Non-human identity security
Discovery, governance and protection of service accounts, API keys, tokens and workload or AI agent identities.
15 vendors · alphabetical, never ranked
- AembitAembit sells an identity and access management platform for AI agents and other non-human workloads, verifying their identity and issuing short-lived credentials instead of long-lived secrets.Privately held · primary category
- AponoApono sells a cloud-native privileged access management platform that grants just-in-time, scoped access to humans, machine identities and AI agents and revokes it automatically once a task is complete. 1Password announced on June 15, 2026, that it had acquired Apono.Owned by 1Password since 2026
- Astrix SecurityAstrix Security sells software that discovers, secures, and deploys AI agents, MCP servers, and other non-human identities, remediating excessive privileges and provisioning short-lived, scoped credentials.Owned by Cisco since 2026 · primary category
- BritiveBritive sells a privileged access platform that grants just-in-time, task-scoped access to cloud, hybrid and on-premises systems for AI agents, non-human identities and people, then removes that access once the task ends.Ownership not established
- CyberArkCyberArk sold privileged access management software, along with identity governance, workforce password management, secrets management for machine identities, and controls for AI agent identities.Owned by Palo Alto Networks since 2026
- CyeraCyera sells a data security platform covering data security posture management, data loss prevention and non-human identity discovery, combining agentless scanning and AI classification to locate sensitive data and control who and what can reach it.Privately held
- GitGuardianGitGuardian sells a platform that detects secrets exposed in code repositories, CI/CD pipelines, container registries, and collaboration tools, and extends that detection to govern non-human identities such as service accounts, API keys, and AI agents.Privately held
- Grip SecurityGrip Security sells a platform that discovers AI tools and SaaS applications in use across an organization, manages the risk of uncontrolled identities inside those applications, and detects and responds to related threats.Ownership not established
- PermisoPermiso sells an identity security platform built on a graph that connects every human, non-human and AI identity to the credentials, machines and actions tied to it, used to inventory identities, assess their exposure and detect identity-driven attacks across cloud, SaaS and on-premises environments.Owned by Okta since 2026
- SailPointSailPoint sells identity security software that governs and secures access to applications and data for human and non-human identities across an enterprise.Public (NASDAQ: SAIL)
- SaviyntSaviynt sells an identity platform that governs access for employees, privileged accounts, non-human identities, and AI agents.Privately held
- SonraiSonrai sells a cloud identity security platform centered on its Cloud Permissions Firewall, which analyzes cloud activity to restrict permissions an identity is not using, quarantine dormant identities and block unused services or regions across cloud accounts.Ownership not established
- Truffle SecurityTruffle Security sells TruffleHog, a tool that scans code repositories and other developer and collaboration tools for exposed non-human identities and their secrets, such as API keys, passwords, and tokens, with an enterprise edition adding verification and collaboration features.Privately held
- ValenceValence sells an identity security platform for SaaS and AI agents, covering discovery of shadow and machine identities, enforcement of least privilege and policy on how AI connects to applications, and detection of suspicious identity activity.Ownership not established
- VezaVeza sells an identity security platform that unifies identities and entitlements across people, machines, and third parties, covering access search, automated access reviews, and identity lifecycle management.Owned by ServiceNow since 2026
No vendor pays to be listed or to change what we write. Descriptions are ours, drawn from each company's own site and filings. Corrections: /corrections.