Identity & Access Management
Identity governance, access control, authentication, privileged access, and machine identity.
Teleport
An identity-based infrastructure access platform issuing short-lived cryptographic identities for humans, machines, and AI agents in place of…
SpecterOps
Identity attack-path security specialist behind BloodHound, the widely used open-source tool for mapping Active Directory and Entra ID…
Astrix Security
Non-human identity security platform that discovers and governs API keys, OAuth tokens, service accounts, and AI-agent credentials across…
Keyfactor
Machine identity and PKI management platform helping enterprises secure certificates, keys, and post-quantum cryptography readiness at scale.
Socure
AI-driven identity verification and fraud platform used by banks, fintechs, and government agencies to validate identities during digital…
Astrix Security
Non-human and AI agent identity security platform that discovers and remediates over-privileged API keys, service accounts and secrets.
CyberArk
The market-leading privileged access management vendor, extending from vaulted human credentials into machine identity and secrets management.
Silverfort
Agentless unified identity protection platform that extends MFA, ITDR, and access policy to legacy and unmanaged systems traditional…
Veza
Identity security platform built around an authorization graph that maps who and what can actually access data and…
AppViewX
Machine identity management platform automating certificate lifecycle management (CLM) and PKI operations at enterprise scale, including post-quantum cryptography…
Silverfort
Unified identity protection platform that adds MFA and threat detection across on-prem, cloud and legacy identity systems without…
Oasis Security
Non-human identity management platform discovering, classifying, and governing service accounts, API keys, and machine credentials, now extending to…
1Password
Password and credential manager expanding into Extended Access Management, unifying credential, device, and non-human/agent access under one platform.
Keeper Security
Enterprise password and privileged access management platform with zero-knowledge encryption architecture, serving both consumer and enterprise markets.
1Kosmos
Identity verification and passwordless multi-factor authentication platform that fuses biometric proofing with blockchain-anchored credentials.
Cayosoft
Unified platform for securing, monitoring, and instantly recovering hybrid Active Directory and Microsoft 365 environments.
AuthZed
AuthZed builds and commercially supports SpiceDB, a Google Zanzibar-inspired open-source permissions database used to enforce fine-grained authorization at…
Bitwarden
An open-source, independently auditable password and secrets manager offering enterprise deployment without the vendor lock-in of closed-source incumbents.
SEON
A Budapest fraud-prevention platform scoring risk from digital-footprint signals — email, phone, IP, social, device — with AML/KYC…
Delinea
PAM vendor formed from the 2021 merger of Thycotic and Centrify, now expanding into infrastructure access via its…
Semperis
Identity resilience platform specializing in Active Directory security posture, attack-path discovery, threat detection, and disaster recovery.
Token Security
An identity-first governance platform for AI agents and non-human identities that discovers, correlates, and enforces least-privilege access across…
Akeyless
SaaS secrets orchestration platform unifying secrets management, zero-trust just-in-time access (PAM 2.0), and data protection for DevOps and…
Push Security
Browser-based identity threat detection and response that blocks phishing, session hijacking and credential attacks.
Xage Security
Palo Alto-based zero trust access platform unifying identity-based security across IT, OT, and cloud environments, with strong traction…
Sardine
A San Francisco real-time risk platform combining device intelligence, behavioral biometrics, and transaction monitoring, built crypto-and-fintech-native by founders…
Smallstep
Hardware-backed device identity and automated certificate lifecycle management, using the ACME Device Attestation standard, for Zero Trust access.
Microsoft Entra ID
Microsoft's cloud identity and access platform (formerly Azure AD) providing SSO, conditional access, MFA, and identity governance across…
Aembit
Workload identity and access platform that replaces long-lived API keys and secrets with short-lived, policy-based access tokens for…
Saviynt
Cloud-native identity governance and privileged access management platform unifying IGA, PAM, and application access governance in a single…
Badge
Privacy-preserving authentication platform that derives private cryptographic keys on the fly without storing personally identifiable information or biometric…
CyberFOX
Privileged access and password management platform built specifically for MSPs and lean IT teams protecting millions of endpoints.
Xiid
Outbound-only, quantum-resistant secure communications with no inbound ports or public IPs, validated by the DoD and the U.S.…
Push Security
Push Security detects and blocks identity attacks — phishing, credential stuffing, account takeover, malicious OAuth grants — directly…
iProov
A London-based biometric identity verification vendor whose face-based Genuine Presence Assurance technology is used by government agencies and…
Mitek Systems
Mitek Systems (NASDAQ: MITK) is a publicly traded identity verification company that matches government IDs against live selfies…
Fingerprint
Fingerprint provides device intelligence and browser/device fingerprinting technology that enterprises use to detect fraud, account takeover, and bot…
Glide Identity
A San Francisco and Tel Aviv-based identity platform using SIM-anchored cryptographic authentication to replace passwords and SMS codes,…
Auth0
Developer-first customer identity and access management (CIAM) platform, acquired by Okta in 2021 and still operated as a…
BioCatch
Behavioral biometrics platform that reads how a person moves and types to catch account takeover and social-engineering scams…
SentiLink
A San Francisco synthetic-identity and first-party fraud specialist founded by ex-Affirm risk leaders, backed by published fraud-benchmarking research.
Regula
Forensic document examination and identity verification vendor combining a 16,000+ ID template library with biometric authentication for border…
Entro Security
Cloud platform unifying discovery and protection of AI agents, non-human identities, and secrets like API keys and tokens…
Apono
Zero standing privilege platform providing just-in-time, just-enough cloud access for human, machine, and AI-agent identities.
AuthMind
Agentless, observability-based identity protection platform detecting hidden identity risks across human, non-human, and agentic AI identities.
Darwinium
AI-native fraud prevention platform using a behavioral identity graph to distinguish trusted from risky human and AI activity…
SpyCloud
Identity threat protection vendor that mines breach and darknet data to detect exposed credentials and session cookies before…
Incognia
A Palo Alto-based fraud prevention company using location intelligence and device identity signals to detect account takeover and…
Anetac
Non-human and agentic identity security platform, acquired by Quest Software in 2026, providing real-time visibility into service accounts,…
Jumio
Identity-verification and KYX platform combining document and biometric verification with fraud intelligence for banks, marketplaces, and fintechs.
Daon
Daon builds multi-modal biometric identity verification and authentication software (IdentityX) used by governments and financial institutions to fight…
Axiad
Santa Clara-based identity security platform combining passwordless authentication and PKI credential management with a newer identity-risk-quantification layer covering…
sgnl
SGNL, based in Palo Alto, California, builds continuous identity security technology that governs privilege and access dynamically across…
Lumos
A San Francisco automation-first identity governance platform offering self-service SaaS access requests as a lighter-weight alternative to legacy…
Feedzai
A San Mateo RiskOps platform unifying fraud, identity and AML decisioning for banks around RiskFM, a tabular foundation…
Forter
A New York e-commerce fraud vendor running one of the earliest real-time 'Decision as a Service' models, backed…
Prove
A New York identity-verification vendor (formerly Payfone) anchoring authentication to phone and SIM signals, integrated at 8 of…
Unixi
Universal SSO and passwordless authentication that extends single sign-on to browser-based apps lacking native SAML support, without requiring…
Memcyco
Digital impersonation and account-takeover prevention platform detecting brand impersonation, phishing sites, and fraud before customer login.
Oleria
Oleria builds adaptive, autonomous identity security that continuously adjusts access rights based on real behavior rather than static,…
Zilla Security (now Palo Alto Networks Identity Governance)
Modern identity governance and administration automating access reviews and entitlement lifecycle management, acquired by Palo Alto Networks and…
DigiCert
Long-established public certificate authority and PKI-as-a-service provider extending into automated certificate lifecycle management and post-quantum cryptography readiness.
GlobalSign
A veteran public Certificate Authority and PKI vendor providing TLS/SSL certificates, certificate lifecycle automation, and machine and device…
Clerk
Developer-focused authentication and user management platform, backed by Stripe, CRV, Menlo Ventures, and Anthropic's Anthology Fund, now expanding…
ID.me
McLean, Virginia identity network verifying more than 150 million users for federal and state agencies, healthcare organizations and…
SSenStone
SSenStone is a Seoul-based authentication technology company whose OTAC (One-Time Authentication Code) protocol secures critical infrastructure, payment, and…
Radiant Logic
Identity data fabric vendor whose RadiantOne platform unifies fragmented identity data across an enterprise for analytics, hygiene, and…
Linx Security
AI-native identity security platform that discovers, scores, and helps remediate risk across both human and non-human identities.
Cymphony
Builds a 'workforce security graph' mapping employees, machines, and AI agents to their access, data, and activity for…
CertifID
A Grand Rapids startup verifying wiring instructions and counterparty identity to stop business-email-compromise wire fraud in real-estate closings,…
Alloy
A New York identity-decisioning platform orchestrating KYC, AML, and fraud checks across 160+ data sources for 300+ regulated…
Unico
Brazil's dominant digital-identity and biometric-verification platform, processing ~25 million selfie authentications a month and expanding into deepfake detection…
Orchid Security
Identity-first platform that finds unmanaged "shadow" authentication paths inside applications and brings them under existing IAM controls.
SailPoint
Identity governance and administration platform managing who has access to what, with automated certification, provisioning, and policy enforcement.
Grip Security
SaaS identity risk platform that discovers shadow SaaS usage and unmanaged application identities, then extends governance and access…
Imprivata
Healthcare-focused digital identity vendor providing single sign-on, workflow automation, and multi-factor authentication for clinical environments.
ARCON
Privileged access management vendor with 900+ enterprise customers and consecutive Gartner Magic Quadrant Leader and KuppingerCole Leadership recognitions,…
Devolutions
Bootstrapped Quebec-based vendor of privileged access management, password vaulting, and remote-connection tools built for SMB and mid-market IT…
V-Key
A Singapore-based digital identity and mobile app security vendor whose FIPS 140-2 validated software-based secure element authenticates banking…
Persona
Identity verification and infrastructure platform that helps businesses verify individuals and organizations, manage onboarding, and meet KYC/AML and…
Yardstik
Yardstik combines background screening, identity verification, and continuous fraud monitoring into a single platform aimed at closing what…
Clearspeed
A San Diego, DoD-rooted voice-risk-analytics vendor flagging deception risk in seconds across languages without biometric enrollment.
Signifyd
A San Jose e-commerce fraud-protection vendor that financially guarantees its decisions, covering chargeback losses on approved orders rather…
Act Security
Tel Aviv startup from the Medigate founders building a platform that stops AI agents from inheriting excessive cloud…
Way Security
A Tel Aviv startup that automates the operational grunt work of deploying and maintaining identity and access management…
Ping Identity
Enterprise identity platform for large-scale SSO, MFA, and orchestration, merged with ForgeRock to cover both workforce and customer…
HYPR
Identity assurance company combining phishing-resistant passwordless authentication with identity verification, used to secure over 20 million users.
Britive
Agentless, cloud-native privileged access platform enforcing just-in-time, ephemeral permissions to achieve zero standing privileges across multi-cloud environments.
SecureW2
Cloud PKI and passwordless network access vendor that replaces shared Wi-Fi passwords and legacy RADIUS with certificate-based, phishing-resistant…
Accertify
Fraud and account-protection platform, spun out of American Express in 2024, processing billions of transaction events annually for…
Ditto
Formerly Uniken, Ditto provides patented split-key cryptography and zero-knowledge-proof identity verification for banks, telecoms and other regulated enterprises.
FusionAuth
FusionAuth is a developer-first customer identity and access management (CIAM) platform, offering full OAuth2/OIDC/SAML support and flexible self-hosted…
TypingDNA
Romania-founded, Brooklyn-headquartered vendor of keystroke-dynamics behavioral biometrics used for passive account-takeover and exam-fraud detection layered on existing authentication.
Device Authority
Device Authority's KeyScaler platform automates identity, PKI, and lifecycle management for enterprise IoT and industrial device fleets.
WALLIX
WALLIX is a publicly listed European privileged access management vendor whose Bastion platform is certified by France's ANSSI…
Entersekt
A South African-founded, Atlanta-co-headquartered vendor of transaction-bound push authentication and 3-D Secure payment authentication for banks and financial…
OneSpan
OneSpan (Nasdaq: OSPN), formerly VASCO Data Security, provides hardware and software authentication, transaction signing, and mobile app shielding…
Stytch
Passwordless and passkey-first authentication API platform for developers, now part of Twilio, offering fraud- and bot-detection signals alongside…
Clarity
Clarity is a Tel Aviv-based AI cybersecurity startup that detects deepfakes and verifies identities in real time, targeting…
StrongDM
StrongDM, based in Burlingame, California, provides a cloud-native privileged access management (PAM) platform that gives organizations centralized, auditable…
Clutch
Clutch is a Tel Aviv-based platform that discovers, governs, and secures non-human identities, secrets, and AI agents across…
Twine Security
Twine Security builds autonomous 'AI digital employees' — starting with Alex, an IAM specialist — that execute identity…
Rig Security
Tel Aviv identity-protection startup that correlates human, machine and AI-agent identities into one graph to govern what agents…
Baselayer
Business identity verification (KYB) and fraud-risk platform for financial institutions, now extending to identity for AI agents.
Opti
AI-native identity security platform that maps human, machine, and agentic identities into one graph to find and fix…
Clutch Security
A Tel Aviv company securing non-human identities—API keys, tokens, service accounts, and AI agents—through short-lived, auto-expiring credentials.
Opnova
AI agents that learn from video demos to perform identity and access operations in legacy and modern apps…
JumpCloud
Cloud directory platform giving SMB and mid-market IT teams a modern replacement for on-premises Active Directory across identities…
Beyond Identity
Passwordless, phishing-resistant authentication platform using X.509 certificate-based device binding instead of passwords or push notifications.
Descope
No-code customer identity and access management platform for building passwordless authentication and authorization journeys, extended to AI agents…
Omada
Omada is an established identity governance and administration (IGA) vendor offering rapid, SaaS-deployable access governance and compliance automation…
Callsign
Risk-based authentication and fraud-prevention platform using behavioral biometrics and device/contextual signals, backed by strategic investment from JPMorgan and…
FUDO Security
Privileged access management and Zero Trust platform that pairs session monitoring and recording with behavioral biometrics to flag…
Corsha
Issues dynamic, one-time-use machine identities to bring MFA-style protection to API and machine-to-machine traffic in place of static,…
Strata Identity
Identity orchestration platform that abstracts legacy and cloud identity systems behind a common policy layer, letting enterprises modernize…
Silence Laboratories
A Singapore-based cryptography startup using secure multi-party computation to eliminate single points of failure in passwordless authentication and…
WorkOS
API platform that gives B2B SaaS applications enterprise-readiness features — SSO, SCIM directory sync, audit logs, and admin…
Anchor
Anchor (Anchor.dev) was a stealth-stage startup building infrastructure to make certificate issuance and validation automatic, founded by engineers…
Vespia
Vespia is an Estonia-based Know Your Business (KYB) technology provider founded in 2021 by Julia Ront — Veriff’s…
MightyID
MightyID is an identity resilience company founded in 2023 to ensure organizations can keep authentication and access systems…
Defakto
Non-human identity platform replacing static service-account credentials with dynamic identities for AI agents and workloads.
Closinglock
An Austin, SOC 2-certified platform stopping real-estate wire fraud by replacing email wiring instructions with an identity-verified secure…
Unit21
A San Francisco fraud/AML platform letting compliance analysts build and adjust detection rules through a no-code interface, backed…
Wultra
A Prague-based fintech security company providing post-quantum, mobile-first authentication and FIDO2 hardware tokens for banks.
Okta
Independent cloud identity platform providing single sign-on, MFA, and lifecycle management for workforce and customer identities.
Cisco Duo
Widely deployed MFA and access-security product, acquired by Cisco in 2018, known for simple push-based multi-factor authentication.
BeyondTrust
Privileged access management vendor covering endpoint privilege management, secrets, and remote support access, with a lineage tracing to…
Leonardo
A European defense group building owned Zero Trust technology via stakes in SSH Communications, Becrypt, Axiomatics, and Arbit.
Ory
Open-source identity and access management infrastructure (Kratos, Hydra, Keto) with a managed cloud offering, positioned as a developer-controlled…
SecureAuth
SecureAuth, a two-decade adaptive-authentication pioneer, has repositioned around securing non-human and AI-agent identities with a Continuous Identity Authority…
WISeKey
A publicly traded Swiss digital identity and cybersecurity company running a root-of-trust PKI platform and secure semiconductor business…
RevealSecurity
Patented Identity Journey Analytics platform that uses unsupervised machine learning to detect anomalous human and machine identity behavior…
PlainID
Policy-based authorization platform that centralizes fine-grained access-control decisions across cloud, legacy, and AI-driven applications from a single policy…
P0 Security
Cloud identity governance and privileged access management platform unifying human and machine identity access across AWS, GCP and…
Simeio
Atlanta-area managed identity and access management provider that runs IGA, PAM, access management and CIAM operations for large…
SSH Communications Security
Publicly traded Finnish identity and access security vendor founded by the inventor of the SSH protocol, whose PrivX…
Axiomatics
Runtime, fine-grained authorization platform using attribute-based access control (ABAC) to externalize dynamic access decisions for applications, data, and…
Incode Technologies
AI-powered biometric identity verification and authentication platform used by banks, governments, and enterprises for onboarding, KYC, and ongoing…
Keyless Technologies
A London zero-knowledge biometric authentication vendor, folded into Ping Identity's PingOne Recognize.
LoginID
FIDO2 passwordless authentication provider that now binds AI shopping agents to a verified human for identity and payment…
Tide Foundation
Australian zero-knowledge cryptography company offering TideCloak IAM and decentralized key authority so no administrator holds full keys.
Sectigo
A top-ten global certificate authority pairing issuance with automated certificate lifecycle management.
Token (MFA)
A Series B maker of a biometric smart ring for passwordless, phishing-resistant MFA.
Dashlane
Credential and password management platform for consumers and enterprises built on a zero-knowledge security architecture.
ObserveID
ObserveID is an AI-native platform aiming to converge identity lifecycle management, governance, access control, and threat detection into…
Oso
Authorization-as-a-service platform that lets developers define and enforce application permissions through a policy language and managed cloud service.
Early Warning Services
Bank-consortium-owned identity and fraud-risk data utility that also owns and operates the Zelle payments network.
AdNovum
Swiss identity and access management vendor whose Nevis platform secures over 80% of Swiss e-banking transactions, built over…
Signicat
European digital identity and electronic trust platform providing eIDAS-compliant identity verification, e-signatures, and onboarding for banks, insurers, and…
Cerby
Identity security automation platform that discovers, secures, and governs "disconnected applications" — nonstandard enterprise apps that lack native…
Pindrop
Atlanta-based voice authentication and fraud detection platform that analyzes call audio, device, network, and behavioral signals to score…
Systancia
French Zero Trust access vendor combining ZTNA, remote PAM, and IAM for IT and OT environments, with ANSSI…
Shush
Shush operates a silent, SIM-based mobile network authentication platform (Sherlock) that lets banks and CPaaS providers verify a…
ADACOM
Athens-based Qualified Trust Service Provider and cybersecurity integrator delivering PKI, digital signature, and identity infrastructure alongside threat intelligence…
Futurae
Cloud-native, API-delivered multi-factor and passwordless authentication platform built for banks needing PSD2-compliant strong customer authentication.
ValidSoft
Long-tenured London voice-biometrics vendor combining authentication with AI deepfake and synthetic-voice detection for banks and contact centers.
Clear Skye
Clear Skye provides identity governance and administration built natively on the ServiceNow platform, unifying access requests, certifications, and…
Sentry Enterprises
Sentry Enterprises makes SentryCard, a battery-less biometric smart-card authenticator combining physical access with phishing-resistant digital authentication, built on…
Veriff
Identity verification platform combining AI-driven document and biometric checks with human review to protect businesses and consumers from…
CyberIAM
CyberIAM is a UK-founded identity services specialist focused exclusively on identity and access management (IAM), identity governance and…
Sift
A San Francisco fraud-prevention platform whose cross-customer data network shares fraud signals across 34,000+ connected sites and apps…
Snowflake
A public data-cloud platform extending into security observability and AI-agent access governance via Observe and Natoma.
Transmit Security
Unified customer identity platform combining authentication, identity verification, and fraud prevention for large banks, insurers, and retailers.
Valimail
San Francisco-founded DMARC/email-authentication automation pioneer, acquired by DigiCert in September 2025 to enter the paid DMARC market.
Secret Double Octopus
Passwordless, phishing-resistant workforce authentication vendor differentiated by support for legacy enterprise systems like VPN, VDI, and mainframe alongside…
AUTHADA
German eID-based identity verification vendor, BSI-certified since 2020, that uses NFC-enabled smartphones to read national ID chips for…
Sharelock
Rome-based identity security platform combining ITDR and ISPM with agentic AI automation, positioned as the leading European alternative…
Secfense
Secfense is a Krakow-based identity security vendor whose User Access Security Broker sits as a network proxy in…
Veridify Security
Connecticut-based device-identity vendor (formerly SecureRF) providing quantum-resistant, low-resource authentication and zero-touch onboarding for IoT and OT devices via…
Clarity Security
An Austin, Texas-based SaaS identity governance platform automating access reviews, entitlement certification, and identity lifecycle management for mid-market…
Uniqkey
Uniqkey is a Copenhagen-based password and access management platform that combines an encrypted credential vault with device-bound mobile…
Plurilock
Publicly traded Canadian identity-security company whose DEFEND platform uses behavioral biometrics for continuous, passive authentication beyond point-in-time MFA.
Precise Biometrics
Precise Biometrics is a publicly traded Swedish biometrics company providing fingerprint, facial, and palm recognition software and turnkey…
eMudhra
Bangalore-based, publicly-listed licensed Certifying Authority providing PKI-based digital signatures, e-signature workflows, managed PKI, and identity and access management…
Strivacity
Herndon, Virginia-based no-code customer identity and access management (CIAM) platform backed by cybersecurity-focused investors, positioned as a lower-effort…
Frontegg
Developer-first customer identity and access management (CIAM) platform that lets SaaS companies embed login, multi-tenant user management, and…
Identiq
A privacy-preserving identity-signal network ($50M+ raised) acquired by Incode, which committed $100M to build around it.
NordPass
Nord Security's password and secrets manager, with zero-knowledge architecture and enterprise admin controls.
Visa
The payments network that built fraud and identity-risk capability through BioCatch, Featurespace, and CyberSource.
TokenCore
Hardware biometric authentication devices that store fingerprints locally to prove the identity of the person logging in, not…
VeriDas
A BBVA-backed Spanish biometric identity specialist merging with Fourthline in a deal expected to close in H2 2026.
Evo Security
An MSP-native identity and access management vendor acquired by Barracuda in July 2026 for its BarracudaONE platform.
Bluink Ltd.
Ottawa-based identity vendor behind eID-Me, a smartphone-based digital identity wallet supporting ISO 18013-5 mobile driver's licenses and ICAO…
Syteca
Syteca (formerly Ekran System) combines privileged access management and user activity monitoring to give mid-market and regulated organizations…
HEROIC.com
Bootstrapped identity threat intelligence company running large-scale dark web and breach-data monitoring through its DarkWatch platform, with six…
Ergon Informatik (Airlock)
Swiss software house behind Airlock, a secure access hub combining WAF, customer identity and access management, and API…
QueryPie
Zero Trust access governance platform for databases, servers and, more recently, AI tools, centralizing privileged access control and…
Constella
Identity risk intelligence platform combining a multi-billion-record breach data lake with dark web and public-sphere monitoring for account…
i-Sprint Innovations
25-year-old Singapore-based IAM vendor providing enterprise authentication, mobile app protection, and post-quantum cryptography migration tooling, primarily serving Asian…
Memority
A Paris-area Identity-as-a-Service platform, spun out of Accenture in 2023 and expanded through its 2026 acquisition of shadow-IT/identity-visibility…
Entrust
A Thoma Bravo-backed identity, PKI, and secure-issuance giant formed from the 2019 merger of Datacard Group and Entrust,…
Identity Automation
Cloud IAM platform (RapidIdentity) purpose-built for education and healthcare identity lifecycle management, now operating as part of Jamf…
Outseer
Risk-based fraud and authentication decisioning for financial institutions and payment issuers, descended from RSA's Adaptive Authentication business and…
D-Trust
D-Trust GmbH is a Berlin-based qualified trust service provider, part of the German state-owned Bundesdruckerei Group, issuing eIDAS-certified…
Cerbos
Open-source, policy-as-code authorization engine that lets engineering teams externalize fine-grained access-control decisions from their application code.
Trulioo
Global identity verification and business (KYB) verification platform aggregating data sources across more than 100 countries to support…
Prelude
A Paris trust-and-identity infrastructure startup replacing CAPTCHA and SMS-only verification with a unified real-time risk signal.
WideField
A Series A AI-agent identity security startup acquired by Cisco for its Splunk Agentic SOC roadmap.
Monnai
A profitable Los Angeles identity and risk-data infrastructure company that raised $12M in January 2026 after fivefold revenue…
Cofide
A six-person, 2024-founded London startup issuing short-lived identities to AI agents, acquired by Keyfactor in July 2026.
Venice Security
A Tel Aviv zero-standing-privilege access startup (formerly Valkyrie) backed by Wiz founders and IVP, positioned against legacy PAM.
Offroad
Agentic identity security platform using AI agents to investigate and remediate access risk across human, machine, and AI…
EmpowerID
Identity governance and access-management suite, led since inception by founder Patrick Parker; acquired by Omada in September 2026…
Securden
A Chennai- and Delaware-based privileged access management vendor serving 26 industry verticals with password vaulting and endpoint privilege…
SPHERE Technologies Solutions
An Edison Partners-backed identity-hygiene specialist automating access cleanup across large identity estates.
Deel
A payroll and HR unicorn embedding deepfake detection and continuous identity checks by acquiring Clarity in August 2026.
Hush Security
A Tel Aviv secretless non-human identity security startup with Akamai as a strategic investor.
MokN
A Paris decoy-portal credential-theft prevention startup, Google Ventures' first French investment.
Zamna
Zamna uses privacy-preserving identity validation to let airlines and governments confirm passenger data matches without centrally sharing sensitive…
IronVest
IronVest is a biometric identity and fraud-prevention platform for financial institutions, built by the founder of BioCatch and…
Nexus Group
Stockholm-founded PKI and identity lifecycle platform for physical and digital credentials, now operating as IN Groupe's workforce and…
Securemetric
Securemetric is Southeast Asia's largest PKI and digital identity vendor, providing digital signature, hardware security module, and authentication…
Veridium
Passwordless authentication platform combining biometrics, FIDO passkeys, and behavioral analysis for workforce and customer identity assurance.
IDnow
European identity-verification-as-a-service platform combining video-based and automated document checks, widely used by banks and telecoms across Germany and…
Xtn Cognitive Security
An Italian fraud-prevention vendor combining behavioral biometrics and device intelligence for banks and fintechs.
Nexis
Nexis is a German identity governance and administration platform acquired by InfraVia and Tikehau Capital to fund European…
dWallet Labs
A Tel Aviv seed-stage cryptographic research team building non-collusive multi-party-computation signature protocols for digital-asset custody.
Oak
A Tel Aviv seed-stage Identity Operating System governing human, machine, and AI-agent identities, backed by three top-tier VCs.
IDEE GmbH
Munich-based passwordless authentication vendor whose AuthN platform uses phone-based biometrics and asymmetric cryptography to deliver phishing-resistant MFA.
Deduce
Identity fraud detection platform built on a large identity graph used to catch synthetic and AI-generated identities at…
Journey.ai
Zero Knowledge identity verification and passwordless authentication platform that validates IDs and biometrics without the vendor taking custody…
swIDch
swIDch is a London-based authentication technology company that licenses OTAC, a one-time dynamic code protocol developed by parent…
ID Agent
Dark web credential and identity-risk monitoring product line (Dark Web ID) operated as a business unit of Kaseya,…
authID
Nasdaq-listed (AUID) biometric identity verification and passwordless authentication platform, formerly Ipsidy, focused on high-assurance identity proofing and deepfake-resistant…
Evident
B2B identity and credentialing platform that verifies business licenses, insurance, and certifications through a single API connected to…
Anonybit
New York-based identity vendor using multi-party computation to decentralize biometric authentication data instead of storing it in a…
TWINSOFT
German IT security specialist since 1989 offering multifactor and biometric identity management (BioShare), darknet monitoring, SIEM/SOC, and privileged…
TRUSFORT
Beijing-based identity and access management vendor providing multi-factor authentication, fraud detection, and zero trust products to Chinese banks,…
OpenText NetIQ
OpenText NetIQ is a legacy identity governance and administration (IGA) suite, now part of OpenText following its 2023…
Permit.io
Full-stack authorization-as-a-service platform that gives engineering teams a hosted policy engine, UI for managing roles/permissions, and audit trail…
Curity
API-driven identity server providing OAuth/OIDC token issuance and fine-grained API security for organizations that need to secure machine-to-machine…
GBG (GB Group)
Publicly traded identity verification, location intelligence, and fraud-prevention company serving banks, government, and e-commerce customers globally, built substantially…
Nametag
Identity verification platform purpose-built for IT helpdesks, designed to stop social-engineering and deepfake-enabled account-recovery attacks against password and…
FaceTec
3D face liveness and biometric-matching software vendor whose technology underpins identity-verification and authentication flows for banks, governments, and…
Invisinet Technologies
A Houston zero-trust vendor using patented First Packet Authentication to cloak OT and IoT networks at the protocol…
Lastwall
A Canadian FedRAMP Moderate-authorized quantum-resilient identity verification vendor analyzing 200+ behavioral signals per login.
Symmetrium
A Tel Aviv startup streaming an encrypted virtual mobile workspace to keep corporate data off personal devices.
IBM Security Verify
IBM's enterprise identity and access management suite covering SSO, adaptive MFA, identity governance, and risk-based authentication as part…
IDfy
A Mumbai identity-verification and trust-infrastructure leader operating in eight countries, with $120M+ raised.
NewCore
A one-year-old Tel Aviv identity-security startup that exited stealth at a $300M valuation.
LastPass
Widely used consumer and business password manager whose 2022 vault-data breach and subsequent incidents have significantly damaged its…
Arcade.dev
A San Francisco AI-agent authorization and action layer backed by Morgan Stanley and Wipro.
Eos
A San Mateo AI-agent identity control plane acquired by AppViewX in March 2026; its co-founder became AppViewX's CTO.
HID Global
Austin-headquartered, ASSA ABLOY-owned identity and access management manufacturer spanning physical access control, biometrics, and PIAM software, a global…
Ilantus Technologies
Identity and access management vendor combining SSO, identity governance, and managed IAM services for enterprises, including many Fortune…
OneLogin
Workforce single sign-on and MFA platform, acquired by One Identity in 2021 and still actively developed and sold…
Aceiss
Aceiss is an access-observability platform that correlates entitlement data with real authorization behavior to reveal who actually has…
AU10TIX
Automated identity verification and fraud-prevention platform used by large consumer internet platforms to verify government IDs and detect…
BlueFlag Security
A Sunnyvale identity-centric SDLC security vendor extending governance to AI coding agents.
Aztec Labs
A London Ethereum privacy-infrastructure team that absorbed ZKPassport, a zero-knowledge ID verification tool covering passports from 130+ countries.
Tower Capital Asia
A Singapore private equity firm that made a majority investment in mobile-protection vendor V-Key in February 2026.
Fabrix Security
A 2025-founded Tel Aviv AI-driven runtime access-control startup acquired by Silverfort.
Swivel Secure
UK-founded multi-factor authentication vendor behind AuthControl Sentry, now operating as part of Nasdaq-listed BIO-key International.
IDenfy
Lithuanian identity verification and fraud-prevention platform combining document, biometric, and AML checks for onboarding regulated and online businesses.
Detack GmbH
Detack GmbH builds EPAS, a password and credential security auditing tool that simulates real cracking attacks rather than…
InstaSafe
A Bengaluru-based zero trust access provider replacing legacy VPNs with identity- and device-verified application access for enterprises, primarily…
Circle Security
Oakland-based, seed-stage passwordless authentication platform using device-bound cryptographic keys instead of a central credential database, backed by a…
Covr Security
A Malmo, Sweden-based provider of cloud-based, BankID-inspired passwordless multi-factor authentication for banks, payment networks, and mobile carriers.
Dapple Security
Colorado-based passwordless authentication startup founded by a former NSA cryptographer, converting biometric fingerprints into passkeys that never store…
TruGrid
A zero-trust secure remote access platform that replaces exposed RDP and VPN infrastructure with brokered, MFA-gated connections to…
Bravura Security
Identity governance, privileged access, and passwordless access management platform with roots dating to 1992, rebranded from Hitachi ID…
iC Consult
The Munich-based, 850-plus-expert independent identity-security specialist, now Bridgepoint-backed after Carlyle's exit.
Cyata
A Tel Aviv AI-agent identity-governance startup acquired by Check Point in February 2026.
Innefu Labs
A 15-year-old New Delhi AI cybersecurity and identity vendor (AuthShield, Prophecy) scaling on a new Series B.
iDAKTO
A Paris digital-identity infrastructure vendor adding eIDAS 2.0 and EUDI Wallet assessment expertise by acquiring Stelau in June…
SecurEnvoy
Long-running UK multi-factor authentication vendor, owned by publicly listed Shearwater Group, that turns existing devices into MFA tokens…
Idenprotect
A UK identity and access management vendor offering certificate-based, passwordless multi-factor authentication and secure browsing for organizations moving…
F8th
Toronto-based continuous authentication vendor using passive behavioral biometrics (mouse, keyboard and device signals) to detect account takeover and…
IndyKite
Identity-powered data platform that uses a knowledge-graph architecture to unify siloed identity and business data, aimed at making…
Segura
Privileged access management platform, formerly known as senhasegura, providing credential vaulting, session recording, and privileged-access recording for enterprises…
Keycard
An a16z-backed agent-identity startup that acquired Anchor.dev and Runebook to add certificate management and MCP connectivity.
Quest Software
A Clearlake-backed identity-management vendor adding non-human and agentic identity security by acquiring Anetac in June 2026.
MojoAuth
MojoAuth is a bootstrapped Palo Alto startup offering a single-API passwordless authentication platform with passkeys, OTP, and magic…
Trust Stamp
A small-cap Atlanta biometric identity company expanding through Lexverify, Cyberfish, and PixelPin.
Ironchip
Spanish identity and access management vendor using location-based signals for passwordless authentication and fraud detection across VPN, AD,…
RSA
Bedford, Massachusetts-based identity security vendor best known for SecurID hardware and software tokens, now an independent private company…
heylogin
heylogin is a German password manager and passwordless login provider that uses a hardware-bound smartphone key with end-to-end…
Securely
Israeli PKI and digital certificate lifecycle management vendor whose C-View platform discovers, monitors, and automates renewal of enterprise…
SensibleVision
Small Florida biometrics vendor behind FastAccess and 3DVerify, patented continuous facial authentication technology licensed to OEM device and…
TheFence
TheFence is an automated access-rights monitoring platform, built by XS Matrix, that enforces least-privilege and segregation-of-duties controls to…
Precisely Enforcive
IBM i (AS/400) privileged access, security monitoring, and compliance suite operated by Precisely.
Corbado
Passkey infrastructure and analytics platform ('passkey intelligence') helping enterprise CIAM teams roll out and optimize FIDO2 passkey authentication…
Fourthline
An Amsterdam KYC and identity-verification platform merging with Veridas to build a transatlantic identity and anti-fraud platform.
ZK Passport
A London zero-knowledge passport-verification protocol acquired by Aztec Labs amid rising age-verification mandates.
idwall
A leading Brazilian identity-verification and onboarding startup acquired by Serasa Experian after CADE clearance.
8Layers
Madrid startup unifying identity security posture management and identity threat detection for European enterprises.
Bridgepoint
A listed London private equity firm with majority stakes in Lansweeper and iC Consult and a stake in…
Cegeka
A family-owned Belgian IT-services firm building defense-sector cyber and IAM practices via 3Point and SecurIT.
Serasa Experian
Brazil's dominant credit-bureau subsidiary of Experian, strengthened in fraud prevention through the ClearSale acquisition.
Border0
A Vancouver privileged-access startup acquired by Tailscale in March 2026, its first acquisition, with its seven-person team joining.
Trillbit
A Bangalore-based startup building data-over-sound proximity authentication that turns any microphone/speaker pair into a contactless, pairing-free second factor…
ASPG
Naples, Florida-based mainframe security vendor providing z/OS encryption, RACF administration, and self-service password reset/MFA for a niche most…
OneVisage
Swiss biometric authentication vendor using standard smartphone cameras to build 3D facial models for passwordless, anti-spoofing device and…
inBay Technologies
inBay Technologies builds idQ, a passwordless digital identity and delegated authorization platform aimed at eliminating usernames and passwords…
Digital Fingerprints
Continuous behavioral-biometric authentication vendor, now a subsidiary of Poland's national credit bureau group (BIK), used to detect account…
Mirae Technology
Publicly listed South Korean identity and authentication vendor specializing in hardware and software OTP tokens, FIDO biometric authentication,…
Asignio
Dual biometric (facial and handwriting-signature) passwordless authentication platform aimed at phishing-resistant, replay-resistant login and step-up verification.
Hypersecu Information Systems
Canadian hardware and cloud multi-factor authentication vendor making FIDO2/FIDO U2F security keys, OTP tokens, and PKI smart cards…
Meeco
Melbourne, Australia-based personal data platform giving individuals a consent-driven identity wallet and verifiable-credential infrastructure that enterprises integrate to…
LogMeOnce
McLean, Virginia identity and access management vendor offering cross-platform SSO, passwordless MFA, and zero-knowledge password management for both…
Plum Identity
A privacy-preserving identity-fraud detector for government programs, built by Pondera's founder and acquired by TrackLight.
Remote
A global employment platform folding device and identity management into the employee lifecycle through its April 2026 acquisition…
Credemtel
A bank-backed Italian digital-identity and trust-services provider that raised its stake in Andxor from 40% to 75% in…
StrongKey
Long-running passwordless authentication and PKI vendor offering a FIDO2-certified authentication server and public key infrastructure for enterprises, fintech,…
Ubiqu
Dutch digital identity vendor providing SIM-independent mobile authentication and signing infrastructure for eIDAS-compliant digital identity wallets.
Oxford BioChronometrics
Behavioral-biometric bot and fraud detection technology ('e-DNA') originating from Oxford University research, protecting ad clicks, forms, and checkout…
Ondato
KYC, AML, and identity-verification platform originating from Lithuania, covering customer onboarding, document validation, and ongoing compliance monitoring for…
Stelau
A 24-year-old Paris digital-identity security consultancy acquired by iDAKTO to complete an end-to-end identity value chain.
VeryAI
A seed-stage Los Angeles palm-print biometric verification and deepfake-detection startup.
Cloudcomputing
An Italian identity and cloud-security specialist inside the Allurity Group that expanded UK/US delivery by acquiring Innovate IT…
Aries Global
An Astorg-backed identity-security platform that acquired IS Decisions (UserLock, FileAudit; 3,000+ customers) in March 2026.
Cremit
A Seoul-based, very early-stage startup building an AI-powered platform to discover, monitor and rotate non-human identities like API…
Zygon
A Paris shadow-IT and identity-usage analytics startup absorbed into Memority's Identity Factory platform in March 2026.
Innovate IT
A London Okta-focused identity and access management specialist acquired by Allurity Group's Cloudcomputing.
Bravas
A Toulouse identity and device-management startup acquired by Remote.
Lovell Consulting
A five-year-old Paris GRC and IAM consultancy (EUR 4.2M revenue) acquired by cybersecurity group Squad.
Privakey
Privakey is a small Philadelphia-based identity vendor offering a passwordless, zero trust authentication platform built around biometrics and…
Deepnet Security
London-based, self-funded MFA and IAM vendor whose DualShield platform unifies multiple authentication methods for VPN, desktop, web, and…
Keypasco
Device-based multi-factor authentication and Zero Trust access platform, originally developed in Gothenburg, Sweden and now marketed globally under…
IS Decisions
A 25-year-old Active Directory access-security vendor (3,000+ organizations) acquired by Aries Global in February 2026.
Riptides
Issues short-lived, auto-rotating cryptographic identities at the kernel level to replace static API keys for services, workloads, and…
Intensity Analytics
Small Virginia-based vendor of TickStream, a behavioral-biometric authentication layer that verifies users by typing cadence and physical effort…
Cyberus Labs
Passwordless multi-factor authentication using dynamically generated audio tokens for human-to-machine and machine-to-machine sessions, aimed at IoT and connected-device…
Softex
Long-running Austin-based vendor of OEM-embedded single sign-on, MFA, and self-encrypting drive management software bundled into PC hardware.
AuthLite
A small Springfield, Illinois vendor that adds native two-factor authentication (YubiKey/OATH-based) directly into Windows Active Directory logons for…
Andxor Soluzioni Informatiche
A Milan PKI and digital-identity specialist being consolidated under Credemtel through a staged majority acquisition.