Identity & Access Management

Pick the first of two products.

Open a name for its full profile

Okta Workforce Identity
Capabilities only
Okta · Commercial · 5 capabilities in this domain
Select
Microsoft Entra ID
Capabilities only
Microsoft · Freemium · 4 capabilities in this domain
Select
Cisco Duo
Capabilities only
Cisco · Freemium · 3 capabilities in this domain
Select
CrowdStrike Falcon Identity Protection
Capabilities only
CrowdStrike · Commercial · 3 capabilities in this domain
Select
PingOne
Capabilities only
Ping Identity · Commercial · 3 capabilities in this domain
Select
CyberArk Privileged Access Manager
Capabilities only
CyberArk · Commercial · 2 capabilities in this domain
Select
Microsoft Defender for Identity
Capabilities only
Microsoft · Commercial · 2 capabilities in this domain
Select
Microsoft Entra ID Governance
Capabilities only
Microsoft · Commercial · 2 capabilities in this domain
Select
Silverfort
Capabilities only
Silverfort · Commercial · 2 capabilities in this domain
Select
StrongDM
Capabilities only
StrongDM · Commercial · 2 capabilities in this domain
Select
Teleport
Capabilities only
Teleport · Freemium · 2 capabilities in this domain
Select
BeyondTrust Password Safe
Capabilities only
BeyondTrust · Commercial · 1 capabilities in this domain
Select
BloodHound Enterprise
Capabilities only
SpecterOps · Freemium · 1 capabilities in this domain
Select
Delinea Secret Server
Capabilities only
Delinea · Commercial · 1 capabilities in this domain
Select
SailPoint Identity Security Cloud
Capabilities only
SailPoint · Commercial · 1 capabilities in this domain
Select
YubiKey
Capabilities only
Yubico · Commercial · 1 capabilities in this domain
Select

In Identity & Access Management

Silverfort

Silverfort · Identity & Access Management

CommercialCompany

Silverfort integrates with directory authentication flows to enforce MFA and block risky authentications without agents.

What it does3 capabilities · 2 at full coverage

2 of 3 at full coverage.

Identity Threat Detection & ResponseFullIAM · level 3 · 5 providers
Multi-Factor Authentication★FullIAM · level 1 · 6 providers
Non-Human Identity Discovery & GovernancePartialSECRETS · level 3 · 10 providers

What it proves12 controls across 7 frameworks

Satisfied through its capabilities, not claimed by the vendor.

CSF 2.05 / 106DE.AE-02 DE.CM-03 PR.AA-01 PR.AA-03 PR.AA-05
CIS Controls2 / 18CIS 5 CIS 6
AICM1 / 18IAM
ASVS 5.01 / 17V6
Agentic Top 101 / 10ASI03
CI/CD Top 101 / 10CICD-SEC-2
CRA1 / 41Annex I Part I (2)(d)

What it stops8 techniques · 2 risks

8 techniques countered, 6 of them common

Adversary-in-the-Middle MFA PhishingVery Common
Brute ForceT1110Very Common
Valid AccountsT1078Very Common
Malicious or Compromised OAuth IntegrationCommon
Modify Authentication ProcessT1556Common
Multi-Factor Authentication Request GenerationT1621Common
AI Agent Privilege AbuseEmerging
Forge Web CredentialsT1606Emerging

2 risks reduced

Developer or maintainer account takeoverCritical
Ungoverned non-human and AI agent identitiesHigh

Where it runs2 phases · 2 ways to deploy

Capabilities per lifecycle phase

Operate2
Monitor2

How it is delivered

SaaSSelf-hosted

What it unlocks5 activities · reaches level 5

Program activities its capabilities support, reaching level 5. Supporting an activity is not completing it.

Level 1

SSO and MFA for engineering platformsLow effort

Level 3

Phishing-resistant MFA and just-in-time privilegeMedium effort

Level 4

Govern non-human and AI agent identitiesMedium effort
Identity threat detection and attack path validationMedium effort

Level 5

ContinuousHigh effort

How it holds up

Not assessed yet: no strengths, limits or evaluation scores. 47 of 340 products carry an assessment and 29 are scored.

What it costsPer identity

LicensingPer identity

Priced perhuman or machine identity per month

BillingSubscription

Scales withManaged human, service or AI agent identities

Total cost

Machine identities can outnumber humans many times; confirm whether they count.

What it takes to run

No staffing, rollout time or operational commitment recorded.

What it works with

No supported language, standard, integration or named feature recorded.

What else to look at

No alternative, competitor or family sibling is modeled for it.

What backs this up

No measurement, incident or pipeline using it.

Gantry 7.1.0 · OFF.12 · OFF.13