CISO Tribune

Vendor comparison · 2 companies

RSA Security vs Yubico

RSA Security sells identity and access management products, including RSA ID Plus, which includes SSO, MFA and directory services across cloud, hybrid and on-premises environments. Yubico offers the YubiKey, a phishing-resistant, FIPS 140-3 validated key for multi-factor and passwordless authentication. CISO Tribune files both under Passwordless authentication and authenticators. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • RSA Security
  • Yubico
RSA Security vs Yubico: Products, Customers and Funding Compared
RSA SecurityRSA Security sells identity and access management products, including RSA ID Plus, which includes SSO, MFA and directory services across cloud, hybrid and on-premises environments.rsa.comYubicoYubico offers the YubiKey, a phishing-resistant, FIPS 140-3 validated key for multi-factor and passwordless authentication.yubico.com
What it sells
  • RSA Agent ID[1][7][10]An agentic AI security platform for government, financial services and other highly-regulated organizations.
  • RSA ID Plus[1][2][7]An identity and access management platform that includes SSO, MFA and directory services.
  • Governance & Lifecycle[1][2][4][8]An identity governance and administration (IGA) offering from RSA.
  • YubiKey 5 Series[5][7][8][13]The YubiKey 5 Series uses multi-protocol capabilities that can secure legacy and modern systems.
  • YubiKey Bio Series[5][7]YubiKey Bio Series supports biometric authentication using fingerprint recognition for passwordless logins.
  • Security Key Series[5][7][11][13]The Security Key Series by Yubico delivers FIDO-only security keys for both consumers and enterprises.
  • Yubico Authenticator[5][7][10][13]The Yubico Authenticator app lets users store credentials on a YubiKey and not on a mobile phone.
  • YubiKey as a Service[8][11]YubiKey as a Service is a subscription for organizations.
Categories
Headquarters
Not stated on its pagesStockholm, Sweden[2]
Founded
Not stated on its pages2007[2]
Ownership and funding
Not stated on its pagesPublic (Nasdaq First North Growth Market Stockholm: YUBICO)[3][5][11]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • September 29, 2026RSA announced RSA Agent ID, an agentic identity security platform for highly regulated industries, at The AI Conference in San Francisco.[10]
  • May 26, 2026Yubico announced that its upgraded YubiKey 5 FIPS Series is now FIPS 140-3 validated under certificate 5291.[15]
G2 and Gartner Peer Insights
  • G2: listed, seen November 10, 2026[11]
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
RSA Security says it designs its identity solutions for finance, government and high-assurance organizations, and RSA Agent ID is aimed at highly-regulated organizations. RSA Security names federal, state and local agencies among the customers it helps with Zero Trust mandates. RSA Security offers phishing-resistant authentication, help desk identity verification and access governance to financial services organizations. RSA Security describes its identity capabilities as working across cloud, hybrid and on-premises environments.From its own pages, Yubico sells its Security Key Series to both consumers and enterprises. Within organizations, the Security Key Series is aimed at systems and applications that support FIDO, including mobile-restricted or shared workstation environments. Yubico addresses defense and civilian agencies, offering DOD approved multi-factor authentication for workers who are not PIV/CAC eligible, air-gapped or closed networks, privileged users and remote workers. Government elections and political campaigns are addressed for access to voter registration databases, election management and reporting systems and e-pollbooks. Computer login choices are offered to both organizations and individuals.
Last verified
October 26, 2026September 27, 2026

Where they overlap

  • RSA Security and Yubico are both filed under Passwordless authentication and authenticators.

Where they differ, field by field

  • RSA Security's primary category is Workforce IAM and SSO; Yubico's is Passwordless authentication and authenticators.
  • RSA Security is also filed under Identity governance and administration.
  • RSA Security lists RSA Agent ID, RSA ID Plus and Governance & Lifecycle. Yubico lists YubiKey 5 Series, YubiKey Bio Series, Security Key Series, Yubico Authenticator and YubiKey as a Service.
  • Yubico is headquartered in Stockholm, Sweden.
  • Yubico was founded in 2007.
  • Yubico is a public company listed on Nasdaq First North Growth Market Stockholm as YUBICO.

What it sells: RSA Security

What RSA Agent ID does[1][7][10]
RSA Agent ID discovers AI agents and MCP servers, assigns each one an accountable human owner, and enforces policy on every call through an AI/MCP Gateway. RSA Agent ID records audit evidence of every agent action. Gateways can be RSA-hosted or customer-hosted in cloud, hybrid or on-premises environments.
What RSA ID Plus does[1][2][7]
RSA ID Plus is an identity and access management platform that includes SSO, MFA and directory services. RSA ID Plus runs across cloud, hybrid and on-premises environments. RSA Agent ID integrates with RSA ID Plus.
What Governance & Lifecycle does[1][2][4][8]
RSA Governance & Lifecycle is an identity governance and administration (IGA) offering. Sorenson uses RSA Governance & Lifecycle to move beyond MFA to passwordless across cloud, hybrid, and on-premises environments. RSA explains how to submit a ticket for technical problems with RSA Governance & Lifecycle.

What it sells: Yubico

What YubiKey 5 Series does[5][7][8][13]
The YubiKey 5 Series uses multi-protocol capabilities that can secure legacy and modern systems. The YubiKey 5 Series supports authentication protocols including FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP, OATH-HOTP, Smart card (PIV) and OpenPGP. The YubiKey 5C NFC combines USB-C and NFC in one key to secure online accounts on mobile and desktops.
What YubiKey Bio Series does[5][7]
YubiKey Bio Series supports biometric authentication using fingerprint recognition for passwordless logins. YubiKey Bio Series stores fingerprint templates in the secure element on the key. YubiKey Bio Series is available in USB-A and USB-C form factors.
What Security Key Series does[5][7][11][13]
The Security Key Series supports only the FIDO2/WebAuthn and FIDO U2F authentication protocols. The Security Key Series works across desktop and mobile with touch or tap-and-go authentication over USB or NFC. Serial numbering on the back of the enterprise Security Key Series keys lets enterprises track distribution and usage.
What Yubico Authenticator does[5][7][10][13]
The Yubico Authenticator app lets users store credentials on a YubiKey and not on a mobile phone. The Yubico Authenticator app can generate codes for logging into services.
What YubiKey as a Service does[8][11]
YubiKey as a Service is a subscription for organizations. The enterprise-ready Security Key Series keys are available exclusively as part of YubiKey as a Service. Twitter turned to YubiEnterprise Delivery and YubiEnterprise Subscription services to distribute YubiKeys across its global workforce.

Questions about RSA Security and Yubico

What do RSA Security and Yubico sell?
RSA Security sells RSA Agent ID, RSA ID Plus and Governance & Lifecycle. Yubico sells YubiKey 5 Series, YubiKey Bio Series, Security Key Series, Yubico Authenticator and YubiKey as a Service.
Are RSA Security and Yubico in the same category?
They share Passwordless authentication and authenticators. RSA Security's primary category is Workforce IAM and SSO and Yubico's is Passwordless authentication and authenticators.
Where are RSA Security and Yubico headquartered?
Yubico is headquartered in Stockholm, Sweden.
When were RSA Security and Yubico founded?
Yubico was founded in 2007.
Who owns RSA Security and Yubico?
Yubico is a public company listed on Nasdaq First North Growth Market Stockholm as YUBICO.
Who are RSA Security and Yubico sold to?
RSA Security says it designs its identity solutions for finance, government and high-assurance organizations, and RSA Agent ID is aimed at highly-regulated organizations. From its own pages, Yubico sells its Security Key Series to both consumers and enterprises.
What have RSA Security and Yubico announced recently?
September 29, 2026: RSA announced RSA Agent ID, an agentic identity security platform for highly regulated industries, at The AI Conference in San Francisco. May 26, 2026: Yubico announced that its upgraded YubiKey 5 FIPS Series is now FIPS 140-3 validated under certificate 5291.

About RSA Security

RSA Security sells identity and access management products, including RSA ID Plus, which includes SSO, MFA and directory services across cloud, hybrid and on-premises environments. RSA Security designs its identity solutions for finance, government and high-assurance organizations. RSA provides passwordless solutions and authentication form factors that include FIDO2, biometrics and hardware tokens. RSA Unified Identity Platform is an AI-powered platform from RSA.[1][2][3]

RSA Governance & Lifecycle is an identity governance and administration (IGA) offering. RSA provides IGA capabilities to secure access and enforce policy across environments. Sorenson uses RSA Governance & Lifecycle to move beyond MFA to passwordless across cloud, hybrid, and on-premises environments. RSA ISPM gives organizations visibility into identity risks and automates governance. RSA offers the RSA iShield Key 2.[1][2][3][4]

RSA MFA requires users to verify identity through additional methods such as a passcode, biometric or hardware authenticator. RSA uses machine learning, device matching, behavioral analytics and anomaly detection for automated access decisions that assess risk in real time. Risk-based authentication works with SSO and steps up authentication factors only if the level of risk exceeds what the organization has defined. Policy-based access decisions are possible through the integration of SSO and identity governance. Multi-factor authentication can be used with SSO to require additional factors of authentication when the level of risk warrants it. RSA extends Microsoft Entra with phishing-resistant passwordless, hybrid failover and identity visibility across every environment.[4][5]

RSA lets administrators define trusted locations that determine who can access applications and which assurance level applies to additional authentication. By default, RSA collects location data from users using HTML5 geolocation.[6]

RSA Agent ID is an agentic AI security platform for government, financial services, and other highly-regulated organizations. RSA Agent ID discovers AI agents and MCP servers, assigns each one an accountable human owner, enforces policy on every call through an AI/MCP Gateway, and records audit evidence of every agent action. RSA Agent ID Discover correlates multiple discovery signals to find sanctioned and unsanctioned agents and MCP servers. RSA Agent ID Discover registers each one with a named owner, risk tier and lifecycle state tied to the identity provider. The Model Context Protocol (MCP) is an open standard that lets AI agents call external tools and data sources.[1][7]

RSA Agent ID gateways can be RSA-hosted or customer-hosted in cloud, hybrid or on-premises environments. A fully air-gapped, self-managed version of the RSA Agent ID gateway is coming in 2027. Tenant data for RSA Agent ID stays in the region the customer selects, United States or EMEA. RSA Agent ID integrates with RSA ID Plus, Microsoft Entra ID, Okta, AWS IAM, CrowdStrike, Microsoft Defender, and more today. RSA Agent ID maps evidence to ten major frameworks and sends it to a SIEM. Continuous certification, risk-based access reviews and lifecycle automation arrive with Govern in early 2027.[7]

RSA helps federal, state and local agencies meet Zero Trust mandates with FedRAMP-authorized identity solutions. For financial services organizations, RSA unifies phishing-resistant authentication, help desk identity verification and access governance. RSA offers Customer Support, Professional Services, Education Services and Customer Success. RSA support covers submitting tickets for technical problems with ID Plus, SecurID and RSA Governance & Lifecycle. RSA Security LLC and its affiliates distribute RSA Security Advisories to bring important security information to users of affected RSA products.[4][7][8][9]

RSA Security on the record

Sources

RSA Security full record

  1. [1]rsa.comRSA Security · rsa.com · undated page, accessed October 26, 2026 · Tier A
  2. [2]RSA Security: Identity & Access Management SolutionsRSA Security · undated page, accessed November 10, 2026 · Tier A
  3. [3]RSA Tokens & Authenticators for Identity Security TeamsRSA Security · undated page, accessed November 10, 2026 · Tier A
  4. [4]IAM Solutions: SSO, MFA, Governance & Passwordless | RSARSA Security · undated page, accessed November 10, 2026 · Tier A
  5. [5]SSO: Single Sign-On Identity Access Solutions | RSARSA Security · undated page, accessed November 10, 2026 · Tier A
  6. [6]Add or Delete a Trusted Location | RSA CommunityRSA Community · undated page, accessed November 10, 2026 · Tier A
  7. [7]RSA Agent ID: The agentic identity security platform for highly-regulated industriesRSA Security · undated page, accessed November 10, 2026 · Tier A
  8. [8]Services Overview - RSARSA Security · undated page, accessed November 10, 2026 · Tier A
  9. [9]RSA-2026-18: RSA Security Update for PHP Vulnerabilities | RSA CommunityRSA Community · undated page, accessed November 10, 2026 · Tier A
  10. [10]Hope Isn’t an AI Strategy: RSA Agent ID Closes the Agentic Identity Gap for Highly Regulated IndustriesRSA · published September 29, 2026 · Tier A
  11. [11]RSA Services Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed November 10, 2026 · Tier C

Yubico full record

  1. [1]yubico.comYubico · yubico.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Yubico has been approved for listing on nasdaq stockholmYubico · investors.yubico.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]Yubico is now trading as yubico on nasdaq in stockholm 2023 09 20Nasdaq · nasdaq.com · published September 20, 2023 · Tier A
  4. [4]USB-A YubiKey 5 Nano Two Factor Security Key - Tray of 50 | YubicoYubico · undated page, accessed October 30, 2026 · Tier A
  5. [5]Yubico | YubiKey Strong Two Factor AuthenticationYubico · undated page, accessed October 30, 2026 · Tier A
  6. [6]Solutions to secure your organization | YubicoYubico · undated page, accessed November 10, 2026 · Tier A
  7. [7]YubiKeys | Two-Factor Authentication for Secure LoginYubico · undated page, accessed November 10, 2026 · Tier A
  8. [8]USB-C YubiKey 5C Two-Factor Security Key | YubicoYubico · undated page, accessed November 10, 2026 · Tier A
  9. [9]USB-C YubiKey 5C NFC Two-Factor Security Key | YubicoYubico · undated page, accessed November 10, 2026 · Tier A
  10. [10]Ease of use | YubicoYubico · undated page, accessed November 10, 2026 · Tier A
  11. [11]Security Key Series | YubiKeys | YubicoYubico · undated page, accessed November 10, 2026 · Tier A
  12. [12]Yubico YubiKey 5C Nano FIPS 140-3 | NIST Validated Security Key | USB-CYubico · undated page, accessed November 10, 2026 · Tier A
  13. [13]Security Key C NFC by Yubico - Tray of 50Yubico · undated page, accessed November 10, 2026 · Tier A
  14. [14]YubiHSM 2 v2.4 | Hardware Security Module | USB-AYubico · undated page, accessed November 10, 2026 · Tier A
  15. [15]Yubico Announces Upgraded YubiKey 5 FIPS Series, Now FIPS 140-3 Validated | YubicoYubico · published May 26, 2026 · Tier A

Spot a factual error? Request a correction.