Ivanti
Unified endpoint management and IT/security vendor whose VPN and edge products suffered a string of high-severity exploited vulnerabilities in 2023-2024.
Visit Website ↗ + Add to CompareOverview
Ivanti sells unified endpoint management, IT service management, and security software — including Connect Secure VPN, patch management, and endpoint security — across roughly 100 operating systems. Its newer Autonomous Endpoint Management push applies AI to patch prioritization and configuration drift, aiming to reduce the exposure window between vulnerability disclosure and remediation.
Formed through the 2017 merger of LANDESK and HEAT Software and headquartered in South Jordan, Utah, Ivanti has since become known as much for the vulnerabilities in its own edge products as for its endpoint management platform: a series of actively exploited zero-days in Ivanti Connect Secure and Policy Secure through 2023 and 2024 prompted CISA emergency directives and significant customer trust erosion. That real-world track record materially tempers efficacy and relevance scores for a company whose core business is helping others manage risk.
Innovation Matrix Assessment
Continues to add AI-driven patch prioritization, but recent years have been dominated by incident response rather than proactive innovation.
Broad OS/device coverage is genuinely useful for large IT estates when the products themselves are secure.
Large, entrenched enterprise install base, though several major customers publicly reassessed their Ivanti footprint after 2023-2024 incidents. Recognized in Cyber Defense Media Group's 2026 Global InfoSec Awards (1 award), independently juried industry validation of market traction.
A mature UEM incumbent; scale and PE ownership argue for a conservative disruption score, further tempered by recent security incidents.
Multiple actively-exploited zero-days in its own edge products (2023-2024) directly undercut real-world security efficacy claims.
UEM and patch management remain necessary, but repeated high-severity incidents raise doubts about durable trust.
Why CISOs Should Care
Offers broad endpoint/UEM coverage, but CISOs should weigh its own recent vulnerability track record before treating it as a low-risk vendor.
What Makes It Different
Combines UEM, ITSM, and security patching in one console; distinguished recently by high-profile security incidents in its own products.
The Matrix Verdict
53/100 — INCREMENTAL INNOVATOR
A large, mature IT/security incumbent whose recent history of exploited vulnerabilities in its own products warrants conservative scoring across efficacy and relevance.
Editorial Note: Claims vs. Verified Findings
CISA issued emergency directives in January and February 2024 related to actively exploited Ivanti Connect Secure/Policy Secure vulnerabilities; treat vendor security-posture marketing accordingly.
Sources
Alternatives to Ivanti
Unknown Cyber Inc.
Malware genomics platform using automated deep static analysis and code-lineage comparison to identify unseen malware, variants, and supply-chain…
Synack Inc
A penetration-testing-as-a-service platform pairing a vetted researcher community with AI-driven attack surface discovery for continuous security validation.
Horizon3.ai
Autonomous penetration testing company whose NodeZero platform self-attacks networks without persistent agents, aiming to replace annual manual pentests…
Cogent Security
Agentic AI platform that autonomously triages, investigates, and remediates vulnerabilities as a force multiplier for security teams.
Airlock Digital
Application allowlisting (deny-by-default) platform that blocks unapproved executables, scripts, and processes to prevent ransomware and malware execution.
ReversingLabs
Software supply chain security and binary analysis vendor that inspects compiled software and packages for malware and unauthorized…