IAM &amp; SSO

User access review and certification+11

Identity governance built where your business already runs, natively on the ServiceNow Platform.

Aembit

Secure access for agentic AI and workloadsCentralized access policy enforcement+10

Our vision is to provide a digital world where every business can safely build its applications by inherently trusting how they connect to partners, customers, and foundational services. The result: You can build, deliver and maintain better applications that support and empower your customers, without the frustration and exposure risks that come with boldly crossing borders.

Agen.co

AI Runtime & Agent Security

Runtime agent action governance+8

The same identity foundation, extended to the new workforce: AI agents. Identity-native governance for everything that acts on your systems.

Agentic Fabriq

AI Runtime & Agent Security

Agent identity binding+10

The secure hub for agent identity, governance, and visibility. Control what your agents can access and do, for every user.

Akeyless

Secrets Management

Vaultless secrets management+11

Cloud-Native SaaS platform built to secure and manage every identity through a single pane of glass.

Apono

Just-in-time access provisioning+11

Apono is a cloud access management vendor positioned in IAM around just-in-time and least-privilege access for human and non-human identities. Its platform replaces standing privileges with access created at request time, enforced with policy guardrails, and revoked automatically. Apono is best suited for cloud-first teams that need granular control across AWS, Azure, GCP, Kubernetes, databases, and SaaS-connected environments, especially where privileged access and access review must be tightly managed.

AppViewX

Encryption & Key Management

Certificate lifecycle management automation+10

AppViewX is an automated Certificate Lifecycle Management (CLM) and Public Key Infrastructure (PKI) platform designed to prevent service outages caused by expired certificates. It provides centralized visibility and control over machine identities across multi-cloud and on-premises environments, enabling crypto-agility and rapid modernization of cryptographic standards. The solution complements existing HSMs and CAs by orchestrating the end-to-end process of certificate issuance, renewal, and installation.

ARCON

Discovery and onboarding of privileged accounts+11

11 products

ARCON PAM is an enterprise-class privileged access management solution designed for hybrid, multi-cloud, and distributed datacenter environments. The platform centralizes control of privileged accounts across heterogeneous IT infrastructure through a unified admin console and secure gateway server. ARCON PAM targets IT security, risk, and compliance teams managing complex privilege lifecycles in organizations with DevOps and cloud-native workloads requiring fine-grained access controls and comprehensive audit trails.

Astrix Security

Discover AI agents and NHIsMaintain a single AI inventory+9

Discover, secure, and deploy AI agents responsibly across the enterprise

Authomize

Access governance policy enforcement+7

Authomize provides an AI-native Identity Governance and Administration (IGA) platform focused on continuous discovery, mapping, and governance of human and machine identities across cloud and on-premises environments. It delivers real-time visibility into permissions, entitlements, and access risks, automating remediation through policy enforcement and self-service workflows. Best suited for enterprises with complex multi-cloud infrastructures seeking to mitigate identity-based threats without disrupting operations. Authomize positions itself as a modern alternative to legacy IGA, emphasizing agentless integration and ML-driven risk prioritization for mid-to-large organizations.

AWS

Encryption & Key Management

16 products

AWS Key Management Service (AWS KMS) is AWS’s managed encryption key service for creating, storing, and controlling cryptographic keys used to protect data in AWS workloads and applications. It is positioned for organizations that want key lifecycle control without running their own HSM fleet, and it uses FIPS 140-3 Level 3 validated HSMs under the service boundary. Buyers typically use it for envelope encryption, application signing, and server-side encryption across AWS services. It is best suited to teams standardizing key governance inside AWS rather than managing separate on-premises key systems.

Create and control KMS keys+10

Beyond Identity

Phishing-resistant passwordless MFA+11

Beyond Identity provides passwordless, phishing-resistant MFA built around device-bound cryptographic keys and device-native biometrics. Its MFA offering is aimed at organizations trying to replace passwords, push approvals, and OTPs with stronger authentication for workforce access. The platform uses an authenticator on endpoints and a cloud policy engine to verify both user identity and device trust at login. It is best suited for security teams that want MFA with continuous device posture checks and support for managed and unmanaged endpoints, while avoiding legacy second factors that can be phished or replayed.

BigID

Data Security Posture Management (DSPM)

Automated data discovery and classification+11

BigID is a data intelligence platform that helps organizations discover, classify, secure, govern, and manage enterprise data and AI. BigID connects data sensitivity with identity, access, activity, lineage, ownership, policy, and business context so teams can reduce risk, automate compliance, strengthen privacy, and safely adopt AI.

Bitwarden

Password Management

Generate strong unique passwords+10

Bitwarden is a trusted security leader for millions of users worldwide, empowering enterprises, developers, and individuals to securely manage and share sensitive information anywhere.

BlinkOps

Agentic SOC & Investigations

AI agents investigate incoming alerts+8

BlinkOps is an agentic security automation platform that utilizes AI-driven agents to handle end-to-end security operations tasks including alert triage, investigation, and incident containment. It replaces traditional, manual SOAR playbooks with LLM-powered agents that can interpret natural language instructions to execute complex workflows across disparate security tools. The platform provides a low-code/no-code interface for building scalable security automations that reduce Mean Time to Respond (MTTR).

Britive

CIEM

Dynamic just-in-time cloud access+11

Britive provides dynamic Cloud Privileged Access Management (CPAM) and Cloud Infrastructure Entitlement Management (CIEM) with patented just-in-time (JIT) ephemeral access across AWS, multi-cloud, SaaS, hybrid, and on-prem environments. It enforces runtime identity access for human, agentic AI, and machine identities via a unified control plane, minting permissions only at execution and auto-destroying them post-task. Recognized by Gartner as a CIEM leader, Britive offers entitlement governance, anomaly detection, and SCIM-based synchronization with IdPs like Okta and Azure AD. Best for organizations needing granular, zero-standing-privilege controls in dynamic cloud ecosystems.

CLEAR

Biometric identity verification+11

CLEAR is an identity verification vendor that extends existing IAM stacks by adding biometric and document-based identity proofing at authentication and authorization points. In the IAM category, it is best known for validating that the person behind a login is real and matches authoritative identity evidence, rather than relying only on passwords, devices, or recovery factors. Its IAM offering is positioned for organizations that need stronger access assurance for high-risk workflows such as workforce access, healthcare, and regulated environments. CLEAR’s broader platform also serves consumer and travel identity use cases, but its IAM value is centered on verified human access.

Clutch

Secrets Management

In-memory caching for secrets+6

Clutch is an identity security platform that discovers, maps, and governs non-human identities across cloud, SaaS, and AI environments. Using its Identity Lineage® graph, it connects AI agents, service accounts, API keys, OAuth applications, tokens, and secrets to the people, systems, and resources they interact with. This enables security teams to identify excessive privileges, detect identity-based risks, secure machine identities, and enforce governance across human and non-human access, helping organizations safely adopt AI at enterprise scale.

Commugen

Vulnerability Management

Inherent risk evaluationResidual risk calculation+5

Commugen is a market leader in GRC management solutions

Concentric AI

Data Security Posture Management (DSPM)

Discover sensitive data across all sources+8

We help businesses discover, understand, and protect sensitive information across cloud and on-prem environments. Our AI-powered data security governance solutions deliver precise visibility, automated protection, and safe AI adoption, so organizations can reduce risk, strengthen compliance, and confidently innovate without compromising what matters most.

Corma

Shadow IT detectionZero touch provisioning+4

Corma is a cloud based identity governance and SaaS access management platform for IT, security and finance teams at growing organizations. It centralizes visibility into the applications an organization uses, including unauthorized or shadow software, and automates the joiner mover leaver lifecycle so access is provisioned and revoked without manual tickets. Security teams use it to run access reviews and certification audits aligned to SOC 2 and ISO 27001, while finance and IT teams track software licenses and renewals from the same console. Employees can request access through a self service catalog with role based approval workflows. The platform targets companies of roughly 50 to 1000 employees and integrates with identity providers such as Google Workspace and Microsoft Entra ID.

Curity

Flexible authentication methods+11

Curity was founded by identity specialists who had spent years working with identity and access management in large organizations. During that time, we saw a consistent challenge. Traditional IAM systems were designed for login portals and monolithic applications, while modern digital services were increasingly built on APIs, distributed systems and open identity standards. Organizations needed a different approach.

Cylerian

Security Operations

11 products

By consolidating visibility and control across your organization and providing everything you need out of the box, Cylerian makes IT simpler and safer.

Automated incident triage and response orchestration

Cynerio

IoT Security

Discover connected medical and IoT devicesProfile devices with clinical context+10

Cynerio provides healthcare-focused IoT security for hospitals and other healthcare delivery organizations. Its platform discovers connected medical and IoT devices, classifies them, learns normal communication patterns, and identifies anomalous or malicious activity on the network. The product is strongest in clinical environments where device criticality, patient-care workflows, and uptime constraints matter. It is best suited for healthcare security teams that need device visibility, risk context, and policy enforcement for medical devices without relying on endpoint agents.

Delinea (formerly ThycoticCentrify)

Privileged account discovery and governance+10

Delinea, formed in 2021 from the merger of Thycotic and Centrify and backed by TPG Capital, provides privileged access management (PAM) solutions for securing privileged accounts, credentials, and access to servers, applications, databases, and cloud infrastructure. Available as cloud-native or on-premises deployments via a centralized dashboard, it supports hybrid enterprises with products including Secret Server for credential vaulting, Privilege Manager for endpoint controls, and Privileged Behavior Analytics for threat detection. Serves over half of Fortune 100 companies, financial institutions, and critical infrastructure, focusing on password rotation, session monitoring, and just-in-time access.

Descope

Visual workflow editor for authentication flowsPasswordless and multi-factor authentication+10

Descope is a customer and agentic identity platform that fits within Identity & Access Management by handling authentication, authorization, single sign-on, MFA, and tenant-aware access controls for web, mobile, partner, and third-party applications. It is aimed at teams building B2C and B2B apps that need configurable identity journeys without assembling separate components for login, federation, and user management. Descope also supports delegated administration, audit trails, SCIM sync, and connector-based integrations for related identity workflows. Its strongest fit is for product and security teams managing external identities at scale.

Devel Group

Biometric Authentication (Face/Voice/Fingertip)+5

Devel Group delivers the SmartID Suite, an AI-driven identity platform that utilizes biometrics and adaptive risk intelligence for secure authentication. The platform uses agentic AI to autonomously detect identity-based threats and fraud patterns in real-time, providing a high-assurance alternative to traditional password-based or SMS-MFA systems. It focuses on the convergence of biometric security and automated fraud prevention for digital onboarding and session persistence.

DigiCert

Device certificate authentication policiesAuthentication method controlCertificate issuance protocol support+5

10 products

Trust built for the AI age

Entro Security

Discover shadow AI agents and runtimes+11

Entro is an NHI (Non-Human Identity) and Secret security platform that focuses on the lifecycle and governance of AI agents, service accounts, and API keys. The solution provides visibility into the "secret behind the identity," mapping connections between machines to reduce identity sprawl and mitigate risks of secret leakage. It replaces manual discovery scripts and siloed secrets management tools with a unified governance engine for the automated enterprise.

Feitian

Pre-integrated application access+10

Established in 1998, FEITIAN Technologies is a leading global provider of cyber security products and solutions.

Fencer

Application Security (DAST/SAST)

Continuous DAST scanningBlack-box runtime probingExact finding location+8

Fencer is the platform we wish we had.

Fudo Security

Real-time session recording and monitoring+9

Fudo Security, a global leader in Privileged Access Management (PAM) and Zero Trust Remote Access solutions, is transforming how organizations secure critical infrastructure and sensitive systems.

FusionAuth

Authentication and authorization service+11

FusionAuth helps developers meet authentication feature and compliance requirements so they can focus on building their application. It was built by wicked smart developers for wicked smart developers with developer control, flexibility, and ergonomics through the roof.

GitGuardian

Non-Human Identity Inventory and MappingContinuous Secret Exposure Monitoring+6

GitGuardian protects the enterprises against leaked secrets and mismanaged identities.

Gradient Technologies

Passwordless one-click authentication+9

Gradient for Users replaces traditional MFA with a one-click, passwordless experience that users and admins love. A simple SaaS plugin to your existing Single Sign On (SSO).

HID Global

Identity proofing and credential issuance+10

HID Global is a long-established enterprise identity vendor with IAM offerings centered on strong authentication, credential lifecycle management, PKI, FIDO, passkeys, and SSO. In this category, it is strongest in regulated and high-assurance environments that need to link workforce identity with physical access and certificate-based authentication. Its IAM portfolio spans cloud, on-premises, and hybrid deployment models, with options for government, enterprise, and converged physical/IT identity use cases. Adjacent physical security and RFID products exist, but the IAM scope focuses on authentication, identity proofing, and credential management.

IDdriven

Identity lifecycle management and access governance

IDdriven provides Identity Governance and Administration (IGA) solutions focused on automating identity lifecycle management for mid-sized enterprises. Their platform consolidates identity data from on-premises directories, SaaS applications, and cloud services, enabling policy-based access provisioning, certification campaigns, and compliance reporting. Best suited for organizations in regulated industries like finance and healthcare seeking cost-effective IGA without extensive customization. IDdriven emphasizes quick deployment through pre-built connectors to Active Directory, SAP, and major HR systems, supporting role-based access control (RBAC) and separation of duties (SoD) enforcement.

IDEMIA Public Security

Digital identity lifecycle managementSecure identity enrollment+10

Building mission-critical solutions powered by biometrics and cryptography.

Incode Technologies

Biometric identity verification with ID-to-selfie matching

Incode Technologies delivers an automated identity verification and authentication platform centered on high-assurance biometric liveness. It utilizes proprietary AI to process global identity documents and facial biometrics to ensure a real human is present, effectively neutralizing deepfake-based spoofing. The solution replaces manual KYC/onboarding workflows and complements existing IAM stacks by providing a stronger root-of-trust for high-risk transactions.

Iru

Passwordless workforce sign-on+9

Iru’s IAM product is **Workforce Identity**, a passwordless workforce access platform focused on securing employee sign-in and application access. It sits inside a broader IT and security suite, but its IAM scope centers on replacing passwords with hardware-backed passkeys, single sign-on, and context-aware access decisions. The product is aimed at organizations that want stronger workforce authentication without adding friction for employees or IT admins, especially teams standardizing on modern device-managed environments. Public materials position it as part of Iru’s integrated identity, endpoint, and compliance platform rather than a standalone IAM-only vendor.

JumpCloud

Centralized user identity lifecycle management+10

JumpCloud provides a cloud directory platform for IAM, centralizing user identities and extending access to devices, applications, files, networks, and servers across cloud, on-premises, and hybrid environments. It integrates with Active Directory as the authoritative source, using protocols like LDAP, SAML, RADIUS, SSH, and REST for federation. Features include automated provisioning/deprovisioning, role-based access control, SSO, MFA with TOTP and push notifications, and MDM for device policies, patch management, and remote wipe. Best for SMBs and mid-market organizations migrating from on-premises directories to cloud IAM without infrastructure.

Keyfactor

Automate machine identity lifecycle+10

Keyfactor is best known for machine identity and PKI automation, but in IAM terms it sits in the identity layer for non-human identities: certificates, SSH keys, and code-signing trust. Its core fit is for enterprises that need to discover, issue, rotate, revoke, and govern machine credentials across hybrid infrastructure and DevOps pipelines. Keyfactor is strongest where IAM overlaps with certificate lifecycle management and authentication for services, devices, and applications rather than workforce SSO or directory management. It also supports on-premises, hybrid, and SaaS deployment models, which suits regulated environments with mixed PKI estates.

Keystrike

Continuous in-session governance enforcementCryptographic attestation of session actions+2

Keystrike is an intent-based security platform for governing AI agents and critical systems

Lumos

Dynamic policy enforcement for granular access control

Lumos is an autonomous identity governance platform that automates application access management across an organization's SaaS ecosystem. It discovers applications and identities, streamlines access requests and approvals, automates provisioning and deprovisioning, enforces least-privilege access, and provides centralized visibility into user permissions. By reducing manual identity operations and improving governance, Lumos helps organizations strengthen security, simplify compliance, and improve employee productivity through automated access lifecycle management.

Material Security

Email Security

Email SecurityFile Security+2

Material Security secures the productivity suite by stopping attacks and reducing risk across Microsoft 365 and Google Workspace with unified cloud email and file security, data loss prevention and posture management.

Microsoft

Cloud Security / CSPM

15 products

Microsoft Defender for Cloud is a multicloud CSPM platform that provides continuous security posture assessment across Azure, AWS, and GCP. It delivers agentless vulnerability scanning, misconfiguration detection, and compliance monitoring against industry benchmarks (CIS, NIST, ISO, PCI-DSS). The platform generates hardening recommendations ranked by risk and includes attack path analysis to identify exploitable chains. Defender for Cloud serves enterprises managing hybrid and multicloud infrastructure seeking unified posture visibility and compliance reporting.

Agentless vulnerability scanning+21

Microsoft Sentinel

SIEM

Ingests security data from many sources+10

Microsoft Sentinel is a cloud-native SIEM and SOAR platform deployed on Azure that centralizes threat detection, investigation, and response across multicloud and hybrid environments. It combines machine learning analytics, threat intelligence integration, and automated playbook orchestration to reduce alert noise and accelerate incident handling. Best suited for organizations with existing Microsoft security investments (Microsoft 365 Defender, Azure Defender for Cloud) seeking unified cloud-based security operations without on-premises infrastructure.

Miniorange

Single sign-on for application access+10

miniOrange has established itself as a cybersecurity leader in identity, data security, and privacy, helping organizations protect human and non-human identities, safeguard sensitive data, and secure AI systems across today's digital landscape. Our expertise also includes offering new-age security solutions for popular CMS and project management platforms like Atlassian, WordPress, Joomla, Drupal, Shopify, BigCommerce, and Magento.

Natoma

Identity-aware tool access policy enforcement+8

Natoma, now part of Snowflake, is an AI agent security platform that enables enterprises to securely deploy and govern AI agents. Built around a hosted Model Context Protocol (MCP) platform, it provides enterprise-grade authentication, fine-grained authorization, policy enforcement, and governance for AI agents accessing enterprise applications and data. With flexible deployment options and support for 100+ pre-built MCP servers, Natoma helps organizations safely connect AI agents to internal tools while maintaining visibility, security, and compliance.

Netwrix

Automate joiner mover leaver workflows+11

Netwrix provides a SaaS-based Identity Governance and Administration (IGA) platform, primarily through Netwrix Identity Manager (formerly Usercube), automating identity lifecycle management across hybrid IT environments. It handles provisioning, deprovisioning, access reviews, and policy enforcement for joiner-mover-leaver processes. The solution builds role catalogs mapping technical entitlements to business roles, detects toxic role combinations and Segregation of Duties (SoD) conflicts, and generates compliance reports. Best suited for mid-to-large enterprises needing scalable IGA for Active Directory, Azure AD, and multi-system access governance to enforce least privilege and support audits.

NewCore

Identity discovery and unification+11

NewCore is a workforce identity platform positioned for IAM use cases across humans and non-human identities. Its published materials emphasize identity discovery, SSO, MFA, lifecycle management, directory services, and inline policy enforcement, with support for deploying alongside an existing IdP rather than replacing it. It appears best suited to enterprise security and identity teams that need to unify access control for employees and AI agents, especially where browser-based authentication, agent governance, and token-based access control are in scope.

Oak

Unified identity control plane+10

Oak is an AI-native identity operating system focused on Identity & Access Management for enterprises that need to govern human, machine, and AI-agent identities in one control plane. It builds a live identity graph from raw evidence, then uses that graph to manage access, detect permission drift, and drive real-time remediation. Oak appears positioned for enterprise CISOs and IAM teams modernizing from periodic reviews to continuous identity governance. The company came out of stealth in July 2026, is generally available, and has publicly described enterprise deployments and a $60M seed round.

Oasis Security

Automated Non-Human Identity Discovery+11

Oasis Security provides an identity control plane specifically designed for non-human identities (NHI) and machine identities such as service accounts, API keys, and secrets. The platform automates the discovery of unmanaged machine identities across hybrid and multi-cloud environments, mapping their access to critical resources to identify over-privilege. It complements traditional IAM by providing automated lifecycle management and remediation for secret rotation and short-lived credentials.

Offroad

Identity risk investigation+8

Offroad is a newly launched **agentic identity security platform** that sits in the IAM-adjacent identity security layer rather than a classic SSO or directory product. According to its site and launch coverage, it helps enterprises move from identity visibility to identity resolution by investigating, governing, remediating, and verifying identity risk across human users, machine identities, OAuth applications, service accounts, and AI agents. It appears best suited for security and identity teams that need evidence-driven analysis of access and ownership issues across distributed systems.

Okta

Single sign-on across applications+11

Okta is a cloud-based Identity and Access Management (IAM) platform that provides centralized identity governance, authentication, and authorization across on-premises, hybrid, and cloud environments. The vendor serves mid-market to enterprise organizations requiring SSO, MFA, and lifecycle management at scale. Okta is positioned as a foundational identity layer for hybrid infrastructure, with particular strength in organizations managing complex multi-application access across dispersed user bases.

Oleria

Automated identity governance workflows+9

Oleria is an autonomous identity security platform that centralizes visibility into human and machine permissions across SaaS, IaaS, and on-premises environments. It leverages AI to provide fine-grained visibility into 'who has access to what' and automates access reviews and rightsizing to maintain a state of least privilege. The solution replaces legacy, static IGA tools with a dynamic trust model that adapts to changing organizational needs.

Omada

Identity lifecycle managementAccess requests and approvals+10

Omada Identity provides full-featured Identity Governance and Administration (IGA) solutions, including on-premises and SaaS (Omada Identity Cloud) deployments for managing identity lifecycles, access requests, certifications, and compliance reporting. It supports hybrid/multi-cloud environments, ITSM integrations, and granular visibility into user access patterns. Key capabilities include risk-based access control, account reconciliation, and Segregation of Duties (SoD) policy enforcement. Best suited for enterprises requiring policy-driven governance to handle complex workflows, mitigate risks, and ensure regulatory compliance without multiple disparate tools.

One Identity

Identity lifecycle provisioning and deprovisioningAccess request management and approvals+9

One Identity provides Identity Manager, an enterprise-grade IGA platform unifying governance for users, applications, data, and privileged accounts across on-premises, hybrid, and cloud environments. It excels in automated identity lifecycle management, including provisioning and deprovisioning for SaaS and hybrid apps, with SAP-certified controls for SAP-centric organizations. Key strengths include attestation workflows, self-service access requests via shopping-cart interface, consolidated governance for regular and privileged accounts, and compliance reporting. Best suited for large enterprises needing visibility into access usage, behavior-driven policy insights, and regulatory audit support in complex hybrid IT landscapes.

OneLogin (a product of One Identity)

Single sign-on for enterprise apps+9

OneLogin is a cloud-first Identity and Access Management (IAM) platform acquired by One Identity in 2024, providing single sign-on (SSO) and access control for workforce, customer, and partner identities. The platform supports both cloud and on-premises deployments with integration into One Identity's broader Unified Identity Security Platform alongside Privileged Access Management (PAM), Identity Governance (IGA), and Active Directory Management solutions. OneLogin serves enterprises requiring consolidated identity verification and real-time suspicious login monitoring across hybrid environments.

Opnova

Identity governance for disconnected applications

Opnova's agentic AI bridges disconnected apps and automates the high-friction tasks no integration could reach before. The result: tighter access controls, faster provisioning, and an IAM program that finally works end-to-end.

Optimal IdM

User lifecycle management+9

Optimal IdM is a global provider of innovative and affordable identity access management solutions.

P0 Security

CIEM

Identity inventory and entitlement discovery+7

P0 Security provides a cloud identity security platform that focuses on eliminating standing privileges through JIT (Just-in-Time) access and least-privilege enforcement. The solution automates the governance of human, workload, and AI agent identities across multi-cloud environments, ensuring that high-risk access is ephemeral and strictly vetted. It replaces traditional static PAM for cloud environments and complements CSPM by securing the identity layer.

Permiso Security

Continuously monitor identity activity+8

Permiso Security provides a unified platform combining Identity Security Posture Management (ISPM) and Identity Threat Detection and Response (ITDR) for human, non-human, and AI identities across AWS, Azure, Okta, M365, GitHub, Jira, Salesforce, and Snowflake. It continuously monitors identity activities, performs behavioral analysis to detect anomalies like credential compromise, account takeover, and insider threats, and executes automated responses such as account lockdown and adaptive authentication. Permiso excels in runtime tracking across IaaS, SaaS, and IdPs, reducing MTTD and MTTR for organizations with hybrid cloud environments managing diverse identity types.

Persona

Single Sign-On for workforce applications+4

Persona provides an identity verification (IDV) platform that automates the collection and verification of government IDs, biometrics, and behavioral data throughout the employee and customer lifecycle. It integrates directly into existing IAM platforms and HRIS systems to provide high-assurance identity proofing without requiring a full infrastructure overhaul. The tool replaces manual verification processes with automated, compliant workflows that reduce friction while enhancing security.

Ping Identity

Federated single sign-on+11

Ping Identity provides an enterprise IAM platform with PingOne for cloud-native deployments, PingFederate for federated SSO using SAML and OIDC, and hybrid support across on-premises and cloud environments. It processes 200M daily logins for over 60% of Fortune 100 companies, offering Zero Trust architecture through adaptive MFA via PingID, passwordless FIDO2/WebAuthn with YubiKey and platform authenticators, and policy-based authorization with PingAuthorize using ABAC. Best suited for large enterprises needing scalable identity governance, API access control via PingAccess, and directory services with PingDirectory for millions of identities.

Ploy

AI Security Posture (AI-SPM)

Automated AI model discovery and inventory+11

Ploy is an identity governance layer that sits on top of your IdP (Okta/ Entra etc.) to help you control access across the apps that matter - including the long tail outside SSO. We help customers understand who has access to what, automate JML changes, streamline access reviews and access requests, and keep audit evidence ready without relying on spreadsheets or ticket-chasing.

Port0

Identity and network context analysis+8

Port0 is a network security platform with an integrations hub and connector framework, but the available public material does not show a dedicated Identity & Access Management (IAM) product. For an IAM buyer, it appears best fit only where identity data, access signals, or directory-related context need to be connected into a broader security graph. Its published content emphasizes integrations, live querying, and data fusion rather than core IAM functions such as SSO, provisioning, or MFA.

Portnox CLEAR

Network Access Control (NAC)

Cloud-native network access control+11

Portnox CLEAR is a cloud-native NAC-as-a-Service platform that provides continuous risk monitoring and access control for endpoints across wired, wireless, VPN, and virtual networks. It discovers devices, authenticates via cloud RADIUS and Active Directory integration, enforces role- and risk-based policies, and automates quarantine of non-compliant devices using AgentP for enrolled endpoints. Vendor-agnostic with zero on-premises footprint, it supports managed, BYOD, IoT/OT devices in distributed environments. Best for mid-sized enterprises (500-10,000 employees) needing SASE-aligned NAC without hardware maintenance.

Primary

Cloud access management+4

A Zero Trust Data Control Plane built from the ground up with the cybersecurity and encryption tools demanded by companies of all sizes.

QCoreSecure

Encryption & Key Management

QRNG-powered encryption+5

Replace every algorithmically generated random number in critical infrastructure with quantum-sourced entropy that is provably, physically, and absolutely unpredictable.

Radiant Logic

Real-time identity data lake visibility+8

RadiantOne is an identity security platform that unifies identity data from across an organization to provide real-time visibility, risk analysis, and automated remediation. The platform combines identity data management, analytics, and observability to improve identity hygiene, detect security risks, support compliance, and strengthen IAM programs. By creating a trusted, unified identity foundation, RadiantOne helps organizations reduce identity-related threats, streamline governance, and make data-driven security decisions.

RapidIdentity (by Identity Automation)

Automated user lifecycle provisioning+11

RapidIdentity by Identity Automation is a cloud-based Identity and Access Management (IAM) platform specialized for K-12 education, managing the full digital identity lifecycle from account creation to deprovisioning for students, staff, partners, and vendors. It automates provisioning, deprovisioning, access governance, and credential monitoring across on-premises, SaaS, and cloud endpoints. Tailored for educational institutions, it integrates with systems like Jamf Connect for Apple device authentication and Clever for SSO, enabling role-specific access policies while supporting certifications like 1EdTech standards.

Reco

AI Runtime & Agent Security

Runtime prompt and tool-call inspectionBrowser-level AI policy enforcement+8

Reco is the leader in Agentic Ecosystem Security, securing everything around the agent, not just the prompt.

RSA NetWitness

SIEM

Centralized log managementDynamic parsing and normalization+8

RSA provides an AI-powered Unified Identity Platform to protect the world's most secure organizations. RSA provides automated identity intelligence, authentication, access, governance, and lifecycle capabilities to reduce risks, secure authentication, maintain compliance, and automate processes.

SafePaaS

Policy-based access governance+9

The governance control fabric that shields identity, transactions, data and applications across the enterprise.

SailPoint

Automated identity lifecycle management+10

For over 20 years, SailPoint has helped the world's largest organizations secure and govern every identity, human, machine, and now AI.

Saviynt

Automated identity lifecycle management+11

Saviynt is on a mission to safeguard enterprises through intelligent, cloud-first identity governance & access management solutions.

Sectona

Privileged account and credential protection+10

Sectona provides a modern infrastructure access layer for the new-age workforce to build, confidently access, and operate faster, more secure technology environments. As a leader in Privileged Access Management (PAM), Sectona helps mitigate the risk of privileged account abuse. Its integrated platform simplifies password and privilege management, enables just-in-time access, and enhances endpoint and remote security.

Securden Unified PAM

Centralized privileged account vaultingJust-in-time privileged access+10

We stand for simplicity and affordability in cybersecurity

SecureAuth

Push-based login approval+10

We envision a world where more security doesn't equal more obstacles, where protection and experience work together.

SecurEnds

Automated identity lifecycle management+11

Govern every identity across your enterprise. Automate user access reviews, enforce least privilege, and simplify compliance.

Segura

Centralized multi-cloud identity provisioning+10

Segura is a leader in Privileged Access Management (PAM), delivering security that's fast, simple, and powerful, without the complexity.

Sharelock

Behavioral analysis of identity-centric threats+6

Unmatched visibility. Unwavering protection. Break down silos and unify identity security. Protect every digital identity, everywhere, against all threats.

Silverfort

Monitor authentication across hybrid environments

10 products

Silverfort secures every dimension of identity. We break down the silos of identity infrastructure and point solutions to eliminate security gaps and blind spots once and for all. The result? Identity security without limits, that doesn't slow down the business.

Smallstep

Device identity for access control+10

Smallstep provides a Device Identity Platform that enables high-assurance Zero Trust security through automated, short-lived PKI certificates and device-bound authentication. It streamlines authentication workflows to eliminate phishing risks and password dependency by ensuring only managed, healthy devices can access sensitive resources. The solution replaces legacy static credential systems and complements existing SSO providers with granular device-level visibility.

Sonrai Security

CIEM

Identity graph maps effective permissions+9

Sonrai Security provides a CIEM platform that analyzes identities, entitlements, and resource relationships across AWS, Azure, and GCP to identify excessive access and misconfigurations. It uses an identity graph to map effective permissions and toxic permission combinations, enabling cloud security, IAM, and compliance teams to discover privilege risks and enforce least privilege. The Cloud Permissions Firewall automates real-time restriction of unused permissions and dormant identities based on actual usage. Extended with CWPP via Sonrai Dig, it links workload vulnerabilities to identity paths for prioritized remediation, distinguishing it from visibility-only CIEM tools.

Spikerz

Protect social media account access+7

Spikerz is the digital marketing security platform built for modern brands, marketing teams, and security leaders.

StrongDM

Verify user identity before access+11

Delinea and StrongDM extend privileged access management into a continuous, real-time authorization model, with a single identity security control plane.

Stytch

Primary and secondary factor workflows+11

Stytch is on a mission to help developers protect their applications and make auth that's simple and scalable so that teams can stay focused on building differentiated products.

Syteca

Identity lifecycle managementAuthentication and authorization controlsAccess control for critical resources+8

Intelligent PAM with built-in ITDR

Teleport

Zero trust access to infrastructureRole-based access control+10

We deliver trusted computing to modern infrastructure

Thales SafeNet

Multi-factor authentication for many use cases+10

11 products

Thales SafeNet is an enterprise MFA and access management platform combining authentication, SSO, and policy enforcement across on-premises, cloud, and virtual environments. The portfolio includes hardware tokens (eToken, smart cards, FIDO2 security keys), software authenticators, and the cloud-based SafeNet Trusted Access service. SafeNet serves large organizations requiring high-assurance authentication across distributed infrastructure, with particular strength in government and regulated sectors through FIPS 140-2 and Common Criteria certifications.

Token Security

Continuously discover AI agents and identities+10

We are on a mission to secure the autonomous enterprise. As AI agents evolve from simple assistants to independent actors, Token Security provides the identity lifecycle and intent-based access management required to securely turn AI potential into a competitive advantage.

Tools4ever

Identity lifecycle management+11

Tools4ever is a Dutch software company. We develop innovative and standardized Identity Governance & Administration (IGA) software. Simply put: security-related solutions.

Transmit Security

Passwordless MFA with passkeys+11

Transmit Security is an enterprise identity vendor whose MFA capabilities are delivered through its Mosaic platform, which combines passwordless authentication, biometrics, and step-up controls for customer-facing logins. In the MFA category, it is best known for FIDO-based authentication and app-less biometric methods that reduce password dependence while supporting high-assurance access. Its core buyers are large enterprises in regulated sectors such as banking, insurance, and retail that need strong customer authentication across web and mobile channels. The company also sells adjacent CIAM and fraud-prevention capabilities, but those are outside this profile’s scope.

Truffle Security Co.

Supply Chain Security

Secrets scanning across SDLC sources+11

Truffle Security Co. is best known for TruffleHog, an open-source and enterprise secrets-scanning product that fits software supply chain security by finding exposed credentials before they are committed, shared, or deployed. In this category, it focuses on secret leakage across source control, CI/CD, collaboration tools, cloud storage, and other SDLC systems, then verifying whether findings are live to reduce false positives. It is best suited for AppSec, DevSecOps, and security teams that need continuous detection and remediation workflows for secrets sprawl across the software development pipeline.

Unisys Stealth

Microsegmentation

Identity-based micro-segmentation+11

Unisys Stealth is a zero-trust microsegmentation platform that uses identity-based access controls and cryptographic cloaking to transform networks into segmented environments. The suite includes Stealth(core) for enforcement via micro-segmentation and encryption, and Stealth(aware) for network discovery and policy automation. Deployed across on-premises, AWS, and Azure environments, Stealth holds NSA NIAP certification and serves government and enterprise customers requiring east-west traffic isolation and dynamic workload protection.

Unixi

Universal SSO for browser apps+11

Unixi is an IAM vendor focused on extending single sign-on and access control to browser-based SaaS applications that traditional SAML/SCIM integrations do not cover. Its platform is positioned around "universal SSO" for unmanaged apps, with emphasis on passwordless authentication, SaaS discovery, and role- or group-based access control. It is best suited to organizations that have significant shadow SaaS, shared accounts, or app sprawl and want to reduce dependence on per-application integrations while keeping an existing IdP such as Okta or Microsoft Entra.

Vanta

Compliance & GRC

Automate control monitoring and evidence collectionCentralize risk visibility and management

Vanta provides a trust management platform focused on automating governance, risk, and compliance (GRC) workflows. It integrates with over 350 tools including AWS, CrowdStrike, and Jira to collect evidence across 30 frameworks such as SOC 2, ISO 27001, NIST AI RMF, HITRUST, and CIS CSF. Features include a Report Center for program visibility, vendor risk management with customizable inherent risk rubrics, and cross-mapped controls for multi-framework compliance. Best suited for security and GRC teams in scaling organizations seeking continuous monitoring over manual audits.

Venice

Just-in-time privileged accessUnified privileged access controlContinuous identity discovery+9

Venice was founded to make PAM work - today.

VMware Workspace ONE

Mobile Security

Mobile device management+10

VMware Workspace ONE Mobile Threat Defense (MTD) is a UEM-integrated mobile endpoint security solution for Android, iOS, and Chrome OS, powered by Lookout technology. Delivered through Workspace ONE Intelligent Hub, it provides threat detection and automated remediation without requiring separate application installation. The solution addresses phishing, malware, device vulnerabilities, jailbreak/root detection, rogue Wi-Fi, and SSL stripping attacks. Best suited for enterprises managing heterogeneous mobile device environments seeking consolidated endpoint protection with Zero Trust Network Access capabilities.

Votal AI

AI Security Posture (AI-SPM)

Continuous AI model discovery+6

Secure every AI interaction, from prompt to tool call, guardrails, identity, data policies, and tool authorization in real time.

WALLIX Bastion

Centralized privileged access control+9

WALLIX provides cybersecurity solutions for simple, secure and trusted access, to protect digital and industrial environments.

WSO2 API Manager

API Security

OAuth2 API access control+11

WSO2 API Manager is an open-source API management platform that, in the API Security category, centers on gateway-enforced authentication, authorization, throttling, threat protection, and traffic mediation for HTTP APIs and, in newer releases, GraphQL and asynchronous APIs. It is aimed at enterprises that need policy-driven control over exposed APIs across cloud, hybrid, and on-prem deployments. WSO2 also positions it as part of a broader API management stack, but its security value here is the gateway and policy enforcement layer rather than endpoint scanning or runtime app protection.

ZeroFox

Digital Risk & Executive Protection

Threat intelligence search portal+11

ZeroFox is an external cyber threat intelligence vendor that focuses on collecting, correlating, and validating threat data from the surface web, deep web, dark web, social media, and criminal channels. Its CTI offering is centered on actor tracking, leak detection, campaign monitoring, and vulnerability intelligence, with analyst validation and an Intelligence Evidence Graph used to turn raw signals into finished intelligence. It is best suited for CTI and InfoSec teams that need operationally actionable intelligence rather than uncorrelated feeds. ZeroFox also sells adjacent digital risk and disruption capabilities, but its threat intelligence product is the core here.

Zero Networks

Microsegmentation

Automated microsegmentation policy creation+11

Zero Networks is a microsegmentation vendor that automates network asset discovery, policy creation, and enforcement to stop lateral movement and reduce blast radius. Its Segment product is positioned for enterprises that want segmentation across on-premises, cloud, and OT/IoT environments without manually building firewall rules or deploying agents. The company also sells adjacent zero trust capabilities, but its microsegmentation offer centers on agentless, identity-driven segmentation with MFA-controlled access for workloads and unmanaged devices. It appears aimed at organizations replacing legacy segmentation projects with faster policy rollout and centralized control.

Zoho Vault