Evolveum
Slovak maker of midPoint, a fully open-source identity governance and administration platform sold through support subscriptions.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
Evolveum develops midPoint, an open-source identity governance and administration (IGA) platform covering provisioning, synchronization, role-based access control, auditing and approval workflows.
The business model is services and subscriptions around a community edition, with partners such as Nomura Research Institute offering midPoint in Japan. It is reviewed by Gartner Peer Insights and analyst firms such as KuppingerCole.
Innovation Matrix Assessment
Steady open-source product development, but no evidence of rapid novel capability.
Gives organizations a transparent, customizable IGA without proprietary lock-in.
Real partner channel (NRI in Japan) and analyst reviews; scale is modest and funding undisclosed.
Open-source IGA is a distinctive position against proprietary suites.
Production use is evidenced by reviews and partner offerings; no independent tests found.
Identity governance and sovereignty-driven open-source demand should persist.
Why CISOs Should Care
Offers IGA capability with source transparency, relevant for cost-sensitive and sovereignty-focused programs.
What Makes It Different
Entire IGA suite is open source, monetized via support rather than license gating.
The Matrix Verdict
55/100 — INCREMENTAL INNOVATOR
Evolveum is an Incremental Innovator. The open-source IGA position is differentiated, but momentum and funding are modest.
Editorial Note: Claims vs. Verified Findings
The claim that Gartner called midPoint the only complete open-source IGA suite is on Evolveum's own site and was not independently verified; HQ city is inferred and Slovakia is the confirmed country.
Sources
Alternatives to Evolveum
Teleport
An identity-based infrastructure access platform issuing short-lived cryptographic identities for humans, machines, and AI agents in place of…
SpecterOps
Identity attack-path security specialist behind BloodHound, the widely used open-source tool for mapping Active Directory and Entra ID…
Astrix Security
Non-human identity security platform that discovers and governs API keys, OAuth tokens, service accounts, and AI-agent credentials across…
Socure
AI-driven identity verification and fraud platform used by banks, fintechs, and government agencies to validate identities during digital…
Keyfactor
Machine identity and PKI management platform helping enterprises secure certificates, keys, and post-quantum cryptography readiness at scale.
CyberArk
The market-leading privileged access management vendor, extending from vaulted human credentials into machine identity and secrets management.