How vendors compareSource labelsThe chip next to each vendor shows where the assessment came from and how independently it's been verified. A higher label is a more independent source — not a better product. See the full trust model at How trust works.
balanced · vendor-sourced
Neutral strengths and gaps for each vendor in this category, from vendors' own public materials — so the questionnaire favors no single vendor. Gaps reflect capabilities not emphasized in public materials, not rankings.
Access graph mapping identities (including NHI) to data and entitlements for authorization visibility.
Authorization/access-governance platform; NHI is one lens of a broader identity-security product.
Analyst coverage
Public fact of coverage — not proprietary ratings
📊
No analyst coverage recorded yet
Integration ecosystemUI-25 — integration network graphEvery Non-Human Identity & Secrets vendor with a detected integration, plus the vendors they integrate with (any category) — integrations are mostly cross-category in practice, so this shows the real neighborhood, not just same-category edges. Non-Human Identity & Secrets vendors are highlighted; connected vendors from other categories are dimmer. Circle size = how many integrations that vendor has. Sourced from each vendor's own published integration/partner pages (see UI-12).
146 edges
CVE exposure in Non-Human Identity & SecretsUI-71 — vendor/CVE treemapEvery Non-Human Identity & Secrets vendor with at least one tracked CVE, sized by count — same data and coloring as the full-catalog version on the Browse page, scoped to just this category.
8 vendors with at least one tracked CVE, sized by how many. Color = relative volume.About CVE trackingSourced from the public NVD database, matched by vendor name (same data as each vendor's own CVE list). Tracking is capped at 100 CVEs per vendor as a scan guard — 1 vendor shown here hit that cap, so their real count may be higher than what's plotted. Vendor-level only, not per-product/version — always check the linked NVD record before drawing conclusions about a specific product.
Security posture in Non-Human Identity & SecretsUI-108 — category security rollupA category-level rollup of the same per-vendor signals shown on each vendor's own page (UI-90/99/102): security-header checks against each vendor's own homepage, and keyword-matched compliance certifications. Coverage is partial — only vendors checked so far are counted, not the whole category — so this describes what's known, not a claim about every vendor in Non-Human Identity & Secrets.
13/23
checked vendors have a strong security-header posture (3+/5)
3
vendors with a disclosed certification
23/49
vendors in this category checked so far
Vendors (49)
⚖ Compare vendors side-by-side
Pick 2–4 vendors, then compare their products and neutral strengths/gaps.
0/4 selected
Aembit5 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Workload identity and access management.
Aembit IAM to Secure AI Agents & WorkloadsAccess Control PlaneMCP GatewaySecretless AuthenticationBlended Identity
Akeyless Security8 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Identity provider for AI agents with secrets mgmt and access control
ANGOKA2 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Lifecycle management solution for machine, device, and workload identities.
ANGOKA Machine Identity Management
AppViewX1 productAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
SSH key lifecycle management platform for visibility, automation, and control
AppViewX AVX ONE SSH
Astrix Security8 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Non-human identity security.
Astrix DiscoverAstrix SecureAstrix Agent Control PlaneAstrix IAM ITDRAstrix Lifecycle ManagementAstrix Protect SecretsAstrix Secure AI Agents
authID2 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Biometric deepfake detection via liveness checks and injection attack prevention.
authID Mandate
BlueFlag Security1 productAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
SDLC identity security platform governing human, NHI, and AI agent access.
BlueFlag Security Platform
Britive1 productAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Cloud-native JIT privileged access mgmt for DevOps & NHIs.
Britive DevOps & Automation Workflows
CipherStash2 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
TypeScript SDK for field-level searchable encryption on PostgreSQL databases.
CipherStash Stash
ClearVector3 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Identity graph platform for attributing cloud & CI/CD actions to specific identities
ClearVector Identity Graph
Clutch Security6 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Codezero1 productAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Gateway that injects credentials in-transit so runtimes never hold secrets.
Codezero
Cofide1 productAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Zero trust identity platform for securing workloads with dynamic credentials
Cofide
Corsha6 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Machine identity provider for operational systems: dynamic machine identities, connection discovery, and identity-based microsegmentation.
Crypto4A3 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Modular blade chassis hardware for scalable cryptographic infrastructure deployment.
Crypto4A QxVault™
Defakto2 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Non-human IAM platform for hybrid IT environments with secretless authentication
Defakto Hybrid IAM PlatformDefakto On-Prem
Delinea9 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Privileged access and identity security: a control plane extending PAM into continuous authorization, with secrets vaulting and identity threat protection.
Device Authority4 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Patented trust anchor tech using device hardware attributes for root of trust
Device Authority DDKGDevice Authority KeyScaler AI
Doppler1 productAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Cloud-based secrets management platform for teams and automated workflows.
Doppler
enclaive6 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Confidential Computing-based Nextcloud hosting with runtime encryption.
enclaive Nitrideenclaive Vault
Entro Security7 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Eos1 productAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
AI-native identity security platform for managing AI agent access risks.
Eos Identity Security Platform
Frontegg2 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Identity and access management platform for AI agents accessing internal tools
Agen for Workforce
GitGuardian6 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Secrets detection and non-human identity security.
GitGuardian NHI Governance
GlobalSign8 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Automates SSL/TLS cert issuance, renewal & revocation via ACME protocol.
GlobalSign IoT Identity Platform
HashiCorp1 productAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Identity-based secrets mgmt platform for credentials, certs, keys & encryption
HashiCorp Vault
Hush Security2 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Runtime security platform for NHIs, secrets, and AI agents with secretless access
Hush PlatformHush Security
IBM11 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
QRadar SIEM and broader security suite.
IBM Cloud Secrets Manager
Keycard Labs1 productAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Unified identity infrastructure for AI agents with federated identity & access
Keycard
Natoma6 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Non-human/agent identity governance: one governed MCP endpoint, shadow-AI discovery, and identity-aware tool access for AI agents.
Natoma Enterprise MCP DeploymentNatoma Shadow AI Discovery & GovernanceNatoma Secure Tool Access for AI AgentsNatoma Enterprise AuthorizationNatoma Role-Based Toolkits
NewCore2 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Identity governance platform for managing AI agent and human identities at scale.
Agentic Governance
Oasis Security4 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Ory Corp5 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
IAM solution for AI agents and agentic AI authentication and authorization
Ory Agentic AI
Permiso4 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Cloud identity security platform for human, machine, and AI identities
Permiso Non-Human Identity Security
Permit.io1 productAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Enterprise security platform for AI agents from Permit
Permit Enterprise-Grade AI Agent Security
Pomerium4 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Self-hosted Zero Trust access proxy for securing human, service, and AI agent access
Pomerium Secure Agentic Access
Riptides1 productAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Runtime NHI enforcement platform securing workloads & AI agents via identity.
Riptides
SailPoint12 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Secrets Vault2 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Image-based passwordless authentication and data protection using PQC
Visual Safeguard
secureg3 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
PKI solution for AI agent identity and quantum-safe cryptographic credentials
SecureG Agentic AI PKI
Silverfort9 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Access intelligence platform for mapping access paths and enforcing least privilege
Silverfort Non-Human Identity Security
SlashID7 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Identity security platform: an identity graph, ITDR, identity posture (ISPM), governance, and a browser extension across human, non-human, and AI identities.
Solvo7 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Manages & secures non-human identities in cloud envs via least-privilege JIT perms.
SecurityGenie - Non-Human Identities
Thales Group6 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
SDK for app-level data encryption, tokenization & masking with centralized mgmt
Thales CipherTrust Secrets Management
Token Security10 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Machine-first identity security.
NHI DiscoveryNHI Lifecycle ManagementNHI Posture ManagementIdentity Threat Detection & ResponseToken AI Agent SecurityToken MCP Server and AI AgentToken NHI Lifecycle ManagementToken Security NHI Automation & RemediationToken Security NHI Discovery & VisibilityToken Security NHI Security Posture Management
TrustFour4 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
TLS control plane securing NHIs via mTLS, ephemeral PSKs, and workload policy.
TrustFour
TrustLogix2 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Data access governance platform enforcing least-privilege across data platforms
TrustLogix TrustAI
Veza10 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Identity security platform built on an Access Graph: access intelligence (ISPM), governance (IGA), and non-human/AI identity security.
Veza NHI Security
Willow3 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Control plane for governing enterprise AI agent identity, access, and actions.
