Topics [Customer Identity and Access Management](/content/insights/customer-identity-and-access-management/index.html) [Data and Information Protection](/content/insights/data-protection/index.html) [Fraud Prevention](/content/insights/fraud-prevention/index.html) [Identity Governance and Administration](/content/insights/identity-governance-and-administration/index.html) [Identity Threat Detection and Response](/content/insights/identity-threat-detection/index.html) [Non-Human Identity](/content/insights/non-human-identity/index.html) [Zero Trust](/content/insights/zero-trust/index.html) Research [Leadership Compass](/content/research?f=leadershipcompass/index.html) [Buyer's Compass](/content/research?f=buyerscompass/index.html) [Advisory Note](/content/research?f=advisorynote/index.html) [Whitepaper](/content/research?f=whitepaper/index.html) [Executive View](/content/research?f=executiveview/index.html) [Leadership Brief](/content/research?f=leadershipbrief/index.html) [Rising Star](/content/research?f=risingstar/index.html) [Product Value Navigator](/content/research?f=productvaluenavigator/index.html) [Blog](/content/blog/index.html) Advisory [Advisory Services](/content/advisory/index.html) [Meet our Advisors](/content/people/index.html) [Strategy Navigator](/content/advisory#navigator/index.html) [Success Stories](/content/advisory#success-stories/index.html) Events [IF Impact Day 2026](/content/events/ifid2026/index.html) [AI & NHI Impact Day 2026](/content/events/nhiid2026/index.html) [CIAM Impact Day 2026](/content/events/ciamid2026/index.html) [EIC 2027](/content/events/eic2027/index.html) [EIC 2026](/content/events/eic2026/index.html) [Upcoming Events](/content/events/index.html) [Upcoming Webinars](/content/webinars/index.html) Videos [All latest videos](/content/videos/index.html) [European Identity and Cloud Conference 2025](/content/videos/eic2025/index.html) [cyberevolution 2024](/content/videos/cyberevolution2024/index.html) [KuppingerCole Webinars](/content/videos/webinars/index.html) [KuppingerCole Analyst Chat](/content/videos/analystchat/index.html) Membership [About](/content/memberships/index.html) [Professional](/content/memberships/single#single-user/index.html) [Expert](/content/memberships/single#single-user/index.html) [Corporate](/content/memberships/teams#for-teams/index.html) Company [About us](/content/about/index.html) [Success Stories](/#success-stories) [People](/content/people/index.html) [Jobs](/content/jobs/index.html) [Newsroom](/content/newsroom/index.html) [Cybersecurity Council](/content/cybersecurity-council/index.html) [Technology Providers](/content/technology-provider/index.html) [Contact us](/content/contact/index.html) [Become a Member](/content/memberships/index.html) Customer Identity and Access Management Data and Information Protection Fraud Prevention Identity Governance and Administration Identity Threat Detection and Response Non-Human Identity Zero Trust See All Topics Research [Leadership Compass](/content/research?f=leadershipcompass/index.html) [Buyer's Compass](/content/research?f=buyerscompass/index.html) [Advisory Note](/content/research?f=advisorynote/index.html) [Whitepaper](/content/research?f=whitepaper/index.html) [Executive View](/content/research?f=executiveview/index.html) [Leadership Brief](/content/research?f=leadershipbrief/index.html) [Rising Star](/content/research?f=risingstar/index.html) [Product Value Navigator](/content/research?f=productvaluenavigator/index.html) [Blog](/content/blog/index.html) [See all research\\ \\ \\ \\ May 19, 2026\\ \\ Identity Governance and Administration (IGA)\\ \\ \\ This Leadership Compass Identity Governance and Administration (IGA) provides an overview of the IGA market and a compass to help you find a solution that best meets your needs. It examines solutions that provide both identity lifecycle management and access governance capabilities. Solutions have](/content/research/lc80864/identity-governance-and-administration-iga/index.html) \\ \\ May 18, 2026\\ \\ Privileged Access Management (PAM)\\ \\ \\ This KuppingerCole Leadership Compass provides an overview of the leading vendors in the Privileged Access Management (PAM) market, assessing their innovation, product capabilities, and market presence. PAM solutions enable organizations to control, manage, and monitor privileged access across](/content/research/lc81007/privileged-access-management-pam/index.html) \\ \\ Apr 29, 2026\\ \\ Managed Detection and Response\\ \\ \\ This KuppingerCole Analysts Leadership Compass provides an overview of the Managed Detection and Response (MDR) market in 2026. It examines services that detect, analyze, investigate, and respond to cyber threats across diverse environments, and evaluates the ability of vendors to deliver](/content/research/lc80871/managed-detection-and-response/index.html) \\ \\ May 19, 2026\\ \\ Identity Governance and Administration (IGA)\\ \\ \\ Modern access governance is strained by identity sprawl (including non-human identities), complex joiner/mover/leaver lifecycles, manual reviews at scale, and integration gaps that create blind spots. IGA platforms centralize identity/entitlement inventories, automate provisioning and](/content/research/bc81004/identity-governance-and-administration-iga/index.html) \\ \\ May 18, 2026\\ \\ Privileged Access Management (PAM)\\ \\ \\ Privileged access has expanded from admin accounts to high-impact actions across human, machine, application, and automated identities in dynamic hybrid/cloud environments. Key problems include action-based privilege definition, fragmented visibility, non-human identity risk, privilege sprawl, and](/content/research/bc81009/privileged-access-management-pam/index.html) \\ \\ May 11, 2026\\ \\ Managed Detection and Response\\ \\ \\ Escalating threats, alert overload, fragmented tooling, and scarce SOC skills drive slow detection and response. Managed Detection and Response (MDR) provides 24/7 monitoring, telemetry correlation, validated detection, and analyst-led investigation/response, augmented by automation and AI. Modern](/content/research/bc81061/managed-detection-and-response/index.html) \\ \\ May 15, 2026\\ \\ Navigating the Agentic AI Security Landscape\\ \\ \\ Enterprise AI deployments have passed a threshold that most security frameworks were not designed for. Agentic AI (autonomous, tool-using systems that chain actions, delegate to sub-agents, and operate continuously on behalf of users) is already in production across a growing number of](/content/research/an82020/navigating-the-agentic-ai-security-landscape/index.html) \\ \\ Apr 22, 2026\\ \\ KuppingerCole 2nd Level Reference Architecture for CIAM\\ \\ \\ The purpose of this document is to define the KuppingerCole Analysts 2nd Level Reference Architecture for CIAM, providing a structured and consistent model for designing, evaluating, and evolving Customer Identity and Access Management (CIAM) solutions.\\ It focuses exclusively on capabilities](/content/research/an81080/kuppingercole-2nd-level-reference-architecture-for-ciam/index.html) \\ \\ Mar 23, 2026\\ \\ Make or Buy: Bringing Structure and Transparency to Strategic Decisions\\ \\ \\ Make or buy decisions are a recurring challenge in Identity and Access Management (IAM) and beyond. While the question appears straightforward, the underlying decision is rarely simple. Organizations must balance multiple, often conflicting dimensions such as cost, functionality, technical](/content/research/an82018/make-or-buy/index.html) \\ \\ Jun 01, 2026\\ \\ Application Inventory - Identify What to Protect. Are You Missing Critical Assets?\\ \\ \\ This whitepaper examines Application Inventory Management (AIM) as a critical, yet often underestimated, enabler for Identity and Access Management (IAM). It shows how incomplete or poorly maintained application inventories undermine IAM initiatives by increasing manual effort, fragmentation, and](/content/research/wp81148/application-inventory-identify-what-to-protect-are/index.html) \\ \\ May 13, 2026\\ \\ Governing Third-Party Privileged Access: Moving Beyond VPN-Based Collaboration\\ \\ \\ Organizations rely on third parties that require remote access to internal systems and operational platforms. Managing this privileged third-party access creates operational and security challenges, particularly when external identities fall outside established governance processes. Many](/content/research/wp81146/governing-third-party-privileged-access/index.html) \\ \\ Apr 22, 2026\\ \\ Access Fabric: Uniting Access Control across Endpoints, Networks and Identity\\ \\ \\ Access Fabric presents a transformative approach in enhancing enterprise security frameworks by integrating identity, network, device, and business signals into a unified, context-aware system. It describes how this new model resolves the limitations of traditional, siloed security practices,](/content/research/wp81140/access-fabric/index.html) \\ \\ May 11, 2026\\ \\ Tuebora\\ \\ \\ Modern IGA struggles with manual governance, siloed identity data, and rising non-human identities (bots, service accounts, AI agents). Tuebora’s roadmap targets lower IGA TCO via dual AI vs deterministic operation, natural-language configuration in Tuebora Studio, a Neo4j-based Unified Identity](/content/research/ev81301/tuebora/index.html) \\ \\ Mar 20, 2026\\ \\ NEXIS Platform - IVIP Capabilities\\ \\ \\ Identity Visibility and Intelligence Platforms (IVIP) unify data from IGA, PAM, AM, and ITDR to resolve fragmented access visibility and enable analytics-driven governance. The NEXIS Platform delivers IVIP plus converged IAM/GRC: role management/mining, cross-application SoD, identity graphs,](/content/research/ev81145/nexis-platform-ivip-capabilities/index.html) \\ \\ Jan 18, 2026\\ \\ Memority\\ \\ \\ Identity Fabrics unify disparate IAM solutions, enabling secure, scalable identity management across complex environments. Leveraging microservices, API-centric design, and Zero Trust principles, these fabrics offer seamless integration and advanced analytics. Memority’s 360° Identity Factory,](/content/research/ev81445/memority/index.html) \\ \\ May 28, 2026\\ \\ No API Security, No AI Security\\ \\ \\ Every AI system acts through APIs: retrieving context, invoking tools, and chaining decisions across enterprise infrastructure. Yet most organizations govern API security, generative AI defense, and non-human identity management as separate disciplines, leaving the gaps unprotected. This Leadership](/content/research/lb80920/no-api-security-no-ai-security/index.html) \\ \\ May 15, 2026\\ \\ Crypto-Agility: Managing Cryptographic Change in the Post-Quantum Era\\ \\ \\ Crypto-agility has become an urgent enterprise requirement as post-quantum cryptography, expanding machine identity ecosystems, and growing regulatory expectations expose the risks of treating cryptographic infrastructure as static. This Leadership Brief examines why organizations struggle to](/content/research/lb80919/crypto-agility/index.html) \\ \\ May 11, 2026\\ \\ Model Context Protocol: The API Security Problem Nobody Is Ready For\\ \\ \\ The Model Context Protocol (MCP) has rapidly become the connective tissue of the agentic AI ecosystem, and it is being deployed at enterprise scale without a mature authentication baseline or reliable runtime enforcement. Security has not kept pace with adoption. This Leadership Brief examines MCP](/content/research/lb80918/model-context-protocol/index.html) \\ \\ May 15, 2026\\ \\ Rising Star TechJutsu\\ \\ \\ Contact Center Authentication strengthens voice and agent-assisted channels by replacing vulnerable knowledge-based questions with IdP-backed MFA. TechJutsu’s CallerVerify triggers verification from ITSM, collaboration, and IVR tools using Okta/Auth0 or Microsoft Entra factors. OrgVerify adds](/content/research/rs81153/rising-star-techjutsu/index.html) \\ \\ May 11, 2026\\ \\ Rising Star Bare.ID\\ \\ \\ Bare.ID is a self-funded Wiesbaden IAM vendor (founded 2022) focused on EMEA mid-market needs within Identity Fabrics. Its subscription offering extends Keycloak into a comprehensive package combining Access Management, IGA, and PAM, with strong UI/UX, open-standard APIs, self-service automation,](/content/research/rs81152/rising-star-bare-id/index.html) \\ \\ Nov 18, 2025\\ \\ Rising Star AuthZed\\ \\ \\ AuthZed provides scalable authorization solutions leveraging SpiceDB for global, fine-grained permissions. Supported by $15.8M funding, their cloud products optimize performance and deployment flexibility. With innovative Materialize technology, AuthZed enhances rapid permission checks. Despite](/content/research/rs81131/rising-star-authzed/index.html) \\ \\ Mar 18, 2026\\ \\ ManageEngine PAM360\\ \\ \\ Privileged Access Management (PAM) is a priority in hybrid environments where ransomware risk, misconfigurations, and audit expectations are rising. Buyers need rapid, practical governance that fits existing identity and monitoring ecosystems, but must still verify modernization, extensibility, and](/content/research/pv81149/manageengine-pam360/index.html) \\ \\ Jun 03, 2026\\ \\ From the Floor, Not the Stage: An Advisory View on EIC 2026\\ \\ \\ AI was the headline at EIC 2026, but the real story was the gap between hype and the unfinished plumbing of identity. In hallway conversations and unfiltered case studies, the same theme kept surfacing: teams can’t govern agents they can’t yet govern users, apps, and access. Here’s what surfaced](/content/blog/schuetze/advisory-view-on-eic-2026/index.html) \\ \\ Jun 02, 2026\\ \\ Your AI Agent Has a Supply Chain Problem\\ \\ \\ Learn how MCP can quietly turn agentic AI into a Log4Shell-like dependency blind spot, and how to get ahead of it. You’ll leave with a practical checklist to inventory MCP endpoints, harden provenance and review of manifests/configs, avoid “valid token = safe code” thinking, and add runtime](/content/blog/balaganski/your-ai-agent-has-a-supply-chain-problem/index.html) \\ \\ Jun 01, 2026\\ \\ Securing and Governing AI: Why AI Security Requires a Fabric, not a Category\\ \\ \\ AI isn’t “just another app,” and your security stack can’t pretend it is. Prompts can be poisoned, retrieval can be manipulated, and agents can take actions across systems faster than reviews can keep up. The answer isn’t a new category, it’s a connected fabric of identity, data, policy, runtime](/content/blog/gardiner/securing-and-governing-ai/index.html) Events [IF Impact Day 2026](/content/events/ifid2026/index.html) [AI & NHI Impact Day 2026](/content/events/nhiid2026/index.html) [CIAM Impact Day 2026](/content/events/ciamid2026/index.html) [EIC 2027](/content/events/eic2027/index.html) [EIC 2026](/content/events/eic2026/index.html) [Upcoming Events](/content/events/index.html) [Upcoming Webinars](/content/webinars/index.html) [See past events\\ \\ Identity Fabric Impact Day 2026 Identity Fabric Impact Day is a focused, one-day, practice-oriented event for IAM professionals, security leaders, and solution providers seeking hands-on guidance on Identity Fabrics - modular, flexible, and scalable architectures that address identity and access needs across the enterprise. Identity Fabrics enable secure, seamless access for employees, customers, partners, and machines, while improving efficiency, supporting compliance, and strengthening security across hybrid and multi-cloud environments. [To the\\ Event](/content/events/ifid2026/index.html) [Call for Speakers\\ \\ AIdentity & Non-Human Identity Impact Day 2026 Join the leading event dedicated to securing and governing non-human identities at scale and learn about AIdentity. Explore how dynamic credentials, automated governance, and Identity Fabric architectures transform how organizations secure workloads, APIs, and services across multi-cloud environments. Connect with experts shaping the future of identity automation, where governance meets agility, and ownership is non-negotiable. [To the\\ Event](/content/events/nhiid2026/index.html) [Call for Speakers\\ \\ Customer Identity & Access Management (CIAM) Impact Day 2026 This event is dedicated to transforming Customer Identity & Access Management (CIAM) into the next era of digital engagement. Explore how EUDI Wallets, verifiable credentials, decentralized identity, and passwordless authentication reshape customer experiences, trust, and digital safety. Connect with identity innovators, security leaders, and business strategists defining how organizations authenticate, protect, and understand their customers in a global, omnichannel world. [To the\\ Event](/content/events/ciamid2026/index.html) [Call for Speakers\\ \\ European Identity and Cloud Conference 2027 Join Europe’s leading event on Digital Identity, Security, Privacy, and Governance in an AI-driven world. Connect with a vibrant community and dive into the technologies shaping the future. [To the\\ Event](/content/events/eic2027/index.html) [Call for Speakers\\ \\ European Identity and Cloud Conference 2026 [To the\\ Event](/content/events/eic2026/index.html) [Agenda Overview\\ \\ \\ \\ Sep 09, 2026\\ \\ Identity Fabric Impact Day 2026\\ \\ \\ Identity Fabric Impact Day is a focused, one-day, practice-oriented event for IAM professionals, security leaders, and solution providers seeking hands-on guidance on Identity Fabrics - modular, flexible, and scalable architectures that address identity and access needs across the enterprise.](/content/events/ifid2026/index.html) \\ \\ Oct 06, 2026\\ \\ AIdentity & Non-Human Identity Impact Day 2026\\ \\ \\ Join the leading event dedicated to securing and governing non-human identities at scale and learn about AIdentity.\\ Explore how dynamic credentials, automated governance, and Identity Fabric architectures transform how organizations secure workloads, APIs, and services across multi-cloud](/content/events/nhiid2026/index.html) \\ \\ Nov 18, 2026\\ \\ Customer Identity & Access Management (CIAM) Impact Day 2026\\ \\ \\ This event is dedicated to transforming Customer Identity & Access Management (CIAM) into the next era of digital engagement.\\ Explore how EUDI Wallets, verifiable credentials, decentralized identity, and passwordless authentication reshape customer experiences, trust, and digital safety. Connect](/content/events/ciamid2026/index.html) \\ \\ Jun 16, 2026\\ \\ Navigating B2B IAM: Leadership Compass Results Revealed\\ \\ \\ As B2B ecosystems grow more complex, managing identities across organizational boundaries has become a strategic priority. In this webinar, KuppingerCole unveils the first results from its Leadership Compass on B2B Identity and Access Management, offering a preview of the Leader chart, key market](/content/events/2026/06/navigating-b2b-iam/index.html) \\ \\ Jun 17, 2026\\ \\ Rethinking Privileged Access\\ \\ \\ Historically, privileged access was associated primarily with human administrators responsible for maintaining servers, networks, and enterprise applications. That model no longer reflects how organizations operate today. This webinar draws on a Leadership Compass covering over 35 vendors to](/content/events/2026/06/rethinking-pam/index.html) \\ \\ Jun 24, 2026\\ \\ Redefining MDR: From Alert Handling to Outcome‑Focused Security Operations\\ \\ \\ Cyber threats continue to target organizations across endpoints, networks, cloud environments, identity systems, and connected devices, while many security teams still struggle with skills shortages, operational complexity, and the challenge of maintaining effective 24x7 monitoring and response. In](/content/events/2026/06/redefining-mdr/index.html) Videos [All latest videos](/content/videos/index.html) [European Identity and Cloud Conference 2025](/content/videos/eic2025/index.html) [cyberevolution 2024](/content/videos/cyberevolution2024/index.html) [KuppingerCole Webinars](/content/videos/webinars/index.html) [KuppingerCole Analyst Chat](/content/videos/analystchat/index.html) [See all videos\\ \\ \\ \\ Jun 15, 2026\\ \\ B2B Identity & Access Management: A New Market Unpacked\\ \\ \\ Business relationships are complex and traditional IAM wasn't built for them. In this episode, Matthias Reinwarth sits down with Principal analyst John Tolbert, author of KuppingerCole Analysts' first-ever B2B IAM Leadership Compass, to explore why Business-to-Business Identity and Access](/content/watch/b2b-iam-new-market-unpacked/index.html) \\ \\ Jun 12, 2026\\ \\ Is Your CDN Secure? CDN vs. DDoS Mitigation Unpacked with Qrator Labs\\ \\ \\ Speed and security are no longer separate concerns. In this videocast, Osman Celik sits down with Andrey Leskin, CTO of Qrator Labs, to break down what Content Delivery Networks really are in 2026 and why they've become a critical piece of modern security infrastructure, not just a performance](/content/watch/videocast-qrator-secure-cdn/index.html) \\ \\ Jun 10, 2026\\ \\ From SAP IDM to Modern IGA: Closing the AD Lifecycle Gap Before 2027\\ \\ \\ SAP Identity Management reaches end of mainstream maintenance in December 2027, and every IGA vendor is offering a replacement. But most migration guidance misses a critical gap: organizations following SAP's recommended path to Microsoft Entra will still lack proper Active Directory lifecycle](/content/watch/sap-idm-to-modern-iga/index.html) \\ \\ May 09, 2025\\ \\ PANEL: The REAL Business Case for Decentralized Identity & EU DI Wallet\\ \\ \\ While the promise of decentralized identity (DID) and the EU Digital Identity Wallet (EUDI Wallet) is often framed in terms of privacy and user control, the real driver for widespread adoption will be compelling business value. This panel will move beyond the hype to examine what truly makes](/content/watch/panel-the-real-business-case-eic25/index.html) \\ \\ May 09, 2025\\ \\ PANEL: Delegation with Boundaries: Ownership, Accountability, and Trust in B2B Federations\\ \\ \\ As digital ecosystems become more interconnected, organizations increasingly rely on federated identity and access models to collaborate across business boundaries. Yet this reliance raises a crucial question: How much control should be retained internally, and how much can be safely delegated to](/content/watch/panel-delegation-with-boundaries-eic25/index.html) [![AI at your Service [Intermediate]](/content/pictures/400/2025_eic_1280-720_miniature.jpg)\\ \\ May 09, 2025\\ \\ AI at your Service \[Intermediate\]\\ \\ \\ Imagine a future where AI seamlessly handles Identity Governance and Administration (IGA) tasks—whether you’re an administrator, a helpdesk agent, or an end user. Instead of navigating complex workflows and esoteric User Interfaces, AI will be at your service, executing tasks through](/content/watch/ai-at-your-service-eic25/index.html) \\ \\ Dec 05, 2024\\ \\ Transforming Ecosystem Partner Security Risk Management: Lessons Learned and Insights for DORA Implementation\\ \\ \\ As organizations face increasing regulatory demands and evolving cyber threats, effective Ecosystem Partner security risk management has become a critical priority. This session will explore a successful transformation journey in Ecosystem Partner security risk management, highlighting the](/content/watch/transforming-ecosystem-partner-security-risk-management-cre24/index.html) \\ \\ Dec 05, 2024\\ \\ In der digitalen Arena: Digitalisierung bei Bayern München - aber sicher](/content/watch/arena-digitalisierung-bayern-munchen-cre24/index.html) \\ \\ Dec 05, 2024\\ \\ Enhancing Cyber Resilience: Integrating Identity Management, Multi-Cloud Strategies, and Advanced Threat Detection](/content/watch/enhancing-cyber-resilience-cre24/index.html) \\ \\ Jun 04, 2026\\ \\ Unified Governance Across SAP and Business Applications\\ \\ \\ As organizations expand beyond SAP into hybrid ecosystems of SaaS and LoB applications, governance becomes fragmented and inconsistent. Traditional access control approaches no longer suffice, requiring a shift toward holistic Business Application Risk Management that leverages integrated](/content/watch/heterogeneous-it/index.html) \\ \\ May 28, 2026\\ \\ Beyond SOAR: The Rise of the AI SOC\\ \\ \\ The AI SOC market is expanding rapidly as security vendors race to deliver security automation systems that help deliver smarter triage, improved investigations, and faster responses. But not every AI claim translates into meaningful operational improvement. \\ This webinar examines what is](/content/watch/rise-of-ai-soc/index.html) \\ \\ Jun 08, 2026\\ \\ PAM Is No Longer a Vault: The New Identity Security Layer\\ \\ \\ Privileged Access Management has outgrown the vault. In this episode, Matthias sits down with lead analyst Alejandro Leal, author of KuppingerCole's newly released PAM Leadership Compass, to explore how the definition of privilege itself has changed, what NHIs and agentic AI mean for PAM, and why](/content/watch/pam-no-longer-a-vault/index.html) \\ \\ Jun 01, 2026\\ \\ Know Your Attack Surface: ASM, DRP & Brand Protection\\ \\ \\ Not all cyber threats target your systems, some target your reputation, your customers, and your brand. In this episode, Matthias Reinwarth sits down with research analyst Osman Celik to unpack three closely related but distinct markets: Attack Surface Management (ASM), Digital Risk Protection](/content/watch/know-your-attack-surface/index.html) Advisory [Advisory Services](/content/advisory/index.html) [Success stories](/content/advisory#success-stories/index.html) [IAM Maturity Assessment](/content/advisory/iam-maturity-assessment/index.html) [Identity Fabric & Reference Architecture](/content/identity-fabric-reference-architecture/index.html) Advisory Services KuppingerCole's Advisory stands out due to our regular communication with vendors and key clients, providing us with in-depth insight into the issues and knowledge required to address real-world challenges. [See Advisory Services\\ \\ Contact our advisors E-mail [info@kuppingercole.com](mailto:info@kuppingercole.com) [Meet our Advisors\\ \\ Boehringer Ingelheim, a leading pharmaceutical company, sought to enhance its Identity and Access Management (IAM) capabilities in the digital age. We collaborated to develop a strategic IAM roadmap in just five months, aligning their IT infrastructure with their global leadership position. [View Case Study](/content/success-story-boehringer-ingelheim/index.html) Global chemical company revamped its Identity and Access Management with KuppingerCole's IAM strategy: guidance, assessment, roadmap. Enhanced security and efficiency. [View Case Study](/content/success-story-leading-chemical-company/index.html) IAM Maturity Assessment Discover your IAM maturity level across key areas, benchmarked against KuppingerCole’s Reference Architecture, and receive a personalized report with expert recommendations. [Get Started\\ \\ Identity Fabric & Reference Architecture Explore how to unify, modernize, and scale your IAM ecosystem with a consistent architectural foundation. [Learn More\\ \\ Membership [About](/content/memberships/index.html) [Professional](/content/memberships#compare/index.html) [Expert](/content/memberships#compare/index.html) [Corporate](/content/memberships#compare/index.html) Your gateway to Identity Security excellence Unlock the power of industry-leading insights and expertise. Gain access to our extensive knowledge base, vibrant community, and tailored analyst sessions—all designed to keep you at the forefront of identity security. [Learn More\\ \\ Stay ahead of industry trends and make informed decisions Access essential knowledge at your fingertips with KuppingerCole's extensive resources. From in-depth reports to concise one-pagers, leverage our complete security library to inform strategy and drive innovation. [Learn More\\ \\ Elevate your expertise and expand your professional network Gain access to comprehensive resources, personalized analyst consultations, and exclusive events – all designed to enhance your decision-making capabilities and industry connections. [Learn More\\ \\ Empower your team with the knowledge and connections to drive change Gain a true partner to drive transformative initiatives. Access comprehensive resources, tailored expert guidance, and networking opportunities. [Learn More\\ \\ Company [About us](/content/about/index.html) [Success Stories](/#success-stories) [People](/content/people/index.html) [Career Opportunities](/content/career/index.html) [Newsroom](/content/newsroom/index.html) [Cybersecurity Council](/content/cybersecurity-council/index.html) [Technology Providers](/content/technology-provider/index.html) [Contact us](/content/contact/index.html) Discover Our Passion for Advancing Identity and Security We are specialized in the strategic management of digital identities, privileges, authentication, and access control as well as cybersecurity and business resilience.​ [Read more about our philosophy\\ \\ Success Stories \\ \\ Strengthening Collaboration: A Conversation Between Thales and KuppingerCole\\ \\ \\ Learn how KuppingerCole’s expertise in identity management and cybersecurity has helped Thales drive innovation, challenge ideas, and strengthen their strategies in a rapidly evolving digital landscape.](/content/success-story-thales/index.html) \\ \\ KuppingerCole Success Story - Chemical Industry\\ \\ \\ Global chemical company revamped IAM with KuppingerCole's IAM strategy: guidance, assessment, roadmap. Enhanced security and efficiency.](/content/success-story-leading-chemical-company/index.html) \\ \\ Looking Back and Ahead: One Identity & KuppingerCole in Conversation\\ \\ \\ In this video, Praerit Garg and Martin Kuppinger reflect on their collaboration, career journeys, and the evolution of the identity market.](/content/success-story-oneidentity/index.html) [View All Success Stories\\ \\ Analysts & Advisors Meet our team of analysts and advisors who are highly skilled and experienced professionals dedicated to helping you make informed decisions and achieve your goals. Business Team Meet our business team committed to helping you achieve success. We understand that running a business can be challenging, but with the right team in your corner, anything is possible. [Meet the Team\\ \\ Career Opportunities \\ \\ Events\\ \\ Wiesbaden\\ \\ Ausbildung zum Veranstaltungskaufmann/-frau (m/w/d)\\ \\ \\ Die KuppingerCole Analysts AG ist ein IT-Analystenunternehmen mit Hauptsitz in Wiesbaden und weiteren Standorten rund um die Welt. Insgesamt beschäftigen wir aktuell rund 50 Mitarbeiter. KuppingerCole unterstützt seine Kunden mit Leistungen in den Bereichen Events, Advisory und Research.](/content/jobs/62/index.html) [View All Job Offers\\ \\ Latest Press Releases \\ \\ Press Release\\ \\ May 22,\\ 2026\\ \\ KuppingerCole Analysts Wraps Up EIC 2026: Europe’s Leading Identity Conference Explores Digital Trust Through Intelligent Identity\\ \\ \\ The European Identity and Cloud Conference (EIC) 2026 concluded in Berlin after four days of discussions on digital trust, AI-driven identity, authorization, governance, and the future of intelligent identity systems. Hosted by KuppingerCole Analysts, the event gathered over 1,500 attendees, 250+](/content/press-release/eic-2026-wrapped/index.html) \\ \\ Press Release\\ \\ March 18,\\ 2026\\ \\ KuppingerCole Analysts Launches Product Value Navigator to Validate the Business Impact of Technology Investments\\ \\ \\ Product Value Navigator is a new research framework from KuppingerCole Analysts designed to validate the economic value of enterprise technology solutions. By combining independent technical evaluation with financial modelling and open-source intelligence data, it provides transparent insight into](/content/press-release/product-value-navigator/index.html) \\ \\ Press Release\\ \\ February 19,\\ 2026\\ \\ KuppingerCole Analysts and Forum INCYBER Enter Strategic Partnership to Strengthen European Cybersecurity Market Intelligence\\ \\ \\ KuppingerCole Analysts and Forum INCYBER announce a strategic partnership to strengthen European cybersecurity market intelligence, thought leadership, and cross-regional collaboration across France, Benelux, and DACH.](/content/press-release/kuppingercole-analysts-forum-incyber/index.html) Cybersecurity Council With the Cybersecurity Council, we bring together world-class information security professionals in leading positions from across many industries and schools of thought to exchange and discuss how to secure the rapidly growing cyber economy. The results of these fruitful discussions will flow into every of our services. [Learn more\\ \\ Services for Technology Providers You're building the future in a crowded, skeptical market. KuppingerCole Analysts helps you stand out with neutral credibility, market insights, and direct access to key decision-makers. We empower technology providers with the visibility, insights, and analyst-backed influence to win in a competitive market. [Learn more\\ \\ Basic contact information KuppingerCole Analysts AG Wilhelmstr. 20-22 65185 Wiesbaden Germany [info@kuppingercole.com](mailto:info@kuppingercole.com) [See all locations\\ \\ Use AI-powered search to answer my question Use AI-powered search to answer my question [Research Library](/content/research/index.html) Leadership Compass August 02, 2022 ### Like this? ### Don't like this? Log in to make your opinion count! We will also use your feedback to tune your personal recommendations. Log in to hear your voice heard. We'll also make sure to update your personal recommendations. [Login](/content/login?back=/research/lc80474/zero-trust-network-access/index.html) Don't have a KC account yet? [Join Now](/content/register?back=/research/lc80474/zero-trust-network-access/index.html) ### Why don't you like this? This isn't relevant for me I don't like the content SubmitCancel 0 Save ### Bookmarks Save your favorite items in your personal watch list so that you can read them later and find them again easily. [Login](/content/login?back=/research/lc80474/zero-trust-network-access/index.html) Don't have a KC account yet? [Join Now](/content/register/index.html) [LinkedIn [Facebook [X / TwitterCopy URL # Zero Trust Network Access \\ \\ Alexei Balaganski](/content/people/balaganski/index.html) Description Short Summary Interesting Facts Notable Quotes Recommendations Takeaways This report is an overview of the market for Zero Trust Network Access (ZTNA) solutions and provides you with a compass to help you to find the solution that best meets your needs. We examine the market segment, vendor service functionality, relative market share, and innovative approaches towards implementing secure identity- and context-based access to applications and sensitive data. Lorem ipsum odor amet, consectetuer adipiscing elit. Luctus fames rutrum metus habitasse donec quis turpis. Nibh porta tristique sociosqu eleifend condimentum sapien ultricies. Dapibus rhoncus urna elit commodo blandit ut vestibulum tristique. Ante parturient morbi maecenas leo ac est dolor aliquam iaculis. Leo vehicula vivamus ipsum lacinia cubilia torquent accumsan! Viverra a dictumst dapibus; nam consequat felis mus. Euismod semper iaculis congue mauris nullam. Sign up and get more insights Become a member of the KuppingerCole Community to access this and thousands of other publications. [Log in or register\\ \\ Lorem ipsum odor amet, consectetuer adipiscing elit. Luctus fames rutrum metus habitasse donec quis turpis. Leo vehicula vivamus ipsum lacinia cubilia torquent accumsan! Viverra a dictumst dapibus; nam consequat felis mus. Euismod semper iaculis congue mauris nullam. Sign up and get more insights Become a member of the KuppingerCole Community to access this and thousands of other publications. [Log in or register\\ \\ Lorem ipsum odor amet, consectetuer adipiscing elit. Luctus fames rutrum metus habitasse donec quis turpis. Leo vehicula vivamus ipsum lacinia cubilia torquent accumsan! Viverra a dictumst dapibus; nam consequat felis mus. Euismod semper iaculis congue mauris nullam. Sign up and get more insights Become a member of the KuppingerCole Community to access this and thousands of other publications. [Log in or register\\ \\ Lorem ipsum odor amet, consectetuer adipiscing elit. Luctus fames rutrum metus habitasse donec quis turpis. Leo vehicula vivamus ipsum lacinia cubilia torquent accumsan! Viverra a dictumst dapibus; nam consequat felis mus. Euismod semper iaculis congue mauris nullam. Sign up and get more insights Become a member of the KuppingerCole Community to access this and thousands of other publications. [Log in or register\\ \\ Lorem ipsum odor amet, consectetuer adipiscing elit. Luctus fames rutrum metus habitasse donec quis turpis. Leo vehicula vivamus ipsum lacinia cubilia torquent accumsan! Viverra a dictumst dapibus; nam consequat felis mus. Euismod semper iaculis congue mauris nullam. Sign up and get more insights Become a member of the KuppingerCole Community to access this and thousands of other publications. [Log in or register\\ \\ Please note that a [newer\\ version of this paper](/content/research/lc80826/zero-trust-network-access/index.html) is available, published on **January 29, 2024**. You might want to check it out instead. # Introduction / Executive Summary As businesses embrace Digital Transformation and become increasingly cloud-native, mobile, and interconnected, the corporate network perimeter is gradually disappearing, exposing users to malware, ransomware, and other cyber threats. Traditional perimeter security tools no longer provide adequate protection from these threats. But even more so, traditional remote access solutions like virtual private networks (VPN) can no longer ensure the scalability and performance needed for the increasingly mobile and remote workforce, especially during pandemic times. VPN is a typical example of a technology that was never designed for the purposes it is used nowadays. Besides creating potential bottlenecks by forcing companies to backhaul remote users’ traffic to a central location and thus negatively affecting performance and productivity, VPN appliances grant those users full, uncontrolled access to entire LANs. This dramatically expands the attack surface of corporate networks, provides easy lateral movement for potential attackers, and enables uncontrolled access to internal resources with implicit trust. Unsurprisingly, Zero Trust is rapidly gaining popularity as a modern alternative to traditional perimeter-based security. An infrastructure designed around this model treats every user, application, or data source as untrusted and enforces strict security, access control, and comprehensive auditing to ensure visibility and accountability of all user activities. Back in 2009, John Kindervag, then with the analyst firm Forrester, came up with the idea that networks should be designed without implicit trust, enforcing strict identity verification and least-privilege access policies for every user, device, or application, regardless of whether they are located in the former local area network or somewhere on the Internet. His ideas on eliminating the very concept of “trusted systems” from corporate networks helped popularize the catchy term “Zero Trust”, which had been first introduced over 15 years before. In the same year, Google introduced BeyondCorp, a security framework created as a result of a sophisticated cyberattack on their internal infrastructure and aimed at preventing similar breaches in the future. BeyondCorp shifted access controls from the perimeter to individual devices and users, thus dramatically reducing the potential attack surface for future hackers and making it much more difficult for them to perform lateral movements, compromising one system after another. Figure 11: The brief history of Zero Trust This has essentially started the Zero Trust “gold rush”, with numerous organizations eagerly looking for a possibility to buy into the new trend and with quite a few vendors quickly repackaging their existing products with new “Now with Zero Trust” labels. One of the fundamental misconceptions the industry experts are still struggling to explain to the public is that Zero Trust is not an off-the-shelf product, but a journey that begins with a long-term business strategy and focuses on a step-by-step implementation, using existing or readily available tools and technologies, while maintaining the continuity of business processes and avoiding adding even more complexity to the existing architecture However, even if the concept itself turned out to be quite difficult to get hold of, it has created entirely new markets for innovative security, compliance, and identity solutions. Without Zero Trust, we would not have cloud access security brokers (CASB), no Secure Access Service Edge (SASE) platforms, and, of course, no software-defined networking and micro-segmentation technologies that provide the backbone for the whole Zero Trust Network Access market. As a concept, Zero Trust Network Access is based on the assumption that any network is always hostile, and thus, any IT system, application, or user is constantly exposed to potential external and internal threats. There is no place for a “trusted network” in a Zero Trust architecture, which is radically different from the traditional approach based on the notion of a security perimeter that separates a trusted local network from the rest of the world outside. In various incarnations, ZTNA has existed for years, and for many early adopters of Zero Trust tenets, it has become the first building block in their long-term ZT strategies. However, the notorious COVID-19 pandemic, which forced the majority of the corporate workforce around the globe to work from home for two years, has provided a huge boost to the worldwide adoption of these solutions as a modern, more flexible and scalable alternative to aging VPN infrastructures. In this Leadership Compass, we provide an overview of the existing solutions implementing this approach. They might be based on different underlying technologies and focus on different aspects of the Zero Trust methodology, but fundamentally, all of them solve the same problem: enabling secure yet convenient access to business applications and other resources for users regardless of their location, whether in an office, at home or anywhere else. ## Highlights - In recent years, Zero Trust architectures have gained enormous popularity as a more secure, yet flexible and future-proof alternative to traditional perimeter-based security. By eliminating the very notion of a trusted system, ZT architectures enforce strict identity verification and least-privilege access policies for every user, device, or application, regardless of where they are located. - Zero Trust Network Access solutions apply this concept to network-based access to existing applications and other systems. By creating a logical identity- and context-based overlay over existing (and presumed hostile) networks and preventing discovery and access of applications for unauthorized users, ZTNA solutions enforce strict, fine-grained policies, thus eliminating the possibility of implicit trust and unchecked access to sensitive resources. - ZTNA is the key technology that enables modern Zero Trust architectures, together with comprehensive identity management, strong multi-factor authentication, and real-time behavior analytics. Besides dramatically reducing the attack surface and preventing lateral movement for hackers (and thus significantly improving security posture), it has the potential to greatly simplify both the users’ and administrators’ experiences. - The market for ZTNA solutions is currently experiencing explosive growth. Both large established vendors and small but innovative startups are offering a multitude of solutions that promise to address various usage scenarios: simplified cloud migration, seamless hybrid and multi-cloud architectures, or a modern replacement for VPN. - The concept of Secure Access Service Edge (SASE) converges network and security solutions into a unified and tightly integrated platform that is entirely delivered from the cloud, dramatically reducing the complexity of corporate network infrastructures, and offering consistent productivity and protection at a global scale. - The Overall Leaders in Zero Trust Network Access are (in alphabetical order): Absolute Software, Broadcom, Cato Networks, Cisco, Cloudflare, Google, Jamf, Lookout, NetFoundry, Palo Alto Networks, and Perimeter 81. Full text is available for users with a paid subscription. [Log in\\ \\ Become a Member and read on! Create an account and purchase a Membership package to access this and 1000+ other in-depth and up-to-date insights. Already convinced? Check out our packages [Choose a package\\ \\ Table of Contents [Introduction / Executive Summary\\ \\ \\ \\ \\ \\ \\ \\ [Highlights](/content/research/lc80474/zero-trust-network-access#heading1.1) [Market Segment](/content/research/lc80474/zero-trust-network-access#heading1.2) [Delivery Models](/content/research/lc80474/zero-trust-network-access#heading1.3) [Required Capabilities](/content/research/lc80474/zero-trust-network-access#heading1.4) [Leadership\\ \\ \\ \\ \\ \\ \\ \\ [Overall Leadership](/content/research/lc80474/zero-trust-network-access#heading2.1) [Product Leadership](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [Innovation Leadership](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [Market Leadership](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [Correlated View\\ \\ \\ \\ \\ \\ \\ \\ [The Market/Product Matrix](/content/research/lc80474/zero-trust-network-access#heading3.1) [The Product/Innovation Matrix](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [The Innovation/Market Matrix](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [Products and Vendors at a Glance](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [Product/Vendor Evaluation\\ \\ \\ \\ \\ \\ \\ \\ [Absolute Software](/content/research/lc80474/zero-trust-network-access#heading5.1) [Appgate](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [Banyan Security](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [Broadcom](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [Cato Networks](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [Cisco Systems](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [Cloudflare](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [Google](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [Ivanti](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [Jamf](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [Lookout](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [NetFoundry](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [Palo Alto Networks](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [Perimeter 81](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [Safe-T](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [Systancia](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [Vendors to Watch\\ \\ \\ \\ \\ \\ \\ \\ [Akamai](/content/research/lc80474/zero-trust-network-access#heading6.1) [Citrix](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [Forcepoint](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [Fortinet](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [Menlo Security](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [Netskope](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [Proofpoint](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [Sophos](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [Tailscale](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [Twingate](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [VMware](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [Zentera](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [Zero Networks](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [Zscaler](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [Related Research](/content/research/lc80474/zero-trust-network-access#readmore/index.html) [Copyright](/content/research/lc80474/zero-trust-network-access#readmore/index.html) Vendors in this Report \\ \\ Absolute SecurityOverall Leader](/content/vendors/absolute/index.html) \\ \\ BroadcomOverall Leader](/content/vendors/broadcom/index.html) \\ \\ Cato NetworksOverall Leader](/content/vendors/catonetworks/index.html) \\ \\ CiscoOverall Leader](/content/vendors/cisco/index.html) \\ \\ CloudflareOverall Leader](/content/vendors/cloudflare/index.html) \\ \\ GoogleOverall Leader](/content/vendors/google/index.html) \\ \\ JamfOverall Leader](/content/vendors/jamf/index.html) \\ \\ LookoutOverall Leader](/content/vendors/lookout/index.html) \\ \\ NetFoundryOverall Leader](/content/vendors/netfoundry/index.html) \\ \\ Palo Alto NetworksOverall Leader](/content/vendors/paloaltonetworks/index.html) \\ \\ Perimeter 81Overall Leader](/content/vendors/perimeter81/index.html) \\ \\ AppGateInnovation Leader](/content/vendors/appgate/index.html) \\ \\ Banyan SecurityProduct/Innovation Leader](/content/vendors/banyansecurity/index.html) \\ \\ IvantiInnovation Leader](/content/vendors/ivanti/index.html) \\ \\ SystanciaProduct Leader](/content/vendors/systancia/index.html) \\ \\ Safe-T GroupRated Vendor](/content/vendors/safe-t/index.html) Top related content \\ \\ Event Recording\\ \\ \\ Zero Trust Network Access - Market Overview\\ \\ Alejandro Leal](/content/watch/zero-trust-network-access-market-overview-eic24 "Event Recording: Zero Trust Network Access - Market Overview"/index.html) \\ \\ Event Recording\\ \\ \\ The Next Generation of Secure Access with Zero Trust\\ \\ Andy Aplin](/content/watch/secure-access-with-zero-trust-cre23 "Event Recording: The Next Generation of Secure Access with Zero Trust"/index.html) \\ \\ Analyst Chat\\ \\ \\ Beyond ZTNA, the Rise of Zero Trust Platforms\\ \\ Alexei Balaganski](/content/watch/rise-of-zero-trust-platforms "Analyst Chat: Beyond ZTNA, the Rise of Zero Trust Platforms"/index.html) \\ \\ Webinar Recording\\ \\ \\ Unlocking Zero Trust Network Access\\ \\ Alejandro Leal](/content/watch/unlocking-ztna "Webinar Recording: Unlocking Zero Trust Network Access"/index.html) Table of Contents Table of contents Close [Introduction / Executive Summary\\ \\ \\ \\ \\ \\ \\ \\ [Leadership\\ \\ \\ \\ \\ \\ \\ \\ [Correlated View\\ \\ \\ \\ \\ \\ \\ \\ [Vendors to Watch\\ \\ \\ \\ \\ \\ \\ \\ ## Stay up to date Subscribe for a newsletter to receive updates on newest events, insights and research. Please provide your email address I have read and agree to the Privacy Policy Please accept our Privacy Policy I have read and agree to the Terms of Use Please accept our Terms of Use Submit