--- title: "Identity Tools Directory — IDSync" url: https://idsync.com/directory description: "Browse IAM, SSO, MFA, CIAM, IGA, PAM, SCIM, and AI agent identity vendors. Filter by company size, deployment, open source, and integrations." lang: en --- Directory # Identity, access & authentication tools Compare IAM, SSO, MFA, CIAM, IGA, PAM, SCIM, and AI agent identity vendors. Filter by company size, deployment model, open source status, pricing, and integrations. 14 vendors Image: Aembit company logo (https://www.google.com/s2/favicons?sz=128&domain=aembit.io) Aembit (https://idsync.com/directory/aembit) Enterprise quote AI agent identity Machine identity Visit Aembit website (https://aembit.io/) Aembit is a workload identity and access management platform that manages how workloads, services, and AI agents authenticate and access downstream APIs and services — without static credentials. Secrets / API Key Management: https://idsync.com/directory/category/secrets-api-keys Workforce IAM: https://idsync.com/directory/category/workforce-iam Non-Human Identity: https://idsync.com/directory/category/non-human-identity View profile →: https://idsync.com/directory/aembit Image: Akeyless company logo (https://www.google.com/s2/favicons?sz=128&domain=akeyless.io) Akeyless (https://idsync.com/directory/akeyless) Free tier AI agent identity Machine identity Visit Akeyless website (https://www.akeyless.io/) Akeyless is an established identity security platform delivering secrets management, certificate lifecycle management, encryption/KMS, and secure remote access from a unified SaaS, using patented Distributed Fragments Cryptography (DFC) instead of a self-managed vault. In 2025–2026 it extended the platform to AI-agent identity with ephemeral, task-scoped access. Machine Identity: https://idsync.com/directory/category/machine-identity Secrets / API Key Management: https://idsync.com/directory/category/secrets-api-keys Privileged Access Management / PAM: https://idsync.com/directory/category/pam View profile →: https://idsync.com/directory/akeyless Image: Astrix Security company logo (https://www.google.com/s2/favicons?sz=128&domain=astrix.security) Astrix Security (https://idsync.com/directory/astrix) Visit Astrix Security website (https://astrix.security/) Astrix Security discovers and secures non-human identities, AI agents, and MCP servers, and provisions secure-by-design agents through its Agent Control Plane with short-lived credentials and just-in-time access. Following its acquisition by Cisco, its capabilities are being integrated into Cisco's identity and zero-trust portfolio. SaaS Access Governance: https://idsync.com/directory/category/saas-access-governance Machine Identity: https://idsync.com/directory/category/machine-identity Non-Human Identity: https://idsync.com/directory/category/non-human-identity View profile →: https://idsync.com/directory/astrix Image: Cerbos company logo (https://www.google.com/s2/favicons?sz=128&domain=cerbos.dev) Cerbos (https://idsync.com/directory/cerbos) Visit Cerbos website (https://cerbos.dev/) Cerbos is an authorization management platform built around an open source policy decision point (PDP). It enforces fine-grained RBAC, ABAC, PBAC, and ReBAC policies for applications, APIs, workloads, and AI agents. Authorization: https://idsync.com/directory/category/authorization Non-Human Identity: https://idsync.com/directory/category/non-human-identity AI Agent Identity: https://idsync.com/directory/category/ai-agent-identity View profile →: https://idsync.com/directory/cerbos Image: Clutch Security company logo (https://www.google.com/s2/favicons?sz=128&domain=clutch.security) Clutch Security (https://idsync.com/directory/clutch) Visit Clutch Security website (https://www.clutch.security/) Clutch Security is a non-human identity (NHI) security platform that maps service accounts, keys, tokens, and AI agents to their origins via its Identity Lineage graph, then layers on lifecycle management, posture, and threat detection. It added an Agentic AI Governance module for discovering and setting guardrails around AI agents and their credential usage. Secrets / API Key Management: https://idsync.com/directory/category/secrets-api-keys Non-Human Identity: https://idsync.com/directory/category/non-human-identity AI Agent Identity: https://idsync.com/directory/category/ai-agent-identity View profile →: https://idsync.com/directory/clutch Image: Corsha company logo (https://www.google.com/s2/favicons?sz=128&domain=corsha.com) Corsha (https://idsync.com/directory/corsha) Enterprise quote Machine identity Visit Corsha website (https://corsha.com/) Corsha secures machine-to-machine and API communication with trusted machine identities and dynamic, MFA-style authentication (m-MFA) for machines, plus connection discovery and identity-based access control. It is purpose-built for operational technology, defense, and critical infrastructure, deployable as SaaS or self-hosted via hardware and virtual control points. Machine Identity: https://idsync.com/directory/category/machine-identity Secrets / API Key Management: https://idsync.com/directory/category/secrets-api-keys Non-Human Identity: https://idsync.com/directory/category/non-human-identity View profile →: https://idsync.com/directory/corsha Image: Defakto company logo (https://www.google.com/s2/favicons?sz=128&domain=defakto.security) Defakto (https://idsync.com/directory/defakto) Visit Defakto website (https://www.defakto.security/) Defakto (formerly SPIRL, rebranded in 2026) is a non-human identity and access management platform built on the SPIFFE standard. It issues dynamic, cryptographically verifiable identities for services, workloads, CI/CD pipelines, and AI agents in place of static credentials and service accounts. Machine Identity: https://idsync.com/directory/category/machine-identity Non-Human Identity: https://idsync.com/directory/category/non-human-identity AI Agent Identity: https://idsync.com/directory/category/ai-agent-identity View profile →: https://idsync.com/directory/defakto Image: Entro Security company logo (https://www.google.com/s2/favicons?sz=128&domain=entro.security) Entro Security (https://idsync.com/directory/entro) Visit Entro Security website (https://entro.security/) Entro Security is an agentic AI and non-human identity security platform that discovers, classifies, and governs NHIs and secrets across clouds, code, vaults, and collaboration tools, with behavioral threat detection via its NHIDR engine. SailPoint completed its acquisition of Entro in June 2026, making it the NHI and secrets layer of SailPoint's Agentic Fabric. View profile →: https://idsync.com/directory/entro Image: HashiCorp Vault company logo (https://www.google.com/s2/favicons?sz=128&domain=hashicorp.com) HashiCorp Vault (https://idsync.com/directory/hashicorp-vault) Open core Free tier Enterprise Machine identity Visit HashiCorp Vault website (https://www.vaultproject.io/) Widely used secrets management and machine identity platform, available as open source, enterprise and HCP Vault Dedicated. View profile →: https://idsync.com/directory/hashicorp-vault Image: Keycard company logo (https://www.google.com/s2/favicons?sz=128&domain=keycard.ai) Keycard (https://idsync.com/directory/keycard) Visit Keycard website (https://keycard.ai/) Keycard is an identity and access platform purpose-built for AI agents, founded by former Snyk and Auth0 leaders (including the creator of Passport.js). It verifies agent identity, mints short-lived task-scoped tokens in place of static API keys, and enforces runtime policy with auditable logs. View profile →: https://idsync.com/directory/keycard Image: Natoma company logo (https://www.google.com/s2/favicons?sz=128&domain=natoma.ai) Natoma (https://idsync.com/directory/natoma) Visit Natoma website (https://natoma.ai/) Natoma provides a governed way to connect AI agents and clients (such as Claude Code, ChatGPT, and Snowflake Cortex) to enterprise tools through a catalog of 100+ verified MCP servers, with identity-aware access policies, agent IAM, and audit trails. It began as a non-human identity management platform and has centered its product on secure agentic connectivity. Non-Human Identity: https://idsync.com/directory/category/non-human-identity AI Agent Identity: https://idsync.com/directory/category/ai-agent-identity View profile →: https://idsync.com/directory/natoma Image: Oasis Security company logo (https://www.google.com/s2/favicons?sz=128&domain=oasis.security) Oasis Security (https://idsync.com/directory/oasis) Visit Oasis Security website (https://www.oasis.security/) Oasis Security is a non-human identity management platform covering inventory, ownership, posture, lifecycle, and secret rotation for machine identities, with AI-SPM and intent-aware access controls for AI agents. In July 2026, data-security company Cyera agreed to acquire Oasis for approximately $1 billion, with closing expected later in the year. View profile →: https://idsync.com/directory/oasis Image: P0 Security company logo (https://www.google.com/s2/favicons?sz=128&domain=p0.dev) P0 Security (https://idsync.com/directory/p0) Enterprise quote Machine identity Visit P0 Security website (https://p0.dev/) P0 Security provides an authorization control plane that discovers users, service accounts, agents, and MCP servers with sensitive access, then enforces just-in-time, short-lived access and centralized policy governance across cloud providers, Kubernetes, databases, and servers. It positions itself as a cloud-native alternative to traditional PAM. Identity Governance / IGA: https://idsync.com/directory/category/iga Privileged Access Management / PAM: https://idsync.com/directory/category/pam Authorization: https://idsync.com/directory/category/authorization View profile →: https://idsync.com/directory/p0 Image: Token Security company logo (https://www.google.com/s2/favicons?sz=128&domain=token.security) Token Security (https://idsync.com/directory/token-security) Visit Token Security website (https://www.token.security/) Token Security is a machine-first identity security platform that discovers non-human identities and AI agents across cloud, SaaS, and on-prem environments, then manages their posture, lifecycle, and threats. In March 2026 it introduced Intent-Based AI Agent Security, which aligns agent permissions with their stated purpose. View profile →: https://idsync.com/directory/token-security ## Not sure what to pick? Run the IAM Stack Finder for a guided shortlist tailored to your stack. Run the IAM Stack Finder: https://idsync.com/stack-finder Request a vendor shortlist: https://idsync.com/request-shortlist ## Structured data ```json { "@context": "https://schema.org", "@type": "CollectionPage", "name": "Identity, access & authentication tools directory", "description": "Directory of IAM, SSO, MFA, CIAM, IGA, PAM, SCIM, and AI agent identity vendors.", "url": "https://idsync.com/directory", "isPartOf": { "@type": "WebSite", "name": "IDSync", "url": "https://idsync.com/" } } ```