Identity, from the front door inwards

First the company checks who you are, then what you may open, then who may change everything.

1Login and sign-in ↓Checking who you are when you login, once for every application.OktaPing IdentityRSA SecurityOneSpanWatchGuard TechnologiesSentiLinkMeazure Learning2Who may open whichsystem ↓Giving each person the right accesswhen they join, change jobs orleave.SailPointSaviyntOne IdentityQuest SoftwareVezaOleriaSimeioExostar3Accounts that canchange everything ↓Locking away the administratoraccounts that can change any system.UnosecurCyberArkLiminal Custody4Certificates and keys formachines ↓Digital certificates that let machines prove who theyare to each other.DigiCertSectigoHID5Password managers ↓Apps that store your own passwords on your laptop andphone.EnpassSplashData1Login and sign-in ↓Checking who you are when you log in, oncefor every application.OktaPing IdentityRSA SecurityOneSpanWatchGuard TechnologiesSentiLinkMeazure Learning2Who may open which system ↓Giving each person the right access whenthey join, change jobs or leave.SailPointSaviyntOne IdentityQuest SoftwareVezaOleriaSimeioExostar3Accounts that can changeeverything ↓Locking away the administrator accountsthat can change any system.UnosecurCyberArkLiminal Custody4Certificates and keys formachines ↓Digital certificates that let machinesprove who they are to each other.DigiCertSectigoHID5Password managers ↓Apps that store your own passwords on yourlaptop and phone.EnpassSplashData

Boxes 1 to 3 go from the front door inwards. Box 4 is how machines prove who they are to each other. Box 5 is the password manager on your own laptop. Tap a title in the diagram to jump to its companies.

1

Login and sign-in 7 companies

With single sign-on, you log in once to one service, and it confirms who you are to every other application: email, the HR portal and the code repository. A code from your phone is the second proof, so a stolen password alone is no longer enough. This is called multi-factor authentication.

Single sign-on

One login that works for every application at work.

Okta logoOkta for Developers logoOktaIncludes Okta for DevelopersOkta made single sign-on a product of its own, and it is by far the largest company on this page. Through Okta for Developers, formerly Auth0, it also sells login code that developers add to their own apps. It has engineers in Bengaluru.Bengaluru · Pune · MumbaiHiring now
Ping Identity logoSecuredTouch (Ping Identity) logoPing IdentityIncludes SecuredTouchPing Identity sells single sign-on built for large companies. It has merged with ForgeRock, and it also includes SecuredTouch, which tells a person from a bot by how the screen is touched. It has engineering in Bengaluru.Bengaluru

Login codes and second proofs

The code or device that proves it is you, on top of the password.

RSA Security logoRSA SecurityRSA Security is the oldest name here. Its SecurID token, a key-ring device that shows a new code every minute, was the standard second proof at banks and governments for years. It now sells a software version.BengaluruHired recently
OneSpan logoOneSpanOneSpan still makes the small devices that banks give customers to create login codes. It also sells login checks over the internet and electronic signatures. Its India team is in Delhi NCR.Delhi NCR
WatchGuard Technologies logoWatchGuard TechnologiesWatchGuard Technologies is here for AuthPoint, the second-proof product that it sells with its network security equipment.See alsoNetwork security, firewalls and SASE

Checking that the person is real

Checking that a new account or an exam candidate is a real, specific person.

SentiLink logoSentiLinkSentiLink checks whether a new account belongs to a real person, or to a fake identity made by combining pieces of several real people's stolen details.BengaluruSee alsoFraud prevention, AML and regtech
Meazure Learning logoMeazure LearningMeazure Learning checks that the person taking an online exam is the candidate who registered for it.See alsoTest prep and exam coaching platforms
2

Who may open which system 8 companies

When someone joins, changes jobs or leaves, the HR system tells this software, and it gives, changes or removes that person's access. Removing access when someone leaves is the harder part. Every quarter, managers also confirm who still needs which access. This is called identity governance.

Identity governance software

Software that gives, reviews and removes access.

SailPoint logoSailPointSailPoint is the specialist that leads identity governance. Its Indian engineering is in Pune.PuneHired recently
Saviynt logoSaviyntSaviynt is a newer rival to SailPoint, built for the cloud, with its own centre in Bengaluru.BengaluruHiring now
One Identity logoOne IdentityPart of Quest SoftwareOne Identity is the identity business of Quest Software. It sells identity governance, together with control of administrator accounts and single sign-on.
Quest Software logoQuest SoftwareQuest Software is here for its tools that protect and manage Microsoft's Active Directory: the master list of users, computers and permissions that most large companies still run on.
Veza logoVezaPart of ServiceNowVeza, now part of ServiceNow, maps every permission in every system, so a company can see what each account can really do.
Oleria logoOleriaOleria makes software that gives and removes access automatically.

Run as a service, or for one industry

Companies that run this work for clients, or for one industry.

Simeio logoSimeioSimeio runs identity work for other companies: its own staff do the work for the client, instead of only selling software.
Exostar logoExostarExostar manages access for the defence and aircraft industry. When a supplier's engineer logs in to the systems of a large aircraft maker, the rules require that login to be strongly checked, and Exostar runs those checks.
3

Accounts that can change everything 3 companies

Some accounts can change any setting in any system, so an attacker who steals one can do the most damage. A vault lends such an account to an engineer for one session, records every action, and changes the password afterwards. This is called privileged access management.

Unosecur logoUnosecurUnosecur is a young company that watches every identity, of people and of software, across AWS, Microsoft Azure and Google Cloud, and looks for any permission that is wider than it needs to be.Bengaluru
CyberArk logoCyberArkPart of Palo Alto NetworksCyberArk created the vault for administrator accounts, and it still leads that market. It has also bought companies that manage the certificates and keys of machines. It has been part of Palo Alto Networks since 2026, and has engineers in Hyderabad.
Liminal Custody logoLiminal CustodyLiminal Custody holds the keys to crypto wallets for institutions. Whoever holds a key can move the money, so Liminal splits each key between several parties, and no single person can move the money alone.BengaluruHired recentlySee alsoCrypto and digital assets
4

Certificates and keys for machines 3 companies

When two machines talk to each other, no person is there to type a password. Instead, each machine shows a digital certificate. A company may have millions of certificates, and each one expires, so finding and renewing them is a job of its own.

DigiCert logoDigiCertDigiCert is one of the largest issuers of digital certificates in the world. It now mainly sells the software that finds, renews and manages certificates. Bengaluru is its largest engineering site outside the United States.BengaluruHiring now
Sectigo logoSectigoSectigo, DigiCert's rival, also issues certificates and sells software to manage them. It has engineers in Chennai.Chennai
HID logoHIDPart of ASSA ABLOYHID makes the ID badges and card readers on office doors. It also issues digital certificates and sells login checks, so the same badge can open the door and log you in.Chennai · BengaluruHired recentlySee alsoPhysical security, surveillance and trust and safety
5

Password managers 2 companies

A password manager stores all your passwords in one locked vault, so you only have to remember one.

Enpass logoEnpassEnpass, from Delhi NCR, keeps your password vault on your own device and your own cloud storage, not on Enpass's servers.
SplashData logoSplashDataSplashData, from California with engineers in Pune, makes SplashID, one of the oldest password managers.
How it all worksEnterprise cybersecurityEverything an attacker can aim at in one company.
See how it works →

What's changing

Most identities are now software, not people.

A large company now has far more software accounts than employee accounts: programs, cloud services and AI agents that log in to other systems by themselves. Each one needs a login, the right access and a way to be removed, just like an employee. Identity companies are rebuilding their products for these non-human identities.

Companies: ingrid's company map. Hiring signals: postings feed of 5 Nov 2026.