cybersecdirectory

IAM vendors

We list 78 companies active in identity and access management, and 18 of them have it as their main focus. 7 are public, 19 are owned by another company and 52 are private. Most are based in the United States (55). The oldest, Thales Cyber Solutions, was founded in 1893. By revenue from annual reports, the largest company here is Microsoft ($331.8bn in FY2026).

By countryUnited States 55

Companies focused on identity and access management

18 companies
CompanyBased inFoundedSizeOwnershipRevenue
Microsoft

Microsoft sells software, cloud services, hardware, and gaming products.

Redmond, United States1975228,000 staffPublic, MSFT$331.8bn (FY2026)
Okta

Okta provides cloud-based identity and access management solutions for workforce and customer identities.

San Francisco, United States2009Public, OKTA$2.9bn (FY2026)
BIO-key International

BIO-key provides identity and access management solutions with biometric authentication for enterprises and organisations.

Holmdel, United StatesPublic, BKYI$5.9m (FY2025)
Buypass

Buypass AS is a Norwegian company that provides secure digital identity, electronic signature and payment services.

Oslo, Norway200190 staffOwned by Total Specific Solutions
Authentik Security

Authentik Security provides a self-hosted open source identity provider for authentication and access management.

Philadelphia, United States2020Private
FaceTec

FaceTec provides 3D liveness detection and face matching software for secure identity verification.

Summerlin, United StatesPrivate
IDScan

IDScan provides identity document verification software to authenticate customers and prevent fraud.

Chester, United KingdomOwned by GBG
IronWiFi

IronWiFi sells a cloud-based network identity platform for WiFi authentication and access control.

Orlando, United States2014Private
JumpCloud

JumpCloud provides a cloud-based directory platform for managing identities, devices, and access.

Louisville, United States2013Private
ManageEngine

ManageEngine provides IT operations, cybersecurity, and service management software for businesses.

Chennai, India1996Private
One Identity

One Identity provides identity security and access management software.

Aliso Viejo, United States2000Private
OneLogin

OneLogin sells identity and access management software.

San Francisco, United States2009Part of One Identity
Ping Identity

Ping Identity provides identity and access management software for enterprises.

Denver, United States2002Owned by Thoma Bravo
Private.Me

Private.Me provides identity infrastructure for AI agents and machine-to-machine systems.

Los Angeles, United States2014Private
eMudhra

Provides digital signature, public key infrastructure and identity authentication services to enterprises and governments.

Bengaluru, India2008Private
Oracle

Identity and access management with OCI IAM, Oracle Access Management and Oracle Access Governance, alongside Oracle Cloud Infrastructure and Oracle's business applications.

Austin, United StatesPrivate
Polyguard

Polyguard provides real-time identity verification to confirm a real person is present during hiring and other digital interactions.

New York, United States2024Private
RSA

RSA provides identity and access management solutions for government, financial, and high-assurance organisations.

Burlington, United States1986Owned by Clearlake Capital

Also active in identity and access management

60 companies
CompanyBased inFoundedSizeOwnershipRevenue
SailPoint

SailPoint provides identity governance and security software for human, machine, and AI identities.

Austin, United States2005Public, SAIL$1.1bn (FY2026)
OneSpan

OneSpan provides authentication, fraud prevention, and eSignature solutions for digital agreements and transactions.

Boston, United StatesPublic, OSPN$243.2m (FY2025)
IBM

IBM is a technology company that sells software, infrastructure, and consulting services.

Armonk, United States1911352,600 staffPublic, IBM
Thales Cyber Solutions

Cybersecurity division of the Thales Group, with ANSSI, CREST, FedRAMP 3PAO, and NATO-cleared personnel. Defence, government, and critical infrastructure penetration testing worldwide.

Paris, France189383,020 staffOwned by Thales
Google

World-renowned cybersecurity firm now part of Google Cloud, delivering threat intelligence-led penetration testing and red teaming informed by front-line incident response experience.

Mountain View, United States2004500+ staffPrivate
Agentic Fabriq

Agentic Fabriq sells a control layer for AI agents.

San Francisco, United States2025Private
Amazon Web Services

Amazon Web Services is a cloud computing platform that provides a wide range of services.

Seattle, United States2006Owned by Amazon
Auth0

Auth0 provides authentication and authorization services for applications and AI agents.

Bellevue, United States2013Part of Okta
Clavister

Clavister is a Swedish cybersecurity company that develops, tests and supports all its technology in Sweden.

Örnsköldsvik, Sweden1997Public, CLAV
Corsha

Corsha provides identity-based security for machine-to-machine connections in industrial and operational networks.

Vienna, United StatesPrivate
Cyderes

Cyderes provides managed cybersecurity services including identity, threat detection, and exposure management.

Kansas City, United StatesPrivate
Cymphony

Cymphony provides an AI-native workforce security platform that maps identities, data, and permissions to reduce risk.

Tel Aviv, IsraelPrivate
Dashlane

Dashlane provides credential security and password management for businesses.

Paris, France2009Private
Delinea

Delinea provides privileged access management and identity security for AI agents, humans, and machines.

San Francisco, United States2015Owned by TPG Capital
Descope

Descope provides a customer and agentic identity platform for authentication and authorization.

Los Altos, United States2022Private
Doppler

Doppler provides a secrets management platform for developers, AI agents, and automated workflows.

San Francisco, United States2018Private
Duo Security

Duo Security provides multi-factor authentication and identity security tools for businesses.

Ann Arbor, United States2010Owned by Cisco
Enpass

Enpass is a password manager that stores encrypted data on the user's own cloud storage.

Wilmington, United StatesPrivate
Ferentin

Ferentin provides runtime governance for AI agents.

San Ramon, United States2025Private
HashiCorp

HashiCorp provides multi-cloud infrastructure automation tools.

San Francisco, United States2012Part of IBM
HYPR

HYPR provides passwordless authentication and identity verification for enterprises.

Holmdel, United States2014Private
Imprivata

Imprivata provides access management and digital identity solutions for organisations in mission-critical and life-critical sectors.

Lexington, United States2002Owned by Thoma Bravo
Infisical

Provides a platform for managing application secrets, certificates and privileged access.

San Francisco, United States2022Private
Ironvest

IronVest provides intent verification for banks and fintechs to prevent fraud.

United States2022Private
Keeper Security

Keeper Security provides a zero-trust platform for privileged access, secrets management, and password management.

Chicago, United States2011Private
LastPass

LastPass provides password management and access control software for individuals and businesses.

United States2008Owned by Francisco Partners and Elliott Investment Management
Lepide

Lepide provides software to audit and secure Active Directory, files, and Microsoft 365.

Austin, United States2005Private
LoginRadius

LoginRadius provides a customer identity and access management platform for enterprises to authenticate and manage users.

Vancouver, Canada2012Private
Omada

Omada provides identity governance and administration software for managing human and AI identities.

Copenhagen, DenmarkPrivate
Outerlimit

Outerlimit provides a security and authorization layer for agentic AI systems.

London, United KingdomPrivate
RoboForm

RoboForm is a password manager that stores and generates passwords and fills online forms.

Fairfax, United StatesPrivate
Saviynt

Saviynt provides identity governance and security for human and non-human identities across applications and data.

El Segundo, United States2010Private
Scalefusion

Scalefusion provides unified endpoint management, zero trust access, and endpoint security for businesses.

Pune, India2015Private
Sealgate

SealGate provides a security gateway that governs how AI agents access company data.

London, United Kingdom2025Private
Semperis

Semperis provides identity-driven cyber resilience and crisis management for critical identity systems.

Hoboken, United StatesPrivate
Shufti

Shufti provides identity verification, KYC, AML screening and fraud prevention software for businesses worldwide.

London, United Kingdom2017Private
Silverfort

Silverfort provides runtime identity security for enterprises, protecting human and machine identities across cloud and on-premises environments.

Plano, United States2016Private
Socure

Socure provides an AI-powered identity verification and fraud prevention platform.

Incline Village, United StatesPrivate
StrongDM

StrongDM provides just-in-time, least-privilege access to databases, containers, cloud infrastructure and AI agents.

Palo Alto, United States2015Part of Delinea
Symmatrics

Symmatrics provides one-time pad encryption products for data in transit and at rest.

Tysons Corner, United StatesPrivate
SyntaAI

SyntaAI sells Syntasec, an on-premise security and compliance platform for SAP systems.

Bengaluru, India2025Private
Tragentics

Tragentics is a security and operations layer for AI agents that customers already run on their own infrastructure.

United States2026Private
Transmit Security

Transmit Security provides customer identity and access management and fraud prevention software for enterprises.

Boston, United States2014Private
Twingate

Twingate provides identity-based access to private resources, replacing traditional VPNs for remote work.

Redwood City, United States2019Private
VeriSwarm

VeriSwarm provides a trust layer for AI agents.

Phoenix, United States2026Private
WALLIX

WALLIX provides identity and access management and privileged access security software for IT and industrial environments.

Paris, France2003Private
Zoho Vault

Password and passkey manager for individuals, teams and businesses, with encrypted storage, credential sharing controls, single sign-on and audit trails.

Chennai, IndiaPrivate
Adamanture

Adamanture designs hardware and software for data security, including encryption and identity systems.

Chennai, India2026Private
Akeyless

Akeyless provides identity security for machines, AI agents, and humans.

New York, United States2018Private
ARCON

Identity security platform built around privileged access management, with password vaulting, session recording, just in time privilege, endpoint privilege management and identity governance.

Mumbai, IndiaPrivate
Beyond Identity

Beyond Identity provides identity security software that eliminates passwords and verifies users and devices.

New York, United StatesPrivate
Elisity

Elisity provides identity-based microsegmentation software to contain lateral movement across enterprise networks.

Dallas, United States2018Owned by IonQ
HID Global

Authentication products including FIDO security keys, smart cards and passkey management, alongside physical access control, credential issuance and identity technology.

Austin, United StatesPrivate
Netwrix

Netwrix provides software to protect data and secure identities across IT environments.

Frisco, United States2006Owned by TA Associates
Penta Security

Penta Security develops web application firewalls, encryption and authentication products for enterprises and government agencies.

South Korea1997Private
Safenet

Thales provides cybersecurity products and services to protect data, applications, and identities.

Riverside, United States1983Owned by Thales
SAP

Customer identity and access management for B2C and B2B, with passwordless login, consent management and customer profiles, alongside SAP's enterprise business software.

Walldorf, GermanyPrivate
Segura

Segura provides privileged access management and identity security software for organisations.

São Paulo, BrazilPrivate
Veza

Veza provides an identity security platform that manages access to data across cloud and on-premises systems.

Los Gatos, United States2020Part of ServiceNow
Yubico

Yubico makes hardware security keys for authentication and access control.

Stockholm, Sweden2007Owned by ACQ Bure AB

Recent deals in identity and access management

All identity and access management deals
DateDealAmountSource
12 Oct 2026IonQ acquired ElisitySource for IonQ buying Elisity, opens in a new tab$1.3bnSource for IonQ buying Elisity, opens in a new tab
September 2026Omada acquired EmpowerIDSource for Omada buying EmpowerID, opens in a new tabUndisclosedSource for Omada buying EmpowerID, opens in a new tab
September 2026Socure acquired FravitySource for Socure buying Fravity, opens in a new tabUndisclosedSource for Socure buying Fravity, opens in a new tab
July 2026Okta acquired Permiso SecuritySource for Okta buying Permiso Security, opens in a new tab$200mSource for Okta buying Permiso Security, opens in a new tab
June 2026SailPoint acquired EntroSource for SailPoint buying Entro, opens in a new tab$200mSource for SailPoint buying Entro, opens in a new tab
April 2026Silverfort acquired Fabrix SecuritySource for Silverfort buying Fabrix Security, opens in a new tabUndisclosedSource for Silverfort buying Fabrix Security, opens in a new tab
February 2026Semperis acquired MightyIDSource for Semperis buying MightyID, opens in a new tabUndisclosedSource for Semperis buying MightyID, opens in a new tab
January 2026Delinea acquired StrongDMSource for Delinea buying StrongDM, opens in a new tabUndisclosedSource for Delinea buying StrongDM, opens in a new tab
January 2026JumpCloud acquired MacSolutionSource for JumpCloud buying MacSolution, opens in a new tabUndisclosedSource for JumpCloud buying MacSolution, opens in a new tab
January 2026OneSpan acquired Build38Source for OneSpan buying Build38, opens in a new tabUndisclosedSource for OneSpan buying Build38, opens in a new tab

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.

See every category

Often listed alongside identity and access management