, but the convenience of downloading pre-built binaries is now restricted. This move is consistent with other open-core companies protecting community monetization but represents a clear tightening of the community offering that some users and enterprises noticed critically. On FedRAMP, Teleport's public documentation and marketing describe the product as enabling customers to meet FedRAMP compliance requirements. Teleport Enterprise builds are compiled against FIPS 140-validated cryptographic modules, and the FedRAMP documentation page describes how Teleport helps achieve specific FedRAMP controls. However, no evidence in the publicly available corpus confirms that Teleport's own cloud service has received a FedRAMP Authorization To Operate (ATO). The FedRAMP positioning is as a compliance-enabling tool, not as a FedRAMP-authorized service provider. This gap matters for federal buyers who may expect the SaaS itself to carry an ATO. Adverse product signals from third-party review platforms are also notable. PeerSpot reviewers cite initial setup complexity, RBAC configuration difficulty, and integration challenges with SIEM and monitoring tools. A competitor comparison page from StrongDM claims Teleport's agent-based architecture requires agents running as root on every monitored server, creating a new attack surface; the same page claims Teleport Cloud has reliability issues including outages during updates. These claims originate from a competing vendor and should be read critically, but they represent the categories of weakness that evaluating buyers consider.[CO033, CO034, CO035, CO036, CO037, CO039]

1.6 Exhibits

2.1 Market Scope, Adjacencies, and Substitutes

Teleport's own positioning and product architecture make the market boundary broader than classic privileged access management but narrower than the entire zero-trust stack. The company describes itself as an AI Infrastructure Identity company and sells certificate-based access for SSH, Kubernetes, databases, Windows, internal web apps, machine identities, and AI-related infrastructure workflows. That means the included spend is the control plane for infrastructure access: privileged access, workload identity, access audit, and compliance-oriented infrastructure access modernization. It does not justify counting broad workforce IAM, customer identity, endpoint security, SIEM, or general AI application spend as core market value, even if those budgets sometimes influence the deal. The status quo substitute set is still large — VPNs, bastions, long-lived keys, database passwords, cloud-native point IAM, and manual audit workflows all compete for the same job. An adverse competitor view from StrongDM is useful here because it argues Teleport remains a point solution for modern cloud estates rather than a universal access platform, which is a real constraint on inflated TAM narratives.[CM001, CM002, CM003, CM004, CM005, CM006]

2.2 Sizing Lenses and Estimate Variance

The sizing evidence supports a layered view rather than a single headline TAM. A narrow PAM lens from Precedence Research puts the market at $4.50 billion in 2025, while two broader zero-trust estimates place the market around $36.96 billion in 2024 and $40.01 billion in 2025, with long-range forecasts extending materially higher. Teleport likely sits between those lenses because it addresses privileged infrastructure access and identity control, but does not capture every network, endpoint, data, and application control dollar embedded in broad zero-trust research. Category language is also still settling: Bessemer described infrastructure access as a new product category, which helps explain why analyst coverage spans overlapping definitions rather than one settled taxonomy. Demand signals are strong enough to support a real market, not just a concept. Teleport reports 600-plus customers, and its 2026 survey plus 2026 newsroom evidence show AI-driven identity concerns rising quickly. Even so, a precise Teleport SAM or SOM cannot be isolated from public evidence because customer mix, contract value, and deployment distribution remain undisclosed, and one Fortune Business Insights PAM source returned the wrong content entirely.[CM009, CM010, CM011, CM012, CM013, CM014]

2.3 Buyer Types, Budget Ownership, and Adoption Path

Teleport's buyer map is cross-functional because the product collapses security, platform, and compliance workflows into one access layer. Day-to-day users are typically platform engineers, SRE or DevOps teams, security engineers, infrastructure administrators, and database or Kubernetes operators. Budget ownership depends on the purchase trigger. Security-led deals often sit with the CISO organization, platform-led rollouts can be owned by engineering infrastructure teams, and compliance-led public-sector or regulated-enterprise deals often pull in GRC stakeholders because FedRAMP and SOC 2 evidence collection matter alongside access control. Pricing reinforces that shared ownership: Teleport charges on monthly active users and machine/workload identities, so the commercial model expands with identity adoption rather than with one fixed appliance footprint. Developer-led evaluation still matters because the open repository has 15,000-plus stars, but enterprise conversion appears strongest in regulated and cloud-native organizations, including large financial-services buyers. The weakest fit appears in legacy-heavy hybrid estates where buyers prioritize broad protocol coverage and simpler migration over Teleport's cloud-native depth.[CM019, CM020, CM021, CM022, CM023, CM024]

2.4 Regulatory, AI, Cloud, and Security Drivers

Demand is being pulled forward by a mix of standards, compliance pressure, cloud complexity, and new AI-agent risk. NIST SP 800-207 gives zero trust a formal architecture definition, while CISA's Zero Trust Maturity Model operationalizes that architecture across five pillars and three cross-cutting capabilities, which legitimizes budget allocation for identity-centric infrastructure controls. Teleport benefits when those abstract frameworks translate into concrete FedRAMP and SOC 2 access-control requirements, especially because it documents FIPS 140 support and control mappings. AI adds a sharper near-term catalyst. Teleport's 2026 survey says 92% of respondents have near-term AI initiatives, 79% are evaluating or deploying agentic AI, only 13% feel extremely prepared, and 60% have had or suspect AI-related incidents. Separate 2026 newsroom data says 73% of cybersecurity leaders are hearing enterprise questions about AI agent security. At the same time, multi-cloud sprawl and the broader cloud-era shift toward unified control planes support the category. The main adoption drag is not lack of need but switching cost: buyers still have to unwind incumbents, re-architect access paths, and decide whether Teleport's modern-cloud strengths outweigh legacy-coverage concerns.[CM027, CM028, CM029, CM030, CM031, CM032]

2.5 Adoption Barriers, Diligence Gaps, and Contradictory Evidence

The biggest market-analysis constraint is not weak demand; it is weak precision. Public sources do not isolate how much of Teleport's addressable spend comes from regulated enterprises, public-sector contractors, AI-native teams, or existing customer expansion. The last disclosed financing event is still the May 2022 Series C at a $1.1 billion valuation, so the outside world is interpreting a fast-moving category through a stale capital-market anchor. The published market estimates are directionally useful but methodologically inconsistent because PAM and zero-trust reports use different scope definitions, and the accessible Fortune Business Insights PAM URL returned unrelated agricultural content instead of a usable market page. Teleport's own materials are rich on product breadth and compliance alignment, but they do not disclose public win rates, deployment duration, churn, ACV, or split between self-hosted and cloud deals. As a result, conviction on demand direction is reasonable, while conviction on monetizable share and efficient capture remains materially lower until management provides segment-level revenue and conversion evidence.[CM037, CM038, CM039, CM040, CM041, CM042]

2.6 Exhibits

3.1 Landscape

Teleport's competitor set is broader than classic password-vault PAM. The closest field includes incumbent suites such as CyberArk, BeyondTrust, and Delinea; modern infrastructure-access challengers such as StrongDM and HashiCorp Boundary; and adjacency from Okta, which can extend existing workforce identity relationships into privileged server access. Bessemer's infrastructure-access framing helps explain why buyers do not evaluate Teleport inside only one box: the practical job spans connectivity, authentication, authorization, and audit across servers, clusters, databases, and increasingly AI-operated infrastructure workflows. Independent comparison and review sites reinforce that this is the active buyer short list. The market therefore is not a winner-take-all feature race but a segmentation contest between broad enterprise incumbents, cloud-native specialists, and identity-platform bundlers, with Teleport strongest where buyers want one modern control plane rather than a legacy vault plus point proxies.[CP015, CP016, CP017, CP041, CP042]

3.2 Incumbent PAM

CyberArk, BeyondTrust, and Delinea still define the incumbent end of the market because they sell privileged access into broad enterprise and hybrid estates, not only into greenfield cloud teams. CyberArk's official positioning emphasizes a single PAM platform, cyber-risk reduction, audit and compliance outcomes, and zero-standing-privilege access across hybrid environments. BeyondTrust tells a similar story around least privilege, credential injection, and privileged remote access that can remove the need for VPNs and known credentials. Delinea's Secret Server remains anchored in vaulting, discovery, password rotation, and session monitoring, with new AI-driven session analysis language layered on top. None of these vendors market themselves as Teleport-style open infrastructure identity platforms, but the overlap is material enough that Teleport must win by architecture simplicity for modern estates, not by assuming incumbents are trapped in old password-vault workflows.[CP004, CP005, CP006, CP007, CP024, CP025]

3.3 Cloud-Native Challengers

StrongDM, HashiCorp Boundary, and Okta matter because they attack Teleport from three different angles. StrongDM competes head-on for modern infrastructure access, but it frames itself as easier for mixed estates because it supports more legacy systems and authentication methods and does not require Teleport's exact certificate-only operating model. Boundary is narrower, yet technically important: its identity-aware proxy plus Vault integration gives it credibility for teams already standardized on HashiCorp tooling. Okta approaches the market from an IAM adjacency route, extending SSO, ephemeral server access, and session recording into Linux and Windows infrastructure for customers that already trust Okta as an identity control plane. Together these challengers show why Teleport cannot rely on cloud-native branding alone; each rival brings a distinct distribution mechanism, from platform adjacency to direct attack ads to bundle-led cross-sell.[CP008, CP009, CP010, CP012, CP013, CP014]

3.4 Teleport Differentiation

Teleport's clearest differentiation is structural rather than cosmetic. Its Auth Service acts as a certificate authority for users, machines, and resources, while the Proxy Service brokers access across SSH, Kubernetes, databases, RDP, web apps, and machine identities without relying on long-lived shared credentials. That lets Teleport pitch an access plane where authentication, authorization, and audit are unified instead of stitched together from a vault, jump host, VPN, and scattered policy engines. The company has also expanded outward: recent releases highlighted IdP-compromise mitigations, a broader identity-security layer, machine and workload identity, and a new Agentic Identity Framework for AI systems. Those moves widen the category Teleport is trying to own. The tradeoff is that Teleport's old open-source discovery advantage is less clean after the 2024 community-license change, so architectural coherence now matters more than community goodwill alone.[CP001, CP002, CP003, CP018, CP019, CP020]

3.5 Moat Risks

Teleport has real switching-cost potential, but the moat is conditional rather than unbreakable. Once a customer standardizes audit logs, certificate issuance, access workflows, and compliance evidence on one platform, replacement becomes operationally painful. That dynamic benefits incumbents too, which is why CyberArk and BeyondTrust can still defend accounts even as the market modernizes. Teleport also faces three direct risks. First, large public comparables such as CyberArk and Okta have much larger balance sheets and installed bases, giving them room to bundle or discount. Second, StrongDM's adverse messaging around legacy fit and root-agent architecture gives buyers a concrete counter-thesis in hybrid estates. Third, public customer-review evidence is more supportive than hostile, but the retained set is still thin on large-scale onboarding pain, leaving investors without decisive proof that Teleport's deployment model scales frictionlessly across conservative enterprises.[CP023, CP024, CP025, CP029, CP031, CP032]

4.1 Commercial model, revenue structure, and customer base

Teleport's commercial model is usage-based and multi-product. The pricing page discloses three billing metrics: Monthly Active Users (MAU) for Zero Trust Access and Identity Governance modules, Machine/Workload Identities (MWI) for the Machine and Workload Identity module, and Teleport Protected Resources (TPR) for Identity Security. No public list price is disclosed; all pricing requires commercial engagement with the sales team. Enterprise Edition supports cloud, on-premises (standard and FIPS), multi-region high availability, and hybrid deployment modes. The Beams AI agent runtime product entered public beta in June 2026 and is not yet publicly priced. The Community Edition free tier — available for companies under 100 employees and under $10M annual revenue since the June 2024 license change — creates a deliberate forcing function for commercial conversion as customers grow. Customer case studies show the breadth of enterprise deployment: GoTo (Indonesia's largest digital platform, managing multi-cloud access across complex infrastructure), Exness (regulated global trading firm with stringent security requirements), Gladly (SaaS platform with SOC 2 compliance requirements), and ExtraHop (security-focused cloud network detection company). Each represents a different vertical and compliance posture. The careers page states more than 600 customers globally as of October 2025. Revenue drivers visible from public materials include: (1) usage expansion as MAU, MWI, and TPR metrics grow with infrastructure scale without requiring re-negotiation; (2) community-to-enterprise conversion as companies cross the 100-employee or $10M AR threshold; (3) multi-module upsell as customers adopt Identity Governance, Identity Security, and AI agent identity modules; and (4) AI agent market opportunity through Beams and the Machine Workload Identity module. Session recording, database access, and MCP server access also create upsell in compliance-sensitive sectors.[CI001, CI014, CI015, CI016, CI033, CI034]

4.2 Revenue and ARR estimates — an entirely unverified picture

Teleport discloses no financial data. The only publicly available ARR estimate comes from GetLatka, a third-party data aggregator, which reported that Teleport hit $49M in revenue in December 2024. GetLatka also estimated headcount at approximately 246 as of late 2025. These figures have not been confirmed by Teleport, any investor, or any independent source. GetLatka's own funding summary shows $140M across 2 rounds, diverging from the company-disclosed $165M across 3 rounds, further eroding confidence in the dataset's completeness. Working backward from the ARR growth rates disclosed in funding announcements: the Series C blog (May 2022) reported total ARR up 2.8x and net new ARR up 4.5x year-over-year; the Series B blog (2021) reported total ARR up 2.5x and net new ARR up 5x year-over-year versus Q2 2020. If these growth rates are correct and the company was tracking to triple revenue in 2021 per the Series B era disclosures, the implied ARR at the Series C close was approximately $17–20M. Growing from that level to $49M by 2024 implies a post-fundraising CAGR of roughly 22%, a significant deceleration from the pre-Series-C trajectory. This cannot be confirmed without management data, but it is directionally consistent with the broader SaaS market slowdown in 2022–2024. GTM efficiency metrics are completely absent. No sales cycle length, CAC, payback period, or quota attainment data is public. The best proxy for GTM effectiveness is the customer count trajectory (600+ cited in 2025) and the quality of named logos, but neither converts to revenue-per-customer or expansion rate without further data.[CI002, CI003, CI005, CI006, CI012, CI013]

4.3 Valuation and comparable public-market multiples

The only external valuation data point for Teleport is the $1.1B mark from the May 2022 Series C. As of June 2026, this mark is approximately four years old and has not been refreshed. At GetLatka's $49M estimated ARR, the implied revenue multiple is approximately 22.4x — materially above where comparable public cybersecurity companies traded in mid-2026. CyberArk Software (CYBR), the closest publicly traded comparable for privileged access management, had a market cap of approximately $20.63B and TTM revenue of approximately $1.30B as of June 2026, implying roughly a 15.9x revenue multiple. CyberArk revenue grew from approximately $590M in 2022 to $1.30B TTM in 2025, a 2.2x increase in roughly three years. Okta (OKTA), the closest identity and access management comparable, had a market cap of approximately $20.65B and TTM revenue of approximately $2.91B as of June 2026, implying approximately 7.1x. Okta revenue grew from $1.85B to $2.91B over the same period (1.6x growth). Both companies are substantially larger in revenue than Teleport's estimated ARR. At the midpoint of these two public peers' revenue multiples (~11x), $49M ARR implies Teleport's enterprise value at approximately $540M, well below the $1.1B mark. Even at CyberArk's 15.9x multiple, the implied value is approximately $779M. At the Series C close in May 2022, CyberArk itself traded at approximately $5.27B market cap on $590M revenue (~9x), and Okta at ~$10.94B on $1.85B revenue (~6x), suggesting Teleport's 22x+ implied multiple was already ~2x the comparable range at issuance. The private-market premium implicit in the 2022 mark has likely eroded further under post-2022 market corrections.[CI007, CI008, CI009, CI010, CI011, CI026]

4.4 Cost structure, capital adequacy, and financial verdict

Teleport's cost structure is completely opaque in public materials. No COGS breakdown, gross margin figure, infrastructure cost, or personnel expense data is available. The best reference points are from public cybersecurity SaaS peers, where gross margins typically run 65–75% for infrastructure-oriented products. If Teleport's gross margin is in that range, $49M ARR could generate $32–37M in gross profit — a serviceable foundation, but one that must support ongoing product investment, G&A, and sales cost without disclosed data on what those costs are. Capital adequacy is similarly opaque. The company has raised $165M across three disclosed rounds, with the most recent $110M Series C in May 2022. No new financing has been publicly confirmed since. At an industry-typical cash burn rate for a company of Teleport's stage, the Series C proceeds could support three to five years of operations depending on burn discipline — suggesting the company may not need new capital immediately, but this is entirely speculative without actual balance-sheet data. No debt, credit facility, or project finance is disclosed. The financial verdict is mixed. The demand signal is real: 600+ enterprise customers, regulated-industry logos, and Fortune Cyber 60 recognition all indicate an active go-to-market. The revenue model is well- structured for land-and-expand dynamics. However, the underwriting case is blocked by fundamental opacity: no verified ARR, no gross margin, no NRR, no burn rate, no current valuation. The 2022 mark implies a multiple that is difficult to defend at current public-market comparables. Any investment at or near the $1.1B mark requires an updated 409A or data room disclosure to resolve the core valuation question.[CI019, CI020, CI021, CI022, CI023, CI024]

4.5 Exhibits

5.1 Product Definition and Module Map

Teleport is a certificate authority (CA) and identity-aware access proxy that implements SSH, RDP, HTTPS, Kubernetes API, and a variety of SQL and NoSQL database protocols. The product is distributed as a single Go binary that combines authentication, authorization, auditing, and tunneling in one deployable unit. Teleport operates internal Certificate Authorities for both hosts and users; every identity — human, machine, or AI — receives a short-lived certificate rather than a long-lived credential, eliminating secrets sprawl at the architecture level. The product suite now spans five branded product pillars: Zero Trust Access (SSH, Kubernetes, databases, RDP, web apps), Machine & Workload Identity (non-human service credentials), Identity Governance, Identity Security (access analytics and threat detection), and the Agentic Identity Framework (AI agent identity + Beams runtime). The feature matrix distinguishes Enterprise Cloud, Enterprise Self-Hosted, and Community Edition, with Beams trusted runtimes exclusive to Enterprise Cloud. Each major release has shipped every four months historically; version 18 (current) arrived July 2025 with version 19.0 planned. The June 2024 community-license change restricted compiled binaries for companies with over 100 employees or $10 M+ AR, a shift with lasting ecosystem implications.[CE001, CE002, CE003, CE004, CE005, CE006]

5.2 Architecture and Operating Model

Teleport's control plane consists of two canonical services: the Auth Service (the cluster CA, config store, and audit-log collector) and the Proxy Service (the public-internet entry point and reverse-tunnel hub). These two services are stateless relative to each other, communicate over gRPC, and can be scaled horizontally for high availability. On Teleport Cloud, both services are fully managed by Teleport Inc.; on Enterprise Self-Hosted, customers operate them on their own infrastructure. Resource enrollment follows three paths: Teleport Agents (deployed as daemons on target machines and reverse-tunnelled back to the Proxy), agentless mode for certain protocols, and Machine & Workload Identity tokens (tbot-based short-lived certificates for workloads). The authentication flow is consistent across protocols: a user (or machine) runs tsh login, receives a client certificate, and that certificate is accepted by SSH, Kubernetes, database, RDP, and MCP proxies without re-authentication. Session recording is configurable at node or proxy level, synchronously or asynchronously, and captures full PTY output for SSH and Kubernetes, screen content for desktop sessions, and query streams for database sessions. StrongDM's competitive analysis notes that Teleport agents run as root on target servers, creating an additional attack surface; the company also criticizes limited legacy-protocol support and intermittent cloud reliability. PeerSpot users independently flag RBAC complexity, initial-setup burden, and clipboard-access security in RDP sessions as real friction points.[CE010, CE011, CE012, CE013, CE014, CE015]

5.3 Agentic Identity and Machine & Workload Identity

Teleport Machine & Workload Identity (MWI) provides non-human service accounts using the same certificate-based model as human access. Services authenticate via tbot, receive short-lived X.509 or SSH certificates, and those certificates authorize access to databases, Kubernetes clusters, internal APIs, and MCP servers — all logged to the same audit trail. This creates a single identity fabric for humans and machines rather than a parallel secret-management system. The Agentic Identity Framework, announced January 2026, extends that model to AI agents. It defines four layers: identity (cryptographic agent certificates), access (RBAC/ABAC enforcement through the Teleport proxy), security (behavioral monitoring and locks), and scheduling (orchestration patterns for Kubernetes and Temporal). The June 2026 public beta of Beams added two concrete capabilities: LLM Proxy (sits between an agent and its inference endpoint, logs every request/response, enforces per-Beam allowlists) and Delegated Identity (allows a human or orchestrator to assign least-privilege permissions to an agent session). Each Beam runs in a Firecracker microVM with ephemeral storage, injected identity, virtual networking, and a session-bound lifecycle of approximately 24 hours. Beams is currently Enterprise Cloud only and in public beta — not generally available.[CE020, CE021, CE022, CE023, CE024, CE025]

5.4 Trust, Compliance, and Roadmap

Teleport Enterprise includes FIPS 140-validated cryptographic modules. Versions 17.7.3+ and 18.0.0+ use BoringCrypto CMVP certificate #4735 (FIPS 140-3); earlier versions used certificate #4407 (FIPS 140-2). This makes Teleport a viable accelerator for FedRAMP-Moderate authorization because it covers AC-02 through AU-12 and other NIST SP 800-53 controls natively. Teleport also documents SOC 2 coverage across four of nine control categories (CC6, CC6 physical, CC7, CC8). An independent security audit by Cure53 in 2019 found no critical vulnerabilities; the single high-severity directory-traversal issue in the roles API was patched in the same release. The release cadence is one major version per year (switching from four-month cadence); version 18 is the current supported release (EOL August 2027) and version 17 the stable supported release (EOL August 2026). Upcoming roadmap items include Linux Desktop Access (remote sessions to Linux hosts), directory-sharing enhancements for Windows RDP, and AI-summarized session recordings in Identity Security. The community-license change starting with version 16 (June 2024) is the most significant ongoing trust risk: compiled binaries, container images, and AMIs are no longer Apache-licensed for companies above 100 employees or $10 M AR. The source code remains AGPLv3, but most enterprises consume compiled artifacts, making the commercial restriction the effective license.[CE029, CE030, CE031, CE032, CE033, CE034]

5.5 Exhibits

6.1 Customer Segmentation and Buying Profile

Teleport's buyer is primarily the engineering or platform-security team at mid-to-large enterprises, particularly in technology, financial services, and global digital platforms. The product is bought by infrastructure engineering leaders (VPs of Engineering, Platform Engineers, CISOs), with DevOps and SRE teams as the primary users. The official customer page and case studies show a consistent pattern of companies seeking to replace VPN-plus-shared-credentials approaches with certificate-based infrastructure access. Verticals represented in public case studies include fintech (Carta, Exness), global SaaS platforms (GoTo, Gladly), network detection (ExtraHop), and enterprise observability (IBM Instana). The Series A funding announcement named Nasdaq (stock exchange), Splunk (SIEM/observability), TicketMaster (live entertainment), Mulesoft (API integration), and Samsung (consumer electronics), while Series C specifically named Nasdaq, DoorDash, and Snowflake. The Fortune Cyber 60 press release (October 2025) stated "more than 600 companies, including three of the top five financial services firms and the leaders in AI research, compute, and cloud," depend on Teleport — the most expansive customer base claim to date, though this is company-stated. Geography is heavily North America and global-tech, with GoTo based in Southeast Asia (Indonesia) and Exness operating globally across financial markets. Company size ranges from growth-stage (Series-B era customers) to major public enterprises (Nasdaq, Samsung, IBM). The Community Edition provides a top-of-funnel acquisition path for smaller companies and teams under 100 employees or $10 M AR, with Enterprise sales triggered by the commercial license threshold.[CU001, CU002, CU003, CU004, CU005, CU006]

6.2 Adoption Trajectory and Scale Signals

Teleport's most authoritative customer-count statement comes from the October 2025 Fortune Cyber 60 press release: "More than 600 companies, including three of the top five financial services firms and the leaders in AI research, compute, and cloud, depend on Teleport." This is company-stated and cannot be independently audited. Earlier milestones include the Series A blog's "handful of early adopters to an impressive portfolio of some of the world's largest and most innovative companies" and the Series C tracking of "net new ARR up 4.5x year over year." The Getlatka database (as of November 2025) reported approximately $49 M in annual revenue and ~246 employees, consistent with mid-market SaaS scale. The case study page lists at least 15 named customers publicly — GoTo, Exness, Gladly, ExtraHop, IBM Instana, Carta, KnowBe4, Turo, Rush Street Interactive, Buyers Edge, ThredUP, Qwilt, Mapgears, ECMWF, Flywheel — plus many more described without names. The diversity spans North American SaaS, global fintech, gaming, e-commerce, biomedical research, and weather infrastructure. Deployment depth appears to run deep: Exness reports "hundreds of Kubernetes clusters across on-prem and cloud" managed through Teleport, and GoTo describes Teleport managing access "across multiple cloud providers" for their vast infrastructure. Teleport has been named to the Fortune Cyber 60 for multiple years and was recognized as a "revenue category mover" in the Citizens Cyber 66 April 2026 report, indicating continued business momentum. Independent revenue data is limited; Getlatka's $49 M estimate is unverified. NVIDIA appears on some unofficial logo walls but is not confirmed in any official press release or case study — treated here as a gap.[CU010, CU011, CU012, CU013, CU014, CU015]

6.3 Named Customer Proof and Case Study Quality

Six customers have deep, publicly documented case studies on goteleport.com, all confirming production use: **IBM Instana** (acquired by IBM 2020): Cloud Architect Hunter Madison replaced VPN-plus-shared-credentials with Teleport for Dropwizard access and states this is the third company where he has led a Teleport migration. Quote: "This is company number three I've done this at, to have Teleport in play to give us the ability to go and help our security posture." Confirms production use; independent and specific. **Carta** (fintech, $7 B+ valuation): Integrated Teleport with Okta for Kubernetes and database RBAC, role-based access policies with fine-grained auditing, and streamlined developer onboarding/offboarding. Confirms SOC 2/ISO 27001 compliance use. Production at scale. **GoTo** (Southeast Asia's largest digital platform, publicly listed): Replaced in-house tools with Teleport for private Kubernetes clusters ("all our Kubernetes clusters are private—meaning they can't be accessed publicly"). Production at multi-cloud scale; compliance-driven (publicly listed company). **Exness** (global fintech, regulated financial services): "Teleport was the only evaluated solution that met every requirement" including full automation, GitOps readiness, SSO, and machine identity. Production across hundreds of Kubernetes clusters. Confirmed compliance with PCI DSS, SOC 2, and ISO 27001. **Gladly** (SaaS CX platform): Uses Teleport as certificate authority for RBAC instead of static SSH keys. Confirms secretless server access for compliance and evidence-based security audits. **ExtraHop** (network detection and response): Secured half a dozen Kubernetes clusters each running hundreds of individual nodes with Teleport for identity-based SSH and Kubernetes access. Verified logos from official press releases: Nasdaq, DoorDash, Snowflake, Splunk, TicketMaster, Mulesoft, Samsung (Series A/C blogs). Square, Elastic, and Bloomberg appear on the official customer page but lack individual case studies. NVIDIA is not verified in official sources.[CU019, CU020, CU021, CU022, CU023, CU024]

6.4 Retention, Expansion, and Concentration Risk

Teleport does not publicly disclose NRR, GRR, logo churn, or renewal rates. The Series C blog mentioned ARR growing 2.8x year over year and net-new ARR up 4.5x, consistent with strong expansion from existing customers, but these figures are from 2022 and are now historical. PeerSpot users report that Teleport "changed our workflow by centralizing access control," and several reviewers describe it as a sticky replacement for legacy SSH key workflows — both signals of high switching costs. The depth of enterprise deployments at Exness (hundreds of Kubernetes clusters), GoTo (multi-cloud, multi-vertical), and ExtraHop (hundreds of individual nodes) suggests high infrastructure integration depth that creates meaningful switching costs. IBM Instana's cloud architect explicitly notes this is his third Teleport deployment across different companies, which is a strong signal of advisor-driven repeat adoption. Expansion risk: StrongDM's competitive critique argues that Teleport lacks legacy-protocol support and SIEM integration, which could limit expansion to customers with mixed legacy/cloud environments. The community-license change (v16+) restricts the free community tier for large companies, potentially increasing friction for commercial expansion from the community funnel. Concentration is a material risk: publicly named customers skew heavily toward tech-native companies in fintech and cloud infrastructure; healthcare, manufacturing, government, and retail sectors are underrepresented in public proof. Fortune Cyber 60 noted "three of the top five financial services firms," which is significant concentration in a single vertical.[CU029, CU030, CU031, CU032, CU033, CU034]

6.5 Exhibits

7.1 License Change and Open-Source Community Risk

Teleport created a self-inflicted trust risk when it moved Community Edition compiled artifacts from Apache 2.0 to a commercial license starting with Teleport v16 in June 2024. The policy applies to companies with 100 or more employees or at least $10 million of annual revenue, and it also blocks resale or embedding of Community Edition artifacts. That change matters because Teleport built much of its category credibility through developer adoption and had more than 15,000 GitHub stars when the announcement was made. The source code remains available, but the practical thing most enterprises consume is the binary, image, or AMI, so the commercial restriction changes the lived developer experience even if the repository stays public. The resulting risk is broader than social-media backlash. It creates fork incentives, reduces bottom-up evangelism, complicates upgrade paths from older Apache-licensed builds, and invites criticism that Teleport is no longer behaving like a conventional infrastructure open-source project under the Open Source Initiative definition.[CR001, CR002, CR003, CR004, CR005, CR006]

7.2 Self-Hosted Complexity and Operational Risk

Teleport's architecture delivers strong control and audit benefits, but it pushes operational burden onto customers in ways that can become investment risk. Competitor materials from StrongDM argue that Teleport agents run as root on target servers, creating a meaningful privileged attack surface, and they also frame Teleport as a potential single point of failure when the control plane is not designed for high availability. Those claims are directional rather than neutral, but they align with customer-review evidence that large deployments can be complicated to configure and operate. The self-hosted model requires customers to own infrastructure sizing, patching, upgrade sequencing, disaster recovery, and outage planning for auth and proxy components. Teleport has published security-audit material and FIPS 140-3 support, which are real mitigants, but those do not erase architecture fragility or implementation complexity. FedRAMP adds another layer: Teleport documents how customers can satisfy control families with the product, yet the public corpus does not show Teleport Cloud itself holding a FedRAMP authorization, which can create confusion in public-sector sales cycles.[CR010, CR011, CR012, CR013, CR014, CR015]

7.3 Competitor Pressure and Market Concentration Risk

Teleport is operating in attractive categories, but attractive categories draw larger and better-capitalized rivals. CyberArk and Okta each carried market capitalizations above $20 billion in June 2026, with materially larger revenue bases than Teleport's estimated scale, giving them more room to bundle privileged access, absorb product overlap, and outspend Teleport in enterprise sales. StrongDM attacks Teleport on legacy-system coverage and operational simplicity, which matters because many enterprise access estates are hybrid rather than cloud-native. HashiCorp Boundary remains an identity-aware proxy alternative with open-source roots, while AWS, Google Cloud, and Microsoft all provide native IAM and privileged-access features that can be good enough for cloud-only buyers. Teleport's 600-plus customers and named recognition on the 2026 Fortune Cyber 60 and Citizens Cyber 66 lists show real market traction, but they also raise the bar: once a vendor is in top-tier enterprise evaluations, feature gaps, packaging friction, and license trust questions are tested against better-funded platforms rather than against no incumbent at all.[CR019, CR020, CR021, CR022, CR023, CR024]

7.4 Financial Opacity and Valuation Risk

The financial debate around Teleport is defined less by visible weakness than by missing visibility. Public funding history is clear through the March 2022 Series C, when Teleport announced a $110 million round at a $1.1 billion valuation led by Bessemer Venture Partners, bringing cumulative funding to roughly $140 million across Series A, B, and C. What is not clear is current scale, margin structure, cash efficiency, or profitability. The only ARR figure in the source set is a GetLatka estimate of $49 million for 2024, and that figure is unverified by Teleport. If it were directionally correct, the last disclosed valuation would imply roughly a 22 times ARR multiple, which is demanding for a private infrastructure company without public proof of growth durability. Because no newer round is visible in the provided corpus, investors are forced to underwrite against a four-year-stale price anchor. That combination of stale mark, estimated ARR, and absent unit-economics data makes downside harder to quantify and gives better-resourced public comparables more influence over market sentiment.[CR028, CR029, CR030, CR031, CR032, CR033]

7.5 People, Execution, and Strategic Risk

Teleport's strategic risk now comes from trying to defend a mature infrastructure-access franchise while simultaneously expanding into agentic AI identity. Leadership concentration is notable: Ev Kovyrin, Sasha Klizhentas, and Taylor Wakefield still occupy the CEO, CTO, and COO roles at the center of product, engineering, and operating execution. The public material reviewed does not disclose a succession plan, broader bench depth, or current employee count, limiting external comfort on management redundancy. At the same time, Teleport has recast itself as an AI Infrastructure Identity Company, announced an Agentic Identity Framework in January 2026, and launched Beams in public beta in June 2026. Those moves may create genuine upside, but they also introduce roadmap complexity, support burden, and governance questions around delegated permissions, audit coverage, and agent runtime isolation. The core risk is not that the company should avoid AI-adjacent expansion; it is that investors still need evidence that the new motion strengthens the existing access business rather than distracting from it before monetization and controls are mature.[CR035, CR036, CR037, CR038, CR039, CR040]

7.6 Exhibits

8.1 Investment Thesis and Anti-Thesis

The investment thesis starts with market structure and positioning rather than current financial disclosure. Teleport sells into privileged access management and zero-trust access, two security budgets that remain strategically important even in slower software spending environments. Precedence Research sizes PAM at $4.50B in 2025 growing at 23.4% CAGR, while zero trust is a much larger $40.01B market growing at 16.39% CAGR. Teleport also benefits from a developer-led distribution story: the open-source repository has built broad awareness, the company claims 600+ customers, and official references highlight adoption by three of the top five financial services firms. The investor base—Bessemer, Insight, Kleiner Perkins, and S28—adds credibility, and the 2026 Agentic Identity Framework / Beams repositioning offers a plausible narrative for expanding beyond classic human privileged access into machine and AI-agent identity. The anti-thesis is stronger than a normal late-stage software diligence memo because the key underwriting variable is still not publicly verified. GetLatka's unconfirmed $49M 2024 ARR estimate is the only current revenue anchor; if used, it implies roughly 22.4x EV/ARR against the stale $1.1B March 2022 Series C mark. That is richer than CyberArk's roughly 15.8x verified public multiple and far above Okta's roughly 7.1x. Competition is not theoretical: CyberArk, Okta, BeyondTrust, StrongDM, and Boundary all frame adjacent infrastructure access problems. The 2024 community-license change may also reduce the bottom-up open-source funnel that originally differentiated Teleport. Finally, the absence of FedRAMP authorization for Teleport Cloud narrows near-term federal upside, while no new primary round, IPO filing, or public liquidity signal has reset valuation expectations since 2022.[CV010, CV011, CV012, CV016, CV017, CV019]

8.2 Valuation Context and Comparable Set

Teleport's only disclosed valuation mark is the March 2022 Series C: $110M raised at a $1.1B post-money valuation led by Bessemer Venture Partners with Insight Venture Partners participating. Series B in 2021 added $30M, Series A in 2020 added $25M, and disclosed lifetime primary capital is therefore about $140M. No later primary financing, secondary quote, IPO filing, or other public mark has been announced in the official newsroom, leaving investors to assess a four-year-stale price against 2026 software comp conditions. The critical problem is not that $1.1B was impossible in 2022; it is that current public evidence does not confirm the operating scale that would justify keeping that mark today. GetLatka estimates 2024 ARR at $49M, but it is explicitly an estimated single-source data point rather than company disclosure. If that estimate is directionally correct, the stale mark implies about 22.4x EV/ARR. CyberArk provides the closest public PAM anchor at about $20.63B market cap and $1.30B TTM revenue, or roughly 15.8x. Okta, a broader identity platform that now sells privileged access, trades nearer 7.1x. Those public multiples are not perfect one-for-one equivalents, but they do establish gravity: Teleport needs either materially more ARR than $49M, much faster present-day growth than is publicly verified, or a durable AI-identity premium to deserve the old private mark. Without that proof, the valuation reads as expensive rather than simply premium.[CV001, CV002, CV003, CV004, CV005, CV006]

8.3 Scenario Analysis and Sensitivity

The scenario range depends far more on verified revenue scale and growth durability than on spreadsheet complexity. In the bull case, Teleport's AI Infrastructure Identity repositioning works, Beams becomes a credible agent-identity wedge, and ARR compounds above 35% annually from the $49M 2024 estimate to roughly $85M by 2027. Applying a 15x multiple—roughly the high end of a transparent public PAM anchor rather than an aggressive AI bubble multiple— yields approximately $1.28B, only modestly above the old mark. That is an acceptable but not spectacular late-stage upside case. The base case assumes the product remains relevant and customer quality is solid, but growth settles closer to 25% annually. That reaches about $73M ARR by 2027. At 10x to 12x, consistent with a healthy but not euphoric security-software multiple band, implied value is about $730M to $875M. The bear case assumes the license transition slows developer-led acquisition, competitors pressure pricing, and the AI repositioning takes longer than the narrative suggests; under 15% annual growth, ARR only reaches about $60M, and a 6x to 8x range implies $360M to $480M. Put differently, most realistic paths need either better-than- public growth evidence or a lower entry price before risk-adjusted returns become compelling.[CV031, CV032, CV033, CV034, CV038, CV039]

8.4 Exit Readiness and Final Diligence Asks

Exit readiness is mixed. On the positive side, the founding team remains visible, the company continues launching product, and the investor syndicate is deep enough to support either a strategic sale or a later IPO attempt. The most plausible strategic acquirers are large security or infrastructure vendors that already touch identity, PAM, or zero-trust workflows, such as CyberArk, Palo Alto Networks, Cisco, or Microsoft. That said, nothing in the public record indicates that Teleport is currently on an IPO path, and there is no disclosed liquidity mechanism resetting price discovery for late-stage holders. The strategic-exit argument is therefore a possibility, not a valuation backstop. The diligence burden is high because the missing evidence sits exactly where valuation should be anchored: verified ARR for 2024 and 2025, current growth rate, net revenue retention, gross margin, burn, cap-table preferences, and the practical effect of the CE license change on new logo creation. Federal market expansion is another gating item because Teleport discusses FedRAMP-oriented use cases but does not have public authorization for Teleport Cloud. A prudent investor should therefore treat this as a data-room-dependent decision rather than a conviction round based on narrative momentum alone.[CV020, CV035, CV036, CV037, CV042, CV044]

8.5 Recommendation and Evidence Assessment

The recommendation is research-more with medium confidence, a high risk rating, and an expensive valuation stance. Teleport appears strategically relevant, customer-validated, and well backed, but the investment committee does not need to decide whether the company is good; it needs to decide whether the entry price is supportable today. On currently public evidence, it is not. The 2022 $1.1B mark can only be defended if one assumes either meaningfully higher current ARR than the sole GetLatka estimate, a still-elevated growth rate that has not been publicly disclosed since Series C, or a premium AI-identity valuation regime that public comps do not yet validate. The evidence base is directionally useful but incomplete. Official sources strongly support the financing history, customer signaling, and product narrative, and public comps provide a clean benchmark showing that verified-sector multiples are lower than Teleport's implied estimated multiple. What is missing are the core financial disclosures that turn a narrative into a price. The recommendation should only improve if Teleport can verify ARR above roughly $70M, show NRR above 100%, confirm current growth at or above 25% YoY, provide visibility into gross margin and burn, and demonstrate either government-readiness progress or concrete exit timing. Until then, this remains a promising company with underwritten valuation risk.[CV005, CV006, CV024, CV025, CV032, CV034]

8.6 Exhibits