Stop insider threats & account takeover

1

12Port

PAM

Agentless privileged access for every identity.

A

Account Takeover Protection

ITDR

Learns normal sign-in, device, and behavioral patterns for each user to detect and mitigate email account takeovers, then locks out attackers through session revocation and credential resets.

A

Identity Threat Protection

ITDR

Uses behavioral AI to detect identity-based attacks that evade traditional security tools, identifying hijacked sessions, abused OAuth grants, and privilege misuse that rules and risk scores miss.

A

Above Security

Insider Threat Detection

AI-native insider risk workflows for detecting, investigating, and preventing threats before they escalate.

A

Access Auditor (by Clear Skye)

IGA

Identity governance built where your business already runs, natively on the ServiceNow Platform.

A

Admin By Request

PAM

Admin By Request is a privileged access management vendor focused on removing standing local administrator rights while allowing controlled elevation when needed. Its PAM offering is centered on endpoint privilege elevation, request/approval workflows, session auditing, and policy-based control of elevated activity. The product is best suited for Windows, macOS, and Linux environments where IT teams want to reduce local admin exposure without blocking legitimate software installs or support tasks. It also integrates with ServiceNow for request handling, but its core scope is endpoint PAM rather than vault-centric secrets management.

A

Aembit

Non-Human Identity (NHI)

Our vision is to provide a digital world where every business can safely build its applications by inherently trusting how they connect to partners, customers, and foundational services. The result: You can build, deliver and maintain better applications that support and empower your customers, without the frustration and exposure risks that come with boldly crossing borders.

A

Account Protector

Fraud & Account Takeover Prevention

Keep fraudsters out and trust intact with account abuse protection that defends against account opening abuse, account takeover, and sophisticated bot attacks.

A

Bot Manager

Fraud & Account Takeover Prevention

Stop the most dangerous, evasive bots before they erode customer trust by detecting and managing bot traffic at the edge.

A

Privileged Access Management

PAM

Controls and monitors access to sensitive systems and data by users with elevated privileges using zero-trust principles and just-in-time access with automatic credential rotation.

A

Apono

IAM & SSO

Apono is a cloud access management vendor positioned in IAM around just-in-time and least-privilege access for human and non-human identities. Its platform replaces standing privileges with access created at request time, enforced with policy guardrails, and revoked automatically. Apono is best suited for cloud-first teams that need granular control across AWS, Azure, GCP, Kubernetes, databases, and SaaS-connected environments, especially where privileged access and access review must be tightly managed.

A

Agent Privilege Guard

Non-Human Identity (NHI)

Manages and controls AI agent access to sensitive resources by eliminating standing privileges and providing ephemeral, task-scoped credentials.

A

Infrastructure Guard

PAM

Secures privileged access to on-premises and hybrid infrastructure including databases, Kubernetes, and compute resources.

A

Privileged Cloud

PAM

Extends zero standing privileges across cloud platforms (AWS, Azure, GCP) using provider-native language for dynamic access control.

A

Agent Identity Security

Non-Human Identity (NHI)

Governs AI agent privileges and identities to stop privilege misuse and compliance violations in agent deployments.

A

Cloud Governance

IGA

A dynamic module that offers visibility into unnecessary rights and access while maintaining compliance with regulatory standards without affecting developer processes.

A

Endpoint Privilege Management

PAM

Enforces just-in-time privileged access to endpoints using Zero Trust and Least Privilege principles with centralized governance and security controls across Windows, Linux, and macOS systems.

A

Arcon PAM

PAM

ARCON PAM is an enterprise-class privileged access management solution designed for hybrid, multi-cloud, and distributed datacenter environments. The platform centralizes control of privileged accounts across heterogeneous IT infrastructure through a unified admin console and secure gateway server. ARCON PAM targets IT security, risk, and compliance teams managing complex privilege lifecycles in organizations with DevOps and cloud-native workloads requiring fine-grained access controls and comprehensive audit trails.

A

Single Sign-On

IAM & SSO

Enables employee access to multiple systems and applications through single authentication.

A

Arkose Labs

Fraud & Account Takeover Prevention

Arkose Labs provides fraud detection and prevention focused on account fraud, bot abuse, credential stuffing, fake account creation, and automated abuse across web and mobile touchpoints. Its platform combines real-time risk scoring with challenge-response enforcement to distinguish legitimate users from suspicious sessions and to raise the cost of abuse. The product is best suited for consumer-facing digital businesses such as ecommerce, financial services, and online platforms that need to stop automated and human-operated fraud without blocking valid traffic. Arkose also advertises AI-agent policy enforcement, but its core value in this category is adaptive fraud deterrence and step-up authentication.

A

Astrix Security

Non-Human Identity (NHI)

Discover, secure, and deploy AI agents responsibly across the enterprise

A

Aurigin

ITDR

Aurigin.ai enables proof of ownership and authenticity for all sensitive communication devices and digital content.

A

AuthGrid.ai

IAM & SSO

AuthGrid is an identity investigation and decision layer for flagged privileged or IT-provider accounts. It is designed to establish who owns an account, verify the activity, decide who may act and record the outcome. The product is currently a pre-production interactive demonstration on fictional data, and live Microsoft Entra data is planned.

A

Authomize

IGA

Authomize provides an AI-native Identity Governance and Administration (IGA) platform focused on continuous discovery, mapping, and governance of human and machine identities across cloud and on-premises environments. It delivers real-time visibility into permissions, entitlements, and access risks, automating remediation through policy enforcement and self-service workflows. Best suited for enterprises with complex multi-cloud infrastructures seeking to mitigate identity-based threats without disrupting operations. Authomize positions itself as a modern alternative to legacy IGA, emphasizing agentless integration and ML-driven risk prioritization for mid-to-large organizations.

A

Identity and Access Management

IAM & SSO

Securely manage identities and access to AWS services and resources

B

Data Protection

DLP

Prevent PII leaks, prompt injections, and data exfiltration through centralized policy enforcement.

B

Data Inspector

DLP

Automatically scans OneDrive for Business and SharePoint for sensitive information and malicious files to secure environments against improperly-stored sensitive data.

B

RealityCheck

Fraud & Account Takeover Prevention

Makes AI impersonation fraud impossible by verifying user identity and device trustworthiness before any call or chat.

B

Secure Access Platform

IAM & SSO

An identity security solution that defends against identity-based attacks through phishing-resistant MFA, device trust, and continuous access control.

B

Secure Customers

IAM & SSO

A customer authentication solution delivering frictionless, phishing-resistant authentication across every browser, device, and application.

B

Secure SSO

IAM & SSO

The only SSO built to eliminate identity risk by using phishing-resistant device-bound credentials and continuous risk evaluation.

B

BeyondTrust

PAM

BeyondTrust fights every day to secure identities, intelligently remediate threats, and deliver dynamic access to empower and protect organizations around the world. Our vision is a world where all identities and access are protected from cyber threats.

B

Access Intelligence

IAM & SSO

An enterprise credential security solution that helps businesses identify credential risks, prioritize critical applications, guide employees through password updates, and track security improvements across their organization.

B

Access Broker

PAM

Extends cloud-native PAM capabilities to hybrid and on-premises environments, delivering ephemeral access to critical infrastructure without standing privileges.

B

Access Builder

PAM

Cloud access provisioning platform that enables self-service access profile creation and automated approval workflows while maintaining zero standing privileges through ephemeral permissions.

B

Cloud Identity Security & Governance

IGA

Platform component for centralized, automated identity governance that integrates with identity providers and eliminates standing privileges across multi-cloud environments.

B

JIT Permissioning

PAM

Delivers true, ephemeral just-in-time permissions by dynamically creating and assigning cloud permissions on-demand, then automatically revoking them upon task completion.

B

Secure DevOps & Automations

PAM

Cloud-native privileged access management solution for DevOps teams and CI/CD pipelines that delivers ephemeral access for automation without hardcoded secrets.

B

Broadcom

DLP

Broadcom Symantec Data Loss Prevention (DLP) is an enterprise-grade information protection platform that discovers, monitors, and prevents unauthorized transmission of sensitive data across endpoints, networks, cloud applications, and databases. The solution serves large enterprises requiring comprehensive data visibility and policy enforcement across hybrid environments. DLP 25.1 is positioned for organizations managing complex compliance requirements including GDPR, HIPAA, and PCI-DSS, with particular strength in preventing data exfiltration through endpoint agents and network detection servers.

C

Alterya

Fraud & Account Takeover Prevention

AI-powered fraud prevention

C

KYT

Fraud & Account Takeover Prevention

Monitor transactions in real-time for compliance

C

Data Loss Prevention

DLP

Blocks sensitive data in outbound web traffic from leaving your organization by analyzing traffic inline and out-of-band.

C

CLEAR

IAM & SSO

CLEAR is an identity verification vendor that extends existing IAM stacks by adding biometric and document-based identity proofing at authentication and authorization points. In the IAM category, it is best known for validating that the person behind a login is real and matches authoritative identity evidence, rather than relying only on passwords, devices, or recovery factors. Its IAM offering is positioned for organizations that need stronger access assurance for high-risk workflows such as workforce access, healthcare, and regulated environments. CLEAR’s broader platform also serves consumer and travel identity use cases, but its IAM value is centered on verified human access.

C

Data Loss Prevention

DLP

Prevents unauthorized data exfiltration by monitoring and controlling sensitive information across networks and applications.

C

Discovery & Inventory (Non-Human Identities)

Non-Human Identity (NHI)

Map every Non-Human Identity to the people and systems behind it

C

Posture & Risk Management (Non-Human Identities)

Non-Human Identity (NHI)

Analyze and mitigate Non-Human Identity risks to strengthen security posture and ensure compliance

C

Threat Detection & Response (Non-Human Identities)

Non-Human Identity (NHI)

Detect anomalous identity behavior and respond with full context

C

Corma

IGA

Corma is a cloud based identity governance and SaaS access management platform for IT, security and finance teams at growing organizations. It centralizes visibility into the applications an organization uses, including unauthorized or shadow software, and automates the joiner mover leaver lifecycle so access is provisioned and revoked without manual tickets. Security teams use it to run access reviews and certification audits aligned to SOC 2 and ISO 27001, while finance and IT teams track software licenses and renewals from the same console. Employees can request access through a self service catalog with role based approval workflows. The platform targets companies of roughly 50 to 1000 employees and integrates with identity providers such as Google Workspace and Microsoft Entra ID.

C

CoSoSys (Endpoint Protector)

DLP

One of the world's leading developers of cross-platform Data Loss Prevention (DLP), eDiscovery, and Device Control solutions

C

Fraud Detection System

Fraud & Account Takeover Prevention

Real-time traffic analysis platform that detects malicious behaviors including bot activity, spoofed IPs, and automated attacks using IP reputation and behavior patterns

C

Falcon Next-Gen Identity Security

ITDR

Continuously discovers identity risk, validates access, enforces least privilege, and stops identity-based attacks across human, non-human, and AI identities.

C

Curity

IAM & SSO

Curity was founded by identity specialists who had spent years working with identity and access management in large organizations. During that time, we saw a consistent challenge. Traditional IAM systems were designed for login portals and monolithic applications, while modern digital services were increasingly built on APIs, distributed systems and open identity standards. Organizations needed a different approach.

C

Access Intelligence

ITDR

Provides runtime control over API access for AI agents, services, and machines through scoped, temporary access tokens and continuous authorization evaluation.

C

CyberArk (Palo Alto Networks)

PAM

the next-generation identity security platform that discovers, controls and governs your human and agentic workforce

C

Cyberhaven

DLP

Cyberhaven protects data across human and agentic workflows, adapting protection to changing context.

C

ITDR

ITDR

Identity Threat Detection and Response solution that monitors identity systems like Active Directory and Microsoft Entra ID to detect credential misuse and automate incident response.

C

Omni DLP

DLP

AI-driven data loss prevention that reduces alert fatigue with centralized decision intelligence by correlating signals across channels.

C

Payment Fraud Intelligence

Fraud & Account Takeover Prevention

Real-time intelligence that uncovers fraud campaigns before they hit through monitoring of compromised cards and dark web engagement.

C

Identity Security

ITDR

Secure every user. Protect every identity with real-time identity threat detection and response.

D

IDENTITY

ITDR

Unify your identity security with proactive risk management, real-time threat detection, and autonomous response

D

Sensitive Data Scanner

DLP

Automatically discovers, classifies, and redacts sensitive information across logs, traces, and events in real-time at scale.

D

DataDome

Fraud & Account Takeover Prevention

DataDome provides real-time fraud detection and bot management for web applications, mobile apps, public APIs, and MCP servers. In the fraud-prevention market, it is positioned around stopping account takeover, fake account creation, credential stuffing, card testing, and other automated abuse before requests reach the backend. The product classifies each request as human, bot, or trusted partner using request-level signals, device and browser data, and behavioral models. It is best suited for e-commerce, marketplaces, fintech, and other businesses where automated abuse directly affects customer accounts, checkout flows, and dispute volume.

D

DATAPATROL

DLP

DataPatrol is a next-generation software company innovating in the security and privacy of your organization's data and information. Data security is paramount, which is why DataPatrol uses innovative, easy-to-use solutions to protect sensitive, highly confidential data from disclosure to unauthorized parties.

D

Anti Copy

DLP

Administrative control tool for managing text copy functionality to prevent clipboard access and data duplication.

D

MobileMark

DLP

Advanced Android app that embeds a persistent watermark on device screens for mobile data security and traceability.

D

Printing Watermark

DLP

Protects documents by embedding dynamic, user-specific watermarks into all printed materials.

D

PrintScreen Prevention

DLP

Security solution designed to prevent unauthorized screen capture activities and third-party screen recording.

D

Screen Watermark

DLP

Software designed to prevent data leaks within organizations using custom watermarks on the screen.

D

WebMark

DLP

Web-based watermarking solution that seamlessly adds custom watermarks to websites to protect sensitive online content.

D

Delinea (formerly ThycoticCentrify)

PAM

Delinea, formed in 2021 from the merger of Thycotic and Centrify and backed by TPG Capital, provides privileged access management (PAM) solutions for securing privileged accounts, credentials, and access to servers, applications, databases, and cloud infrastructure. Available as cloud-native or on-premises deployments via a centralized dashboard, it supports hybrid enterprises with products including Secret Server for credential vaulting, Privilege Manager for endpoint controls, and Privileged Behavior Analytics for threat detection. Serves over half of Fortune 100 companies, financial institutions, and critical infrastructure, focusing on password rotation, session monitoring, and just-in-time access.

D

Fastpath Access Control

IGA

Enables organizations to examine access permissions across business applications and identify Segregation of Duties conflicts to reduce security risks.

D

Identity Threat Protection

ITDR

Proactively detect and address identity-related threats by delivering high-quality insights into the most vulnerable identities to reduce the impact of compromise.

D

Descope

IAM & SSO

Descope is a customer and agentic identity platform that fits within Identity & Access Management by handling authentication, authorization, single sign-on, MFA, and tenant-aware access controls for web, mobile, partner, and third-party applications. It is aimed at teams building B2C and B2B apps that need configurable identity journeys without assembling separate components for login, federation, and user management. Descope also supports delegated administration, audit trails, SCIM sync, and connector-based integrations for related identity workflows. Its strongest fit is for product and security teams managing external identities at scale.

D

Behavior Analytics

ITDR

Helps uncover anomalous user and entity behavior throughout your organization, delivering next-level risk context across the entire MITRE ATT&CK framework.

D

DigiCert

IAM & SSO

Trust built for the AI age

D

Digital Guardian

DLP

Fortra brings an AI-powered cybersecurity platform to enable safe AI usage and protect against AI-driven threats.

D

Dtex InTERCEPT

Insider Threat Detection

DTEX is the leader in risk-adaptive security, unifying human, data, and AI risk through a behavioral intelligence platform built for enterprise scale to detect threats early and prevent breaches.

E

Prevent

DLP

Stop accidental and malicious data loss

E

Web Form

DLP

Secure data submission

E

Entro Security

Non-Human Identity (NHI)

Entro is an NHI (Non-Human Identity) and Secret security platform that focuses on the lifecycle and governance of AI agents, service accounts, and API keys. The solution provides visibility into the "secret behind the identity," mapping connections between machines to reduce identity sprawl and mitigate risks of secret leakage. It replaces manual discovery scripts and siloed secrets management tools with a unified governance engine for the automated enterprise.

E

Evidian

IAM & SSO

Evidian Orbion recognized as a complete IAM, Cloud based (SaaS) Solution

F

Distributed Cloud Bot Defense

Fraud & Account Takeover Prevention

Stop malicious bots and AI agents with real-time detection that protects apps, APIs, and user experiences.

F

Falkin

Fraud & Account Takeover Prevention

Falkin combines early threat intelligence, AI and 1st party user data to surface scam operations from even a single suspicious interaction. Our mission is simple: to make scams preventable and proactive digital safety a standard feature of everyday banking. We can help everyday consumers detect signs of danger in online purchases, messages, investment offers, phone calls, emails and more.

F

Wrapsody eCo

DLP

Unified platform for secure external document collaboration with real-time sync, versioning, and audit trails.

F

Feedzai

Fraud & Account Takeover Prevention

Feedzai provides fraud detection and prevention for banks, fintechs, and payment providers using real-time decisioning across cards, RTP, ACH, transfers, digital banking, and account opening. The platform combines behavioral biometrics, device identity, malware detection, and network-level fraud intelligence to score sessions and transactions before authorization or account action completes. Feedzai is positioned as an end-to-end financial crime platform, but for this category the focus is on fraud and scam prevention rather than AML workflow. It fits institutions that need low-latency scoring, explainable alerts, and models that adapt to changing fraud patterns.

F

Feitian

IAM & SSO

Established in 1998, FEITIAN Technologies is a leading global provider of cyber security products and solutions.

F

Identity Exposure Management

ITDR

Continuously monitors for compromised credentials and stolen session tokens across the dark web and other sources, then automates validation and remediation to prevent account takeovers before attackers can exploit them.

F

Fraud Intelligence

Fraud & Account Takeover Prevention

Helps you detect and prevent financial fraud before it impacts your business by monitoring dark web marketplaces and underground communities for stolen credentials, compromised payment cards, and illicit cryptocurrency activities.

F

Formal

PAM

Formal is a modern identity and access proxy that governs interactions between users, AI agents, and sensitive infrastructure like databases, Kubernetes, and SSH. It functions as a just-in-time access layer that provides visibility and control over data access without the friction of legacy PAM vaults. The platform is designed for the modern cloud stack, enabling visibility into 'who accessed what' down to the query or command level.

F

Forter

Fraud & Account Takeover Prevention

AI built for the humans behind every fraud, abuse, and payments decision, so your best customers feel less friction, and you leave no revenue behind.

F

Foxpass

PAM

Foxpass Cloud RADIUS and Cloud PKI make it simple to protect your Wi-Fi and VPN connections with identity- and certificate-based authentication. No hardware. No local servers.

F

Fraud.net

Fraud & Account Takeover Prevention

Fraud.net provides transaction fraud detection and prevention for digital enterprises, with a focus on e-commerce, travel, and financial services. Its platform scores transactions in real time, uses rules and machine-learning models to flag suspicious activity, and can block or hold payments for review before authorization completes. Fraud.net is positioned for organizations that need low-latency fraud controls across online payment flows and want to use shared fraud signals, device and behavioral data, and case review workflows. Adjacent capabilities such as case management and broader risk tooling exist, but the core value here is real-time fraud interception.

F

Fudo Security

IAM & SSO

Fudo Security, a global leader in Privileged Access Management (PAM) and Zero Trust Remote Access solutions, is transforming how organizations secure critical infrastructure and sensitive systems.

F

FusionAuth

IAM & SSO

FusionAuth helps developers meet authentication feature and compliance requirements so they can focus on building their application. It was built by wicked smart developers for wicked smart developers with developer control, flexibility, and ergonomics through the roof.

G

GitGuardian

IAM & SSO

GitGuardian protects the enterprises against leaked secrets and mismanaged identities.

G

Gradient Technologies

IAM & SSO

Gradient for Users replaces traditional MFA with a one-click, passwordless experience that users and admins love. A simple SaaS plugin to your existing Single Sign On (SSO).

G

GTB Technologies

DLP

GTB Technologies provides content-aware Data Loss Prevention (DLP) platform covering data at rest, in motion, and in use across on-premises, cloud, and off-network endpoints. It performs real-time inspection and classification of outbound/inbound transmissions via all protocols, using patented fingerprinting for exact and partial content matches at binary and text levels. Key components include Network DLP, Endpoint Protector, Data Discovery with classification, Content-Aware DRM, and Stealthfence for Shadow IT. Best suited for enterprises needing comprehensive channel coverage, enforcement actions like blocking exfiltration, and compliance with regulations via 100% catch rates on fingerprinted data.

H

HashiCorp Boundary

PAM

HashiCorp Boundary is an identity-driven privileged access management solution that brokers secure, just-in-time access to infrastructure resources including Linux/Windows hosts, databases, and Kubernetes clusters without exposing credentials or network routes. Positioned as a modern alternative to traditional PAM tools, Boundary appeals to organizations managing hybrid and multi-cloud environments who prioritize infrastructure-as-code automation and Zero Trust principles. Best suited for DevOps-oriented teams and enterprises seeking self-hosted control with deep infrastructure integration capabilities.

H

Heimdall Data

PAM

We're redefining database access from the ground up

H

Heimdal PAM

PAM

Heimdal PAM is a privileged access management solution designed for mid-market to enterprise organizations seeking simplified admin rights governance without traditional PAM complexity. The platform enforces least-privilege access through three core modules: Privileged Account and Session Management (PASM), Privilege Elevation and Delegation Management (PEDM), and Application Control. Heimdal differentiates through automatic user rights de-escalation upon threat detection, integrated with their Next-Gen Antivirus engine, and just-in-time privilege provisioning that eliminates standing admin credentials.

H

HID Global

IAM & SSO

HID Global is a long-established enterprise identity vendor with IAM offerings centered on strong authentication, credential lifecycle management, PKI, FIDO, passkeys, and SSO. In this category, it is strongest in regulated and high-assurance environments that need to link workforce identity with physical access and certificate-based authentication. Its IAM portfolio spans cloud, on-premises, and hybrid deployment models, with options for government, enterprise, and converged physical/IT identity use cases. Adjacent physical security and RFID products exist, but the IAM scope focuses on authentication, identity proofing, and credential management.

H

Hilt

DLP

Hilt is a data movement governance platform that detects anomalous data transfers across cloud workloads, endpoints, SaaS environments, and AI agents. Its kernel-level collectors correlate process activity, identities, destinations, and transfer patterns to identify potential data exfiltration, insider threats, and unauthorized data movement, even when individual actions appear legitimate. Hilt uses metadata-only monitoring by default and supports runtime response, including host isolation and endpoint transfer blocking. It deploys within the customer's own cloud environment, keeping telemetry under customer control.

H

Hitachi ID Bravura Privilege

PAM

Hitachi ID Bravura Privilege is an enterprise-grade PAM solution that automates password randomization across over a million accounts daily, supports geo-redundant credential vaulting, and enables frictionless, time-limited access for thousands of users, applications, and systems. It integrates agentlessly with clients, servers, hypervisors, databases, and cloud/on-premise applications. Part of the Bravura Security Fabric IAM platform, it combines PAM with identity governance for unified policy enforcement, access certifications, and compliance reporting. Best suited for large enterprises managing hybrid infrastructures with high-volume privileged access needs.

I

IDdriven

IGA

IDdriven provides Identity Governance and Administration (IGA) solutions focused on automating identity lifecycle management for mid-sized enterprises. Their platform consolidates identity data from on-premises directories, SaaS applications, and cloud services, enabling policy-based access provisioning, certification campaigns, and compliance reporting. Best suited for organizations in regulated industries like finance and healthcare seeking cost-effective IGA without extensive customization. IDdriven emphasizes quick deployment through pre-built connectors to Active Directory, SAP, and major HR systems, supporting role-based access control (RBAC) and separation of duties (SoD) enforcement.

I

IDEMIA Public Security

IAM & SSO

Building mission-critical solutions powered by biometrics and cryptography.

I

Incode Technologies

IAM & SSO

Incode Technologies delivers an automated identity verification and authentication platform centered on high-assurance biometric liveness. It utilizes proprietary AI to process global identity documents and facial biometrics to ensure a real human is present, effectively neutralizing deepfake-based spoofing. The solution replaces manual KYC/onboarding workflows and complements existing IAM stacks by providing a stronger root-of-trust for high-risk transactions.

I

InnerActiv

Insider Threat Detection

InnerActiv is an insider risk management platform that combines endpoint monitoring with behavioral analytics to protect sensitive data. It tracks user interaction with files, applications, and hardware like printers or USB drives to detect intent-based data exfiltration. The platform provides visibility into 'the human element' of data protection, complementing traditional DLP and SIEM tools by providing forensic-level screenshots and sessions logs of suspicious activity.

I

Iru

IAM & SSO

Iru’s IAM product is **Workforce Identity**, a passwordless workforce access platform focused on securing employee sign-in and application access. It sits inside a broader IT and security suite, but its IAM scope centers on replacing passwords with hardware-backed passkeys, single sign-on, and context-aware access decisions. The product is aimed at organizations that want stronger workforce authentication without adding friction for employees or IT admins, especially teams standardizing on modern device-managed environments. Public materials position it as part of Iru’s integrated identity, endpoint, and compliance platform rather than a standalone IAM-only vendor.

J

Jazz

DLP

Jazz is an AI-native Data Loss Prevention platform that utilizes Large Language Models (LLMs) to understand the context and business intent behind data movement. Unlike legacy DLP which relies on rigid regex or static rules, Jazz focuses on "meaning" to identify exfiltration and insider threats across SaaS, web, and endpoint. It aims to eliminate the excessive false positives typically associated with enterprise DLP deployments while protecting sensitive IP.

J

JumpCloud

IAM & SSO

JumpCloud provides a cloud directory platform for IAM, centralizing user identities and extending access to devices, applications, files, networks, and servers across cloud, on-premises, and hybrid environments. It integrates with Active Directory as the authoritative source, using protocols like LDAP, SAML, RADIUS, SSH, and REST for federation. Features include automated provisioning/deprovisioning, role-based access control, SSO, MFA with TOTP and push notifications, and MDM for device policies, patch management, and remote wipe. Best for SMBs and mid-market organizations migrating from on-premises directories to cloud IAM without infrastructure.

K

Keyfactor

IAM & SSO

Keyfactor is best known for machine identity and PKI automation, but in IAM terms it sits in the identity layer for non-human identities: certificates, SSH keys, and code-signing trust. Its core fit is for enterprises that need to discover, issue, rotate, revoke, and govern machine credentials across hybrid infrastructure and DevOps pipelines. Keyfactor is strongest where IAM overlaps with certificate lifecycle management and authentication for services, devices, and applications rather than workforce SSO or directory management. It also supports on-premises, hybrid, and SaaS deployment models, which suits regulated environments with mixed PKI estates.

K

Keystrike

IAM & SSO

Keystrike is an intent-based security platform for governing AI agents and critical systems

K

Kiteworks

DLP

Kiteworks (formerly Accellion) provides a Private Data Network that unifies and secures sensitive content communications across email, file sharing, SFTP, and MFT. It provides a hardened virtual appliance and centralized management to ensure compliance with standards like CMMC, GDPR, and HIPAA. The platform replaces fragmented, unmanaged file sharing methods with a single, audited platform for data in motion and at rest.

K

KoCyber

Insider Threat Detection

KoSkills measures how an organization's people behave under attack and assigns training based on each user's live risk score. The platform includes phishing simulations in Arabic and English, risk-based training assignment, and compliance reporting. It is built Arabic-first for banks and fintechs in the MENA region.

L

LayerMind

DLP

LayerMind is a privacy tool that automatically masks passwords, API keys, and personal data before they are submitted to AI tools and websites. It scans prompts in near real-time across tabs and apps, and alerts users to password leaks, malicious extensions, and malicious websites. It is free for personal use.

L

LexisNexis Risk Solutions

Fraud & Account Takeover Prevention

LexisNexis Risk Solutions provides fraud detection and prevention products focused on new-account fraud, identity misuse, synthetic identity, and application fraud. Its Fraud Intelligence and ThreatMetrix offerings combine identity events, device and behavioral data, and application signals to score risk in real time and flag suspicious transactions or registrations for review. It is best suited to banks, card issuers, lenders, telecom providers, utilities, and other organizations that need decisioning at onboarding and during account lifecycle management. Adjacent identity verification and compliance products exist, but the fraud portfolio is the relevant scope here.

L

Linx Security

ITDR

Linx Security provides unified visibility and governance across the entire identity lifecycle, focusing on both human and non-human identities (NHI). The platform maps the relationship between users, permissions, and accounts across SaaS, cloud, and on-premises environments to identify security gaps. It proactively remediates excessive permissions and identifies orphan accounts that could be exploited in identity-based attacks.

L

Lumos

IGA

Lumos is an autonomous identity governance platform that automates application access management across an organization's SaaS ecosystem. It discovers applications and identities, streamlines access requests and approvals, automates provisioning and deprovisioning, enforces least-privilege access, and provides centralized visibility into user permissions. By reducing manual identity operations and improving governance, Lumos helps organizations strengthen security, simplify compliance, and improve employee productivity through automated access lifecycle management.

M

ManageEngine Endpoint DLP Plus

DLP

ManageEngine Endpoint DLP Plus is an enterprise-grade endpoint data loss prevention solution that scans network endpoints to discover and classify structured and unstructured sensitive data using pre-defined or customizable templates. It monitors data-in-use, data-at-rest, and data-in-motion across endpoints via a centralized web console, enforcing policies to block unauthorized uploads to cloud storage, email transmissions to unpermitted addresses, and peripheral device access like USBs and printers. Designed for large organizations with distributed setups including WAN and mobile users, it supports GDPR compliance through incident management, user behavior analytics, and detailed audit reports. Best suited for enterprises needing comprehensive endpoint DLP in Windows environments.

M

ManageEngine PAM360

PAM

ManageEngine PAM360 is a unified Privileged Access Management platform that centralizes governance of privileged credentials, sessions, and accounts across IT infrastructure for humans and non-human entities. It stores credentials in an encrypted vault with automated rotation, enforces Just-In-Time elevation, and provides session recording with command filtering. Trusted by over 5000 organizations and government agencies, it suits enterprises needing comprehensive PAM with endpoint privilege management, behavioral anomaly detection via AI/ML, and role-based access controls. Best for mid-to-large IT teams managing hybrid environments with strict compliance requirements.

M

Account Security

ITDR

Identifies account takeovers and contains their impact through deep integration with cloud office infrastructure to prevent lateral movement and data theft.

M

File Security

DLP

Detects sensitive content in files and automatically remediates excessive permissions and inappropriate sharing without disrupting team collaboration.

T

McAfee (Trellix)

DLP

Trellix is a global cybersecurity company delivering intelligence-led cyber resilience for security-conscious organizations at any stage in their journey.

M

Account Takeover & Digital Impersonation Protection

Fraud & Account Takeover Prevention

Real-time detection, protection, and disruption of digital impersonation attacks and account takeover fraud threats.

M

AI Adaptive DLP

DLP

Automatic, real-time AI-based detection and masking of sensitive data without blocking file usage.

M

Metacrowd Corp.

Fraud & Account Takeover Prevention

Metacrowd Corp. offers AI-based security and copyright protection services. Its main offering, VoiceShield, analyzes live call content and voice patterns to detect voice phishing and deepfake voices, and the company also provides deepfake forensics, AI-involvement analysis for documents, news provenance tracking and voice-based two-factor authentication.

M

Metomic

DLP

Metomic is AI data security for enterprise SaaS, the control plane for sensitive data across every SaaS tool and every AI surface. We find it, fix it, and prove it. Content-level scanning inside Slack, Jira, Confluence, Drive, SharePoint, Salesforce, and more. Automated remediation that revokes sharing, redacts PII, notifies owners, and coaches users at the point of risk. Metomic Cleanser delivers a redacted copy of sensitive content that's safe for an LLM to consume.

M

Entra

IAM & SSO

Unified identity and network access solution that secures access for workforce, customer, and agentic identities to any AI, apps, data, and multicloud resources.

M

Microsoft Entra ID (formerly Azure Active Directory)

IAM & SSO

Microsoft Entra ID is a cloud-based identity and access management service, formerly Azure Active Directory, providing directory services, authentication, and authorization for Microsoft 365, Azure, Dynamics 365, and third-party SaaS applications. It supports single sign-on via work or school accounts for cloud and on-premises apps. Key security includes conditional access policies, risk-based authentication using machine learning on trillions of signals, and identity protection in P2 tier. Market leader in hybrid IAM for enterprises using Microsoft ecosystems, ideal for organizations needing centralized identity governance across multitenant environments.

M

Microsoft Purview Data Loss Prevention

DLP

Microsoft Purview Data Loss Prevention provides a unified policy engine for identifying, monitoring, and protecting sensitive data across Microsoft 365 workloads including Exchange, SharePoint, OneDrive, Teams, endpoints, and Microsoft 365 Copilot. Policies leverage sensitive information types, trainable classifiers, and Exact Data Match for detection, with actions like blocking sharing, policy tips, and audit logging. Managed via the Microsoft Purview compliance portal, it syncs enforcement to cloud apps and network traffic. Best for enterprises deeply integrated with Microsoft ecosystems seeking native DLP without third-party tools.

M

Incydr

DLP

Insider threat detection and data loss prevention platform that monitors and protects sensitive data across endpoints, cloud, and collaboration tools

M

Mimoto

ITDR

Mimoto uses behavioural AI to continuously verify that the person interacting with a system is who they're supposed to be, rather than relying solely on credentials or initial authentication.

M

MIND

Insider Threat Detection

MIND is a data security platform that integrates Data Loss Prevention (DLP) with Insider Risk Management (IRM) using an AI-native approach. It automates the detection and protection of sensitive data at rest and in motion across SaaS, GenAI tools, and endpoints. The vendor aims to replace legacy, high-maintenance DLP solutions with an 'autopilot' system that reduces false positives and manual policy tuning.

M

Miniorange

IAM & SSO

miniOrange has established itself as a cybersecurity leader in identity, data security, and privacy, helping organizations protect human and non-human identities, safeguard sensitive data, and secure AI systems across today's digital landscape. Our expertise also includes offering new-age security solutions for popular CMS and project management platforms like Atlassian, WordPress, Joomla, Drupal, Shopify, BigCommerce, and Magento.

M

Miru Labs

ITDR

Miru is an AI-native insider threat detection and prevention platform that protects organizations from data loss, Shadow AI risks, and malicious insider activity across SaaS environments and endpoints. Founded by cybersecurity veterans with deep expertise in counterintelligence and nation-state threat detection, Miru replaces legacy UEBA and SIEM tools with an identity-anchored architecture that automates investigation workflows and eliminates alert fatigue. The platform combines browser-based telemetry with integrations to identity providers, development platforms, and productivity suites to deliver real-time behavioral analytics and automated response capabilities. Miru enables security teams at high-growth technology companies and enterprises to detect anomalous access patterns, unauthorized data exfiltration, and policy violations without adding headcount, providing the investigation intelligence and endpoint protection modern distributed workforces require.

M

Insider Threat Prevention Platform

Insider Threat Detection

Cloud and endpoint observability platform with behavioral intelligence and autonomous investigation to detect and prevent insider threats including AI leakage, data exfiltration, and privilege escalation.

N

Passportal

PAM

Cloud-based solution that empowers safe privileged access management while helping create, manage, and automate strong credentials.

N

Natoma

Non-Human Identity (NHI)

Natoma, now part of Snowflake, is an AI agent security platform that enables enterprises to securely deploy and govern AI agents. Built around a hosted Model Context Protocol (MCP) platform, it provides enterprise-grade authentication, fine-grained authorization, policy enforcement, and governance for AI agents accessing enterprise applications and data. With flexible deployment options and support for 100+ pre-built MCP servers, Natoma helps organizations safely connect AI agents to internal tools while maintaining visibility, security, and compliance.

N

Data Loss Prevention

DLP

Comprehensive data loss prevention solution that protects sensitive data through Netskope's unified platform, preventing unauthorized data disclosure and maintaining information security across organizational networks and cloud services.

N

Netwrix

IGA

Netwrix provides a SaaS-based Identity Governance and Administration (IGA) platform, primarily through Netwrix Identity Manager (formerly Usercube), automating identity lifecycle management across hybrid IT environments. It handles provisioning, deprovisioning, access reviews, and policy enforcement for joiner-mover-leaver processes. The solution builds role catalogs mapping technical entitlements to business roles, detects toxic role combinations and Segregation of Duties (SoD) conflicts, and generates compliance reports. Best suited for mid-to-large enterprises needing scalable IGA for Active Directory, Azure AD, and multi-system access governance to enforce least privilege and support audits.

N

Identity Manager

IGA

Identity governance and administration platform that automates identity lifecycles, streamlines access control, and simplifies compliance across hybrid environments.

N

Privilege Secure

PAM

Privileged Access Management solution that eliminates standing privileges by providing just-in-time access, monitoring privileged activity, and removing credentials immediately after use.

N

Threat Manager

ITDR

Real-time threat detection and response solution across identity and file systems to stop ransomware, identity attacks, and insider threats before escalation.

N

NewCore

IAM & SSO

NewCore is a workforce identity platform positioned for IAM use cases across humans and non-human identities. Its published materials emphasize identity discovery, SSO, MFA, lifecycle management, directory services, and inline policy enforcement, with support for deploying alongside an existing IdP rather than replacing it. It appears best suited to enterprise security and identity teams that need to unify access control for employees and AI agents, especially where browser-based authentication, agent governance, and token-based access control are in scope.

N

Identity Discovery

IGA

Consolidates fragmented identity data from multiple systems into a unified view, connecting every human, AI agent, system, app, and access path in one live graph.

N

Nightfall AI

ITDR

AI-native data loss prevention and insider threat detection platform that discovers, classifies and protects sensitive data across SaaS, GenAI, endpoint and email. Detects unauthorized uploads, shadow AI usage, exfiltration and policy violations in real-time using ML-based classifiers, replacing legacy DLP and UEBA with autonomous behavioral monitoring and prevention before data loss happens.

N

Data Detection & Response

DLP

A cloud-native security solution that detects and prevents sensitive data exposure across SaaS applications in real time.

N

Data Discovery & Classification

DLP

Discovers and classifies sensitive data across SaaS applications to find and eliminate years of accumulated data exposure.

N

Data Exfiltration Prevention

DLP

Prevents sensitive data from leaving organizations across endpoints, SaaS applications, and AI tools through real-time monitoring and automated blocking.

N

MCP & AI Agent Security

DLP

Provides visibility, detection, and control over Model Context Protocol servers and AI agent activities to prevent sensitive data exposure.

N

Nyx

DLP

An AI-powered DLP analyst with investigative judgment that detects and responds to data security threats through intelligent pattern recognition and contextual analysis.

O

Oak

IAM & SSO

Oak is an AI-native identity operating system focused on Identity & Access Management for enterprises that need to govern human, machine, and AI-agent identities in one control plane. It builds a live identity graph from raw evidence, then uses that graph to manage access, detect permission drift, and drive real-time remediation. Oak appears positioned for enterprise CISOs and IAM teams modernizing from periodic reviews to continuous identity governance. The company came out of stealth in July 2026, is generally available, and has publicly described enterprise deployments and a $60M seed round.

O

Oasis Security

Non-Human Identity (NHI)

Oasis Security provides an identity control plane specifically designed for non-human identities (NHI) and machine identities such as service accounts, API keys, and secrets. The platform automates the discovery of unmanaged machine identities across hybrid and multi-cloud environments, mapping their access to critical resources to identify over-privilege. It complements traditional IAM by providing automated lifecycle management and remediation for secret rotation and short-lived credentials.

O

Offroad

IAM & SSO

Offroad is a newly launched **agentic identity security platform** that sits in the IAM-adjacent identity security layer rather than a classic SSO or directory product. According to its site and launch coverage, it helps enterprises move from identity visibility to identity resolution by investigating, governing, remediating, and verifying identity risk across human users, machine identities, OAuth applications, service accounts, and AI agents. It appears best suited for security and identity teams that need evidence-driven analysis of access and ownership issues across distributed systems.

O

Okta

IAM & SSO

Okta is a cloud-based Identity and Access Management (IAM) platform that provides centralized identity governance, authentication, and authorization across on-premises, hybrid, and cloud environments. The vendor serves mid-market to enterprise organizations requiring SSO, MFA, and lifecycle management at scale. Okta is positioned as a foundational identity layer for hybrid infrastructure, with particular strength in organizations managing complex multi-application access across dispersed user bases.

O

Auth0

IAM & SSO

Okta is The World's Identity Company™. We provide cloud-based identity and access management (IAM) solutions that securely connect the right people to the right technologies at the right time.

O

Customer Identity Cloud

IAM & SSO

Build secure customer identity experiences that drive growth and protect user data

O

Oleria

IGA

Oleria is an autonomous identity security platform that centralizes visibility into human and machine permissions across SaaS, IaaS, and on-premises environments. It leverages AI to provide fine-grained visibility into 'who has access to what' and automates access reviews and rightsizing to maintain a state of least privilege. The solution replaces legacy, static IGA tools with a dynamic trust model that adapts to changing organizational needs.

O

Adaptive Identity Governance

IGA

Enables organizations to deploy governance in hours rather than years through AI-native access intelligence and automation.

O

Identity Security

IGA

Provides unified discovery, governance, and security of identities across human users, non-human identities, and AI agents in hybrid IT environments.

O

Identity Security Posture Management

IGA

Continuously discovers, monitors, and remediates identity security gaps to strengthen security posture.

O

Omada

IGA

Omada Identity provides full-featured Identity Governance and Administration (IGA) solutions, including on-premises and SaaS (Omada Identity Cloud) deployments for managing identity lifecycles, access requests, certifications, and compliance reporting. It supports hybrid/multi-cloud environments, ITSM integrations, and granular visibility into user access patterns. Key capabilities include risk-based access control, account reconciliation, and Segregation of Duties (SoD) policy enforcement. Best suited for enterprises requiring policy-driven governance to handle complex workflows, mitigate risks, and ensure regulatory compliance without multiple disparate tools.

O

Identity

IGA

On-premises Identity Governance and Administration solution providing secure digital identities for all users, applications, and data with high configurability.

O

Identity Cloud

IGA

Cloud-based Identity Governance and Administration solution that streamlines identity workflows through intelligent automation with 90-day time to value.

O

Identity Cloud Private

IGA

Enterprise-grade Identity Governance and Administration deployed in customer's own Azure tenant with complete tenant ownership for regulated enterprises.

O

One Identity

IGA

One Identity provides Identity Manager, an enterprise-grade IGA platform unifying governance for users, applications, data, and privileged accounts across on-premises, hybrid, and cloud environments. It excels in automated identity lifecycle management, including provisioning and deprovisioning for SaaS and hybrid apps, with SAP-certified controls for SAP-centric organizations. Key strengths include attestation workflows, self-service access requests via shopping-cart interface, consolidated governance for regular and privileged accounts, and compliance reporting. Best suited for large enterprises needing visibility into access usage, behavior-driven policy insights, and regulatory audit support in complex hybrid IT landscapes.

O

Safeguard

PAM

One Identity Safeguard is an on-premises and SaaS Privileged Access Management (PAM) suite that centralizes storage, rotation, and release of privileged credentials across systems, devices, and applications. It automates role-based access approvals, monitors and records privileged sessions with protocol inspection and indexing for audits, and integrates with One Identity Manager for Privileged Access Governance including attestation and SoD enforcement. Targeted at enterprises needing hybrid deployment options and Zero Trust just-in-time access, it supports diverse environments like UNIX root and Windows Administrator accounts while providing tamper-proof audit trails.

O

OneLogin (a product of One Identity)

IAM & SSO

OneLogin is a cloud-first Identity and Access Management (IAM) platform acquired by One Identity in 2024, providing single sign-on (SSO) and access control for workforce, customer, and partner identities. The platform supports both cloud and on-premises deployments with integration into One Identity's broader Unified Identity Security Platform alongside Privileged Access Management (PAM), Identity Governance (IGA), and Active Directory Management solutions. OneLogin serves enterprises requiring consolidated identity verification and real-time suspicious login monitoring across hybrid environments.

O

CIAM (Customer Identity and Access Management)

IAM & SSO

Secures customer identities and delivers seamless, customised sign-in experiences for consumer-facing applications.

O

Desktop

IAM & SSO

Extends identity to the endpoint: users log in once to reach every app in the OneLogin Portal, and with Desktop Pro sign into Windows or Mac with their OneLogin password via an installed certificate.

O

Directory

IGA

Cloud directory-as-a-service that synchronises users from Workday, Active Directory, LDAP and G Suite via connectors installed without firewall changes.

O

OneLogin Access

IAM & SSO

Replaces legacy access management tools with single-click access to both SaaS and on-premise applications from any device through the OneLogin portal.

O

Single Sign-On (SSO)

IAM & SSO

Users enter one set of credentials to access web apps in the cloud and behind the firewall, across desktops, smartphones and tablets. Pre-integrated with thousands of web applications.

C

Oort

ITDR

Cisco delivers the critical infrastructure to help organizations thrive in the AI era. By fusing networking, security, observability, and collaboration, we power how people and technology work together.

O

Opnova

IAM & SSO

Opnova's agentic AI bridges disconnected apps and automates the high-friction tasks no integration could reach before. The result: tighter access controls, faster provisioning, and an IAM program that finally works end-to-end.

O

Opti

IGA

Opti is an AI-native identity security platform that helps enterprises discover, govern, and secure human and non-human identities across applications, cloud environments, and enterprise systems. Its AI-powered engine analyzes permissions, roles, and access behaviour to identify excessive privileges, automate access reviews, enforce least privilege, and remediate identity risks. Opti also streamlines identity lifecycle workflows, access provisioning, and compliance evidence, while extending identity governance and runtime risk monitoring to AI agents and their integrations.

O

Optimal IdM

IAM & SSO

Optimal IdM is a global provider of innovative and affordable identity access management solutions.

O

Agentic DLP Platform

DLP

The unified agentic DLP platform that understands the full context behind every data movement, across every surface, to deliver accurate and actionable data loss prevention.

O

Osirium PAM

PAM

Osirium PAM is a Privileged Access Management platform that brokers and audits privileged sessions to servers, network devices, and security infrastructure via a gateway model. It enforces least privilege by separating users from credentials stored in an encrypted vault, with automated rotation and just-in-time access. Supports 150+ target devices, session recording with keylogging and screen capture, real-time shadowing, and privileged behavior analytics. Integrates with ServiceNow, SAML2 SSO, and multi-Active Directory. Best for organizations managing third-party access and heterogeneous IT environments requiring compliance with ISO27001 and Cyber Essentials.

P

P0 Security for Machines

Non-Human Identity (NHI)

Centralized, policy-driven governance for non-human identities including service accounts, workloads, and agents with unified lifecycle management and automated credential rotation.

P

Cortex ITDR

ITDR

Identity threat detection and response paired with unified XDR data for comprehensive identity security.

P

Idira

PAM

Next-generation identity security platform that discovers, controls and governs human and agentic workforce.

P

Data Loss Prevention

DLP

Safeguard against data leaks caused by human error or malicious insider threats, with automatic content scanning and policy enforcement

P

Pentestiverse

DLP

PrivaLLM Prime is a Pentestiverse product that lets users chat with several AI models, including Claude, ChatGPT, Gemini, DeepSeek and Perplexity. It is designed to keep user data out of third-party AI services. Pentestiverse also offers LLM and application red teaming, secure architecture, security trainings and custom micro apps.

P

Permiso Security

ITDR

Permiso Security provides a unified platform combining Identity Security Posture Management (ISPM) and Identity Threat Detection and Response (ITDR) for human, non-human, and AI identities across AWS, Azure, Okta, M365, GitHub, Jira, Salesforce, and Snowflake. It continuously monitors identity activities, performs behavioral analysis to detect anomalies like credential compromise, account takeover, and insider threats, and executes automated responses such as account lockdown and adaptive authentication. Permiso excels in runtime tracking across IaaS, SaaS, and IdPs, reducing MTTD and MTTR for organizations with hybrid cloud environments managing diverse identity types.

P

Persona

IAM & SSO

Persona provides an identity verification (IDV) platform that automates the collection and verification of government IDs, biometrics, and behavioral data throughout the employee and customer lifecycle. It integrates directly into existing IAM platforms and HRIS systems to provide high-assurance identity proofing without requiring a full infrastructure overhaul. The tool replaces manual verification processes with automated, compliant workflows that reduce friction while enhancing security.

P

Pindrop

Fraud & Account Takeover Prevention

Pindrop is a cybersecurity company delivering the Real Human + Right HumanTM platform with continuous identity verification and deepfake detection across voice, video, and digital communications in real time.

P

Protect

Fraud & Account Takeover Prevention

Reduce fraud and better protect customer accounts with near real-time fraud risk assessments throughout the call lifecycle.

P

Pulse for Contact Centers

Fraud & Account Takeover Prevention

Enable contact center agents to identify synthetic voices and deepfake audio threats in just two seconds.

P

Pulse for Meetings

Fraud & Account Takeover Prevention

Identify AI-generated voice and video in virtual meetings while verifying participant authenticity across Zoom, Webex, and Microsoft Teams.

P

Ping Identity

IAM & SSO

Ping Identity provides an enterprise IAM platform with PingOne for cloud-native deployments, PingFederate for federated SSO using SAML and OIDC, and hybrid support across on-premises and cloud environments. It processes 200M daily logins for over 60% of Fortune 100 companies, offering Zero Trust architecture through adaptive MFA via PingID, passwordless FIDO2/WebAuthn with YubiKey and platform authenticators, and policy-based authorization with PingAuthorize using ABAC. Best suited for large enterprises needing scalable identity governance, API access control via PingAccess, and directory services with PingDirectory for millions of identities.

P

Pistachio

ITDR

We make cybersecurity a seamless part of everyday work.

P

Presence

Insider Threat Detection

An intelligent layer of protection for your cloud-based organization that detects insider threats by analyzing user actions across cloud environments.

P

Luna

IAM & SSO

An AI identity agent that automates access control tasks, handling requests, reviews, and revocations, rather than merely suggesting them.

P

Port0

IAM & SSO

Port0 is a network security platform with an integrations hub and connector framework, but the available public material does not show a dedicated Identity & Access Management (IAM) product. For an IAM buyer, it appears best fit only where identity data, access signals, or directory-related context need to be connected into a broader security graph. Its published content emphasizes integrations, live querying, and data fusion rather than core IAM functions such as SSO, provisioning, or MFA.

P

Primary

IAM & SSO

A Zero Trust Data Control Plane built from the ground up with the cybersecurity and encryption tools demanded by companies of all sizes.

P

Enterprise DLP

DLP

Prevent data loss across email, cloud, and endpoints through detection and prevention of significant data loss risks using an adaptive, human-centric approach.

P

Identity Threat Defense

ITDR

Illusive Networks, acquired by Proofpoint in 2024, is an identity threat detection and response (ITDR) platform that combines deception technology with identity risk management. The platform deploys decoy credentials, systems, and data artifacts to detect lateral movement and privilege escalation within compromised networks. Illusive serves enterprise organizations seeking to operationalize zero trust by protecting identity pathways to critical assets and enabling early breach detection through active engagement with threat actors.

P

Insider Threat Management

Insider Threat Detection

Get visibility into risky behavior by careless, malicious, and compromised users to prevent data loss and accelerate incident investigations.

P

Proton for Business

DLP

We believe a better world starts with privacy and digital freedom

Q

QALA AG

DLP

The quickest way to see, understand and secure your data and AI

Q

QIDSecure

Non-Human Identity (NHI)

Replaces algorithmic randomness in AI agent credentials with quantum entropy for ephemeral key derivation and server-side gateway verification.

Q

Quest Change Auditor

ITDR

At Quest Software, we create technology and solutions that build the foundation for enterprise AI. By focusing on data management and governance, cybersecurity, and platform modernization, we help organizations solve their most pressing challenges and turn the promise of AI into reality.

R

Radiant Logic

ITDR

RadiantOne is an identity security platform that unifies identity data from across an organization to provide real-time visibility, risk analysis, and automated remediation. The platform combines identity data management, analytics, and observability to improve identity hygiene, detect security risks, support compliance, and strengthen IAM programs. By creating a trusted, unified identity foundation, RadiantOne helps organizations reduce identity-related threats, streamline governance, and make data-driven security decisions.

R

RadiantOne

IGA

An AI-enabled identity data platform serving as the foundational data layer for identity security, governance, and access management across human, non-human, and agentic identities.

R

Raid AI

Insider Threat Detection

Raid AI detects deepfakes and synthetic media across voice, image, video and documents. It analyses media for enterprise meetings, calls and messaging, and can run entirely inside the customer's own network.

R

RapidIdentity (by Identity Automation)

IGA

RapidIdentity by Identity Automation is a cloud-based Identity and Access Management (IAM) platform specialized for K-12 education, managing the full digital identity lifecycle from account creation to deprovisioning for students, staff, partners, and vendors. It automates provisioning, deprovisioning, access governance, and credential monitoring across on-premises, SaaS, and cloud endpoints. Tailored for educational institutions, it integrates with systems like Jamf Connect for Apple device authentication and Clever for SSO, enabling role-specific access policies while supporting certifications like 1EdTech standards.

R

FusionID

IAM & SSO

Acts as an identity registrar, cleaning, matching, and governing identity data at the source so every downstream system works correctly.

R

RapidIdentity Governance

IGA

Enforces district-wide policies with automated identity and access governance for educational institutions.

R

RapidIdentity ITDR

ITDR

Delivers flexible, institution-ready identity threat detection and response protection that integrates smoothly with existing technology.

R

RapidIdentity Lifecycle

IAM & SSO

Automates provisioning, deprovisioning, account changes, credential monitoring and access management for educational institutions at scale.

R

Identity & Access Governance

IGA

Ensures accounts are always secure and access privileges are kept to a minimum through continuous monitoring and automated control

R

Payment Fraud Intelligence

Fraud & Account Takeover Prevention

Pre-attack defense that identifies compromised cards and infected merchants with intelligence.

R

Redactic

DLP

Redactic is an EU-hosted data loss prevention layer for documents. It detects personal data in PDFs (including scans via OCR), Word and Excel files: names, addresses, national tax and social security IDs validated by check digit, IBANs, card and ID document numbers, health data. Users review each finding, then export a permanently redacted file where the text is removed from the document, or a pseudonymised copy with consistent placeholders for use with ChatGPT and other LLMs; real values are restored client-side in the browser. Documents are never stored and never used to train AI models, every export carries a redaction certificate, and a GDPR DPA is included. Built for law firms, payroll and accounting providers, DPOs and regulated SMEs.

R

Remediant

PAM

Remediant, acquired by Netwrix in 2022, provides SecureONE (now Netwrix Privilege Secure for Discovery), an agentless, vaultless Privileged Access Management (PAM) solution enforcing zero standing privileges. It discovers and removes always-on administrative access across servers and endpoints, delivering just-in-time privileged access via multifactor authentication. Targeted at small to midsize enterprises seeking lower-cost alternatives to CyberArk, it prevents lateral movement, offers real-time monitoring of standing privileges, and provides contextual insights for incident response. Pricing is approximately $22-25 per device.

R

Rig Security

Non-Human Identity (NHI)

Rig Security is an identity security platform built for humans, non-human identities, and AI agents. Its RICE engine correlates accounts, service identities, credentials, and AI agents back to their human owners, giving security teams a unified view of identity risk and attack paths. Rig identifies excessive privileges and risky access, supports least-privilege remediation, and detects identity-based threats. Its Gatewatch capability provides runtime controls for AI agents, distinguishing agent activity from the employee’s session and blocking risky actions.

R

Riskified

Fraud & Account Takeover Prevention

AI fraud prevention fueling ecommerce success

R

Governance & Lifecycle

IGA

Identity governance and administration platform that automates the full identity lifecycle from onboarding through offboarding while delivering continuous, AI-driven access governance.

R

ID Plus

IAM & SSO

Cloud identity and access management platform delivering complete authentication and access capabilities for government, finance, and high-assurance organizations operating across cloud, hybrid, and on-premises environments.

R

SecurID

IAM & SSO

On-premises authentication and identity management solution designed to secure access for financial services, government agencies, and other high-assurance organizations.

S

SafeDrop

DLP

Secure file sharing your business can trust

S

SafePaaS

IGA

The governance control fabric that shields identity, transactions, data and applications across the enterprise.

S

Privileged Access Management

PAM

Enterprise privileged access management solution providing policy-driven privilege elevation with automated controls, session monitoring, and compliance reporting.

S

SailPoint

IGA

For over 20 years, SailPoint has helped the world's largest organizations secure and govern every identity, human, machine, and now AI.

S

Agentic Fabric

Non-Human Identity (NHI)

Discover, govern, and protect all AI agents through identity-centric security for non-human identities

S

Saviynt

IGA

Saviynt is on a mission to safeguard enterprises through intelligent, cloud-first identity governance & access management solutions.

S

Application Access Governance

IAM & SSO

Implement AI-driven app governance to secure critical apps, cut compliance costs, and prevent fraud.

S

Identity Governance & Administration

IGA

Control risks for all identities and apps across your organization without compromising productivity.

S

Identity Security Posture Management

ITDR

Continuously discover and remediate identity risks, misconfigurations, and excessive access before they become threats.

S

Privileged Access Management

PAM

Secure privileged access for every identity, human, non-human, and AI, while achieving zero standing privilege.

S

Zuma

Non-Human Identity (NHI)

Discover, protect, and manage AI agents and non-human identities with an enterprise AI identity security platform.

S

Sectona

IAM & SSO

Sectona provides a modern infrastructure access layer for the new-age workforce to build, confidently access, and operate faster, more secure technology environments. As a leader in Privileged Access Management (PAM), Sectona helps mitigate the risk of privileged account abuse. Its integrated platform simplifies password and privilege management, enables just-in-time access, and enhances endpoint and remote security.

S

Endpoint Privilege Management

PAM

Eliminates local administrator rights on endpoints while allowing users to request elevated privileges on-demand through trust-based policies

S

Privileged Access Management

PAM

Centrally stores, manages, and rotates secrets and passwords with integrated access governance for cloud, on-premises, and hybrid environments

S

Securden Unified PAM

PAM

We stand for simplicity and affordability in cybersecurity

S

Identity Governance & Administration

IGA

Delivers complete visibility, automated lifecycle management, and audit-ready compliance in a single, unified platform across identity and access governance.

S

Agent Authority

Non-Human Identity (NHI)

AI and machine identity security extending Zero Trust security principles to artificial intelligence agents and autonomous systems.

S

Assurance Authority

ITDR

Continuous risk monitoring utilizing intelligence-powered assessment that evaluates trustworthiness and modifies security responses dynamically.

S

B2B Authority

IAM & SSO

Partner and supplier identity management designed to manage intricate partner ecosystems with enterprise-grade identity controls.

S

Customer Authority

Fraud & Account Takeover Prevention

Consumer identity and fraud prevention delivering secure, frictionless experiences with continuous fraud protection beyond login.

S

Presence Authority

ITDR

User behavior assurance incorporating behavioral analytics to identify irregularities and maintain legitimate access validation throughout sessions.

S

Workforce Authority

IAM & SSO

Employee identity and secure access providing modern access management that anticipates compromise and adjusts dynamically.

S

SecurEnds

IGA

Govern every identity across your enterprise. Automate user access reviews, enforce least privilege, and simplify compliance.

S

Identity Governance & Administration

IGA

Governs every identity that can act across your environment from employees and contractors to service accounts, APIs, and AI agents, ensuring every identity is visible, controlled, and accountable.

S

Securetron

Non-Human Identity (NHI)

Securetron PKI Trust Manager is a certificate lifecycle product that discovers certificates and PKI assets, automates issuance, renewal and monitoring, and alerts on expiring certificates. It provides a built-in ACME server with EAB, plus SCEP and EST enrolment, and the Boltron-AI module profiles applications and generates onboarding runbooks.

S

Segura

IAM & SSO

Segura is a leader in Privileged Access Management (PAM), delivering security that's fast, simple, and powerful, without the complexity.

S

PAM Core

PAM

Discovers, secures, and audits every privileged account and password across cloud, on-premises, and hybrid environments.

S

Privileged Infrastructure

PAM

Purpose-built, security-hardened appliance that delivers the highest levels of security, scalability, and availability for PAM implementations.

S

Semperis

ITDR

As cybersecurity leaders and Active Directory (AD) experts, we know that identity-first security is the key to operational resilience.

S

SEON

Fraud & Account Takeover Prevention

SEON's mission is to redefine global fraud prevention by safeguarding the entire customer journey, allowing businesses to operate confidently and stay ahead of evolving risks.

S

Case Management

Fraud & Account Takeover Prevention

An AI-supported platform that streamlines fraud and AML investigations by centralizing alerts, customer data, and risk signals in a single system while automating workflows and regulatory reporting.

S

Device Intelligence

Fraud & Account Takeover Prevention

Analyzes hundreds of real-time device signals to detect fraud by identifying emulators, hidden proxies, remote access tools, and multi-accounting attempts across user interactions.

S

Digital Footprint

Fraud & Account Takeover Prevention

Verifies user identities before KYC by analyzing real-time signals from 350+ digital and social platforms to validate digital histories and assess risk.

S

Document Verification

Fraud & Account Takeover Prevention

Verifies government-issued IDs are genuine while adding fraud context to reveal whether the person presenting the document is who they claim to be.

S

Fraud Prevention

Fraud & Account Takeover Prevention

A unified platform that detects and prevents fraudulent activity in real time by analyzing 1,100+ signals across digital footprint, device intelligence, and behavioral data.

S

Identity Verification

Fraud & Account Takeover Prevention

An identity verification platform that combines document checks, biometric verification, and data validation enriched with fraud signals to confirm user identity while detecting stolen, altered, or synthetic IDs.

S

Liveness Detection

Fraud & Account Takeover Prevention

A biometric verification tool that confirms a real, live person is present during identity verification, not a photo, replayed video, mask, or deepfake.

S

Payment Screening

Fraud & Account Takeover Prevention

Real-time transaction screening software that checks payments against global sanctions lists, bank identifiers, and crypto wallets to block illicit transfers before settlement.

S

Sharelock

ITDR

Unmatched visibility. Unwavering protection. Break down silos and unify identity security. Protect every digital identity, everywhere, against all threats.

S

Sift

Fraud & Account Takeover Prevention

The Fraud Platform That Turns Risk Into Revenue

S

Signifyd

Fraud & Account Takeover Prevention

We empower friction-free commerce: Friction-free customer experience without worry about fraud and consumer abuse

S

Silverfort

ITDR

Silverfort secures every dimension of identity. We break down the silos of identity infrastructure and point solutions to eliminate security gaps and blind spots once and for all. The result? Identity security without limits, that doesn't slow down the business.

S

Non-Human Identity Security

Non-Human Identity (NHI)

Automatically discovers, monitors, and enforces access controls across all non-human identities like service accounts and AI agents to prevent unauthorized lateral movement.

S

Privileged Access Security

PAM

Automatically discovers, classifies, and protects all privileged identities while enforcing least privilege and just-in-time access policies without requiring traditional vault infrastructure.

S

Smallstep

IAM & SSO

Smallstep provides a Device Identity Platform that enables high-assurance Zero Trust security through automated, short-lived PKI certificates and device-bound authentication. It streamlines authentication workflows to eliminate phishing risks and password dependency by ensuring only managed, healthy devices can access sensitive resources. The solution replaces legacy static credential systems and complements existing SSO providers with granular device-level visibility.

S

Socure

IAM & SSO

Socure is an AI-powered identity verification and fraud prevention platform that helps organizations verify consumers, businesses, and employees while detecting identity fraud, synthetic identities, deepfakes, and other digital risks. Its platform combines identity data, behavioral signals, device intelligence, document and biometric verification, and risk decisioning to support secure onboarding, authentication, compliance, and ongoing fraud prevention.

S

Cloud Permissions Firewall

PAM

One-click solution to least privilege without disrupting DevOps

S

WALLy

Non-Human Identity (NHI)

Your cloud identity security teammate

S

Sophos

DLP

Sophos defeats cyberattacks with an adaptive AI-native open platform and unmatched security expertise.

S

Email Encryption & DLP

DLP

Cloud-based email encryption and Data Loss Prevention solution that prevents confidential information and intellectual property from being intercepted.

S

Outbound Email Filtering

DLP

Cloud-based email security solution that prevents data loss through outbound filtering, content filtering, and email encryption.

S

SpecterOps

ITDR

SpecterOps provides BloodHound Enterprise, a platform dedicated to identifying and remediating Attack Path Management (APM) risks within Active Directory and Azure workloads. It focuses on the 'Identity Gap' by mapping complex relationship chains that attackers use to escalate privileges and move laterally. The platform replaces manual red-team discovery of identity misconfigurations with continuous, automated visibility into privilege escalation paths.

S

Spikerz

IAM & SSO

Spikerz is the digital marketing security platform built for modern brands, marketing teams, and security leaders.

S

Account Takeover Protection

IAM & SSO

Eliminates shared credentials, locks down 2FA, and gives marketing teams secure access while detecting both internal and external security threats to social accounts

S

Permissions Management

IAM & SSO

Gives complete visibility and control over who can access social media accounts across multiple platforms in a centralized dashboard

S

User Behavior Analytics

ITDR

Uses machine learning to analyze the behavior of users, devices, and applications to detect unusual or anomalous activities including insider threats and compromised accounts.

S

Consumer Threat Protection

ITDR

Detects exposed consumer identity data, revokes tokens, and triggers step-up authentication to prevent unauthorized account access before fraud occurs.

S

Financial Threat Protection

Fraud & Account Takeover Prevention

Detects stolen payment card data from malware-infected devices and criminal sources before fraudsters can use it, enabling preventive action.

S

Identity Guardians

ITDR

Automatically detects and remediates compromised credentials and stolen sessions by integrating with Active Directory, Entra ID, and Okta to protect workforce identities.

S

Session Identity Protection

ITDR

Detects stolen session cookies and tokens from malware and phishing attacks to disrupt session hijacking attacks before they lead to account takeover and fraud.

S

Workforce Threat Protection

ITDR

Continuously monitors criminal sources to detect exposed employee credentials and stolen session cookies, then automatically revokes compromised sessions to prevent account takeover attacks.

S

Steg.AI

DLP

Steg.AI provides advanced forensic watermarking and content provenance technology to protect digital assets from leaks, deepfakes, and unauthorized distribution. The platform embeds invisible, robust metadata into images, video, audio, and documents that survives compression, cropping, and file conversion. It complements DLP solutions by providing a trackable 'fingerprint' for content even after it leaves controlled environments, specifically targeting media integrity.

S

Identity Threat Detection & Response

ITDR

Addresses identity-based attacks targeting both users and services.

S

Stripe Radar

Fraud & Account Takeover Prevention

Stripe Radar is Stripe’s fraud detection and prevention product for payment businesses that want real-time screening of card-not-present transactions, account takeovers, and customer abuse within the Stripe stack. It uses machine learning, device and behavioral signals, and configurable rules to block, review, or allow payments before authorization completes. Radar is strongest for teams already processing through Stripe because it is built into the payments platform and requires little or no separate deployment. It is used by merchants that need automated fraud controls plus dispute-related fraud prevention, rather than a standalone fraud platform.

S

Radar

Fraud & Account Takeover Prevention

AI-powered fraud and risk management solution that detects and prevents transaction fraud, account fraud, and customer abuse while managing disputes.

S

StrongDM

IAM & SSO

Delinea and StrongDM extend privileged access management into a continuous, real-time authorization model, with a single identity security control plane.

S

Stytch

IAM & SSO

Stytch is on a mission to help developers protect their applications and make auth that's simple and scalable so that teams can stay focused on building differentiated products.

S

Syteca

IAM & SSO

Intelligent PAM with built-in ITDR

T

Teleport

IAM & SSO

We deliver trusted computing to modern infrastructure

T

Identity Governance

IGA

Automates provisioning, approvals, access reviews, and continuous monitoring, purpose-built for engineering infrastructure at scale.

T

Identity Security

ITDR

Monitors and analyzes identity activity across infrastructure, cloud, and code environments to detect suspicious behaviors like privilege escalation and lateral movement.

T

Machine & Workload Identity

Non-Human Identity (NHI)

Issues cryptographic identities to non-human actors in infrastructure, bots, CI jobs, containers, VMs, and services, replacing static credentials with short-lived, dynamically-issued certificates and tokens.

T

Teramind

Insider Threat Detection

User activity. Insider risk. One platform.

T

OneWelcome Identity Platform

IAM & SSO

Unified cloud-based platform that manages customer, business, gig worker, and workforce identities while balancing security with user convenience.

T

Identity Threat Detection & Response

ITDR

Unifies endpoint and identity telemetry to detect and stop identity-based attacks before they become breaches, detecting credential theft and token abuse.

T

Token Security

Non-Human Identity (NHI)

We are on a mission to secure the autonomous enterprise. As AI agents evolve from simple assistants to independent actors, Token Security provides the identity lifecycle and intent-based access management required to securely turn AI potential into a competitive advantage.

T

Tools4ever

IGA

Tools4ever is a Dutch software company. We develop innovative and standardized Identity Governance & Administration (IGA) software. Simply put: security-related solutions.

T

Trend Micro

DLP

Trend Micro offers integrated Data Loss Prevention (DLP) functionality embedded within its broader endpoint security and email security platforms. The iDLP module provides lightweight agent-based monitoring across endpoints, email, USB devices, and web channels without requiring dedicated hardware. Trend Micro positions DLP as a cost-effective alternative to standalone enterprise solutions, leveraging pre-built regional and industry-specific policy templates. Best suited for organizations already invested in Trend Micro's endpoint protection or email security infrastructure seeking consolidated data protection without additional management overhead.

T

TruffleHog Analyze

Non-Human Identity (NHI)

The identity intelligence layer that maps verified secrets to the non-human identities behind them and their associated access contexts.

T

Trustmi

Fraud & Account Takeover Prevention

Trustmi is an AI-powered business payments security platform designed to eliminate cyber-enabled fraud and Business Email Compromise (BEC). It sits between email communications and financial systems to identify behavioral anomalies in the payment lifecycle, replacing fragmented manual verification processes. The solution provides visibility into the end-to-end money movement process to detect vendor impersonation and unauthorized account changes.

T

Twine Security

IGA

Twine Security provides AI-powered digital employees that automate cybersecurity workflows end to end. Its first digital employee, Alex, specializes in Identity and Access Management (IAM), identifying orphaned accounts, stale access permissions and policy drift. Alex analyzes risks, plans remediation and executes approved actions across existing identity governance, identity provider and ticketing systems. With human approval controls, audit trails and reversible actions, Twine helps security teams streamline access reviews, reduce manual workloads and strengthen identity governance.

U

Unixi

IAM & SSO

Unixi is an IAM vendor focused on extending single sign-on and access control to browser-based SaaS applications that traditional SAML/SCIM integrations do not cover. Its platform is positioned around "universal SSO" for unmanaged apps, with emphasis on passwordless authentication, SaaS discovery, and role- or group-based access control. It is best suited to organizations that have significant shadow SaaS, shared accounts, or app sprawl and want to reduce dependence on per-application integrations while keeping an existing IdP such as Okta or Microsoft Entra.

U

User Risk

Insider Threat Detection

Surface the shadow AI and human risk hiding inside your workforce through real-time browser-based controls and discovery of unauthorized applications.

V

Identity Threat Detection and Response

ITDR

Monitors human and non-human identities to deliver high-fidelity detection and response for SaaS threats including account takeovers and privilege escalations.

V

Personnel and Access

IAM & SSO

Centralizes personnel management, access control, and device security to streamline onboarding/offboarding and maintain audit-ready compliance.

V

Venice

IAM & SSO

Venice was founded to make PAM work - today.

V

Venice Security

PAM

Venice Security provides a just-in-time (JIT) access platform designed to eliminate permanent standing privileges across hybrid environments. Its Valkyrie platform utilizes live, adaptive policies to grant temporary access to both human and non-human identities (NHI) without the need for agents or infrastructure disruption. It serves as a modern replacement for legacy static vaulting and manual ticketing workflows by automating the lifecycle of ephemeral credentials.

V

Veza from ServiceNow

ITDR

Veza is the authorization platform for data. Built for hybrid, multi-cloud environments, Veza enables organizations to easily understand, manage and control who can and should take what action on what data.

V

Omnissa Access

IAM & SSO

Simplify identity and access management by enforcing access based on device posture and user identity.

V

Data-Centric SaaS Security

DLP

Data-centric security platform that protects sensitive information flowing across converging SaaS and AI ecosystems through real-time threat detection and unified visibility.

V

Total Identity Security

ITDR

Identity threat detection and response platform that monitors what every identity, human, non-human, and AI agent, actually does with sensitive data across SaaS and AI ecosystems.

W

WALLIX Bastion

PAM

WALLIX provides cybersecurity solutions for simple, secure and trusted access, to protect digital and industrial environments.

W

IAG

IGA

Provides a comprehensive mapping of identities to their respective permissions, enabling organizations to simplify governance and automate compliance through centralized access control.

W

ONE

IAM & SSO

A security-on-demand SaaS platform that provides identity and access management services with zero-trust security capabilities.

W

WEEDSAND

Insider Threat Detection

WEEDSAND is a specialist in insider risk management and data loss prevention, focusing on monitoring user behavior and protecting sensitive assets from internal threats. The platform provides forensic-level auditing of user activity and data movement across endpoints and servers. It complements traditional perimeter security by providing deep visibility into authorized users who may be mishandling or exfiltrating proprietary information.

W

WideField Security

ITDR

WideField Security provides automated visibility and real-time response capabilities for Non-Human Identities (NHIs) and AI agents across hybrid environments. The platform focuses on detecting session-based threats and unauthorized identity-driven movements that traditional IAM tools miss. It complements IAM and PAM solutions by providing a layer of detection and response specifically for automated and machine-based identities.

W

Agent ID

IAM & SSO

An identity and access management solution providing first-class identity for AI agents with context-aware policies and secure Model Context Protocol interactions.

W

Identity Server

IAM & SSO

The developer-first identity and access management platform designed to secure humans, apps, and AI agents everywhere with an API-first architecture.

W

Security Token Service

IAM & SSO

A specialized token engine serving as a central trust anchor that exchanges, transforms, and brokers identities across any domain to secure microservices, APIs, and AI agents.

X

Extended Privileged Access Management

PAM

An agentless, Zero Trust privileged access management platform that delivers immediate protection across IT, OT, and cloud environments without the complexity of legacy PAM solutions.

X

Identity and Access Exposures

ITDR

Prevents identity-based attacks by continuously mapping and eliminating excessive permissions and misconfigurations.

X

Xton Access Manager (XAM)

PAM

Xton Access Manager (XTAM) is an agentless Privileged Access Management platform from Xton Technologies, providing AES-256 encrypted vault for privileged accounts, passwords, certificates, keys, and secrets. It supports secure browser-based or native client sessions (PuTTY, SecureCRT, MSTSC) to Windows, Unix, Linux, Mac, and network devices, with session recording, monitoring, joining, and termination. Includes job engine for automated task execution without secret disclosure. Designed for MSPs with multitenant hierarchy, on-premise, cloud, or hybrid deployment within firewalls, integrating with Active Directory or LDAP.

Z

Zentity

IAM & SSO

Zentity is a verified-human signal layer that lets services confirm a claim, such as eligibility or that a real person is behind an action, without receiving the underlying personal data. It uses zero-knowledge proofs and computation on encrypted data, with identity fields disclosed only when a user consents.

Z

Zoho Vault

IAM & SSO

Zoho Vault is Zoho’s cloud password manager positioned for identity and access management use cases centered on credential storage, controlled sharing, and single sign-on. In IAM terms, it is best suited for small to mid-sized organizations that want to manage privileged and team passwords alongside basic access controls without deploying a separate identity suite. The product exposes SAML-based SSO, MFA, password policies, access restrictions, emergency access, and audit trails. Zoho also bundles Vault with adjacent IAM functions in Zoho Directory and Zoho Workplace, but Vault itself focuses on credential-centric access administration.

Z

Privileged Remote Access

PAM

Enables secure, controlled, clientless remote access as a zero trust alternative to legacy PAM solutions with credential vault and JIT access.