CISO Tribune

Vendor comparison · 2 companies

Ivanti vs Xage Security

Ivanti offers IT service management software that scales from core service and asset management to ITSM Premium capabilities, with optional autonomous endpoint management add-ons. Xage Security sells the Xage Fabric Platform, which provides unified Zero Trust security across data centers, cloud, digital assets, cyber-physical systems, OT, LLMs, and AI agents. CISO Tribune files both under Zero trust network access. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Ivanti
  • Xage Security
Ivanti vs Xage Security: Products, Customers and Funding Compared
IvantiIvanti offers IT service management software that scales from core service and asset management to ITSM Premium capabilities, with optional autonomous endpoint management add-ons.ivanti.comXage SecurityXage Security sells the Xage Fabric Platform, which provides unified Zero Trust security across data centers, cloud, digital assets, cyber-physical systems, OT, LLMs, and AI agents.xage.com
What it sells
  • Autonomous Endpoint Management[1][2][5]A hands-off approach to unify control of every device on one platform.
  • Application Control[8]Combines allowed and denied lists with privilege management.
  • Ivanti Application Security Posture Management[10]Cloud-based solution that assesses vulnerabilities in applications.
  • Ivanti External Attack Surface Management[11]Cloud-based application that uncovers internet-facing assets with agentless monitoring.
  • Xage Critical Asset Protection[3]Uses identity-based microsegmentation and granular policy enforcement to isolate vulnerable, legacy, and high-value systems.
  • Xage Zero Trust Remote Access[12]Provides zero trust access control for local and remote users and assets.
  • Cybersecurity Services[3][8]Provides consulting and implementation services for industrial cybersecurity programs.
  • TSA Directive Compliance Services[8]Delivers consulting capabilities for TSA Directive compliance.
Categories
Headquarters
Not stated on its pagesPalo Alto, United States[2]
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Not stated on its pagesNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • October 20, 2026Ivanti appointed Robert Ruelas as Chief Revenue Officer and promoted Sterling Parker to Chief Customer Officer.[15]
Not stated on its pages
G2 and Gartner Peer Insights
  • G2: listed, seen November 10, 2026[3]
  • Gartner Peer Insights: listed, seen November 10, 2026[4]
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Ivanti ITSM can be deployed in the cloud, on-premises or as a hybrid combination. Ivanti Application Security Posture Management is aimed at DevSecOps teams, and Ivanti Risk-Based Vulnerability Management provides dashboards for personnel from the SOC to the C-suite. Ivanti also describes ATOs from US federal government agencies such as the Air Force, Army and Navy.Xage Security offers TSA Directive compliance services for oil and gas pipeline operators. A steel manufacturer deployed Xage Zero Trust Remote Access across its North American facilities. Xage Fabric nodes can be deployed on premises, in the cloud, and at remote sites, and Xage offers a local deployment option for air-gapped networks. Customers choose Xage to manage contractor and vendor access and to meet critical compliance deadlines.
Last verified
September 27, 2026November 9, 2026

Where they overlap

  • Ivanti and Xage Security are both filed under Zero trust network access.

Where they differ, field by field

  • Ivanti's primary category is Endpoint management and application control; Xage Security's is OT and ICS security.
  • Ivanti lists Autonomous Endpoint Management, Application Control, Ivanti Application Security Posture Management and Ivanti External Attack Surface Management. Xage Security lists Xage Critical Asset Protection, Xage Zero Trust Remote Access, Cybersecurity Services and TSA Directive Compliance Services.
  • Xage Security is headquartered in Palo Alto, United States.

What it sells: Ivanti

What Application Control does[8]
Application Control combines dynamic allowed and denied lists with privilege management to prevent unauthorized code execution. Application Control is part of the Ivanti User Workspace Manager (UWM) suite.
What Ivanti Application Security Posture Management does[10]
Ivanti Application Security Posture Management (ASPM) is a cloud-based solution that assesses vulnerabilities in internal and customer-facing applications so that DevSecOps teams can prioritize the highest-risk vulnerabilities for remediation. Ivanti ASPM ingests data from over 100 sources and natively integrates with Ivanti ITSM and Ivanti Patch Management.
What Ivanti External Attack Surface Management does[11]
Ivanti External Attack Surface Management (EASM) is a cloud-based application that uses agentless monitoring to uncover all internet-facing assets, including assets that evade detection by traditional discovery tools. Each vulnerability identified by Ivanti EASM is assigned a Vulnerability Risk Score (VRS).

What it sells: Xage Security

What Xage Critical Asset Protection does[3]
Xage Critical Asset Protection isolates vulnerable, legacy, and high-value systems without requiring disruptive network redesign. Xage offers granular access control, segmentation, and virtual patching for CPS, OT, IoT, and infrastructure assets.
What Xage Zero Trust Remote Access does[12]
Xage products provide zero trust access control for local and remote users and assets across IT, OT, cyberphysical systems, and the cloud. Xage provides multi-factor authentication and SSO for every application, device, and all data. Xage products require no agents, clients, firewall rule updates, or network changes.
What Cybersecurity Services does[3][8]
Xage offers services to strategize and architect an industrial cybersecurity program based on identity and asset-centric Zero Trust, IEC 62443, C2M2, NIST 800, NERC, and related industry standards. Xage offers services to transform and integrate cybersecurity measures, capabilities, and controls across OT and OT-IT environments.
What TSA Directive Compliance Services does[8]
Xage services include assessment of existing cybersecurity controls readiness to meet SD02D requirements. Xage services include creation of an Implementation Plan ready for TSA approval.

Questions about Ivanti and Xage Security

What do Ivanti and Xage Security sell?
Ivanti sells Autonomous Endpoint Management, Application Control, Ivanti Application Security Posture Management and Ivanti External Attack Surface Management. Xage Security sells Xage Critical Asset Protection, Xage Zero Trust Remote Access, Cybersecurity Services and TSA Directive Compliance Services.
Are Ivanti and Xage Security in the same category?
They share Zero trust network access. Ivanti's primary category is Endpoint management and application control and Xage Security's is OT and ICS security.
Where are Ivanti and Xage Security headquartered?
Xage Security is headquartered in Palo Alto, United States.
Who are Ivanti and Xage Security sold to?
Ivanti ITSM can be deployed in the cloud, on-premises or as a hybrid combination. Xage Security offers TSA Directive compliance services for oil and gas pipeline operators.
What have Ivanti and Xage Security announced recently?
October 20, 2026: Ivanti appointed Robert Ruelas as Chief Revenue Officer and promoted Sterling Parker to Chief Customer Officer.

About Ivanti

Ivanti offers IT service management software that scales from core service and asset management to ITSM Premium capabilities, with optional autonomous endpoint management add-ons. Ivanti expands visibility with a single-pane view of gateways, devices, users and applications.[1][5]

Ivanti ITSM is built on a multi-tenant platform designed for the cloud, and it can be deployed in the cloud, on-premises or as a hybrid combination. Ivanti ITSM is built on industry standards with 14 ITIL 4-certified practices. Embedded AI in the ITSM product auto-classifies tickets at intake and generates knowledge articles on resolution. AI capabilities require Ivanti ITSM 2024.2 or later on SaaS deployments. ITSM offers over 1,000 connectors that extend workflows into HR, finance, security and more. HR service management automates onboarding, offboarding, case management and employee self-service with a shared ITSM configuration database. GRC management tracks authority documents, citations, controls and risks in a single system.[6]

Ivanti provides agentic AI-guided experiences and automation capabilities across HR, facilities, security and more with its ITSM Premium solution. Ivanti ITSM Premium includes everything in Ivanti ITSM, plus additional capabilities. Autonomous Endpoint Management connects through native integration with ITSM workflows.[5]

Patch for Endpoint Manager adds patch management to an Endpoint Manager environment to evaluate, test and apply OS and app patches enterprise-wide, automatically. Patch for Endpoint Manager detects vulnerabilities in Windows, Mac OS, Linux and hundreds of third-party apps, and deploys pre-tested patches. It supports vulnerability detection and remediation for Windows, macOS and Linux, and scans and reports on AIX, CentOS and HP-UX vulnerabilities. Patching can interact with devices through Wake-On-WAN, device booting, do-not-disturb events and maintenance windows. Application Control combines dynamic allowed and denied lists with privilege management to prevent unauthorized code execution. Application Control is part of the Ivanti User Workspace Manager (UWM) suite.[1][7][8]

Ivanti Risk-Based Vulnerability Management prioritizes the vulnerabilities and weaknesses that pose the most risk. Ivanti RBVM continuously correlates an organization's infrastructure with vulnerability data, threat intelligence, manual pen test and research-based findings, and business asset criticality to measure risk and prioritize remediation activities. Security analysts can deliver lists of prioritized vulnerabilities directly to Ivanti Patch Management for patching through an API integration. Ivanti's Vulnerability Risk Rating (VRR) scores consider threats, not just severity, and update based on real-world threat context. Threat intelligence on vulnerabilities, such as which are tied to ransomware, is sourced from Ivanti Vulnerability Knowledge Base.[9][10]

Ivanti Application Security Posture Management (ASPM) is a cloud-based solution that assesses vulnerabilities in internal and customer-facing applications so that DevSecOps teams can prioritize the highest-risk vulnerabilities for remediation. Ivanti ASPM ingests data from over 100 sources and natively integrates with Ivanti ITSM and Ivanti Patch Management. Ivanti ASPM pricing is based on the number of assets an organization contains. Ivanti External Attack Surface Management (EASM) is a cloud-based application that uses agentless monitoring to uncover all internet-facing assets, including assets that evade detection by traditional discovery tools. Each vulnerability identified by Ivanti EASM is assigned a Vulnerability Risk Score (VRS).[10][11]

Ivanti is headquartered in Utah and has nearly 3,000 employees in 25 countries. Offices include London and Paris, and a new custom-built headquarters in Utah. Ivanti has received ATOs from the Air Force, Army, Department of Defense, Defense Health Agency, Department of Homeland Security, National Guard and Navy. Ivanti offers a customized Success Plan, ROI measurement and Capability Assessment for the Ivanti product suite. Ivanti provides professional services for implementations, and on-demand learning is offered on the Advantage Learning platform.[1][6][13][14]

Ivanti on the record

Sources

Ivanti full record

  1. [1]ivanti.comIvanti · ivanti.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Ivanti | Data Authority. Governed Autonomy. Proactive IT.Ivanti · undated page, accessed October 25, 2026 · Tier A
  3. [3]Ivanti ITSM Reviews 2026: Details, Pricing, & Features | G2G2 · undated page, accessed October 25, 2026 · Tier C
  4. [4]Ivanti Reviews, Ratings & Features 2026 | Gartner Peer InsightsGartner Peer Insights · undated page, accessed October 25, 2026 · Tier C
  5. [5]IT Service Management Solutions | IvantiIvanti · undated page, accessed November 10, 2026 · Tier A
  6. [6]Modern IT Service Management Software | IvantiIvanti · undated page, accessed November 10, 2026 · Tier A
  7. [7]Enterprise Patch Management Software | IvantiIvanti · undated page, accessed November 10, 2026 · Tier A
  8. [8]Application Control - Windows | IvantiIvanti · undated page, accessed November 10, 2026 · Tier A
  9. [9]Risk-Based Vulnerability Management (RBVM) Software | IvantiIvanti · undated page, accessed November 10, 2026 · Tier A
  10. [10]Application Security Posture Management (ASPM) Software | IvantiIvanti · undated page, accessed November 10, 2026 · Tier A
  11. [11]External Attack Surface Management (EASM) Software | IvantiIvanti · undated page, accessed November 10, 2026 · Tier A
  12. [12]Ivanti Careers: Join Our Team of IT Professionals | IvantiIvanti · undated page, accessed November 10, 2026 · Tier A
  13. [13]Security and Compliance | IvantiIvanti · undated page, accessed November 10, 2026 · Tier A
  14. [14]Success, Services and Support | IvantiIvanti · undated page, accessed November 10, 2026 · Tier A
  15. [15]Ivanti Appoints Robert Ruelas as Chief Revenue Officer and Promotes Sterling Parker to Chief Customer Officer | IvantiIvanti · published October 20, 2026 · Tier A

Xage Security full record

  1. [1]Xage fabric platformXage Security · xage.com · published August 13, 2026 · Tier A
  2. [2]Full stack engineerXage Security · xage.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]Xage Security | The Zero Trust Identity PlatformXage Security · undated page, accessed October 30, 2026 · Tier A
  4. [4]Xage Fabric Platform - Xage SecurityXage Security · undated page, accessed November 10, 2026 · Tier A
  5. [5]Xage Security Products | Xage SecurityXage Security · undated page, accessed November 10, 2026 · Tier A
  6. [6]Shield Your Enterprise with Zero Trust Access from XageXage Security · undated page, accessed November 10, 2026 · Tier A
  7. [7]Zero Trust Data Exchange for OT, IT, and Cloud | Xage SecurityXage Security · undated page, accessed November 10, 2026 · Tier A
  8. [8]TSA Directive Compliance Services - Xage SecurityXage Security · undated page, accessed November 10, 2026 · Tier A
  9. [9]Expert Industrial Cybersecurity Professional Services - Xage SecurityXage Security · undated page, accessed November 10, 2026 · Tier A
  10. [10]Xage PartnersXage Security · undated page, accessed November 10, 2026 · Tier A
  11. [11]About Us – Xage SecurityXage Security · undated page, accessed November 10, 2026 · Tier A
  12. [12]World's Largest Steel Manufacturer Selects Xage Zero Trust Remote AccessXage Security · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.