IAM Benchmark

1Kosmos

1Kosmos delivers biometric identity verification and passwordless authentication for workforce and customer identity use cases.

Akeyless

Akeyless secures machine and human credentials via vaultless secrets management, PKI automation, and privileged access for enterprises.

Apono

Apono delivers just-in-time cloud PAM with self-service access workflows for engineering and DevOps teams.

Astrix

Astrix secures non-human identities — API keys, OAuth tokens, service accounts, and AI agents — for enterprise security teams.

Auth0

Auth0 is a developer-first CIAM and workforce IdP platform for B2C, B2B, and employee authentication.

Authenticid

AuthenticID provides AI-powered identity document verification and biometric authentication for enterprise enrollment and fraud prevention.

Authlete

Headless OAuth 2.0/OIDC authorization server backend for engineering teams building API-protected platforms.

Authsignal

Authsignal provides API-first adaptive MFA and passkey orchestration for customer-facing authentication flows.

Authzed

Authzed provides a Google Zanzibar-based fine-grained authorization engine for application developers needing scalable ReBAC.

Badge

Badge delivers zero-knowledge, secretless biometric authentication for enterprise and consumer identity platforms.

Beyondidentity

Beyond Identity delivers hardware-bound passwordless MFA and device trust enforcement for enterprise workforces.

Beyondtrust

BeyondTrust secures privileged access, credentials, and endpoints for enterprise workforce environments.

Cerbos

Cerbos is an externalized policy decision point for fine-grained RBAC/ABAC/ReBAC authorization, targeting engineering teams building multi-tenant apps and agentic systems.

Conductorone

ConductorOne is an IGA and access governance platform for enterprise workforce identity teams.

Empowerid

EmpowerID delivers integrated IGA, PAM, and access governance for enterprise workforce and partner identity programs.

Entra

Microsoft Entra is a full-suite enterprise IAM platform for workforce, B2B, and privileged access management.

Facephi

Facephi delivers biometric identity verification and KYC onboarding for regulated industries requiring fraud-resistant enrollment.

Facetec

FaceTec provides 3D liveness detection and biometric face verification for identity proofing workflows.

Hawcx

Hawcx delivers device-bound, passwordless cryptographic authentication for enterprise workforce and AI agent use cases.

Hydden

Hydden provides identity discovery, posture management, and governance for enterprise security and IGA teams.

Hypr

HYPR delivers phishing-resistant passwordless MFA and workforce identity verification for enterprise authentication replacement.

Idex

IDEX Biometrics makes fingerprint-authenticated biometric smart cards for physical and digital access control.

Idwall

Idwall provides AI-driven identity verification, biometric checks, and KYC/AML automation for customer onboarding in Brazil and Latin America.

Iproov

iProov delivers biometric face verification and liveness detection for enterprise and government identity proofing.

Keycloak

Keycloak is an open-source OAuth2/OIDC identity provider for enterprise workforce SSO and application authentication.

Nexis

Nexis delivers IGA and identity security posture management for enterprise workforce environments.

Observeid

ObserveID delivers converged IAM, IGA, and PAM for enterprise workforce and hybrid cloud environments.

Okta

Okta delivers enterprise IAM—workforce, CIAM, and PAM—for organizations requiring full-lifecycle identity governance.

Oneid

OneID® delivers bank-verified identity proofing and KYC for UK consumer onboarding and age verification.

P0

P0 Security delivers JIT privileged access and zero-standing-privilege enforcement for cloud infrastructure and non-human identities.

Persona

Persona is a purpose-built IDV and KYC/KYB orchestration platform for onboarding and fraud prevention.

Pingidentity

Ping Identity delivers full-lifecycle IAM — authentication, federation, authorization, and governance — for enterprise and consumer deployments.

Plainid

PlainID delivers runtime Policy-Based Access Control and dynamic authorization for enterprise applications, APIs, and data platforms.

Proofid

Not yet evaluated

Sailpoint

SailPoint delivers enterprise identity governance and administration for workforce and non-employee identities.

Saviynt

Saviynt delivers enterprise IGA, PAM, and non-human identity governance for workforce and privileged access programs.

Signicat

Signicat provides identity proofing, eID authentication, and electronic signing for customer-facing digital onboarding.

Silverfort

Silverfort enforces agentless MFA and detects identity threats across hybrid enterprise environments without agents or proxies.

Strata

Strata Maverics orchestrates identity federation and continuity across multi-cloud and hybrid IAM infrastructure for enterprise architects.

Strongdm

StrongDM is a proxy-based PAM platform that brokers and enforces privileged infrastructure access for enterprise engineering and security teams.

Teleport

Teleport secures infrastructure access for humans and machines via certificate-based zero-trust PAM.

Trinsic

Trinsic is a digital ID acceptance and verifiable credentials platform for developers integrating eID and IDV providers.

Yoti

Yoti provides biometric identity verification, age assurance, and digital ID credentials for consumer-facing onboarding.