Alternatives to Hydden
Compare Hydden alternatives for your business or organization using the curated list below. SourceForge ranks the best alternatives to Hydden in 2026. Compare features, ratings, user reviews, pricing, and more from Hydden competitors and alternatives in order to make an informed decision for your business.
-
1
Josys
Josys
Josys is a modern AI-native identity security and governance platform. Enterprise AI adoption has made identity the fastest-growing attack surface — and the hardest to govern. Josys discovers, governs, and secures every identity - human, machine, and AI agent - across every application in the enterprise. Built on policy-led governance, Josys lets security and IT teams define access policies once and enforce them autonomously: risk is surfaced, access is controlled, and identity threats are remediated in real time, without manual oversight. Trusted by over 1,000 organizations and MSPs worldwide, Josys turns identity from the fastest-growing attack surface into an autonomously governed advantage. For more information, visit josys.com. -
2
GitGuardian
GitGuardian
GitGuardian is an end-to-end NHI security platform that empowers software-driven organizations to enhance their Non-Human Identity (NHI) security and comply with industry standards. With attackers increasingly targeting NHIs, such as service accounts and applications, GitGuardian integrates Secrets Security and NHI Governance. This dual approach enables the detection of compromised secrets across your dev environments while also managing non human identities and their secrets lifecycle. The platform supports over 450+ types of secrets, offers public monitoring for leaked data, and deploys honeytokens for added defense. Trusted by over 600,000 developers, GitGuardian is the choice of leading organizations like Snowflake, ING, BASF and Bouygues Telecom for robust secrets protection.Starting Price: $0 -
3
Guardz
Guardz
Guardz is the unified cybersecurity platform purpose-built for MSPs. We consolidate the essential security controls, including identities, endpoints, email, awareness, and more, into one AI-native framework designed for operational efficiency. Our identity-centric approach connects the dots across vectors, reducing the gaps that siloed tools leave behind so MSPs can see, understand, and act on user risk in real time. Backed by an elite research and threat hunting team, Guardz strengthens detection across environments, turning signals into actionable insights. With 24/7 AI + human-led MDR, Guardz utilizes agentic AI to triage at machine speed while expert analysts validate, mitigate, and guide response, giving MSPs scalable protection without adding headcount. Our mission is simple: give MSPs the scale, confidence, and clarity they need to stay ahead of attackers and deliver protection to every SMB they serve. -
4
Defakto
Defakto
Defakto secures every automated interaction by issuing short-lived, verifiable identities to non-human actors such as services, pipelines, AI agents, and machines, eliminating static credentials, API keys, and standing privileges. Their unified non-human identity and access management solution enables discovery of unmanaged identities across cloud, on-premises, and hybrid environments, issuance of dynamic identities at runtime tied to policy, enforcement of least-privilege access, and full audit-ready logging. The product consists of modules; Ledger for continuous discovery and governance of non-human identities; Mint for automated issuance of purpose-bound, ephemeral identities; Ship for secretless CI/CD workflows where hard-coded credentials are removed; Trim for automatic right-sizing of access and removal of over-privileged service accounts; and Mind for securing AI agents and large-language models with the same identity model used for workloads. -
5
Activate IAM
Activate IAM
Activate IAM is an Enterprise Identity Operations platform that automates identity approvals, provisioning, fulfilment and lifecycle changes across Microsoft Entra, Active Directory, ServiceNow and enterprise applications. Activate coordinates the operational work triggered by identity changes, including joiner, mover and leaver (JML) processes, business and IT approvals, provisioning, deprovisioning and fulfilment across multiple systems. Designed to work alongside existing identity platforms, Activate helps execute identity and access decisions through automated workflows across systems and stakeholders. It supports complex and hybrid enterprise environments where identity processes extend beyond account creation, as well as the operational lifecycle of non-human identities, including service accounts, bots and AI agents.Starting Price: NZ$4/month/user -
6
Entro
Entro Security
Non-Human Identity & Secrets Security Platform. A pioneer in non-human identity management, Entro enables organizations to securely utilize non-human identities and secrets, overseeing their usage and automating their lifecycle from inception to rotation. Secrets-based cyber attacks are devastating and growing as more and more secrets are created by R&D teams and spread across various vaults and repositories with no real secret management, monitoring, or security oversight. Streamline and secure your non-human identity lifecycle management. With Entro, security teams can now oversee and protect Non-human identities with automated lifecycle management and seamless integration, ensuring comprehensive security & compliance through a unified interface. -
7
Token Security
Token Security
Token Security accelerates secure enterprise adoption of Agentic AI by discovering, managing, and governing every AI agent and non-human identity across the organization. From continuous visibility to least-privilege enforcement and lifecycle management, Token Security provides complete control over AI and machine identities, eliminating blind spots, reducing risk, and ensuring compliance at scale. -
8
Permiso
Permiso Security
Permiso is an identity security platform that secures human, non-human, and AI identities across cloud, SaaS, and on-premises environments. The platform is built around its Universal Identity Graph, which connects identities to credentials, machines, agents, permissions, and runtime activity to provide continuous visibility across authentication boundaries. Permiso helps organizations discover identities, evaluate identity risk, detect threats, and defend against account compromise, insider threats, and attacks targeting AI agents and non-human identities. The platform combines identity discovery, posture management, runtime monitoring, threat detection, and response capabilities into a single identity security solution. It continuously analyzes identity behavior, permissions, tool calls, API activity, and machine interactions to identify suspicious activity before it becomes an incident. -
9
Quest Identity Defense
Quest Software
Quest Identity Defense, formerly Security Guardian, is an agentic AI-powered identity security solution for protecting hybrid Active Directory and Microsoft Entra ID environments. The platform continuously monitors human and non-human identities to identify risks, anomalous behavior, privilege exposures, and vulnerabilities involving critical Tier 0 assets. Identity posture management benchmarks AD and Entra ID configurations against industry best practices and provides remediation guidance for discovered security weaknesses. Proactive object protection prevents unauthorized or risky changes to critical objects, while Shields Up and agentic AI capabilities can automatically contain active attacks and block lateral movement. Deep monitoring and human-readable auditing provide information about who changed an identity asset, what was changed, when and where the change occurred, and which workstation was involved. -
10
Teleport
Teleport
The Teleport Infrastructure Identity Platform modernizes identity, access, and policy for infrastructure, for both human and non-human identities, improving engineering velocity and resiliency of critical infrastructure against human factors and/or compromise. Teleport is purpose-built for infrastructure use cases and implements trusted computing at scale, with unified cryptographic identities for humans, machines and workloads, endpoints, infrastructure assets, and AI agents. Our identity-everywhere approach vertically integrates access management, zero trust networking, identity governance, and identity security into a single platform, eliminating overhead and operational silos. -
11
Linx Security
Linx Security
Linx Security is an AI-native identity security and governance platform designed to give organizations full visibility and control over the entire identity lifecycle. It enables teams to map, monitor, and manage all identities, including human and non-human, across applications, cloud environments, and on-prem systems, helping reduce blind spots and shrink the identity attack surface. It provides a unified system that connects identity, security, and IT operations, allowing them to manage access, enforce policies, and maintain compliance from a single place. Using AI-powered analytics, Linx continuously analyzes identity relationships, entitlements, and access patterns to detect risks, anomalies, and gaps such as dormant accounts, excessive privileges, weak authentication, or missing security controls. It includes features like identity security posture management, just-in-time access, and lifecycle automation, enabling organizations to replace standing privileges. -
12
CloudEagle.ai
CloudEagle.ai
CloudEagle.ai is an AI-powered SaaS Management, AI Governance, and SaaS Security platform that gives enterprises one command center to discover, secure, govern, and optimize their entire SaaS and AI stack, including AI usage control and both human and non-human identities. CloudEagle governs applications, identities, and non-human identities (service accounts, bots, API keys, AI agents) continuously, rationalizing redundant tools and tracking security posture against frameworks like NIST 800. Onboarding takes 30 minutes; savings and governance start day one. To date: $50B+ in spend processed, $3B+ saved. With 500+ integrations, CloudEagle eliminates shadow SaaS and AI, enforces AI usage policies, and secures non-human identities. Slack-enabled, no-code workflows automate onboarding/offboarding, access reviews, license harvesting, and just-in-time access, while an autonomous agent triggers renewals and routes approvals through Slack, Jira, or ServiceNow.Starting Price: $2000/month -
13
Clutch
Clutch
Clutch is addressing the increasingly critical challenge of non-human identity security within modern enterprises. As digital infrastructures expand and become more complex, the management and security of non-human identities, ranging from API keys and secrets to tokens and service accounts, have emerged as a pivotal yet often neglected aspect of cybersecurity. Recognizing this gap, Clutch is developing an enterprise platform dedicated to the comprehensive protection and management of these identities. Our solution is designed to fortify the digital backbone of enterprises, ensuring a secure, resilient, and trustworthy environment for their operations. Ever expanding, outpacing human identities by a staggering ratio of 45 to 1. Holds critical privileges and extensive access, essential for mission-critical automated processes. Lacks inherent security controls such as MFA and conditional access policies. -
14
JetStream Security
JetStream
JetStream Security is a security-first AI governance platform designed to give enterprises full visibility, control, and accountability over their AI systems by turning them from opaque, fragmented tools into managed, traceable infrastructure. It acts as a centralized control plane that connects identity, runtime governance, observability, and financial oversight into a single system, allowing organizations to “see every AI action, tie actions to accountable owners, [and] keep workflows inside approved boundaries” while enforcing policy at runtime. It introduces agentic identity, binding human, agentic, and non-human identities to specific actions and access permissions, ensuring every invocation, tool call, or workflow can be traced and governed through least-privilege access principles. Through continuous runtime governance, JetStream compares live AI behavior against approved blueprints, using immutable logging and real-time observability to detect drift. -
15
Oasis Security
Oasis Security
Oasis Security provides the first enterprise platform purpose-built to secure the complete lifecycle of NHIs. Oasis continuously analyzes your environment to identify, classify and resolve security risks related to all Non-Human Identities. Auto-discovers all NHIs (Non-Human Identities). Oasis seamlessly connect with your environment and in minutes automatically creates a comprehensive inventory of all Non-Human Identities, providing a consolidated single pane of glass. Automatically assesses and ranks posture issues. The platform conducts automated assessments of the system's posture, meticulously evaluating its configuration and compliance. It then ranks posture issues based on their severity, allowing for a prioritized approach to addressing Non-Human Identity risks. Gives out-of-the-box remediation plans to shorten resolution. In addition to identifying issues, the platform goes a step further by offering pre-configured remediation plans. -
16
BeyondTrust Pathfinder
BeyondTrust
BeyondTrust Pathfinder offers a comprehensive identity-centric security platform designed to protect enterprises from privilege-based attacks by delivering visibility, control, and governance across human and non-human identities, credentials, and access paths. At the core is the Pathfinder Platform, which dynamically maps paths to privilege across endpoints, servers, clouds, IdPs, SaaS, and databases, exposing hidden over-privileged accounts, orphaned identities, and attack vectors. Other key components include Identity Security Insights for unified detection and risk-based prioritization of identity threats, Password Safe to discover, vault, manage and audit privileged credentials and session activity, Privileged Remote Access for secure, rule-based access with full session monitoring, Entitle for automating cloud permissions and just-in-time access, Endpoint Privilege Management for enforcing least-privilege on endpoints with application control and file-integrity monitoring. -
17
CyberArk Machine Identity Security
CyberArk
CyberArk Machine Identity Security provides comprehensive protection for all machine identities, including secrets, certificates, workload identities, and SSH keys. The platform offers centralized visibility and scalable automation to secure these non-human identities throughout their lifecycle. Designed to help organizations reduce risk and maintain resilience, CyberArk ensures secure machine identity management across on-premises, cloud, and hybrid environments. -
18
Aembit
Aembit
Replace manual and insecure access to non-human identities with our automated and secretless Workload IAM platform. Manage your workload-to-workload access like you do your users: with automated, policy-based and identity-driven controls, so you can proactively eliminate the risk of non-human identities. Aembit boosts security by cryptographically verifying workload identities, in real time, ensuring that only trusted workloads have access to your sensitive data. Aembit injects short-lived credentials into requests just-in-time so you never have to store or protect secrets. Dynamically enforce access rights based on real-time evaluations of workload security posture, geography and other key behavioral characteristics. Aembit secures access amongst workloads in the cloud on-prem and in SaaS. -
19
Netwrix Identity Manager
Netwrix
Netwrix Identity Manager is an identity governance and administration platform designed to help organizations manage and secure digital identities. It enables businesses to control access for employees, contractors, and non-human identities from a centralized system. The platform automates identity lifecycle processes, including onboarding, role changes, and offboarding. It helps reduce security risks by identifying excessive access, dormant accounts, and segregation of duties issues. Netwrix Identity Manager also supports compliance by providing access reviews, certifications, and audit-ready reporting. The solution integrates with directories, cloud platforms, and business applications through prebuilt connectors. It simplifies identity management with no-code workflows and flexible deployment options. By combining automation and governance, it helps organizations maintain secure and efficient identity processes. -
20
Idira
Idira by Palo Alto Networks
Idira is Palo Alto Networks’ next-generation identity security platform built for the AI enterprise, designed to secure every human, machine, and agentic identity through one unified control plane. It modernizes privileged access management by extending privilege controls beyond administrators to every identity that can access sensitive systems, data, applications, cloud services, workloads, endpoints, secrets, certificates, SSH keys, and AI agents. It discovers identity risk, applies privilege dynamically, and governs the full lifecycle from first access to final session. Idira replaces static, always-on access with dynamic privilege, just-in-time access, zero standing privilege, continuous verification, policy-driven controls, and real-time enforcement based on identity, device, and context. For human identities, it unifies privileged access, workforce access, endpoint privilege management, and identity governance, helping organizations reduce privilege sprawl. -
21
Cydenti
Cydenti
Cydenti is a cloud-hosted identity security platform for inventorying human and non-human identities across SaaS and cloud services. It uses read-only connections to collect identity, service-account, OAuth application, token, and permission data from supported applications. Security and IAM teams can review dormant or orphaned credentials, excessive access, OAuth risks, and other posture findings; prioritize issues; and prepare governance reports. The service offers a free one-time audit of up to three SaaS applications, a monthly proof-of-concept plan, and continuous monitoring. Documented connectors include Microsoft 365, Microsoft Entra ID, Google Workspace, Salesforce, Okta, AWS, and other SaaS, cloud, identity, and security products. Cydenti targets CISOs and IAM, security, cloud, and compliance teams at small and mid-sized organizations.Starting Price: €490/month -
22
Adaptive
Adaptive
Adaptive is a data security platform designed to prevent sensitive data exposure across all human and non-human entities. It offers a secure control plane to protect and access data, featuring an agentless architecture that requires zero network reconfiguration and can be deployed in the cloud or on-premises. The platform enables organizations to share privileged access to data sources without sharing actual credentials, enhancing security posture. It supports just-in-time access to various data sources, including databases, cloud infrastructure resources, data warehouses, and web services. Adaptive also facilitates non-human data access by connecting third-party tools or ETL pipelines through a central interface without exposing data source credentials. To minimize data exposure, the platform provides data masking and tokenization for non-privileged users without altering access workflows. Comprehensive audibility is achieved through identity-based audit trails across all resources. -
23
AQtive Guard
SandboxAQ
AQtive Guard is a cybersecurity platform that helps organizations secure and manage cryptographic assets and non-human identities (NHIs) such as AI agents, keys, certificates, algorithms, and machine identities across their entire IT environment. It delivers continuous discovery and real-time visibility into NHIs and cryptography, integrating with existing security tools, cloud providers, and repositories to provide a unified view of security posture. Using advanced AI and large quantitative models, the platform analyzes vulnerabilities, prioritizes risks, and offers actionable insights with automated remediation workflows to fix issues and enforce policies such as credential rotation or certificate renewal. AQtive Guard supports compliance with evolving standards, including new NIST cryptographic protocols, and enables lifecycle management of cryptographic assets to reduce risk from current and future threats. -
24
Valence
Valence Security
Valence finds and fixes SaaS risks. The Valence platform discovers, protects, and defends SaaS applications by monitoring shadow IT, misconfigurations, and identity activities through unparalleled SaaS discovery, SSPM, and ITDR capabilities. Recent high-profile breaches highlight how decentralized SaaS adoption creates significant security challenges. With Valence, security teams can control SaaS sprawl, protect their data, and detect suspicious activities from human and non-human identities. Valence goes beyond visibility by enabling security teams to remediate risks through one-click remediation, automated workflows, and business user collaboration. Trusted by leading organizations, Valence ensures secure SaaS adoption while mitigating today’s most critical SaaS security risks. -
25
Natoma
Natoma
Natoma gives customers a comprehensive platform to discover, secure, and manage all Non-Human Identities, including service accounts, access tokens, API keys, workloads, bots, and more. Natoma offers automated discovery of NHIs across the ecosystem, including intelligent context regarding ownership, downstream dependencies, and permissions. The platform provides continuous monitoring, on-demand & policy-based rotations, and governance. -
26
AgentShield
AgentShield
AgentShield is a next-generation identity platform built to verify both human users and AI agents acting on their behalf. It enables organizations to confirm who an agent is, whether the person behind the agent has provided explicit authority, and that the agent is trustworthy, all through APIs and JavaScript integrations. The product includes tools that detect agentic sessions on a website. and enforces identity and permission checks for agent-to-agent or agent-to-service interactions under the open Model Context Protocol Identity (MCP-I) specification. With KYA, businesses can securely manage agent identities and permissions, institute audit-trails, automation workflows, and finely-tuned access control for autonomous systems, thereby protecting themselves from misuse of digital identities and ensuring transparency when AI systems act on behalf of users. -
27
Darktrace
Darktrace
Darktrace Behavioral Defense Platform is a cybersecurity platform that provides unified visibility, continuous behavioral monitoring, and autonomous response across AI, people, and enterprise infrastructure. The platform uses Adaptive AI to learn the unique behaviors, relationships, and operational patterns of each organization. Darktrace helps security teams detect subtle and novel threats, investigate activity in context, and respond in real time. Its coverage includes AI usage, prompts, agents, development activity, Shadow AI, email, collaboration tools, hybrid networks, cloud, identity, endpoint, and OT environments. Real-Time AI Analyst supports detection, triage, investigation, written reporting, and response to reduce manual effort for SOC teams. Built for modern enterprises, Darktrace helps organizations secure AI adoption, reduce human risk, and protect infrastructure with autonomous behavioral defense. -
28
NewCore
NewCore
NewCore is a next-generation identity provider for humans and AI agents, built around one converged identity core that keeps every human and agentic identity visible, secured, and governed from access to audit. It treats employees, contractors, partners, machines, on-behalf-of actions, delegated agents, and autonomous workloads as first-class identities under one architecture. Identity Security protects the trust behind access with SSO, passkeys, phishing-resistant MFA, secure token signing, authenticator strength scoring, and security-aware policies. Secure Split Key distributes signing authority between NewCore’s cloud and the customer environment so neither side can sign a valid token alone. Identity Discovery maps humans, agents, accounts, applications, authenticators, sessions, and access paths into one live graph, revealing shadow accounts, orphaned credentials, and unmanaged agents. -
29
BloodHound Enterprise
SpecterOps
BloodHound Enterprise is an identity attack path management platform from SpecterOps that helps organizations find, prioritize, and eliminate the paths attackers use to reach critical assets. The platform maps relationships across users, groups, credentials, sessions, permissions, and systems to reveal hidden routes that could enable privilege escalation or lateral movement. It supports continuous attack path management by helping security teams identify high-risk choke points, assign remediation ownership, and track progress over time. BloodHound Enterprise extends beyond traditional identity infrastructure with OpenGraph support for environments such as Okta, GitHub, and Mac. Its Privilege Zone Analysis helps organizations define protected tiers around critical applications, regulated systems, sensitive data, and high-value assets. -
30
QOMPLX
QOMPLX
QOMPLX Identity Threat Detection and Response (ITDR) continuously validates to prevent network takeovers. QOMPLX ITDR uncovers existing Active Directory (AD) misconfigurations and detects attacks in real time. Identity security is essential to network operations. Verify identity in real-time. We verify everyone to prevent privilege escalation and lateral movement. We integrate with your current security stack and use it to augment our analytics resulting in comprehensive visibility. Understand the priority and severity of threats so resources can spend time where it matters most. Real-time detection and prevention stop attackers from bypassing security measures. From Active Directory (AD) security to red teaming and more, our experts are here to support your needs. QOMPLX enables clients to holistically manage and reduce cybersecurity risks. Our analysts will implement our SaaS solutions and monitor your environment. -
31
Akeyless Identity Security Platform
Akeyless
Akeyless delivers identity security for an era shaped by automation and AI. The cloud-native platform secures machines, AI agents, and human access across hybrid, multi-cloud, and on-prem environments. It provides a practical path to secretless, identity-based access through secrets management, certificate lifecycle management and PKI, PAM, and unified governance. Akeyless is built on a cryptography foundation that combines encryption, key management, and Distributed Fragments Cryptography to keep sensitive material under customer control and protected from post-quantum threats. With integrations for cloud IAM, Kubernetes, CI/CD, and MCP-based AI agent workflows, teams can adopt and scale AI agents securely without expanding risk. Akeyless Jarvis™ delivers identity intelligence to surface risky access and strengthen oversight. -
32
Fischer Identity
Fischer International Identity
Fischer empowers organizations to build an effective, predictable and secure Global Identity® Architecture. Securing an Identity Program is the #1 priority now. Fischer Identity provides hardware and software solutions as well as Global Identity® Services to secure and control information technology resources. Leverage our plug & play automation to create predictable, secure provisioning to enable your identities with the access they need on day one as well as deprovision access on-demand. Eliminate the reliance on professional services by automating the Fischer way. Our governance model provides you the control you need to enforce compliance throughout your business. Always know who has access to what, how they obtained the access they have, and remediation when something is not right. Accelerate your digital transformation with Fischer Identity lifecycle management. -
33
Rezonate
Rezonate
Rezonate detects and auto-remediates access configurations, risky activities, and weak security practices from build time to real-time, across your identity providers and IaaS for a complete identity risk reduction. Rezonate continuously synthesizes the data all your cloud applications, resources as well as your human and machine identities. The single, identity storyline it provides gives you a panoramic view of all your identity and access risk. Rezonate’s Identity Storyline goes beyond traditional overloaded graph views to tell you the story behind each identity, exposure and threat, so you can confidently pinpoint, prioritize and act to eliminate access risks. For every risk detected, exposure or an active threat, Identity Storyline tells how it came to be and what havoc it might wreak. Go beyond periodic configuration scans and unlock real-time view of every change and every activity across your cloud identity attack surface. -
34
Opal Security
Opal Security
Opal Security is an identity governance platform designed to control access across human users, AI agents, applications, service accounts, and infrastructure. The platform provides a centralized governance layer for evaluating access requests, enforcing policy, reviewing entitlements, and managing privileged access. Its Paladin AI can assess requests, evaluate risk, recommend or make decisions, and escalate cases to human reviewers while showing the reasoning behind each action. Opal supports just-in-time access that can be granted only when needed and automatically revoked when the work is complete. AI-assisted access reviews analyze entitlements and supporting evidence to recommend approval or removal decisions with an auditable record. The platform can be deployed in Opal’s cloud, a customer-managed environment, virtual machines, or Kubernetes, with searchable logs for access changes and administrative activity. -
35
LinuxGuard
LinuxGuard
LinuxGuard is the control plane for Linux identity — a continuous Identity Security Posture Management (ISPM) and Identity Threat Detection & Response (ITDR) platform purpose-built for the Linux estate, rather than adapted from a Windows-first or cloud-first tool . It gives security and infrastructure teams a single, always-current inventory of every human account, service identity, SSH key, sudo rule, and PAM configuration across on-prem, cloud, and hybrid Linux servers, scoring each identity from 0–100 with inline explanations of the risk factors behind the score . LinuxGuard maps privilege-escalation paths, flags NOPASSWD sudo rules and orphaned or shared SSH keys, detects configuration drift in real time, and maps MITRE ATT&CK-aligned signals for detection and safety-gated automated response. It also generates continuous, audit-ready compliance evidence mapped to NIS2, DORA, SOC 2, CIS, NIST, PCI-DSS, and ISO 27001, and integrates wit -
36
Identity Confluence
Tech Prescient
Identity Confluence is an intelligent Identity Governance and Administration (IGA) platform designed to help IT and security teams manage access, automate identity lifecycles, and maintain continuous compliance across cloud and hybrid environments. Built for modern enterprises, Identity Confluence unifies identity lifecycle management, access control, and governance into a single, scalable platform. Automate Joiner-Mover-Leaver (JML) processes, enforce policy-based access controls (RBAC, ABAC, PBAC), and conduct real-time user access reviews—all from one intuitive interface. Key Features: Lifecycle Automation: Trigger real-time provisioning and deprovisioning across HR, IT, and business systems. Access Controls: Implement dynamic, fine-grained access policies using roles, attributes, and policies. App & Directory Integrations: Out-of-the-box connectors for AD, Azure AD, Okta, Workday, SAP, and more. Access Reviews: Automate certifications, enforce Segregation of Duties -
37
IBM’s identity threat detection and response and identity security posture management solution provide you with end-to-end visibility into user activity across the hybrid landscape of siloed IAM tools used across cloud, SaaS, and on-prem applications. IBM Verify Identity Protection provides the ISPM and ITDR functionality to keep your organization safe. Easily deployed without any agents or clients and designed to work in any cloud or network, IBM Verify Identity Protection extends your existing cybersecurity solutions by analyzing and delivering actionable identity risk information that is critical for your security operations. Detects and enables remediation of identity-related blind spots such as shadow assets, unauthorized local accounts, missing multi-factor authentication, and usage of unauthorized SaaS apps across any cloud or platform. Detect vulnerable misconfigurations caused by human error, hazardous deviations from policy, and inadequate implementations of identity tools.
-
38
Aquera
Aquera
The Aquera Identity Integration Platform as a Service is a cloud-based service that provides SCIM gateway services for account provisioning and aggregation, orchestration services for user and password synchronization, workflow services for the governance of disconnected applications, password rotation gateway services for privileged account management, and an extensive supporting catalog of out-of-box connectors for cloud or on-premises applications. Out-of-the-box and built on-demand connectors are plug-n-play from identity management platforms, privileged account management platforms, or HR applications to any cloud or on-premises application, database, directory, device, or B2B portal. The identity integrations require zero coding and rapidly deploy in minutes. The platform features multi-purpose gateway services and out-of-the-box connectors for user provisioning/deprovisioning, HR application user onboarding/mastering, delta account aggregation, file operations, etc. -
39
Anetac
Anetac
Secure your organization with streaming visibility into service accounts and protect access to essential resources. Developed by seasoned cybersecurity experts, the Anetac identity and security platform protects threat surface exploited via service accounts. Revolutionizing cybersecurity by delivering streaming visibility of service accounts, mitigating blind spots, and evolving to meet organizations' dynamic needs, unlike static platforms. Our platform is built to address issues common to all organizations across industries, from poorly monitored or unmonitored service accounts to APIs, tokens, and access keys. Real-time streaming visibility of non-human and shared multi-use service accounts, eliminating blind spots, and improving security hygiene. Mapping of access chains illuminating complex links between service accounts, critical resources, business applications, and processes. Automated classification-driven AI behavior analysis combined with time-series data. -
40
OpenWeave
Seven Olives
OpenWeave is execution governance for AI agents and autonomous systems — a server-enforced state machine that controls what AI agents can do and when. You define workflows as states, transitions, and who may trigger them; the backend enforces every transition with a hard 403, and critical states sit behind human approval gates that block bots until a human signs off. Monitoring tells you what agents did; OpenWeave prevents what they shouldn't do, before it happens. Agents discover allowed transitions from the API instead of hardcoding them, every bot has a verifiable identity, and every change is written to an immutable audit trail. Integrates over a REST API and a remote MCP server. Built for AI-agent developers, AgentOps/MLOps and platform teams.Starting Price: $29/month -
41
PeoplePlatform
Web Active Directory
PeoplePlatform allows you to automate and delegate all the common tasks associated with Identity Management. Stop spending time on provisioning, deprovisioning and directory updates, instead empower your organization to handle these tasks through a simple web interface. Built from the ground up to be customizable, create simple web interfaces to handle even the most complex identity management tasks in your organization. Single and Bulk Deprovisioning – remove access of individual users to your organization’s resources. Handle Workflows – Workflow jobs can be set-up to run after an object is provisioned. -
42
Bevel
Bevel
Bevel is a vendor-agnostic, Git-backed control plane for enterprise AI agents, where an organization’s agents, context, skills, tools, permissions, and identities are defined as files the company owns in its own infrastructure and served to any agent runtime over MCP. Context is stored as typed knowledge nodes with provenance for every fact, including where it came from, who last changed it, and when it was verified, then compiled into a graph that can be traversed, updated, and used for dashboards. Skills are written as plain Markdown procedures that process owners can read, review in diffs, and port across runtimes. Tool manifests define available capabilities, while secrets stay in a vault and access rules determine which agents may read specific files or call endpoints. Each agent has its own identity, credentials, and scope so actions remain attributable. -
43
Identify privileged credentials and dependencies across the enterprise to streamline the implementation of privileged account management. Implement security controls that apply policies based on identity attributes to ensure the principle of “least privilege” is being applied. Track and record privileged activity to thwart breaches and support governance and compliance throughout the entire identity lifecycle. Support your Zero Trust strategy with a dynamic, scalable privileged access management solution that automatically adjusts access in real time. In a complex hybrid environment, uncovering every identity with elevated rights can be difficult or nearly impossible. NetIQ Privileged Account Manager enables you to identify which identities have elevated access across your entire environment and what dependencies exist, giving you the insight you need to better simplify, implement, and manage policies around privilege.
-
44
Delinea Server Suite
Delinea
Easily consolidate complex and disparate identities for Linux and Unix within Microsoft Active Directory. Minimize the risk of a breach and reduce lateral movement with a flexible, just-in-time privilege elevation model. Advanced session recording, auditing, and compliance reporting aid forensic analysis into abuse of privilege. Centralize discovery, management, and user administration for Linux and UNIX systems to enable rapid identity consolidation into Active Directory. Privileged Access Management best practices are easy to follow with the Server Suite. The results are higher levels of identity assurance and a significantly reduced attack surface with fewer identity silos, redundant identities, and local accounts. Manage privileged user and service accounts from Windows and Linux in Active Directory. Just-in-time, fine-grained access control with RBAC and our patented Zones technology. Complete audit trail for security review, corrective action, and compliance reporting. -
45
Anomalix
Anomalix
Engage with employees from Day 1 and remove barriers to collaboration. Real-time and historical data for access management will reduce compliance costs and empower employees. Passwordless enterprise identity and access management. A secure solution to handle the employee lifecycle events (Joiner, Mover and Leaver) to safeguard sensitive data while affording the least privilege access required for job performance. Identify anomalous and suspicious User and Entity behavior. Create efficient and accurate job roles that provide the right level of access and information. Implement an identity management solution for non-employee individuals and corporate assets. Enable cross-organizational collaboration to increase data quality and reduce problems. Create an authoritative source for all non-employee Identities. Perform the necessary identity related due diligence. Manage all identity lifecycle events for humans and assets (Engage, Change, Disengage, Reengage). -
46
Resmo
Resmo
All-in-one platform for SaaS app and access management for modern IT teams. Streamline app discovery, identity security, user offboarding, access reviews, and cost tracking. Actively scan and notify for vulnerabilities with 100+ native integrations with your favorite tools. Review identity access permissions, OAuth risks, and SSO logins. Uncover shared accounts, weak passwords, excessive permissions, externally shared files, and more. Let them use the SaaS they need to get their job done quickly. Lift the burden of security checks on your IT and security teams with automation. Offboard employees securely with no dormant accounts left behind. We empower your team to take ownership of security without any roadblocks, ensuring a seamless and secure workflow. Get accurate visibility over the apps your employees login with their business accounts. Empower your workforce with SaaS adoption while maintaining control over your SaaS security posture.Starting Price: $2 per month -
47
Deep Identity
Deep Identity
Deep Identity enables you to protect your organization with a complete range of Deep Identity integration and data governance products. Built on light-weight flexible and open architecture. Trusted Identity Audit & Compliance Manager (Trusted IACM) is the industry’s most comprehensive solution that provides a ‘layered approach’ to identity governance and administration. Trusted Identity Manager (Trusted IM) is the industry’s most lightweight solution that provides a “layered” approach to identity administration. Privilege Identity Manager (Trusted PIM) is the industry’s most practical and non-intrusive solution to address privilege identity related challenges in any organization. Data Governance Manager (Trusted DGM) provides complete automation for identity, data access governance and lifecycle management with integration across modules and systems. Handle Full time, Contractors profile management, Access review, N Level approval workflow, Self Service, Bulk provisioning etc -
48
Attack Path Analysis
Cloudnosys
Cloudnosys Attack Path maps and analyzes privilege-escalation and lateral-movement routes across cloud environments to reveal how misconfigurations, excessive permissions, and exposed resources could be chained into real-world breaches; it visualizes attack graphs with interactive drilldowns, prioritizes paths by contextual risk scoring (impact × exploitability), and recommends precise, actionable remediation steps to break the highest-risk chains, helping teams close the most dangerous routes first. The solution supports multi-cloud accounts, ingests identity, network, and resource telemetry to reconstruct realistic attack scenarios, simulates exploitation to test mitigation effectiveness, and integrates with existing cloud security workflows to trigger automated or guided fix playbooks, reducing time to detect, investigate, and remediate complex cross-resource threats while lowering alert fatigue. -
49
Dock
Dock
Dock is the AI workspace for you, your team, and every agent you run. It gives humans and AI agents the same shared cloud workspace, where everyone can read and write the same state in real time instead of working across scattered chats, files, and one-off outputs. Dock is built around tables with typed columns, rich-text docs, and agents as first-class identities, each with their own API keys, permissions, and audit trail rather than delegated human tokens. Teams can use Dock to plan, research, decide, and ship with humans and AI on the same surface, with use cases across engineering, go-to-market, research, operations, solo work, and agency workflows. Engineering teams can manage sprint planning, spec docs, and incident response; GTM teams can organize content calendars, sales pipelines, and customer success; research teams can track interviews, themes, and competitive intelligence; and operations teams can manage runbooks, recruiting, compliance, and onboarding.Starting Price: $19 per month -
50
Syrix
Syrix
Syrix is an automated SaaS security platform built specifically for Microsoft 365 environments to help organizations continuously enforce security controls, reduce configuration risks, and maintain compliance. The platform automatically detects and remediates Microsoft 365 misconfigurations, governs privileged access, and monitors identity-related security risks without requiring agents or complex infrastructure changes. Syrix provides continuous enforcement of security policies across Microsoft Entra ID, Exchange Online, SharePoint, OneDrive, Teams, Power BI, and Microsoft Defender using native Microsoft APIs. The platform also includes identity and access governance tools that help organizations review privileged roles, manage guest accounts, enforce least-privilege access, and control risky OAuth permissions. Syrix maps security controls to compliance frameworks such as CIS, CISA SCuBA, NIST, ISO 27001, SOC 2, GDPR, and HIPAA.Starting Price: $5/month
