Encryption &amp; key management

Vaultless secrets management+11

Cloud-Native SaaS platform built to secure and manage every identity through a single pane of glass.

AppViewX

Certificate lifecycle management automation+10

5 products

AppViewX is an automated Certificate Lifecycle Management (CLM) and Public Key Infrastructure (PKI) platform designed to prevent service outages caused by expired certificates. It provides centralized visibility and control over machine identities across multi-cloud and on-premises environments, enabling crypto-agility and rapid modernization of cryptographic standards. The solution complements existing HSMs and CAs by orchestrating the end-to-end process of certificate issuance, renewal, and installation.

Apricorn

Hardware-encrypted external storage+11

Apricorn offers an extensive line of keypad-authenticated, 256-bit XTS hardware-encrypted USB external storage devices that protect your data at the highest levels. Available in a number of useful form factors from flash keys, to mid sized portables, to high capacity desktop models, in both HDD and SSD. Being hardware-encrypted, there is no software involved in the authentication or encryption processes, making them completely compatible with any operating system.

Atsign

Edge-to-edge encryption+9

Atsign is a cryptographic identity and secure communications platform built around the atProtocol, with keys generated at the edge and encrypted data exchanged only between authorized Atsigns. In the Encryption & Key Management scope, its main value is non-custodial, peer-to-peer key handling: private keys stay on sender and receiver devices, and the infrastructure operator cannot decrypt customer data. It is best suited for IoT, distributed systems, and agentic AI teams that want end-to-end encrypted messaging without centralized key custody or exposed inbound ports. Atsign also offers adjacent secure remote access tooling, but the core security model is protocol-level encryption.

AWS

Create and control KMS keys+10

16 products

AWS Key Management Service (AWS KMS) is AWS’s managed encryption key service for creating, storing, and controlling cryptographic keys used to protect data in AWS workloads and applications. It is positioned for organizations that want key lifecycle control without running their own HSM fleet, and it uses FIPS 140-3 Level 3 validated HSMs under the service boundary. Buyers typically use it for envelope encryption, application signing, and server-side encryption across AWS services. It is best suited to teams standardizing key governance inside AWS rather than managing separate on-premises key systems.

CertiNext

Unified PKI and key management+11

CertiNext is eMudhra’s managed PKI and KMS platform for certificate lifecycle management and cryptographic key control. In the Encryption & Key Management category, it is positioned around centralized discovery, issuance, rotation, recovery, and policy enforcement for certificates and keys across hybrid environments. The product is best suited for enterprises that need to manage public and private trust, automate certificate operations, and keep cryptographic assets under controlled governance. Adjacent capabilities include PKIaaS deployment options and certificate automation within broader trust-management workflows.

Clavitor LLC

VaultDB is a proprietary encrypted Rust database engine you link into your own process (no network, no hosted service). AES-256-GCM per record, node-scoped ACL, hash-chained audit, and blind search. Version 1.3.1. Swiss law / Zürich venue.

Confidencial

Protect sensitive data in use+4

Confidencial is a data-centric security platform focused on protecting unstructured information such as documents and emails across multi-cloud and internal environments. It utilizes patented selective encryption and granular access controls to ensure data remains secure even if storage or transport layers are compromised. The platform integrates with AI workflows to prevent sensitive data leakage while maintaining document usability for authorized users.

Copper

Blockchain Security

MPC-based custody with cold, warm, hot wallets+10

Copper helps banks, asset managers, trading firms, exchanges and ETP providers custody, settle and move digital assets across markets.

Cy4Data Labs

Field-level encryption for data in use+7

Atomic-Level Encryption for the modern enterprise. Your data, protected at every layer.

DigiCert

Device certificate authentication policiesAuthentication method controlCertificate issuance protocol support+5

10 products

Trust built for the AI age

enQase

Post-quantum cryptographic key management+10

5 products

enQase provides a quantum-safe security platform designed to transition organizations from classical to post-quantum cryptography (PQC). The platform unifies quantum resource orchestration, hardware-based entropy generation, and a software integration layer to ensure crypto-agility across the enterprise. It complements existing PKI infrastructures by adding quantum-resistant layers to protect long-lived sensitive data against harvest-now-decrypt-later attacks.

Entrust

Key lifecycle automationKMIP server for encryption clients+9

Identity-Centric Security Protecting People, Devices, and Data in the AI Era

Evervault

Store keys while data stays encrypted+9

Evervault is a developer-focused encryption and data de-identification platform used to protect sensitive fields while keeping applications able to process data without exposing plaintext. In the Encryption & Key Management category, it centers on application-level encryption, tokenization, and key handling built around its Evervault Encryption Engine (E3) running in an AWS Nitro Enclave. It is best suited for teams handling payments, cardholder data, and other regulated records that need encryption patterns embedded into application workflows rather than managed as a standalone vault. Adjacent functions such as secure enclaves and payment-specific tooling exist, but the core value here is encrypting data in transit and at rest with vendor-managed cryptographic operations.

F5 Advanced WAF

API Security

API endpoint discovery and inventoryGraphQL, REST, XML, and GWT protocol securityOWASP API Top 10 protection+9

We deliver and secure every app

Fasoo

Data Security Posture Management (DSPM)

Discover sensitive data across hybrid environmentsClassify sensitive data and data locationsIdentify data security posture risks+5

Building Digital Trust, and More

Feitian

Pre-integrated application access+10

Established in 1998, FEITIAN Technologies is a leading global provider of cyber security products and solutions.

Fortaegis Technologies

Hardware-based authentication+10

Fortaegis Technologies appears to be a deep-tech semiconductor vendor rather than a conventional software key-management provider, with its security model built into silicon. In the encryption and key management scope, it emphasizes hardware-based authentication, elimination of stored or exchanged cryptographic keys, and quantum-safe mutual authentication for device and system trust. Its stated use cases include secure cloud-to-edge networks, autonomous systems, telecom, energy, and defense environments where key exposure and performance overhead are concerns. Buyers evaluating it in this category would likely be teams seeking hardware-rooted trust primitives rather than a standard enterprise KMS.

Fortanix DSM (Data Security Manager)

Centralized enterprise key management+11

Fortanix is a data-first security company and a pioneer in Confidential Computing. We help enterprises discover, assess, and remediate data exposure risks across hybrid multicloud environments to maintain the privacy and compliance of their most sensitive and regulated data, wherever it may be.

Futurex

Hardware security modules for encryptionCentralized enterprise key management+10

For over 40 years, Futurex has been a trusted provider of hardened, enterprise-class data security solutions.

HashiCorp Vault

Lifecycle management for cryptographic keysKey distribution to KMS providers+9

HashiCorp Vault is a secrets and cryptographic key management system used to store, distribute, rotate, and control access to encryption keys, certificates, tokens, and other sensitive material. In the Encryption & Key Management scope, Vault’s key management secrets engine centralizes lifecycle control while still interfacing with external KMS providers, and its encryption-as-a-service functions let applications encrypt data without exposing keys. It is typically chosen by teams operating mixed cloud and on-prem environments that need policy-controlled key handling, auditability, and integration with existing identity systems. Enterprise features are available through Vault Enterprise and HCP Vault Dedicated.

ID Quantique an IonQ Company

Quantum key distribution+10

ID Quantique (IDQ) provides quantum-safe security solutions centered on Quantum Key Distribution (QKD) and Quantum Random Number Generators (QRNG). Their technology protects data against the future threat of quantum computing by ensuring cryptographic keys are generated and distributed using physical quantum properties. This enterprise-grade hardware often sits at the core of national infrastructure, banking, and high-security government networks.

Imperva API Security

API Security

Continuously discover all APIsClassify sensitive APIs and data flows+10

Together, we provide innovative platforms designed to reduce the complexity and risks of managing and protecting more applications, data, and identities than any other company can.

IronKey (by Kingston)

Hardware-encrypted USB storageOn-device encryption key management+10

IronKey by Kingston is Kingston Digital’s line of encrypted USB flash drives for protecting data at rest through hardware-based encryption and device-side key handling. In the encryption and key management scope, it is best known for removable media that keeps cryptographic operations on the device, with models offering AES 256-bit XTS encryption, multi-password access, passphrase mode, and firmware protections against BadUSB and brute-force attacks. It is best suited for organizations that need portable, policy-controlled encrypted storage for regulated data, field work, and classified or sensitive file transfer.

iStorage

PIN-authenticated hardware-encrypted storage+10

iStorage | Kanguru is a global leader in government-validated, PIN-authenticated, hardware-encrypted data storage and cloud encryption solutions, delivering cutting-edge data security solutions to governments and corporations worldwide. With a comprehensive portfolio that includes secure data storage, remote management, and data duplication products, iStorage | Kanguru upholds military-grade encryption standards and compliance with key regulations, such as GDPR, HIPAA, and SOX. Trusted globally,

PQShield

Post-quantum encryption for software and hardware

PQShield provides post-quantum cryptography (PQC) solutions designed to secure hardware and software against future quantum computing threats. It offers NIST-standardized cryptographic IP cores, software libraries, and SDKs that replace classical RSA and Elliptic Curve algorithms. The platform enables OEMs and enterprises to implement quantum-resistant encryption, digital signatures, and key encapsulation mechanisms (KEM) in integrated circuits and cloud applications.

PreVeil

Email Security

End-to-end encrypted email with zero-knowledge architecture

We started PreVeil to bring radically better security to ordinary business and personal communication and information storage.

Protegrity

Centralized encryption key management+10

Protegrity provides encryption and key management for protecting sensitive data across databases, cloud services, and SaaS environments. In this category, its key-management controls focus on centralized lifecycle administration for master keys, repository keys, data store keys, signing keys, and data element keys, with support for external key custody through AWS KMS and Azure Key Vault. It is best suited for enterprises that need data-centric encryption controls tied to compliance and operational governance rather than a standalone hardware security module. The broader platform also includes adjacent data protection functions, but those are outside this profile.

QCoreSecure

QRNG-powered encryption+5

Replace every algorithmically generated random number in critical infrastructure with quantum-sourced entropy that is provably, physically, and absolutely unpredictable.

QIZ Security

Cryptographic asset discovery+5

QIZ Security provides a cryptography management platform that helps organizations discover, prioritize and remediate cryptographic risk while preparing for the transition to post-quantum cryptography. The platform connects over APIs rather than agents or network probes, continuously mapping cryptographic assets and dependencies across cloud and on-premises infrastructure, applications, code, networks, and data in transit and at rest. It builds a knowledge graph of these assets against policy to reveal vulnerabilities such as outdated protocols and weak encryption, ranks risks by context and impact, and provides step by step remediation plans. It is aimed at CISOs, compliance teams and application owners in large enterprises that need crypto-agility, quantum readiness and cryptographic lifecycle governance across complex, multi-stakeholder environments.

QuintessenceLabs

Crypto-agile key managementKMIP-conformant key management+10

3 products

In a world where data is too important to be compromised, QuintessenceLabs delivers powerful data protection, enhanced by the quantum power of nature.

SafeLogic (CryptoComply)

FIPS 140-3 validated cryptography+9

SafeLogic's proven and validated cryptographic software solutions enable enduring privacy and trust in the ever-changing digital world.

SCANOSS

Vulnerability Management

Find vulnerabilities in source code and binariesPrioritize remediation of vulnerable components+8

SCANOSS finds the cryptography in your source code, the part PKI tools and certificate managers can't see. Crypto Finder scans Java, Python, Go, and C across both proprietary and open source codebases, identifying cryptographic algorithms and producing a CycloneDX CBOM ready for post-quantum migration planning. The visibility your dependency scanners and certificate inventories miss. Built for CI/CD, developed in collaboration with IBM.

Securosys

Centralized cryptographic key lifecycle management

Founded in 2014 and headquartered in Zurich, Switzerland, Securosys is a leading technology company committed to securing digital assets, identities, and communications.

Segura

Centralized multi-cloud identity provisioning+10

Segura is a leader in Privileged Access Management (PAM), delivering security that's fast, simple, and powerful, without the complexity.

Segura (senhasegura)

Privileged Access Management (PAM)

8 products

Segura is a leader in Privileged Access Management (PAM), delivering security that's fast, simple, and powerful, without the complexity.

Privileged credential discovery+11

Smallstep

Device identity for access control+10

Smallstep provides a Device Identity Platform that enables high-assurance Zero Trust security through automated, short-lived PKI certificates and device-bound authentication. It streamlines authentication workflows to eliminate phishing risks and password dependency by ensuring only managed, healthy devices can access sensitive resources. The solution replaces legacy static credential systems and complements existing SSO providers with granular device-level visibility.

SpamTitan by TitanHQ

Email Security

Phishing and malicious email blocking+11

SpamTitan by TitanHQ is a cloud-based or on-premises email security gateway that filters inbound and outbound emails, blocking spam, phishing, malware, ransomware, and APTs with a 99.99% spam catch rate and 0.003% false positive rate. It integrates with Office 365, Google Workspace, Active Directory, and LDAP via a web-based admin portal. Designed for MSPs with multitenancy and granular per-domain policies, it serves SMBs, enterprises, and service providers seeking rapid deployment without agents.

Stormshield

Firewall / NGFW

Unified cybersecurity firewall protection+8

Stormshield Network Security (SNS) is the company’s firewall and NGFW line, aimed at organizations that want perimeter and segmentation controls with integrated inspection, IPS, VPN, and application control. Its product pages describe real-time protection, URL filtering, IP geolocation controls, and multi-WAN routing, which places it in the UTM-style NGFW segment rather than a pure packet-filtering firewall. It is typically positioned for enterprises, public-sector networks, and distributed sites that need on-premises firewall appliances and centralized management.

Swissbit

Multi-Factor Authentication (MFA)

5 products

Swissbit is a leading provider of storage and security solutions for industrial and IoT applications.

Phishing-resistant passwordless authenticationFIDO2 and WebAuthn login support+9

Synopsys

Application Security (DAST/SAST)

11 products

Synopsys is the leader in engineering solutions from silicon to systems, enabling customers to rapidly innovate AI-powered products.

Static application security testing for source codeDynamic testing for running web applications

Tessian (Human Layer Security with Encryption)

Encrypt email content and attachments+10

Tessian was a human-layer email security vendor that used machine learning to stop data loss, BEC, phishing, and accidental disclosure in email workflows. In an Encryption & Key Management profile, it is best understood as a control that reduces the need to send sensitive data unprotected, rather than a full cryptographic key management system. It fit enterprises already using Microsoft 365 and seeking policy-based email protection with DLP-style controls and user coaching. Tessian was later folded into Proofpoint, so this profile reflects a product-line capability set rather than an independent encryption platform.

Thales SafeNet

Multi-Factor Authentication (MFA)

11 products

Thales SafeNet is an enterprise MFA and access management platform combining authentication, SSO, and policy enforcement across on-premises, cloud, and virtual environments. The portfolio includes hardware tokens (eToken, smart cards, FIDO2 security keys), software authenticators, and the cloud-based SafeNet Trusted Access service. SafeNet serves large organizations requiring high-assurance authentication across distributed infrastructure, with particular strength in government and regulated sectors through FIPS 140-2 and Common Criteria certifications.

Multi-factor authentication for many use cases+10

Ubiq Security

Integrated key management with secure storage+11

Ubiq Security is an identity-driven encryption and key management platform focused on client-side protection of sensitive data before it reaches storage or downstream services. It provides application-level encryption, tokenization, and masking with integrated master key lifecycle management, so teams do not need to operate a separate KMS or HSM for common deployments. The product is aimed at engineering, security, and compliance teams that need to bind data access to IAM policies and enforce policy-controlled cryptography across applications, databases, data warehouses, API gateways, and cloud workloads. It is best suited to organizations that want data-level control rather than storage-layer encryption alone.

Utimaco Inc

Centralized enterprise key management+10

Utimaco provides high-performance cryptographic hardware and software solutions, including Hardware Security Modules (HSMs) and Key Management Systems (KMS). It offers root-of-trust protection for data at rest, in transit, and in use across on-premises and cloud environments. The platform supports various industries including finance for payment processing and automotive for PKI-based vehicle communication.

Virtru

End-to-end email encryptionAutomatic gateway-based encryption+9

Powered by the Trusted Data Format, Virtru's Data Security Platform, and the products built on top of it, make it easy to share information without sacrificing security, privacy, and control.

Vormetric (now part of Thales)

Transparent data-at-rest encryption+11

Vormetric, now part of Thales, is a data-at-rest encryption and key management product centered on the Data Security Manager (DSM) for centralized policy and key administration. It is used to protect files, databases, logs, and selected big-data workloads across physical, virtual, and cloud environments. In this category, it is best suited for enterprises that need centralized cryptographic control, auditability, and separation of duties for sensitive data protection. Adjacent capabilities historically included tokenization and access control, but the core buyer focus is encryption and key lifecycle management.

WALLIX Bastion

Privileged Access Management (PAM)

8 products

WALLIX provides cybersecurity solutions for simple, secure and trusted access, to protect digital and industrial environments.

Centralized privileged access controlPrivileged session management+8

Webroot Business Endpoint Protection (with DLP features)

Endpoint Detection & Response (EDR)

Identity and privacy shield controls+10

Webroot, an OpenText company, is a global leader in modern cybersecurity, pioneering cloud-based, AI-driven protection that keeps individuals and families safe from today's most sophisticated digital threats. We were the first to harness the cloud and artificial intelligence to stop zero-day attacks in real time, and thanks to its cloud-native architecture, Webroot can detect and block threats even before they ever reach your computer. Our technology continues to evolve to secure your devices, identity, privacy, and data everywhere you go.

wolfSSL

TLS and DTLS protocol stackAuthenticated cipher suite support+10

8 products

wolfSSL is an embedded cryptography vendor best known for its wolfCrypt engine, wolfSSL TLS library, and wolfHSM key-management framework. In the Encryption & Key Management category, it provides software for protecting keys, offloading sensitive cryptographic operations to HSMs, and supporting standards such as PKCS#11 and AUTOSAR SHE. It is strongest for embedded, automotive, RTOS, and constrained-device environments where small footprint, portable C code, and hardware-backed key handling matter. Adjacent products include TLS, SSH, MQTT, and boot/security tooling, but the core fit here is cryptography and key lifecycle control.

Yubico

Multi-Factor Authentication (MFA)

Phishing-resistant multi-factor authenticationPasswordless authentication support+8

Yubico sells hardware security keys for **multi-factor authentication** and passwordless sign-in. Its YubiKey line supports phishing-resistant login across modern and legacy environments using standards such as FIDO2/WebAuthn, FIDO U2F, OTP, smart card, and OpenPGP, with variants that add biometrics or PIN use. Yubico is best suited for organizations that want portable, hardware-backed second factors for workforce, admin, and high-assurance user access. The company also offers adjacent authenticator software, but its core MFA value is the security key itself.

zerothird