Lock down identity end-to-end

12Port

Privileged Access Management (PAM)

Agentless privileged access for every identity.

1Password Business

Password Management

Led by seasoned security and technology executives, 1Password provides trusted access for people and AI agents. We unlock productivity by making security and privacy simple for every person and organization.

Enterprise Password Manager

Password Management

Protect every credential that keeps your business running with secure and controlled passwords, passkeys, and secrets.

Account Takeover Protection

Identity Threat Detection & Response (ITDR)

Detects and remediates compromised Microsoft 365 and Google Workspace accounts by analyzing behavioral patterns unique to each user, then automatically locks attackers out through session revocation and forced credential resets.

Identity Threat Protection

Identity Threat Detection & Response (ITDR)

Uses behavioral AI to detect identity-based attacks that evade traditional security tools, identifying hijacked sessions, abused OAuth grants, and privilege misuse that rules and risk scores miss.

Infiltration Prevention

Identity Governance & Administration (IGA)

Uses behavioral AI to detect synthetic personas and nation-state actors before they gain system access, analyzing identity signals from HR systems and identity providers at the pre-provisioning layer.

Account Takeover Protection

Identity Threat Detection & Response (ITDR)

Learns normal sign-in, device, and behavioral patterns for each user to detect and mitigate email account takeovers, then locks out attackers through session revocation and credential resets.

Access Auditor (by Clear Skye)

Identity Governance & Administration (IGA)

Identity governance built where your business already runs, natively on the ServiceNow Platform.

Admin By Request

Privileged Access Management (PAM)

Admin By Request is a privileged access management vendor focused on removing standing local administrator rights while allowing controlled elevation when needed. Its PAM offering is centered on endpoint privilege elevation, request/approval workflows, session auditing, and policy-based control of elevated activity. The product is best suited for Windows, macOS, and Linux environments where IT teams want to reduce local admin exposure without blocking legitimate software installs or support tasks. It also integrates with ServiceNow for request handling, but its core scope is endpoint PAM rather than vault-centric secrets management.

Endpoint Privilege Management

Privileged Access Management (PAM)

Control local admin rights without slowing your users down

Secure Remote Access

Privileged Access Management (PAM)

Fast, secure, audited access for anyone who needs to work on your systems remotely

Web Access Management

Privileged Access Management (PAM)

Control how users browse the web and download software

Aembit

Non-Human Identity Security (NHI)

Our vision is to provide a digital world where every business can safely build its applications by inherently trusting how they connect to partners, customers, and foundational services. The result: You can build, deliver and maintain better applications that support and empower your customers, without the frustration and exposure risks that come with boldly crossing borders.

Workload IAM

Non-Human Identity Security (NHI)

Identity and access management for AI agents and non-human workloads enabling organizations to Manage Access, Not Secrets through policy-based controls

Discover

Non-Human Identity Security (NHI)

Every agent found, every agent owned through continuous inventory across IdP, gateway, device, cloud, and registry.

Enterprise Identity

Identity & Access Management (IAM)

Enables AI agents to operate under verified user identities tied to your organization's identity provider with immediate revocation capabilities.

Identity MDR

Identity Threat Detection & Response (ITDR)

Monitors credential-based threats by integrating with identity providers to detect account takeovers and unauthorized access attempts.

Human Identity Security

Privileged Access Management (PAM)

Manages access for humans using federated identity and policy-based workflows to control access to systems and applications with just-in-time access that's time-bound and automatically revoked.

Machine Identity Security

Non-Human Identity Security (NHI)

Manages authentication and access control for non-human identities, including AI agents, applications, services, and infrastructure workloads by eliminating static secrets and automating credential lifecycle management.

Privileged Access Management

Privileged Access Management (PAM)

Controls and monitors access to sensitive systems and data by users with elevated privileges using zero-trust principles and just-in-time access with automatic credential rotation.

Apono

Identity & Access Management (IAM)

Apono is a cloud access management vendor positioned in IAM around just-in-time and least-privilege access for human and non-human identities. Its platform replaces standing privileges with access created at request time, enforced with policy guardrails, and revoked automatically. Apono is best suited for cloud-first teams that need granular control across AWS, Azure, GCP, Kubernetes, databases, and SaaS-connected environments, especially where privileged access and access review must be tightly managed.

Agent Privilege Guard

Non-Human Identity Security (NHI)

Manages and controls AI agent access to sensitive resources by eliminating standing privileges and providing ephemeral, task-scoped credentials.

Infrastructure Guard

Privileged Access Management (PAM)

Secures privileged access to on-premises and hybrid infrastructure including databases, Kubernetes, and compute resources.

Privileged Cloud

Privileged Access Management (PAM)

Extends zero standing privileges across cloud platforms (AWS, Azure, GCP) using provider-native language for dynamic access control.

Agent Identity Security

Non-Human Identity Security (NHI)

Governs AI agent privileges and identities to stop privilege misuse and compliance violations in agent deployments.

Cloud Governance

Identity Governance & Administration (IGA)

A dynamic module that offers visibility into unnecessary rights and access while maintaining compliance with regulatory standards without affecting developer processes.

Converged Identity

Identity & Access Management (IAM)

A unified identity and access management solution that integrates IAM, IGA, PAM, and endpoint management capabilities to manage, control, and govern all digital identities through a single interface.

Endpoint Privilege Management

Privileged Access Management (PAM)

Enforces just-in-time privileged access to endpoints using Zero Trust and Least Privilege principles with centralized governance and security controls across Windows, Linux, and macOS systems.

Multi-Factor Authentication

Multi-Factor Authentication (MFA)

An enterprise-grade authentication solution that protects critical systems through adaptive, multi-layered security with continuous context-aware access control.

Arcon PAM

Privileged Access Management (PAM)

ARCON PAM is an enterprise-class privileged access management solution designed for hybrid, multi-cloud, and distributed datacenter environments. The platform centralizes control of privileged accounts across heterogeneous IT infrastructure through a unified admin console and secure gateway server. ARCON PAM targets IT security, risk, and compliance teams managing complex privilege lifecycles in organizations with DevOps and cloud-native workloads requiring fine-grained access controls and comprehensive audit trails.

Single Sign-On

Identity & Access Management (IAM)

Enables employee access to multiple systems and applications through single authentication.

ARCON TechSolutions

Privileged Access Management (PAM)

ARCON TechSolutions offers a comprehensive Privileged Access Management (PAM) suite designed to manage, monitor, and secure administrative access to critical infrastructure. The platform provides session recording, password vaulting, and just-in-time access to prevent unauthorized lateral movement and insider threats. It integrates continuous risk assessment to adjust access rights dynamically based on behavioral patterns and session risk scores.

Astrix Security

Non-Human Identity Security (NHI)

Discover, secure, and deploy AI agents responsibly across the enterprise

Aurigin

Identity Threat Detection & Response (ITDR)

Aurigin.ai enables proof of ownership and authenticity for all sensitive communication devices and digital content.

A flexible, user-friendly MFA solution that balances robust security with seamless user experience through intelligent risk assessment and adaptive authentication.

AuthLite

Multi-Factor Authentication (MFA)

AuthLite is a specialized multi-factor authentication solution designed specifically for Microsoft Active Directory environments to secure administrative and user pivots. It replaces traditional static password vulnerabilities by dynamically assigning privileged group memberships only after successful MFA validation. This architecture natively mitigates Pass-the-Hash (PtH) and credential harvesting attacks within Windows ecosystems without requiring complex federation.

Authomize

Identity Governance & Administration (IGA)

Authomize provides an AI-native Identity Governance and Administration (IGA) platform focused on continuous discovery, mapping, and governance of human and machine identities across cloud and on-premises environments. It delivers real-time visibility into permissions, entitlements, and access risks, automating remediation through policy enforcement and self-service workflows. Best suited for enterprises with complex multi-cloud infrastructures seeking to mitigate identity-based threats without disrupting operations. Authomize positions itself as a modern alternative to legacy IGA, emphasizing agentless integration and ML-driven risk prioritization for mid-to-large organizations.

Identity Threat Protection

Identity Threat Detection & Response (ITDR)

Provides real-time detection and remediation of identity-related threats through continuous monitoring and behavioral analysis across federated and local identities.

Privilege Control for Cloud Entitlements

Privileged Access Management (PAM)

Continuously reduces cloud infrastructure risk by centralizing authorization and enforcing least standing privilege across public clouds.

Secret Server

Privileged Access Management (PAM)

Enterprise-grade Privileged Access Management solution that identifies, secures, monitors and manages privileged account access.

Identity and Access Management

Identity & Access Management (IAM)

Securely manage identities and access to AWS services and resources

Beyond Identity

Multi-Factor Authentication (MFA)

Beyond Identity provides passwordless, phishing-resistant MFA built around device-bound cryptographic keys and device-native biometrics. Its MFA offering is aimed at organizations trying to replace passwords, push approvals, and OTPs with stronger authentication for workforce access. The platform uses an authenticator on endpoints and a cloud policy engine to verify both user identity and device trust at login. It is best suited for security teams that want MFA with continuous device posture checks and support for managed and unmanaged endpoints, while avoiding legacy second factors that can be phished or replayed.

Phishing-Resistant MFA

Multi-Factor Authentication (MFA)

Device-bound passkeys that cannot be stolen, shared, or replayed, enabling single-step biometric login without passwords or codes.

Secure Access Platform

Identity & Access Management (IAM)

An identity security solution that defends against identity-based attacks through phishing-resistant MFA, device trust, and continuous access control.

Secure Customers

Identity & Access Management (IAM)

A customer authentication solution delivering frictionless, phishing-resistant authentication across every browser, device, and application.

Secure SSO

Identity & Access Management (IAM)

The only SSO built to eliminate identity risk by using phishing-resistant device-bound credentials and continuous risk evaluation.

BeyondTrust

Privileged Access Management (PAM)

BeyondTrust fights every day to secure identities, intelligently remediate threats, and deliver dynamic access to empower and protect organizations around the world. Our vision is a world where all identities and access are protected from cyber threats.

Data Access Governance

Identity & Access Management (IAM)

Helps security teams discover who has access to sensitive data, understand their permissions, identify excessive access, and prioritize remediation based on data risk.

Cyqur

Password Management

A browser extension and password manager powered by BinariiDSP technology that protects sensitive credentials like passwords, PINs, security answers, and seed phrases

Bitwarden

Password Management

Bitwarden is a trusted security leader for millions of users worldwide, empowering enterprises, developers, and individuals to securely manage and share sensitive information anywhere.

Access Intelligence

Identity & Access Management (IAM)

An enterprise credential security solution that helps businesses identify credential risks, prioritize critical applications, guide employees through password updates, and track security improvements across their organization.

Authenticator

Multi-Factor Authentication (MFA)

A free, open-source mobile app that generates time-based one-time passwords (TOTP) for multi-factor authentication, creating rotating 6-digit codes every 30 seconds to add an extra security layer beyond passwords.

Business

Password Management

An open-source password manager that enables organizations to securely store, share, and autofill credentials at scale while providing IT teams with centralized control, compliance features, and employee access management.

Enterprise

Password Management

A centralized credential management platform that securely stores and manages passwords and sensitive data for enterprises, with features including workforce authentication, access controls, audit logging, and SSO integration to reduce breach risk across organizations.

Families

Password Management

A secure password management solution that enables up to six family members to securely share passwords and credentials through a centralized vault with individual privacy controls.

Passwordless.dev

Multi-Factor Authentication (MFA)

A passwordless authentication platform that enables organizations to provide secure, phishing-resistant authentication using FIDO2 WebAuthn standards across customer, user, and workforce applications.

Personal

Password Management

A zero-knowledge encrypted password manager that securely stores and autofills login credentials across all devices with optional premium features and support for passkeys, file storage, and authenticator codes.

Agentic IAM

Identity & Access Management (IAM)

Solution that automates Identity and Access Management processes including access requests, employee lifecycle management, identity risk validation, and continuous certification through AI agents.

Britive

CIEM

Britive provides dynamic Cloud Privileged Access Management (CPAM) and Cloud Infrastructure Entitlement Management (CIEM) with patented just-in-time (JIT) ephemeral access across AWS, multi-cloud, SaaS, hybrid, and on-prem environments. It enforces runtime identity access for human, agentic AI, and machine identities via a unified control plane, minting permissions only at execution and auto-destroying them post-task. Recognized by Gartner as a CIEM leader, Britive offers entitlement governance, anomaly detection, and SCIM-based synchronization with IdPs like Okta and Azure AD. Best for organizations needing granular, zero-standing-privilege controls in dynamic cloud ecosystems.

Access Broker

Privileged Access Management (PAM)

Extends cloud-native PAM capabilities to hybrid and on-premises environments, delivering ephemeral access to critical infrastructure without standing privileges.

Access Builder

Privileged Access Management (PAM)

Cloud access provisioning platform that enables self-service access profile creation and automated approval workflows while maintaining zero standing privileges through ephemeral permissions.

Cloud Identity Security & Governance

Identity Governance & Administration (IGA)

Platform component for centralized, automated identity governance that integrates with identity providers and eliminates standing privileges across multi-cloud environments.

JIT Permissioning

Privileged Access Management (PAM)

Delivers true, ephemeral just-in-time permissions by dynamically creating and assigning cloud permissions on-demand, then automatically revoking them upon task completion.

Secure DevOps & Automations

Privileged Access Management (PAM)

Cloud-native privileged access management solution for DevOps teams and CI/CD pipelines that delivers ephemeral access for automation without hardcoded secrets.

CLEAR

Identity & Access Management (IAM)

CLEAR is an identity verification vendor that extends existing IAM stacks by adding biometric and document-based identity proofing at authentication and authorization points. In the IAM category, it is best known for validating that the person behind a login is real and matches authoritative identity evidence, rather than relying only on passwords, devices, or recovery factors. Its IAM offering is positioned for organizations that need stronger access assurance for high-risk workflows such as workforce access, healthcare, and regulated environments. CLEAR’s broader platform also serves consumer and travel identity use cases, but its IAM value is centered on verified human access.

CLEAR1

Identity & Access Management (IAM)

A multi-layered identity verification platform that verifies the person beyond the device using multiple identity signals, making identity fraud exponentially harder.

Discovery & Inventory (Non-Human Identities)

Non-Human Identity Security (NHI)

Map every Non-Human Identity to the people and systems behind it

Posture & Risk Management (Non-Human Identities)

Non-Human Identity Security (NHI)

Analyze and mitigate Non-Human Identity risks to strengthen security posture and ensure compliance

Threat Detection & Response (Non-Human Identities)

Non-Human Identity Security (NHI)

Detect anomalous identity behavior and respond with full context

Access Control Management

Identity & Access Management (IAM)

Enables distributed management of user access rights across multiple systems while enforcing least privilege and separation of duties.

Data Access Governance

Identity & Access Management (IAM)

Strikes the right balance between collaboration and control with an intelligent, zero-trust approach to managing who accesses sensitive data through real-time monitoring and policy enforcement.

Corma

Identity Governance & Administration (IGA)

Corma is a cloud based identity governance and SaaS access management platform for IT, security and finance teams at growing organizations. It centralizes visibility into the applications an organization uses, including unauthorized or shadow software, and automates the joiner mover leaver lifecycle so access is provisioned and revoked without manual tickets. Security teams use it to run access reviews and certification audits aligned to SOC 2 and ISO 27001, while finance and IT teams track software licenses and renewals from the same console. Employees can request access through a self service catalog with role based approval workflows. The platform targets companies of roughly 50 to 1000 employees and integrates with identity providers such as Google Workspace and Microsoft Entra ID.

Identity Access Management

Identity Governance & Administration (IGA)

Controls user access to applications, enforcing least-privilege permissions and managing identity lifecycles.

SaaS Management (SAM)

Identity Governance & Administration (IGA)

Tracks, manages, and optimizes software licenses and usage to reduce costs and ensure compliance.

Falcon Next-Gen Identity Security

Identity Threat Detection & Response (ITDR)

Continuously discovers identity risk, validates access, enforces least privilege, and stops identity-based attacks across human, non-human, and AI identities.

Curity

Identity & Access Management (IAM)

Curity was founded by identity specialists who had spent years working with identity and access management in large organizations. During that time, we saw a consistent challenge. Traditional IAM systems were designed for login portals and monolithic applications, while modern digital services were increasingly built on APIs, distributed systems and open identity standards. Organizations needed a different approach.

Access Intelligence

Identity Threat Detection & Response (ITDR)

Provides runtime control over API access for AI agents, services, and machines through scoped, temporary access tokens and continuous authorization evaluation.

Identity Server

Identity & Access Management (IAM)

Standards-based platform that enables organizations to secure users, APIs, machines and AI agents with deployment flexibility across on-premise, cloud, and hybrid environments.

Managed ITDR

Identity Threat Detection & Response (ITDR)

Enterprise-grade ITDR solution delivering identity protection for attacks like credential theft, session hijacking and rogue OAuth apps, backed by a 24/7 AI-assisted SOC.

CyberArk (Palo Alto Networks)

Privileged Access Management (PAM)

the next-generation identity security platform that discovers, controls and governs your human and agentic workforce

ITDR

Identity Threat Detection & Response (ITDR)

Identity Threat Detection and Response solution that monitors identity systems like Active Directory and Microsoft Entra ID to detect credential misuse and automate incident response.

Identity Security

Identity & Access Management (IAM)

An AI-powered unified security platform that delivers integrated threat detection and response across 15 modules deployable in minutes.

Identities

Identity Governance & Administration (IGA)

Discovers and maps every human and non-human identity across the environment and correlates them with devices, applications, and security exposures.

Identity Security

Identity Threat Detection & Response (ITDR)

Secure every user. Protect every identity with real-time identity threat detection and response.

IDENTITY

Identity Threat Detection & Response (ITDR)

Unify your identity security with proactive risk management, real-time threat detection, and autonomous response

Dashlane

Password Management

Dashlane provides complete credential security, protecting businesses against the threat of human risk.

Omnix

Password Management

Proactive credential security platform that secures enterprises against credential-based threats with day-one password protection and visibility, detecting risk across every employee login.

Delinea (formerly ThycoticCentrify)

Privileged Access Management (PAM)

Delinea, formed in 2021 from the merger of Thycotic and Centrify and backed by TPG Capital, provides privileged access management (PAM) solutions for securing privileged accounts, credentials, and access to servers, applications, databases, and cloud infrastructure. Available as cloud-native or on-premises deployments via a centralized dashboard, it supports hybrid enterprises with products including Secret Server for credential vaulting, Privilege Manager for endpoint controls, and Privileged Behavior Analytics for threat detection. Serves over half of Fortune 100 companies, financial institutions, and critical infrastructure, focusing on password rotation, session monitoring, and just-in-time access.

Account Lifecycle Manager

Privileged Access Management (PAM)

Provides seamless service account governance from discovery and provisioning through decommissioning.

Connection Manager

Privileged Access Management (PAM)

Enables IT teams to manage and interact with multiple remote sessions for both Remote Desktop Protocol (RDP) and SSH in a unified environment.

Fastpath Access Control

Identity Governance & Administration (IGA)

Enables organizations to examine access permissions across business applications and identify Segregation of Duties conflicts to reduce security risks.

Identity Threat Protection

Identity Threat Detection & Response (ITDR)

Proactively detect and address identity-related threats by delivering high-quality insights into the most vulnerable identities to reduce the impact of compromise.

Privileged Remote Access

Privileged Access Management (PAM)

A browser-based, VPN-less solution that delivers secure remote access to critical systems while enforcing least-privilege controls and providing full visibility through AI-driven auditing.

Secret Server

Privileged Access Management (PAM)

An enterprise-grade vault that helps organizations identify, secure, manage, monitor, and audit privileged accounts.

Descope

Identity & Access Management (IAM)

Descope is a customer and agentic identity platform that fits within Identity & Access Management by handling authentication, authorization, single sign-on, MFA, and tenant-aware access controls for web, mobile, partner, and third-party applications. It is aimed at teams building B2C and B2B apps that need configurable identity journeys without assembling separate components for login, federation, and user management. Descope also supports delegated administration, audit trails, SCIM sync, and connector-based integrations for related identity workflows. Its strongest fit is for product and security teams managing external identities at scale.

Devel Group

Identity & Access Management (IAM)

Devel Group delivers the SmartID Suite, an AI-driven identity platform that utilizes biometrics and adaptive risk intelligence for secure authentication. The platform uses agentic AI to autonomously detect identity-based threats and fraud patterns in real-time, providing a high-assurance alternative to traditional password-based or SMS-MFA systems. It focuses on the convergence of biometric security and automated fraud prevention for digital onboarding and session persistence.

Behavior Analytics

Identity Threat Detection & Response (ITDR)

Helps uncover anomalous user and entity behavior throughout your organization, delivering next-level risk context across the entire MITRE ATT&CK framework.

DigiCert

Identity & Access Management (IAM)

Trust built for the AI age

Duo Security

Multi-Factor Authentication (MFA)

Duo Security makes strong protection simple with easy-to-use multi-factor authentication and smart, risk-based tools. By minimizing friction, it helps users stay secure without slowing them down.

Entro Security

Non-Human Identity Security (NHI)

Entro is an NHI (Non-Human Identity) and Secret security platform that focuses on the lifecycle and governance of AI agents, service accounts, and API keys. The solution provides visibility into the "secret behind the identity," mapping connections between machines to reduce identity sprawl and mitigate risks of secret leakage. It replaces manual discovery scripts and siloed secrets management tools with a unified governance engine for the automated enterprise.

Platform (Agentic AI, Non-Human Identity & Secrets Security)

Non-Human Identity Security (NHI)

Unified security platform that discovers, classifies, and continuously monitors AI agents, non-human identities, and secrets across enterprise cloud and SaaS infrastructure.

Ermetic

CIEM

Ermetic provides a CIEM platform that discovers and analyzes human and machine identities, entitlements, and access risks across AWS, Azure, and Google Cloud. Acquired by Tenable in 2023 and rebranded as Tenable CIEM, it combines CIEM with CSPM for contextual visibility into IAM policies, network configurations, storage, and secrets. It exposes overprivileged entitlements, toxic combinations, and enforces least privilege via automated remediation and anomaly detection. Best for multi-cloud enterprises needing unified CNAPP capabilities to manage complex entitlement sprawl without agents.

Identity Exposure

Identity Threat Detection & Response (ITDR)

Provides visibility into identity hygiene and unifies Active Directory and Entra ID security by identifying and neutralizing attack paths before exploitation occurs.

Feitian

Identity & Access Management (IAM)

Established in 1998, FEITIAN Technologies is a leading global provider of cyber security products and solutions.

FIDO Security Keys

Multi-Factor Authentication (MFA)

Simpler and stronger authentication through passwordless verification methods with multiple form factors including biometric, NFC, and iOS-compatible options.

OTP Authentication

Multi-Factor Authentication (MFA)

Comprehensive authentication solution offering the perfect substitution for authenticator mobile apps with various form factors including single button, e-signature, QR code, and mobile/watch variants.

Power Card & Display Card

Multi-Factor Authentication (MFA)

Card-based authentication solutions combining card and OTP functionality with one-stop banking solution capabilities including OTP display, chip embedded, and fingerprint biometric options.

Identity and Access Security

Identity & Access Management (IAM)

A unified security platform that automates user access reviews across SaaS tools, enabling teams to discover accounts, flag security issues, and generate compliance evidence in minutes.

Identity Exposure Management

Identity Threat Detection & Response (ITDR)

Continuously monitors for compromised credentials and stolen session tokens across the dark web and other sources, then automates validation and remediation to prevent account takeovers before attackers can exploit them.

Formal is a modern identity and access proxy that governs interactions between users, AI agents, and sensitive infrastructure like databases, Kubernetes, and SSH. It functions as a just-in-time access layer that provides visibility and control over data access without the friction of legacy PAM vaults. The platform is designed for the modern cloud stack, enabling visibility into 'who accessed what' down to the query or command level.

Foxpass

Privileged Access Management (PAM)

Foxpass Cloud RADIUS and Cloud PKI make it simple to protect your Wi-Fi and VPN connections with identity- and certificate-based authentication. No hardware. No local servers.

Fudo Security

Identity & Access Management (IAM)

Fudo Security, a global leader in Privileged Access Management (PAM) and Zero Trust Remote Access solutions, is transforming how organizations secure critical infrastructure and sensitive systems.

FusionAuth

Identity & Access Management (IAM)

FusionAuth helps developers meet authentication feature and compliance requirements so they can focus on building their application. It was built by wicked smart developers for wicked smart developers with developer control, flexibility, and ergonomics through the roof.

GitGuardian

Identity & Access Management (IAM)

GitGuardian protects the enterprises against leaked secrets and mismanaged identities.

Gradient Technologies

Identity & Access Management (IAM)

Gradient for Users replaces traditional MFA with a one-click, passwordless experience that users and admins love. A simple SaaS plugin to your existing Single Sign On (SSO).

HashiCorp Boundary

Privileged Access Management (PAM)

HashiCorp Boundary is an identity-driven privileged access management solution that brokers secure, just-in-time access to infrastructure resources including Linux/Windows hosts, databases, and Kubernetes clusters without exposing credentials or network routes. Positioned as a modern alternative to traditional PAM tools, Boundary appeals to organizations managing hybrid and multi-cloud environments who prioritize infrastructure-as-code automation and Zero Trust principles. Best suited for DevOps-oriented teams and enterprises seeking self-hosted control with deep infrastructure integration capabilities.

Heimdall Data

Privileged Access Management (PAM)

We're redefining database access from the ground up

Heimdal PAM

Privileged Access Management (PAM)

Heimdal PAM is a privileged access management solution designed for mid-market to enterprise organizations seeking simplified admin rights governance without traditional PAM complexity. The platform enforces least-privilege access through three core modules: Privileged Account and Session Management (PASM), Privilege Elevation and Delegation Management (PEDM), and Application Control. Heimdal differentiates through automatic user rights de-escalation upon threat detection, integrated with their Next-Gen Antivirus engine, and just-in-time privilege provisioning that eliminates standing admin credentials.

HID Global

Identity & Access Management (IAM)

HID Global is a long-established enterprise identity vendor with IAM offerings centered on strong authentication, credential lifecycle management, PKI, FIDO, passkeys, and SSO. In this category, it is strongest in regulated and high-assurance environments that need to link workforce identity with physical access and certificate-based authentication. Its IAM portfolio spans cloud, on-premises, and hybrid deployment models, with options for government, enterprise, and converged physical/IT identity use cases. Adjacent physical security and RFID products exist, but the IAM scope focuses on authentication, identity proofing, and credential management.

Hitachi ID Bravura Privilege

Privileged Access Management (PAM)

Hitachi ID Bravura Privilege is an enterprise-grade PAM solution that automates password randomization across over a million accounts daily, supports geo-redundant credential vaulting, and enables frictionless, time-limited access for thousands of users, applications, and systems. It integrates agentlessly with clients, servers, hypervisors, databases, and cloud/on-premise applications. Part of the Bravura Security Fabric IAM platform, it combines PAM with identity governance for unified policy enforcement, access certifications, and compliance reporting. Best suited for large enterprises managing hybrid infrastructures with high-volume privileged access needs.

HYPR

Multi-Factor Authentication (MFA)

HYPR is on a mission to improve the lives of security-minded leaders, their employees and customers by helping organizations create trust in the identity lifecycle.

I

IDdriven

Identity Governance & Administration (IGA)

IDdriven provides Identity Governance and Administration (IGA) solutions focused on automating identity lifecycle management for mid-sized enterprises. Their platform consolidates identity data from on-premises directories, SaaS applications, and cloud services, enabling policy-based access provisioning, certification campaigns, and compliance reporting. Best suited for organizations in regulated industries like finance and healthcare seeking cost-effective IGA without extensive customization. IDdriven emphasizes quick deployment through pre-built connectors to Active Directory, SAP, and major HR systems, supporting role-based access control (RBAC) and separation of duties (SoD) enforcement.

IDEMIA Public Security

Identity & Access Management (IAM)

Building mission-critical solutions powered by biometrics and cryptography.

Incode Technologies

Identity & Access Management (IAM)

Incode Technologies delivers an automated identity verification and authentication platform centered on high-assurance biometric liveness. It utilizes proprietary AI to process global identity documents and facial biometrics to ensure a real human is present, effectively neutralizing deepfake-based spoofing. The solution replaces manual KYC/onboarding workflows and complements existing IAM stacks by providing a stronger root-of-trust for high-risk transactions.

Iru

Identity & Access Management (IAM)

Iru’s IAM product is **Workforce Identity**, a passwordless workforce access platform focused on securing employee sign-in and application access. It sits inside a broader IT and security suite, but its IAM scope centers on replacing passwords with hardware-backed passkeys, single sign-on, and context-aware access decisions. The product is aimed at organizations that want stronger workforce authentication without adding friction for employees or IT admins, especially teams standardizing on modern device-managed environments. Public materials position it as part of Iru’s integrated identity, endpoint, and compliance platform rather than a standalone IAM-only vendor.

JumpCloud

Identity & Access Management (IAM)

JumpCloud provides a cloud directory platform for IAM, centralizing user identities and extending access to devices, applications, files, networks, and servers across cloud, on-premises, and hybrid environments. It integrates with Active Directory as the authoritative source, using protocols like LDAP, SAML, RADIUS, SSH, and REST for federation. Features include automated provisioning/deprovisioning, role-based access control, SSO, MFA with TOTP and push notifications, and MDM for device policies, patch management, and remote wipe. Best for SMBs and mid-market organizations migrating from on-premises directories to cloud IAM without infrastructure.

Keeper Security

Password Management

Keeper Security is transforming cybersecurity for people and organizations around the world. Keeper's affordable and easy-to-use solutions are built on a foundation of zero-trust and zero-knowledge security to protect every user on every device.

Keyfactor

Identity & Access Management (IAM)

Keyfactor is best known for machine identity and PKI automation, but in IAM terms it sits in the identity layer for non-human identities: certificates, SSH keys, and code-signing trust. Its core fit is for enterprises that need to discover, issue, rotate, revoke, and govern machine credentials across hybrid infrastructure and DevOps pipelines. Keyfactor is strongest where IAM overlaps with certificate lifecycle management and authentication for services, devices, and applications rather than workforce SSO or directory management. It also supports on-premises, hybrid, and SaaS deployment models, which suits regulated environments with mixed PKI estates.

Keystrike

Identity & Access Management (IAM)

Keystrike is an intent-based security platform for governing AI agents and critical systems

LastPass

Password Management

LastPass is a password manager that stores login credentials, secure notes, and payment details in an encrypted vault protected by a user-chosen master password. It employs zero-knowledge architecture with AES-256 encryption, PBKDF2-SHA-256 key derivation with salting, and local decryption on user devices. Supporting browser extensions, mobile apps, and web interfaces, it autofills forms, generates passwords using uppercase, lowercase, numbers, and symbols, and syncs data across devices. LastPass serves millions of personal and business users, offering MFA integration and admin tools for enterprise password hygiene.

Linx Security

Identity Threat Detection & Response (ITDR)

Linx Security provides unified visibility and governance across the entire identity lifecycle, focusing on both human and non-human identities (NHI). The platform maps the relationship between users, permissions, and accounts across SaaS, cloud, and on-premises environments to identify security gaps. It proactively remediates excessive permissions and identifies orphan accounts that could be exploited in identity-based attacks.

Lumos

Identity Governance & Administration (IGA)

Lumos is an autonomous identity governance platform that automates application access management across an organization's SaaS ecosystem. It discovers applications and identities, streamlines access requests and approvals, automates provisioning and deprovisioning, enforces least-privilege access, and provides centralized visibility into user permissions. By reducing manual identity operations and improving governance, Lumos helps organizations strengthen security, simplify compliance, and improve employee productivity through automated access lifecycle management.

Lydsec Keypasco

Multi-Factor Authentication (MFA)

Keypasco, developed by Lydsec, provides a multi-factor authentication solution that emphasizes device identity and location-based security without requiring traditional hardware tokens. The platform utilizes a patented 'Device Fingerprint' and 'Geofencing' technology to ensure that only authorized users on specific devices can access resources. It is designed for high-scalability environments where passwordless authentication and user convenience are primary requirements.

ManageEngine PAM360

Privileged Access Management (PAM)

ManageEngine PAM360 is a unified Privileged Access Management platform that centralizes governance of privileged credentials, sessions, and accounts across IT infrastructure for humans and non-human entities. It stores credentials in an encrypted vault with automated rotation, enforces Just-In-Time elevation, and provides session recording with command filtering. Trusted by over 5000 organizations and government agencies, it suits enterprises needing comprehensive PAM with endpoint privilege management, behavioral anomaly detection via AI/ML, and role-based access controls. Best for mid-to-large IT teams managing hybrid environments with strict compliance requirements.

Account Security

Identity Threat Detection & Response (ITDR)

Identifies account takeovers and contains their impact through deep integration with cloud office infrastructure to prevent lateral movement and data theft.

OAuth Remediation Agent

Identity & Access Management (IAM)

Stops malicious OAuth applications from gaining unauthorized access to workspace accounts and provides visibility into actual app activity.

Entra

Identity & Access Management (IAM)

Unified identity and network access solution that secures access for workforce, customer, and agentic identities to any AI, apps, data, and multicloud resources.

Microsoft Entra ID (formerly Azure Active Directory)

Identity & Access Management (IAM)

Microsoft Entra ID is a cloud-based identity and access management service, formerly Azure Active Directory, providing directory services, authentication, and authorization for Microsoft 365, Azure, Dynamics 365, and third-party SaaS applications. It supports single sign-on via work or school accounts for cloud and on-premises apps. Key security includes conditional access policies, risk-based authentication using machine learning on trillions of signals, and identity protection in P2 tier. Market leader in hybrid IAM for enterprises using Microsoft ecosystems, ideal for organizations needing centralized identity governance across multitenant environments.

Entra ID

Identity & Access Management (IAM)

A cloud-based identity and access management solution that secures and manages identities across cloud and on-premises environments, preventing identity attacks through strong authentication and risk-based policies.

Miniorange

Identity & Access Management (IAM)

miniOrange has established itself as a cybersecurity leader in identity, data security, and privacy, helping organizations protect human and non-human identities, safeguard sensitive data, and secure AI systems across today's digital landscape. Our expertise also includes offering new-age security solutions for popular CMS and project management platforms like Atlassian, WordPress, Joomla, Drupal, Shopify, BigCommerce, and Magento.

Miru Labs

Identity Threat Detection & Response (ITDR)

Miru is an AI-native insider threat detection and prevention platform that protects organizations from data loss, Shadow AI risks, and malicious insider activity across SaaS environments and endpoints. Founded by cybersecurity veterans with deep expertise in counterintelligence and nation-state threat detection, Miru replaces legacy UEBA and SIEM tools with an identity-anchored architecture that automates investigation workflows and eliminates alert fatigue. The platform combines browser-based telemetry with integrations to identity providers, development platforms, and productivity suites to deliver real-time behavioral analytics and automated response capabilities. Miru enables security teams at high-growth technology companies and enterprises to detect anomalous access patterns, unauthorized data exfiltration, and policy violations without adding headcount, providing the investigation intelligence and endpoint protection modern distributed workforces require.

Passportal

Privileged Access Management (PAM)

Cloud-based solution that empowers safe privileged access management while helping create, manage, and automate strong credentials.

Natoma

Non-Human Identity Security (NHI)

Natoma, now part of Snowflake, is an AI agent security platform that enables enterprises to securely deploy and govern AI agents. Built around a hosted Model Context Protocol (MCP) platform, it provides enterprise-grade authentication, fine-grained authorization, policy enforcement, and governance for AI agents accessing enterprise applications and data. With flexible deployment options and support for 100+ pre-built MCP servers, Natoma helps organizations safely connect AI agents to internal tools while maintaining visibility, security, and compliance.

Gateway

Non-Human Identity Security (NHI)

Standardizes how AI clients and agents connect to enterprise tools while managing tool access, enforcing policies, and providing visibility into AI activity.

Authenticator App

Multi-Factor Authentication (MFA)

Time-based one-time password generator for two-step verification across NCP VPN services and online platforms with support for SHA-1, SHA-256, and SHA-512 algorithms.

Netwrix

Identity Governance & Administration (IGA)

Netwrix provides a SaaS-based Identity Governance and Administration (IGA) platform, primarily through Netwrix Identity Manager (formerly Usercube), automating identity lifecycle management across hybrid IT environments. It handles provisioning, deprovisioning, access reviews, and policy enforcement for joiner-mover-leaver processes. The solution builds role catalogs mapping technical entitlements to business roles, detects toxic role combinations and Segregation of Duties (SoD) conflicts, and generates compliance reports. Best suited for mid-to-large enterprises needing scalable IGA for Active Directory, Azure AD, and multi-system access governance to enforce least privilege and support audits.

Identity Manager

Identity Governance & Administration (IGA)

Identity governance and administration platform that automates identity lifecycles, streamlines access control, and simplifies compliance across hybrid environments.

Privilege Secure

Privileged Access Management (PAM)

Privileged Access Management solution that eliminates standing privileges by providing just-in-time access, monitoring privileged activity, and removing credentials immediately after use.

Threat Manager

Identity Threat Detection & Response (ITDR)

Real-time threat detection and response solution across identity and file systems to stop ransomware, identity attacks, and insider threats before escalation.

NewCore

Identity & Access Management (IAM)

NewCore is a workforce identity platform positioned for IAM use cases across humans and non-human identities. Its published materials emphasize identity discovery, SSO, MFA, lifecycle management, directory services, and inline policy enforcement, with support for deploying alongside an existing IdP rather than replacing it. It appears best suited to enterprise security and identity teams that need to unify access control for employees and AI agents, especially where browser-based authentication, agent governance, and token-based access control are in scope.

Identity Discovery

Identity Governance & Administration (IGA)

Consolidates fragmented identity data from multiple systems into a unified view, connecting every human, AI agent, system, app, and access path in one live graph.

Identity Security

Identity & Access Management (IAM)

Delivers SSO, passkeys, phishing-resistant MFA, and security-aware policies for every human and AI agent.

Nightfall AI

Identity Threat Detection & Response (ITDR)

AI-native data loss prevention and insider threat detection platform that discovers, classifies and protects sensitive data across SaaS, GenAI, endpoint and email. Detects unauthorized uploads, shadow AI usage, exfiltration and policy violations in real-time using ML-based classifiers, replacing legacy DLP and UEBA with autonomous behavioral monitoring and prevention before data loss happens.

RADIUS Service

Multi-Factor Authentication (MFA)

Cloud-based device and user identity authentication service with device fingerprinting, per-device isolation, and strong certificate-based security

Oak

Identity & Access Management (IAM)

Oak is an AI-native identity operating system focused on Identity & Access Management for enterprises that need to govern human, machine, and AI-agent identities in one control plane. It builds a live identity graph from raw evidence, then uses that graph to manage access, detect permission drift, and drive real-time remediation. Oak appears positioned for enterprise CISOs and IAM teams modernizing from periodic reviews to continuous identity governance. The company came out of stealth in July 2026, is generally available, and has publicly described enterprise deployments and a $60M seed round.

Oasis Security provides an identity control plane specifically designed for non-human identities (NHI) and machine identities such as service accounts, API keys, and secrets. The platform automates the discovery of unmanaged machine identities across hybrid and multi-cloud environments, mapping their access to critical resources to identify over-privilege. It complements traditional IAM by providing automated lifecycle management and remediation for secret rotation and short-lived credentials.

Access control that understands AI agent intent in real time and enforces time-bound, least-privilege access with comprehensive audit trails.

An enterprise platform for non-human identity management and security across hybrid cloud environments, providing visibility, control, and governance of AI agents and machine identities.

Offroad

Identity & Access Management (IAM)

Offroad is a newly launched **agentic identity security platform** that sits in the IAM-adjacent identity security layer rather than a classic SSO or directory product. According to its site and launch coverage, it helps enterprises move from identity visibility to identity resolution by investigating, governing, remediating, and verifying identity risk across human users, machine identities, OAuth applications, service accounts, and AI agents. It appears best suited for security and identity teams that need evidence-driven analysis of access and ownership issues across distributed systems.

Okta is a cloud-based Identity and Access Management (IAM) platform that provides centralized identity governance, authentication, and authorization across on-premises, hybrid, and cloud environments. The vendor serves mid-market to enterprise organizations requiring SSO, MFA, and lifecycle management at scale. Okta is positioned as a foundational identity layer for hybrid infrastructure, with particular strength in organizations managing complex multi-application access across dispersed user bases.

Okta is The World's Identity Company™. We provide cloud-based identity and access management (IAM) solutions that securely connect the right people to the right technologies at the right time.

Build secure customer identity experiences that drive growth and protect user data

A comprehensive identity platform that secures every identity and interaction across your organization

Secure workforce access with single sign-on, multi-factor authentication, and lifecycle management

Oleria

Identity Governance & Administration (IGA)

Oleria is an autonomous identity security platform that centralizes visibility into human and machine permissions across SaaS, IaaS, and on-premises environments. It leverages AI to provide fine-grained visibility into 'who has access to what' and automates access reviews and rightsizing to maintain a state of least privilege. The solution replaces legacy, static IGA tools with a dynamic trust model that adapts to changing organizational needs.

Adaptive Identity Governance

Identity Governance & Administration (IGA)

Enables organizations to deploy governance in hours rather than years through AI-native access intelligence and automation.

Identity Security

Identity Governance & Administration (IGA)

Provides unified discovery, governance, and security of identities across human users, non-human identities, and AI agents in hybrid IT environments.

Identity Security Posture Management

Identity Governance & Administration (IGA)

Continuously discovers, monitors, and remediates identity security gaps to strengthen security posture.

Omada

Identity Governance & Administration (IGA)

Omada Identity provides full-featured Identity Governance and Administration (IGA) solutions, including on-premises and SaaS (Omada Identity Cloud) deployments for managing identity lifecycles, access requests, certifications, and compliance reporting. It supports hybrid/multi-cloud environments, ITSM integrations, and granular visibility into user access patterns. Key capabilities include risk-based access control, account reconciliation, and Segregation of Duties (SoD) policy enforcement. Best suited for enterprises requiring policy-driven governance to handle complex workflows, mitigate risks, and ensure regulatory compliance without multiple disparate tools.

Identity

Identity Governance & Administration (IGA)

On-premises Identity Governance and Administration solution providing secure digital identities for all users, applications, and data with high configurability.

Identity Cloud

Identity Governance & Administration (IGA)

Cloud-based Identity Governance and Administration solution that streamlines identity workflows through intelligent automation with 90-day time to value.

Identity Cloud Private

Identity Governance & Administration (IGA)

Enterprise-grade Identity Governance and Administration deployed in customer's own Azure tenant with complete tenant ownership for regulated enterprises.

One Identity

Identity Governance & Administration (IGA)

One Identity provides Identity Manager, an enterprise-grade IGA platform unifying governance for users, applications, data, and privileged accounts across on-premises, hybrid, and cloud environments. It excels in automated identity lifecycle management, including provisioning and deprovisioning for SaaS and hybrid apps, with SAP-certified controls for SAP-centric organizations. Key strengths include attestation workflows, self-service access requests via shopping-cart interface, consolidated governance for regular and privileged accounts, and compliance reporting. Best suited for large enterprises needing visibility into access usage, behavior-driven policy insights, and regulatory audit support in complex hybrid IT landscapes.

Safeguard

Privileged Access Management (PAM)

One Identity Safeguard is an on-premises and SaaS Privileged Access Management (PAM) suite that centralizes storage, rotation, and release of privileged credentials across systems, devices, and applications. It automates role-based access approvals, monitors and records privileged sessions with protocol inspection and indexing for audits, and integrates with One Identity Manager for Privileged Access Governance including attestation and SoD enforcement. Targeted at enterprises needing hybrid deployment options and Zero Trust just-in-time access, it supports diverse environments like UNIX root and Windows Administrator accounts while providing tamper-proof audit trails.

OneLogin (a product of One Identity)

Identity & Access Management (IAM)

OneLogin is a cloud-first Identity and Access Management (IAM) platform acquired by One Identity in 2024, providing single sign-on (SSO) and access control for workforce, customer, and partner identities. The platform supports both cloud and on-premises deployments with integration into One Identity's broader Unified Identity Security Platform alongside Privileged Access Management (PAM), Identity Governance (IGA), and Active Directory Management solutions. OneLogin serves enterprises requiring consolidated identity verification and real-time suspicious login monitoring across hybrid environments.

CIAM (Customer Identity and Access Management)

Identity & Access Management (IAM)

Secures customer identities and delivers seamless, customised sign-in experiences for consumer-facing applications.

Desktop

Identity & Access Management (IAM)

Extends identity to the endpoint: users log in once to reach every app in the OneLogin Portal, and with Desktop Pro sign into Windows or Mac with their OneLogin password via an installed certificate.

Directory

Identity Governance & Administration (IGA)

Cloud directory-as-a-service that synchronises users from Workday, Active Directory, LDAP and G Suite via connectors installed without firewall changes.

Multi-Factor Authentication (MFA)

Multi-Factor Authentication (MFA)

Flexible authentication factors including the OneLogin Protect OTP app, email, SMS, voice and WebAuthn biometrics, plus third-party options such as Google Authenticator, Yubico, Duo Security and RSA SecurID.

OneLogin Access

Identity & Access Management (IAM)

Replaces legacy access management tools with single-click access to both SaaS and on-premise applications from any device through the OneLogin portal.

Single Sign-On (SSO)

Identity & Access Management (IAM)

Users enter one set of credentials to access web apps in the cloud and behind the firewall, across desktops, smartphones and tablets. Pre-integrated with thousands of web applications.

SmartFactor Authentication

Multi-Factor Authentication (MFA)

Uses the Vigilance AI risk score to dynamically adjust authentication requirements in real time based on per-login risk, applying machine learning to location, device and user behaviour signals.

OneSpan specializes in digital identity verification and hardware/software-based multi-factor authentication for high-security environments like banking and enterprise access. The platform supports a wide range of authentication methods including FIDO2, OTP, and mobile push, alongside mobile application shielding to protect against reverse engineering and overlay attacks. It complements IAM stacks by providing the enforcement layer for secure login and transaction signing.

A unified authentication modernization platform that integrates passkeys, MFA, hardware authenticators, and transaction signing across the user journey.

Provides passwordless, MFA, and transaction security capabilities for deploying phishing-resistant authentication at scale.

C

Oort

Identity Threat Detection & Response (ITDR)

Cisco delivers the critical infrastructure to help organizations thrive in the AI era. By fusing networking, security, observability, and collaboration, we power how people and technology work together.

Opnova

Identity & Access Management (IAM)

Opnova's agentic AI bridges disconnected apps and automates the high-friction tasks no integration could reach before. The result: tighter access controls, faster provisioning, and an IAM program that finally works end-to-end.

Platform

Identity & Access Management (IAM)

An AI-native identity governance solution that automates identity governance tasks across disconnected enterprise applications through autonomous AI agents that learn from video demonstrations.

Optimal IdM

Identity & Access Management (IAM)

Optimal IdM is a global provider of innovative and affordable identity access management solutions.

Federation & Identity Services

Identity & Access Management (IAM)

Provides seamless and secure access to thousands of applications using Single Sign-On technology and manages user authentication and authorization across multiple systems.

LDAP Proxy Firewall

Identity & Access Management (IAM)

Acts as a barrier between client applications and data stored in Active Directory, preventing direct access while providing real-time access when needed.

Optimal Authentication Service

Multi-Factor Authentication (MFA)

Hosted, RESTful web service that performs various types and levels of authentications including single authentication and multi-factor authentication.

OptimalCloud

Identity & Access Management (IAM)

Cloud-based Identity and Access Management solution delivering scalable and affordable identity and access management for today's business security and usability needs.

Optimal PeoplePicker for SharePoint

Identity & Access Management (IAM)

Re-enables search capability for SharePoint when using federated claims authentication and allows users to locate and select individuals and groups from on-premises directories.

Virtual Identity Server

Identity & Access Management (IAM)

Universal directory solution that provides a single, real-time view of identity data from any data store and acts as an LDAP proxy firewall.

VIS for Office 365

Identity & Access Management (IAM)

Extends Office 365 with multi-forest, multi-platform, two-factor authentication and Denial of Service prevention and detection capabilities.

VIS for SharePoint

Identity & Access Management (IAM)

Extends SharePoint functionality to create a more secure, manageable environment and enhance authentication and authorization across multiple Active Directory forests.

Osirium PAM

Privileged Access Management (PAM)

Osirium PAM is a Privileged Access Management platform that brokers and audits privileged sessions to servers, network devices, and security infrastructure via a gateway model. It enforces least privilege by separating users from credentials stored in an encrypted vault, with automated rotation and just-in-time access. Supports 150+ target devices, session recording with keylogging and screen capture, real-time shadowing, and privileged behavior analytics. Integrates with ServiceNow, SAML2 SSO, and multi-Active Directory. Best for organizations managing third-party access and heterogeneous IT environments requiring compliance with ISO27001 and Cyber Essentials.

P0 Security

CIEM

P0 Security provides a cloud identity security platform that focuses on eliminating standing privileges through JIT (Just-in-Time) access and least-privilege enforcement. The solution automates the governance of human, workload, and AI agent identities across multi-cloud environments, ensuring that high-risk access is ephemeral and strictly vetted. It replaces traditional static PAM for cloud environments and complements CSPM by securing the identity layer.

P0 Security for Machines

Non-Human Identity Security (NHI)

Centralized, policy-driven governance for non-human identities including service accounts, workloads, and agents with unified lifecycle management and automated credential rotation.

P0 Security for Users

Identity & Access Management (IAM)

Dynamic, policy-driven authorization that enables developers to request access when needed with just-enough privilege, just-in-time, replacing static credentials and manual approval processes.

P

Cortex ITDR

Identity Threat Detection & Response (ITDR)

Identity threat detection and response paired with unified XDR data for comprehensive identity security.

P

Idira

Privileged Access Management (PAM)

Next-generation identity security platform that discovers, controls and governs human and agentic workforce.

Passpack

Password Management

As a leader in identity and access management, Passpack empowers businesses to safely manage, share and protect credentials by striving to deliver operational and product excellence for our customers and partners every day.

Permiso Security

Identity Threat Detection & Response (ITDR)

Permiso Security provides a unified platform combining Identity Security Posture Management (ISPM) and Identity Threat Detection and Response (ITDR) for human, non-human, and AI identities across AWS, Azure, Okta, M365, GitHub, Jira, Salesforce, and Snowflake. It continuously monitors identity activities, performs behavioral analysis to detect anomalies like credential compromise, account takeover, and insider threats, and executes automated responses such as account lockdown and adaptive authentication. Permiso excels in runtime tracking across IaaS, SaaS, and IdPs, reducing MTTD and MTTR for organizations with hybrid cloud environments managing diverse identity types.

Defend

Identity Threat Detection & Response (ITDR)

Monitors identity behavior in real-time to detect suspicious and malicious activity across human, non-human, and AI identities.

Discover

Identity & Access Management (IAM)

Identity inventory and visibility tool that provides comprehensive discovery and classification of human, non-human, and AI identities across cloud and on-premises environments.

Risk Score Engine

Identity & Access Management (IAM)

Quantifies identity risk across human, non-human, and AI identities by tracking behavior, likelihood of compromise, and potential business impact in a single, explainable score.

Persona

Identity & Access Management (IAM)

Persona provides an identity verification (IDV) platform that automates the collection and verification of government IDs, biometrics, and behavioral data throughout the employee and customer lifecycle. It integrates directly into existing IAM platforms and HRIS systems to provide high-assurance identity proofing without requiring a full infrastructure overhaul. The tool replaces manual verification processes with automated, compliant workflows that reduce friction while enhancing security.

Passport

Multi-Factor Authentication (MFA)

Enable fast, secure caller authentication using voice, device, and behavioral signals while reducing operational costs and average handle time.

Ping Identity

Identity & Access Management (IAM)

Ping Identity provides an enterprise IAM platform with PingOne for cloud-native deployments, PingFederate for federated SSO using SAML and OIDC, and hybrid support across on-premises and cloud environments. It processes 200M daily logins for over 60% of Fortune 100 companies, offering Zero Trust architecture through adaptive MFA via PingID, passwordless FIDO2/WebAuthn with YubiKey and platform authenticators, and policy-based authorization with PingAuthorize using ABAC. Best suited for large enterprises needing scalable identity governance, API access control via PingAccess, and directory services with PingDirectory for millions of identities.

We make cybersecurity a seamless part of everyday work.

An AI identity agent that automates access control tasks, handling requests, reviews, and revocations, rather than merely suggesting them.

Port0 is a network security platform with an integrations hub and connector framework, but the available public material does not show a dedicated Identity & Access Management (IAM) product. For an IAM buyer, it appears best fit only where identity data, access signals, or directory-related context need to be connected into a broader security graph. Its published content emphasizes integrations, live querying, and data fusion rather than core IAM functions such as SSO, provisioning, or MFA.

RADIUS

Identity & Access Management (IAM)

Cloud-hosted RADIUS authentication service with identity-based network access, certificate-based access and automation, 802.1X/MAB/passwordless authentication support.

TACACS+

Privileged Access Management (PAM)

Cloud-native, centrally managed network device administration with zero standing privileges, providing AAA services for network devices with granular admin controls and complete command auditing.

Primary

Identity & Access Management (IAM)

A Zero Trust Data Control Plane built from the ground up with the cybersecurity and encryption tools demanded by companies of all sizes.

Identity Threat Defense

Identity Threat Detection & Response (ITDR)

Illusive Networks, acquired by Proofpoint in 2024, is an identity threat detection and response (ITDR) platform that combines deception technology with identity risk management. The platform deploys decoy credentials, systems, and data artifacts to detect lateral movement and privilege escalation within compromised networks. Illusive serves enterprise organizations seeking to operationalize zero trust by protecting identity pathways to critical assets and enabling early breach detection through active engagement with threat actors.

Authenticator

Multi-Factor Authentication (MFA)

Private, secure 2FA authenticator app that generates one-time codes and syncs securely across devices.

Pass

Password Management

Privacy-focused password management solution with end-to-end encryption, secure credential sharing, and strong password generation for organizations.

QIDSecure

Non-Human Identity Security (NHI)

Replaces algorithmic randomness in AI agent credentials with quantum entropy for ephemeral key derivation and server-side gateway verification.

Quest Change Auditor

Identity Threat Detection & Response (ITDR)

At Quest Software, we create technology and solutions that build the foundation for enterprise AI. By focusing on data management and governance, cybersecurity, and platform modernization, we help organizations solve their most pressing challenges and turn the promise of AI into reality.

Radiant Logic

Identity Threat Detection & Response (ITDR)

RadiantOne is an identity security platform that unifies identity data from across an organization to provide real-time visibility, risk analysis, and automated remediation. The platform combines identity data management, analytics, and observability to improve identity hygiene, detect security risks, support compliance, and strengthen IAM programs. By creating a trusted, unified identity foundation, RadiantOne helps organizations reduce identity-related threats, streamline governance, and make data-driven security decisions.

RadiantOne

Identity Governance & Administration (IGA)

An AI-enabled identity data platform serving as the foundational data layer for identity security, governance, and access management across human, non-human, and agentic identities.

RapidIdentity (by Identity Automation)

Identity Governance & Administration (IGA)

RapidIdentity by Identity Automation is a cloud-based Identity and Access Management (IAM) platform specialized for K-12 education, managing the full digital identity lifecycle from account creation to deprovisioning for students, staff, partners, and vendors. It automates provisioning, deprovisioning, access governance, and credential monitoring across on-premises, SaaS, and cloud endpoints. Tailored for educational institutions, it integrates with systems like Jamf Connect for Apple device authentication and Clever for SSO, enabling role-specific access policies while supporting certifications like 1EdTech standards.

FusionID

Identity & Access Management (IAM)

Acts as an identity registrar, cleaning, matching, and governing identity data at the source so every downstream system works correctly.

RapidIdentity Authentication

Multi-Factor Authentication (MFA)

Provides multi-factor authentication methods that secure digital learning and administrative applications without slowing users down.

RapidIdentity Governance

Identity Governance & Administration (IGA)

Enforces district-wide policies with automated identity and access governance for educational institutions.

RapidIdentity ITDR

Identity Threat Detection & Response (ITDR)

Delivers flexible, institution-ready identity threat detection and response protection that integrates smoothly with existing technology.

RapidIdentity Lifecycle

Identity & Access Management (IAM)

Automates provisioning, deprovisioning, account changes, credential monitoring and access management for educational institutions at scale.

Identity & Access Governance

Identity Governance & Administration (IGA)

Ensures accounts are always secure and access privileges are kept to a minimum through continuous monitoring and automated control

Remediant

Privileged Access Management (PAM)

Remediant, acquired by Netwrix in 2022, provides SecureONE (now Netwrix Privilege Secure for Discovery), an agentless, vaultless Privileged Access Management (PAM) solution enforcing zero standing privileges. It discovers and removes always-on administrative access across servers and endpoints, delivering just-in-time privileged access via multifactor authentication. Targeted at small to midsize enterprises seeking lower-cost alternatives to CyberArk, it prevents lateral movement, offers real-time monitoring of standing privileges, and provides contextual insights for incident response. Pricing is approximately $22-25 per device.

Privilege Secure for Discovery

Privileged Access Management (PAM)

Uncover hidden privileged accounts with an agentless privileged account discovery tool that removes standing access in one click to stop lateral movement.

Governance & Lifecycle

Identity Governance & Administration (IGA)

Identity governance and administration platform that automates the full identity lifecycle from onboarding through offboarding while delivering continuous, AI-driven access governance.

ID Plus

Identity & Access Management (IAM)

Cloud identity and access management platform delivering complete authentication and access capabilities for government, finance, and high-assurance organizations operating across cloud, hybrid, and on-premises environments.

iShield Key 2

Multi-Factor Authentication (MFA)

Hardware security key providing phishing-resistant authentication through FIDO2 and PIV protocols with FIPS 140-3 Level 3 certification.

SecurID

Identity & Access Management (IAM)

On-premises authentication and identity management solution designed to secure access for financial services, government agencies, and other high-assurance organizations.

SafePaaS

Identity Governance & Administration (IGA)

The governance control fabric that shields identity, transactions, data and applications across the enterprise.

AccessPaaS

Identity Governance & Administration (IGA)

Identity governance and compliance automation platform that combines identity management with business controls to help organizations make better access decisions.

DataPaaS

Identity Governance & Administration (IGA)

Identity data management and analytics solution that cleanses, consolidates, and analyzes access information to detect risks and enable informed governance decisions.

Privileged Access Management

Privileged Access Management (PAM)

Enterprise privileged access management solution providing policy-driven privilege elevation with automated controls, session monitoring, and compliance reporting.

SailPoint

Identity Governance & Administration (IGA)

For over 20 years, SailPoint has helped the world's largest organizations secure and govern every identity, human, machine, and now AI.

Agentic Fabric

Non-Human Identity Security (NHI)

Discover, govern, and protect all AI agents through identity-centric security for non-human identities

Cloud Infrastructure Entitlement Management

CIEM

Simplifying cloud governance by extending identity security to cloud infrastructure and governing cloud entitlements across multi-cloud environments

Human Fabric

Identity Governance & Administration (IGA)

Identity is now the primary control plane for enterprise security, shifting organizations from static compliance to real-time human governance

Identity Security Cloud

Identity Governance & Administration (IGA)

The foundational platform for centralized identity security and governance

Non-Employee Risk Management

Identity Governance & Administration (IGA)

Extend identity security to third parties through processes tailored to business operations, securing contractors, vendors, and business partners

Password Management

Password Management

Enforce consistent, strong password policies across all applications and sources with centralized governance and self-service capabilities

Authentication Manager

Multi-Factor Authentication (MFA)

Enables smarter sign-ins and seamless handoffs across devices.

SSH Key Monitoring

Privileged Access Management (PAM)

Agentless tracking and auditing of SSH keys across Linux systems to prevent unauthorized access, detect compromised keys, and enforce SSH security policies.

Saviynt

Identity Governance & Administration (IGA)

Saviynt is on a mission to safeguard enterprises through intelligent, cloud-first identity governance & access management solutions.

Application Access Governance

Identity & Access Management (IAM)

Implement AI-driven app governance to secure critical apps, cut compliance costs, and prevent fraud.

External Identity Management

Identity & Access Management (IAM)

Simplify and accelerate secure access for external identities such as contractors, vendors, and temporary employees.

Identity Governance & Administration

Identity Governance & Administration (IGA)

Control risks for all identities and apps across your organization without compromising productivity.

Identity Security Posture Management

Identity Threat Detection & Response (ITDR)

Continuously discover and remediate identity risks, misconfigurations, and excessive access before they become threats.

Privileged Access Management

Privileged Access Management (PAM)

Secure privileged access for every identity, human, non-human, and AI, while achieving zero standing privilege.

Zuma

Non-Human Identity Security (NHI)

Discover, protect, and manage AI agents and non-human identities with an enterprise AI identity security platform.

Sectona

Identity & Access Management (IAM)

Sectona provides a modern infrastructure access layer for the new-age workforce to build, confidently access, and operate faster, more secure technology environments. As a leader in Privileged Access Management (PAM), Sectona helps mitigate the risk of privileged account abuse. Its integrated platform simplifies password and privilege management, enables just-in-time access, and enhances endpoint and remote security.

Cloud Access Management

Privileged Access Management (PAM)

Delivers identity-federated just-in-time privileged access to cloud resources, ensuring zero standing privileges

Endpoint Privilege Management

Privileged Access Management (PAM)

Eliminates local administrator rights on endpoints while allowing users to request elevated privileges on-demand through trust-based policies

Privileged Access Management

Privileged Access Management (PAM)

Centrally stores, manages, and rotates secrets and passwords with integrated access governance for cloud, on-premises, and hybrid environments

Securden Unified PAM

Privileged Access Management (PAM)

We stand for simplicity and affordability in cybersecurity

Endpoint Privilege Manager

Privileged Access Management (PAM)

Removes local admin rights without disrupting user experience while enforcing the principle of least privilege across Windows, macOS, and Linux endpoints.

Identity Governance & Administration

Identity Governance & Administration (IGA)

Delivers complete visibility, automated lifecycle management, and audit-ready compliance in a single, unified platform across identity and access governance.

Password Vault for Enterprises

Password Management

Enterprise-grade password management solution that centralizes credential storage, enforces security policies, and provides granular access controls.

Unified PAM

Privileged Access Management (PAM)

End-to-end PAM in one unified package with lightning-fast implementation and enterprise-grade security at competitive pricing.

SecureAuth

Multi-Factor Authentication (MFA)

We envision a world where more security doesn't equal more obstacles, where protection and experience work together.

Agent Authority

Non-Human Identity Security (NHI)

AI and machine identity security extending Zero Trust security principles to artificial intelligence agents and autonomous systems.

Assurance Authority

Identity Threat Detection & Response (ITDR)

Continuous risk monitoring utilizing intelligence-powered assessment that evaluates trustworthiness and modifies security responses dynamically.

B2B Authority

Identity & Access Management (IAM)

Partner and supplier identity management designed to manage intricate partner ecosystems with enterprise-grade identity controls.

Presence Authority

Identity Threat Detection & Response (ITDR)

User behavior assurance incorporating behavioral analytics to identify irregularities and maintain legitimate access validation throughout sessions.

Workforce Authority

Identity & Access Management (IAM)

Employee identity and secure access providing modern access management that anticipates compromise and adjusts dynamically.

SecurEnds

Identity Governance & Administration (IGA)

Govern every identity across your enterprise. Automate user access reviews, enforce least privilege, and simplify compliance.

Identity Governance & Administration

Identity Governance & Administration (IGA)

Governs every identity that can act across your environment from employees and contractors to service accounts, APIs, and AI agents, ensuring every identity is visible, controlled, and accountable.

Segura

Identity & Access Management (IAM)

Segura is a leader in Privileged Access Management (PAM), delivering security that's fast, simple, and powerful, without the complexity.

Cloud Entitlements

CIEM

Provides maximum visibility and control over permissions in multi-cloud environments by discovering, managing, and securing IAM entitlements.

MySafe

Password Management

Enterprise password manager that securely stores, protects, manages, and audits business credentials in a centralized vault.

PAM Core

Privileged Access Management (PAM)

Discovers, secures, and audits every privileged account and password across cloud, on-premises, and hybrid environments.

Privileged Infrastructure

Privileged Access Management (PAM)

Purpose-built, security-hardened appliance that delivers the highest levels of security, scalability, and availability for PAM implementations.

Segura (senhasegura)

Privileged Access Management (PAM)

Segura is a leader in Privileged Access Management (PAM), delivering security that's fast, simple, and powerful, without the complexity.

Cloud Entitlements

CIEM

A Cloud Infrastructure Entitlements Management solution that delivers maximum visibility and control over permissions in multi-cloud environments (AWS, Azure, GCP, Oracle Cloud).

Endpoint Privilege Manager

Privileged Access Management (PAM)

Eliminates permanent local administrator rights and substitutes them with temporary, audited elevation for approved applications across Windows and Linux endpoints.

MySafe

Password Management

An enterprise-grade password manager that provides centralized, secure credential management for organizations seeking to eliminate unsafe password-sharing practices while maintaining compliance visibility.

Privileged Access Management

Privileged Access Management (PAM)

A modern Privileged Access Management solution built for fast deployment and complete control, offering just-in-time access, credential management, and comprehensive session recording with behavioral analytics.

Semperis

Identity Threat Detection & Response (ITDR)

As cybersecurity leaders and Active Directory (AD) experts, we know that identity-first security is the key to operational resilience.

Directory Services Protector

Identity Threat Detection & Response (ITDR)

Hybrid AD threat prevention, detection, and response with continuous monitoring and automatic rollback of malicious changes.

Identity Runtime Protection

Identity Threat Detection & Response (ITDR)

AI-powered attack detection for identity-based threats including password spray, brute force, and anomalous logons.

Sharelock

Identity Threat Detection & Response (ITDR)

Unmatched visibility. Unwavering protection. Break down silos and unify identity security. Protect every digital identity, everywhere, against all threats.

Identity Security Posture Management

Identity Governance & Administration (IGA)

Close the gaps before they log in through continuous identity discovery and autonomous remediation.

Identity Threat Detection

Identity Threat Detection & Response (ITDR)

They have the password, but they don't have the behavior, detects credential misuse and privilege escalation through behavioral AI.

Siber Systems, Inc. (RoboForm)

Password Management

RoboForm alleviates the burdens associated with password management by remembering and generating passwords, automatically logging into websites, and even completing long online checkout forms with a single click.

RoboForm

Password Management

Centralized password management that makes onboarding, support, auditing, and offboarding simple and secure.

Silverfort

Identity Threat Detection & Response (ITDR)

Silverfort secures every dimension of identity. We break down the silos of identity infrastructure and point solutions to eliminate security gaps and blind spots once and for all. The result? Identity security without limits, that doesn't slow down the business.

Access Intelligence

Identity Governance & Administration (IGA)

Provides comprehensive visibility and analysis of access paths across an organization's entire identity infrastructure to uncover hidden risks and enforce least privilege policies.

Authentication Firewall

Identity Threat Detection & Response (ITDR)

An identity security solution that harnesses identity-based deny to control access across enterprise resources and block malicious authentication attempts in real time.

Identity Graph & Inventory

Identity Governance & Administration (IGA)

Consolidates all identities across hybrid environments into a single source of truth, mapping their access permissions and relationships to surface security risks.

Identity Security Posture Management

Identity Governance & Administration (IGA)

Automatically discovers identity misconfigurations and security weaknesses across hybrid environments, then provides prioritized remediation guidance to reduce organizational risk.

Identity Threat Detection and Response

Identity Threat Detection & Response (ITDR)

Detects and blocks identity-based threats across hybrid environments in real time by analyzing authentication flows and responding inline before compromises can escalate.

Non-Human Identity Security

Non-Human Identity Security (NHI)

Automatically discovers, monitors, and enforces access controls across all non-human identities like service accounts and AI agents to prevent unauthorized lateral movement.

Privileged Access Security

Privileged Access Management (PAM)

Automatically discovers, classifies, and protects all privileged identities while enforcing least privilege and just-in-time access policies without requiring traditional vault infrastructure.

Universal Multi-Factor Authentication

Multi-Factor Authentication (MFA)

Extends MFA protection to every resource in an organization including legacy applications, command-line tools, and local Windows logins without modifying them.

Smallstep

Identity & Access Management (IAM)

Smallstep provides a Device Identity Platform that enables high-assurance Zero Trust security through automated, short-lived PKI certificates and device-bound authentication. It streamlines authentication workflows to eliminate phishing risks and password dependency by ensuring only managed, healthy devices can access sensitive resources. The solution replaces legacy static credential systems and complements existing SSO providers with granular device-level visibility.

ACME Device Attestation

Non-Human Identity Security (NHI)

IETF standard for high-assurance device identity using hardware co-processors for attestation and key binding.

Sonrai Security

CIEM

Sonrai Security provides a CIEM platform that analyzes identities, entitlements, and resource relationships across AWS, Azure, and GCP to identify excessive access and misconfigurations. It uses an identity graph to map effective permissions and toxic permission combinations, enabling cloud security, IAM, and compliance teams to discover privilege risks and enforce least privilege. The Cloud Permissions Firewall automates real-time restriction of unused permissions and dormant identities based on actual usage. Extended with CWPP via Sonrai Dig, it links workload vulnerabilities to identity paths for prioritized remediation, distinguishing it from visibility-only CIEM tools.

Cloud Permissions Firewall

Privileged Access Management (PAM)

One-click solution to least privilege without disrupting DevOps

WALLy

Non-Human Identity Security (NHI)

Your cloud identity security teammate

SpecterOps

Identity Threat Detection & Response (ITDR)

SpecterOps provides BloodHound Enterprise, a platform dedicated to identifying and remediating Attack Path Management (APM) risks within Active Directory and Azure workloads. It focuses on the 'Identity Gap' by mapping complex relationship chains that attackers use to escalate privileges and move laterally. The platform replaces manual red-team discovery of identity misconfigurations with continuous, automated visibility into privilege escalation paths.

BloodHound Enterprise

Identity Threat Detection & Response (ITDR)

An identity attack path management platform that enables organizations to advance from mapping to eliminating attack paths with an enterprise platform that scales.

Spikerz

Identity & Access Management (IAM)

Spikerz is the digital marketing security platform built for modern brands, marketing teams, and security leaders.

Account Takeover Protection

Identity & Access Management (IAM)

Eliminates shared credentials, locks down 2FA, and gives marketing teams secure access while detecting both internal and external security threats to social accounts

Permissions Management

Identity & Access Management (IAM)

Gives complete visibility and control over who can access social media accounts across multiple platforms in a centralized dashboard

User Behavior Analytics

Identity Threat Detection & Response (ITDR)

Uses machine learning to analyze the behavior of users, devices, and applications to detect unusual or anomalous activities including insider threats and compromised accounts.

Consumer Threat Protection

Identity Threat Detection & Response (ITDR)

Detects exposed consumer identity data, revokes tokens, and triggers step-up authentication to prevent unauthorized account access before fraud occurs.

Identity Guardians

Identity Threat Detection & Response (ITDR)

Automatically detects and remediates compromised credentials and stolen sessions by integrating with Active Directory, Entra ID, and Okta to protect workforce identities.

Session Identity Protection

Identity Threat Detection & Response (ITDR)

Detects stolen session cookies and tokens from malware and phishing attacks to disrupt session hijacking attacks before they lead to account takeover and fraud.

Workforce Threat Protection

Identity Threat Detection & Response (ITDR)

Continuously monitors criminal sources to detect exposed employee credentials and stolen session cookies, then automatically revokes compromised sessions to prevent account takeover attacks.

Stack Identity

CIEM

Stack Identity provides a unified identity access risk management platform with integrated CIEM and ITDR for human and machine identities across multi-cloud and multi-SaaS environments. It delivers asset inventory, lifecycle management, observability, and remediation for cloud identity and database entitlements. The platform continuously monitors for identity posture risks, account takeovers, privileged access abuse, and lateral movement threats, mapping pathways to ransomware and data exfiltration. Best suited for enterprises needing to consolidate CIEM, IGA, and ITDR workflows with real-time risk context and integrations like Jira, Slack, PagerDuty, SIEM, and SOAR.

Identity Threat Detection & Response

Identity Threat Detection & Response (ITDR)

Addresses identity-based attacks targeting both users and services.

StrongDM

Identity & Access Management (IAM)

Delinea and StrongDM extend privileged access management into a continuous, real-time authorization model, with a single identity security control plane.

Stytch

Identity & Access Management (IAM)

Stytch is on a mission to help developers protect their applications and make auth that's simple and scalable so that teams can stay focused on building differentiated products.

Swissbit

Multi-Factor Authentication (MFA)

Swissbit is a leading provider of storage and security solutions for industrial and IoT applications.

iShield Key 2

Multi-Factor Authentication (MFA)

An all-in-one security key for digital and physical access supporting phishing-resistant FIDO2 authentication

Syteca

Identity & Access Management (IAM)

Intelligent PAM with built-in ITDR

PAM

Privileged Access Management (PAM)

Provides auditable access management for SSH, Kubernetes, databases, and other privileged resources with just-in-time access and session auditing.

Teleport

Identity & Access Management (IAM)

We deliver trusted computing to modern infrastructure

Identity Governance

Identity Governance & Administration (IGA)

Automates provisioning, approvals, access reviews, and continuous monitoring, purpose-built for engineering infrastructure at scale.

Identity Security

Identity Threat Detection & Response (ITDR)

Monitors and analyzes identity activity across infrastructure, cloud, and code environments to detect suspicious behaviors like privilege escalation and lateral movement.

Machine & Workload Identity

Non-Human Identity Security (NHI)

Issues cryptographic identities to non-human actors in infrastructure, bots, CI jobs, containers, VMs, and services, replacing static credentials with short-lived, dynamically-issued certificates and tokens.

Thales SafeNet

Multi-Factor Authentication (MFA)

Thales SafeNet is an enterprise MFA and access management platform combining authentication, SSO, and policy enforcement across on-premises, cloud, and virtual environments. The portfolio includes hardware tokens (eToken, smart cards, FIDO2 security keys), software authenticators, and the cloud-based SafeNet Trusted Access service. SafeNet serves large organizations requiring high-assurance authentication across distributed infrastructure, with particular strength in government and regulated sectors through FIPS 140-2 and Common Criteria certifications.

OneWelcome Identity Platform

Identity & Access Management (IAM)

Unified cloud-based platform that manages customer, business, gig worker, and workforce identities while balancing security with user convenience.

SafeNet Trusted Access

Multi-Factor Authentication (MFA)

Cloud-based access management service enabling organizations to expand multi-factor authentication coverage across all users and applications with intelligent single sign-on capabilities.

Identity Threat Detection & Response

Identity Threat Detection & Response (ITDR)

Unifies endpoint and identity telemetry to detect and stop identity-based attacks before they become breaches, detecting credential theft and token abuse.

Adapt Multi-Factor Authentication

Multi-Factor Authentication (MFA)

Managed enterprise-grade authentication service providing second-factor verification and identity verification across organizational applications with self-service enrollment and risk-based access policies.

Token Security

Non-Human Identity Security (NHI)

We are on a mission to secure the autonomous enterprise. As AI agents evolve from simple assistants to independent actors, Token Security provides the identity lifecycle and intent-based access management required to securely turn AI potential into a competitive advantage.

Tools4ever

Identity Governance & Administration (IGA)

Tools4ever is a Dutch software company. We develop innovative and standardized Identity Governance & Administration (IGA) software. Simply put: security-related solutions.

HelloID

Identity & Access Management (IAM)

Cloud-based Identity and Access Management solution that automates user lifecycle management, access control, and identity governance with integrated provisioning, service automation, access management, and governance modules.

NIM

Identity & Access Management (IAM)

On-premises enterprise Identity and Access Management solution designed for complex, large-scale environments with powerful customization, unlimited scalability, and support for 150+ system integrations.

Transmit Security

Multi-Factor Authentication (MFA)

Transmit Security is an enterprise identity vendor whose MFA capabilities are delivered through its Mosaic platform, which combines passwordless authentication, biometrics, and step-up controls for customer-facing logins. In the MFA category, it is best known for FIDO-based authentication and app-less biometric methods that reduce password dependence while supporting high-assurance access. Its core buyers are large enterprises in regulated sectors such as banking, insurance, and retail that need strong customer authentication across web and mobile channels. The company also sells adjacent CIAM and fraud-prevention capabilities, but those are outside this profile’s scope.

Mosaic Authentication

Multi-Factor Authentication (MFA)

Passwordless, multi-factor, and risk-based authentication in one easy-to-use platform

Mosaic User Management

Identity & Access Management (IAM)

Cloud-native solution to manage and unify user identities at scale

TruffleHog Analyze

Non-Human Identity Security (NHI)

The identity intelligence layer that maps verified secrets to the non-human identities behind them and their associated access contexts.

Identity Firewall

Privileged Access Management (PAM)

Replace static SSH keys and standing admin access with short-lived, audited access for engineers and infrastructure.

Digital Identity and Access Management

Identity & Access Management (IAM)

Identity-centric security approach with passwordless authentication, single sign-on, role-based access controls, and gap analysis to mitigate insider threats

Unixi

Identity & Access Management (IAM)

Unixi is an IAM vendor focused on extending single sign-on and access control to browser-based SaaS applications that traditional SAML/SCIM integrations do not cover. Its platform is positioned around "universal SSO" for unmanaged apps, with emphasis on passwordless authentication, SaaS discovery, and role- or group-based access control. It is best suited to organizations that have significant shadow SaaS, shared accounts, or app sprawl and want to reduce dependence on per-application integrations while keeping an existing IdP such as Okta or Microsoft Entra.

Access Management

Identity & Access Management (IAM)

Enable central control over app access and permissions for unmanaged applications without API integrations.

Discovery

Identity & Access Management (IAM)

Map identities and uncover Shadow SaaS applications bypassing IT oversight through browser-based visibility.

Lifecycle Management

Identity & Access Management (IAM)

Automate user provisioning and deprovisioning across SaaS applications with centralized inventory management.

Risk Analysis

Identity & Access Management (IAM)

Surface security threats including weak passwords, credential reuse, and anomalous login patterns.

Shadow AI Governance

Identity & Access Management (IAM)

Detect unauthorized AI tool adoption and enforce access controls to prevent corporate data exposure.

Universal SSO

Identity & Access Management (IAM)

Enable single sign-on for any browser-based SaaS application without integrations or passwords.

Identity Threat Detection and Response

Identity Threat Detection & Response (ITDR)

Monitors human and non-human identities to deliver high-fidelity detection and response for SaaS threats including account takeovers and privilege escalations.

Personnel and Access

Identity & Access Management (IAM)

Centralizes personnel management, access control, and device security to streamline onboarding/offboarding and maintain audit-ready compliance.

Venice

Identity & Access Management (IAM)

Venice was founded to make PAM work - today.

Venice Security provides a just-in-time (JIT) access platform designed to eliminate permanent standing privileges across hybrid environments. Its Valkyrie platform utilizes live, adaptive policies to grant temporary access to both human and non-human identities (NHI) without the need for agents or infrastructure disruption. It serves as a modern replacement for legacy static vaulting and manual ticketing workflows by automating the lifecycle of ephemeral credentials.

Veza from ServiceNow

Identity Threat Detection & Response (ITDR)

Veza is the authorization platform for data. Built for hybrid, multi-cloud environments, Veza enables organizations to easily understand, manage and control who can and should take what action on what data.

Omnissa Access

Identity & Access Management (IAM)

Simplify identity and access management by enforcing access based on device posture and user identity.

Total Identity Security

Identity Threat Detection & Response (ITDR)

Identity threat detection and response platform that monitors what every identity, human, non-human, and AI agent, actually does with sensitive data across SaaS and AI ecosystems.

Agent Identity

Non-Human Identity Security (NHI)

Runtime cryptographic identity system for autonomous AI agents that issues OIDC/SPIFFE-compatible identities with short-lived credentials per tool call and continuous attestation.

WALLIX Bastion

Privileged Access Management (PAM)

WALLIX provides cybersecurity solutions for simple, secure and trusted access, to protect digital and industrial environments.

IAG

Identity Governance & Administration (IGA)

Provides a comprehensive mapping of identities to their respective permissions, enabling organizations to simplify governance and automate compliance through centralized access control.

IDaaS

Identity & Access Management (IAM)

Streamlines access, fortifies security, and elevates user experience across in-house or cloud applications through Single-Sign-On, Multi-Factor Authentication, and Zero Trust frameworks.

ONE

Identity & Access Management (IAM)

A security-on-demand SaaS platform that provides identity and access management services with zero-trust security capabilities.

PAM

Privileged Access Management (PAM)

Manages and secures privileged accounts within an organization's IT and OT environments by controlling access, monitoring activities, and enforcing credential integrity.

Web Session Manager

Privileged Access Management (PAM)

Extends PAM to browser-based access by providing secure session management from web browsers.

AuthPoint

Multi-Factor Authentication (MFA)

The identity layer of the Unified Security Platform that protects user access with multi-factor authentication and passwordless authentication across multiple environments

WideField Security

Identity Threat Detection & Response (ITDR)

WideField Security provides automated visibility and real-time response capabilities for Non-Human Identities (NHIs) and AI agents across hybrid environments. The platform focuses on detecting session-based threats and unauthorized identity-driven movements that traditional IAM tools miss. It complements IAM and PAM solutions by providing a layer of detection and response specifically for automated and machine-based identities.

Identity Profile Engine

Identity Threat Detection & Response (ITDR)

Mathematically distinguishes human from non-human identities, calculates blast radius potential, and detects behavioral anomalies.

Agent ID

Identity & Access Management (IAM)

An identity and access management solution providing first-class identity for AI agents with context-aware policies and secure Model Context Protocol interactions.

Identity Server

Identity & Access Management (IAM)

The developer-first identity and access management platform designed to secure humans, apps, and AI agents everywhere with an API-first architecture.

Security Token Service

Identity & Access Management (IAM)

A specialized token engine serving as a central trust anchor that exchanges, transforms, and brokers identities across any domain to secure microservices, APIs, and AI agents.

Extended Privileged Access Management

Privileged Access Management (PAM)

An agentless, Zero Trust privileged access management platform that delivers immediate protection across IT, OT, and cloud environments without the complexity of legacy PAM solutions.

Identity and Access Exposures

Identity Threat Detection & Response (ITDR)

Prevents identity-based attacks by continuously mapping and eliminating excessive permissions and misconfigurations.

Xton Access Manager (XAM)

Privileged Access Management (PAM)

Xton Access Manager (XTAM) is an agentless Privileged Access Management platform from Xton Technologies, providing AES-256 encrypted vault for privileged accounts, passwords, certificates, keys, and secrets. It supports secure browser-based or native client sessions (PuTTY, SecureCRT, MSTSC) to Windows, Unix, Linux, Mac, and network devices, with session recording, monitoring, joining, and termination. Includes job engine for automated task execution without secret disclosure. Designed for MSPs with multitenant hierarchy, on-premise, cloud, or hybrid deployment within firewalls, integrating with Active Directory or LDAP.

Yubico

Multi-Factor Authentication (MFA)

Yubico sells hardware security keys for **multi-factor authentication** and passwordless sign-in. Its YubiKey line supports phishing-resistant login across modern and legacy environments using standards such as FIDO2/WebAuthn, FIDO U2F, OTP, smart card, and OpenPGP, with variants that add biometrics or PIN use. Yubico is best suited for organizations that want portable, hardware-backed second factors for workforce, admin, and high-assurance user access. The company also offers adjacent authenticator software, but its core MFA value is the security key itself.

Yubico Authenticator

Multi-Factor Authentication (MFA)

The safest authenticator app experience across mobile and desktop with hardware-backed security through integration with YubiKey devices

YubiKey 5 Series

Multi-Factor Authentication (MFA)

The world's #1 multi-protocol security key offering FIDO2/WebAuthn, U2F, Smart card, OpenPGP, and OTP support

YubiKey as a Service

Multi-Factor Authentication (MFA)

Enterprise-grade subscription service offering hardware-backed phishing-resistant authentication at scale for global workforces and customers

YubiKey Bio Series

Multi-Factor Authentication (MFA)

The gold standard in biometric authentication in the age of AI, combining biometric authentication with robust encryption technology

Compromised Credential Monitoring

Identity & Access Management (IAM)

Continuously scans stealer markets and dark web forums to detect exposed employee, executive, and vendor credentials, enabling security teams to respond before attackers exploit them.

Identity Segmentation

Identity & Access Management (IAM)

Restrict Admin & Service Account Access to Operational Needs Only - automatically discovers and restricts privileged accounts, service accounts, and admin access to operational needs while enforcing multi-factor authentication on sensitive logons.

Zoho Vault

Identity & Access Management (IAM)

Zoho Vault is Zoho’s cloud password manager positioned for identity and access management use cases centered on credential storage, controlled sharing, and single sign-on. In IAM terms, it is best suited for small to mid-sized organizations that want to manage privileged and team passwords alongside basic access controls without deploying a separate identity suite. The product exposes SAML-based SSO, MFA, password policies, access restrictions, emergency access, and audit trails. Zoho also bundles Vault with adjacent IAM functions in Zoho Directory and Zoho Workplace, but Vault itself focuses on credential-centric access administration.

Directory

Identity & Access Management (IAM)

Identity and access management for organizational user management

OneAuth

Multi-Factor Authentication (MFA)

Multi-factor authentication and secure authentication

Vault

Password Management

Secure password management and credential storage for teams

Privileged Remote Access

Privileged Access Management (PAM)

Enables secure, controlled, clientless remote access as a zero trust alternative to legacy PAM solutions with credential vault and JIT access.