IAM vendors
We list 78 companies active in identity and access management, and 18 of them have it as their main focus. 7 are public, 19 are owned by another company and 52 are private. Most are based in the United States (55). The oldest, Thales Cyber Solutions, was founded in 1893. By revenue from annual reports, the largest company here is Microsoft ($331.8bn in FY2026).
By countryUnited States 55
Companies focused on identity and access management
18 companies| Company | Based in | Founded | Size | Ownership | Revenue |
|---|---|---|---|---|---|
Microsoft Microsoft sells software, cloud services, hardware, and gaming products. | Redmond, United States | 1975 | 228,000 staff | Public, MSFT | $331.8bn (FY2026) |
Okta Okta provides cloud-based identity and access management solutions for workforce and customer identities. | San Francisco, United States | 2009 | Public, OKTA | $2.9bn (FY2026) | |
BIO-key International BIO-key provides identity and access management solutions with biometric authentication for enterprises and organisations. | Holmdel, United States | Public, BKYI | $5.9m (FY2025) | ||
Buypass Buypass AS is a Norwegian company that provides secure digital identity, electronic signature and payment services. | Oslo, Norway | 2001 | 90 staff | Owned by Total Specific Solutions | |
Authentik Security Authentik Security provides a self-hosted open source identity provider for authentication and access management. | Philadelphia, United States | 2020 | Private | ||
FaceTec FaceTec provides 3D liveness detection and face matching software for secure identity verification. | Summerlin, United States | Private | |||
IDScan IDScan provides identity document verification software to authenticate customers and prevent fraud. | Chester, United Kingdom | Owned by GBG | |||
IronWiFi IronWiFi sells a cloud-based network identity platform for WiFi authentication and access control. | Orlando, United States | 2014 | Private | ||
JumpCloud JumpCloud provides a cloud-based directory platform for managing identities, devices, and access. | Louisville, United States | 2013 | Private | ||
ManageEngine ManageEngine provides IT operations, cybersecurity, and service management software for businesses. | Chennai, India | 1996 | Private | ||
One Identity One Identity provides identity security and access management software. | Aliso Viejo, United States | 2000 | Private | ||
OneLogin OneLogin sells identity and access management software. | San Francisco, United States | 2009 | Part of One Identity | ||
Ping Identity Ping Identity provides identity and access management software for enterprises. | Denver, United States | 2002 | Owned by Thoma Bravo | ||
Private.Me Private.Me provides identity infrastructure for AI agents and machine-to-machine systems. | Los Angeles, United States | 2014 | Private | ||
eMudhra Provides digital signature, public key infrastructure and identity authentication services to enterprises and governments. | Bengaluru, India | 2008 | Private | ||
Oracle Identity and access management with OCI IAM, Oracle Access Management and Oracle Access Governance, alongside Oracle Cloud Infrastructure and Oracle's business applications. | Austin, United States | Private | |||
Polyguard Polyguard provides real-time identity verification to confirm a real person is present during hiring and other digital interactions. | New York, United States | 2024 | Private | ||
RSA RSA provides identity and access management solutions for government, financial, and high-assurance organisations. | Burlington, United States | 1986 | Owned by Clearlake Capital |
Also active in identity and access management
60 companies| Company | Based in | Founded | Size | Ownership | Revenue |
|---|---|---|---|---|---|
SailPoint SailPoint provides identity governance and security software for human, machine, and AI identities. | Austin, United States | 2005 | Public, SAIL | $1.1bn (FY2026) | |
OneSpan OneSpan provides authentication, fraud prevention, and eSignature solutions for digital agreements and transactions. | Boston, United States | Public, OSPN | $243.2m (FY2025) | ||
IBM IBM is a technology company that sells software, infrastructure, and consulting services. | Armonk, United States | 1911 | 352,600 staff | Public, IBM | |
Thales Cyber Solutions Cybersecurity division of the Thales Group, with ANSSI, CREST, FedRAMP 3PAO, and NATO-cleared personnel. Defence, government, and critical infrastructure penetration testing worldwide. | Paris, France | 1893 | 83,020 staff | Owned by Thales | |
Google World-renowned cybersecurity firm now part of Google Cloud, delivering threat intelligence-led penetration testing and red teaming informed by front-line incident response experience. | Mountain View, United States | 2004 | 500+ staff | Private | |
Agentic Fabriq Agentic Fabriq sells a control layer for AI agents. | San Francisco, United States | 2025 | Private | ||
Amazon Web Services Amazon Web Services is a cloud computing platform that provides a wide range of services. | Seattle, United States | 2006 | Owned by Amazon | ||
Auth0 Auth0 provides authentication and authorization services for applications and AI agents. | Bellevue, United States | 2013 | Part of Okta | ||
Clavister Clavister is a Swedish cybersecurity company that develops, tests and supports all its technology in Sweden. | Örnsköldsvik, Sweden | 1997 | Public, CLAV | ||
C Corsha Corsha provides identity-based security for machine-to-machine connections in industrial and operational networks. | Vienna, United States | Private | |||
Cyderes Cyderes provides managed cybersecurity services including identity, threat detection, and exposure management. | Kansas City, United States | Private | |||
Cymphony Cymphony provides an AI-native workforce security platform that maps identities, data, and permissions to reduce risk. | Tel Aviv, Israel | Private | |||
Dashlane Dashlane provides credential security and password management for businesses. | Paris, France | 2009 | Private | ||
Delinea Delinea provides privileged access management and identity security for AI agents, humans, and machines. | San Francisco, United States | 2015 | Owned by TPG Capital | ||
Descope Descope provides a customer and agentic identity platform for authentication and authorization. | Los Altos, United States | 2022 | Private | ||
Doppler Doppler provides a secrets management platform for developers, AI agents, and automated workflows. | San Francisco, United States | 2018 | Private | ||
Duo Security Duo Security provides multi-factor authentication and identity security tools for businesses. | Ann Arbor, United States | 2010 | Owned by Cisco | ||
Enpass Enpass is a password manager that stores encrypted data on the user's own cloud storage. | Wilmington, United States | Private | |||
Ferentin Ferentin provides runtime governance for AI agents. | San Ramon, United States | 2025 | Private | ||
HashiCorp HashiCorp provides multi-cloud infrastructure automation tools. | San Francisco, United States | 2012 | Part of IBM | ||
HYPR HYPR provides passwordless authentication and identity verification for enterprises. | Holmdel, United States | 2014 | Private | ||
Imprivata Imprivata provides access management and digital identity solutions for organisations in mission-critical and life-critical sectors. | Lexington, United States | 2002 | Owned by Thoma Bravo | ||
Infisical Provides a platform for managing application secrets, certificates and privileged access. | San Francisco, United States | 2022 | Private | ||
Ironvest IronVest provides intent verification for banks and fintechs to prevent fraud. | United States | 2022 | Private | ||
Keeper Security Keeper Security provides a zero-trust platform for privileged access, secrets management, and password management. | Chicago, United States | 2011 | Private | ||
LastPass LastPass provides password management and access control software for individuals and businesses. | United States | 2008 | Owned by Francisco Partners and Elliott Investment Management | ||
L Lepide Lepide provides software to audit and secure Active Directory, files, and Microsoft 365. | Austin, United States | 2005 | Private | ||
LoginRadius LoginRadius provides a customer identity and access management platform for enterprises to authenticate and manage users. | Vancouver, Canada | 2012 | Private | ||
Omada Omada provides identity governance and administration software for managing human and AI identities. | Copenhagen, Denmark | Private | |||
Outerlimit Outerlimit provides a security and authorization layer for agentic AI systems. | London, United Kingdom | Private | |||
RoboForm RoboForm is a password manager that stores and generates passwords and fills online forms. | Fairfax, United States | Private | |||
Saviynt Saviynt provides identity governance and security for human and non-human identities across applications and data. | El Segundo, United States | 2010 | Private | ||
Scalefusion Scalefusion provides unified endpoint management, zero trust access, and endpoint security for businesses. | Pune, India | 2015 | Private | ||
Sealgate SealGate provides a security gateway that governs how AI agents access company data. | London, United Kingdom | 2025 | Private | ||
Semperis Semperis provides identity-driven cyber resilience and crisis management for critical identity systems. | Hoboken, United States | Private | |||
S Shufti Shufti provides identity verification, KYC, AML screening and fraud prevention software for businesses worldwide. | London, United Kingdom | 2017 | Private | ||
Silverfort Silverfort provides runtime identity security for enterprises, protecting human and machine identities across cloud and on-premises environments. | Plano, United States | 2016 | Private | ||
Socure Socure provides an AI-powered identity verification and fraud prevention platform. | Incline Village, United States | Private | |||
StrongDM StrongDM provides just-in-time, least-privilege access to databases, containers, cloud infrastructure and AI agents. | Palo Alto, United States | 2015 | Part of Delinea | ||
Symmatrics Symmatrics provides one-time pad encryption products for data in transit and at rest. | Tysons Corner, United States | Private | |||
SyntaAI SyntaAI sells Syntasec, an on-premise security and compliance platform for SAP systems. | Bengaluru, India | 2025 | Private | ||
Tragentics Tragentics is a security and operations layer for AI agents that customers already run on their own infrastructure. | United States | 2026 | Private | ||
Transmit Security Transmit Security provides customer identity and access management and fraud prevention software for enterprises. | Boston, United States | 2014 | Private | ||
Twingate Twingate provides identity-based access to private resources, replacing traditional VPNs for remote work. | Redwood City, United States | 2019 | Private | ||
VeriSwarm VeriSwarm provides a trust layer for AI agents. | Phoenix, United States | 2026 | Private | ||
WALLIX WALLIX provides identity and access management and privileged access security software for IT and industrial environments. | Paris, France | 2003 | Private | ||
Zoho Vault Password and passkey manager for individuals, teams and businesses, with encrypted storage, credential sharing controls, single sign-on and audit trails. | Chennai, India | Private | |||
Adamanture Adamanture designs hardware and software for data security, including encryption and identity systems. | Chennai, India | 2026 | Private | ||
Akeyless Akeyless provides identity security for machines, AI agents, and humans. | New York, United States | 2018 | Private | ||
ARCON Identity security platform built around privileged access management, with password vaulting, session recording, just in time privilege, endpoint privilege management and identity governance. | Mumbai, India | Private | |||
Beyond Identity Beyond Identity provides identity security software that eliminates passwords and verifies users and devices. | New York, United States | Private | |||
Elisity Elisity provides identity-based microsegmentation software to contain lateral movement across enterprise networks. | Dallas, United States | 2018 | Owned by IonQ | ||
H HID Global Authentication products including FIDO security keys, smart cards and passkey management, alongside physical access control, credential issuance and identity technology. | Austin, United States | Private | |||
Netwrix Netwrix provides software to protect data and secure identities across IT environments. | Frisco, United States | 2006 | Owned by TA Associates | ||
P Penta Security Penta Security develops web application firewalls, encryption and authentication products for enterprises and government agencies. | South Korea | 1997 | Private | ||
S Safenet Thales provides cybersecurity products and services to protect data, applications, and identities. | Riverside, United States | 1983 | Owned by Thales | ||
SAP Customer identity and access management for B2C and B2B, with passwordless login, consent management and customer profiles, alongside SAP's enterprise business software. | Walldorf, Germany | Private | |||
Segura Segura provides privileged access management and identity security software for organisations. | São Paulo, Brazil | Private | |||
Veza Veza provides an identity security platform that manages access to data across cloud and on-premises systems. | Los Gatos, United States | 2020 | Part of ServiceNow | ||
Yubico Yubico makes hardware security keys for authentication and access control. | Stockholm, Sweden | 2007 | Owned by ACQ Bure AB |
Recent deals in identity and access management
All identity and access management dealsAcquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.
More in Identity & Access
See every category- PAM vendors 24 companies
- IGA vendors 32 companies
- CIAM vendors 16 companies
- MFA vendors 49 companies
- Password manager vendors 14 companies
- Secrets management vendors 29 companies
- ITDR vendors 58 companies