SaaS Ranking
Menu

SaaS transparency ranking · Security and compliance

Password and identity software

37 vendors · updated 2026-10-15 · 2 without enough data for a score

Password managers and identity providers, ranked by what they publish about how they protect your credentials.

Public transparency score, not a product or security rating. Transparency means: published on the vendor's own site, readable without a login, found by us at the addresses we checked.

+9points above the median of every category we measure

  • Password and identity26
  • All categories17
Median transparency score, out of 100. Password and identity sits above the median across every category we measure.
  1. A0 0%
  2. B1 3%
  3. C3 9%
  4. D7 20%
  5. E8 23%
  6. F16 46%
35 vendors with a score; 2 more without a score because we could measure too little. Bands have fixed thresholds, see how the score works.
All filters
Show only vendors where we found

Transparency band

2 without enough data for a band

37 vendors

Sort by

Not in the ranking

We could not measure this product with our method, so it is listed here instead of being scored. This says something about our method, not about the vendor.

Before the demo

Buying identity software: test the full access lifecycle

Separate signing in from creating, changing and removing accounts. Map your important applications and privileged roles before a trial. Public security documents are inputs to this review; neither a certificate mention nor a transparency score proves that a specific integration removes access correctly.

Joining and changing roles

Create a test user from your intended source of truth, assign a group and change the user’s department. Check the resulting permissions in each target application. Ask which connector operations are supported and where an administrator must intervene.

Leaving and residual access

Deactivate the user and test existing sessions, local passwords, API tokens and shared credentials in the target applications. Ask what happens to owned files and paid licences. A successful sign-in test does not exercise the offboarding path.

Failure and recovery

Temporarily disable one test connector and inspect alerts, retries and the audit trail. Rehearse emergency administrator access with the vendor. Ask how identity-service incidents are communicated and which components the availability agreement covers.

A trial you can repeat

Run a joiner, role change and leaver scenario against two representative applications, including one with manual steps. Keep the timestamps, downstream results, outstanding actions and accountable owner with your review.

Okta distinguishes supported automatic deprovisioning from integrations requiring manual action, and notes that deactivation need not delete the downstream account. Use this distinction when testing each connector rather than assuming that all apps behave alike. Okta: provisioning and deprovisioning. Source reviewed 2026-10-01. The trial questions are editorial guidance, not additional measured criteria.

Narrow it down

Each of these lists the Password and identity vendors that meet one condition, with the source for each, and appears only where at least 8 of them meet it.

This category, criterion by criterion

How this market does on each criterion, with its own share and how it compares with the rest.

Head-to-head comparisons

Each comparison lists only the criteria where the two differ, with the source for every one. All comparisons.

Every result links its source on the vendor page. A grey segment means we could not measure it, not that it is missing. See how we score.