Top Free Identity and Access Management (IAM) Software - Page 4

Netarx Identity Key

Netarx Identity Key (NIK) is an enterprise platform that verifies communication authenticity across voice, video, email, SMS, and identity verification. It uses a voting ensemble of detection models plus federated validation and blockchain-backed provenance, and returns a simple traffic-light verdict inside the tools employees already use. Nothing to rip out, no mail-flow changes. The Advanced AI email model adds relationship-graph analysis, catching BEC and impersonation that content filters miss.

Average Rating: 5.0/5.0

Total Reviews: 1

P0 Security

P0 Security is the next-generation Privileged Access Management (PAM) platform that secures privileged access for every identity—human, machine and agentic—across cloud and hybrid environments. Production access is broken. Enterprises are drowning in break-glass accounts, static tokens, and over-privileged roles, with no clear view of who—or what—actually has access. Legacy tools like PAM, IGA and CIEM were built for a static, perimeter-driven world. They create blind spots, create extra work for security teams who have to manage proxies, bastions, shared accounts and static credentials. P0 was built differently. We unify visibility, governance, and orchestration into one platform. At the foundation is Access DNA—a continuously updated inventory of all human, non-human, and AI identities, their entitlements, and effective permissions across hybrid and cloud environments. On top of that, our Identity Graph maps relationships, reveals risky pivots, and surfaces toxic privilege combinations. And through API-led orchestration, P0 enforces policies natively in every system—without proxies, vaults, or static credentials. The result: * Privileged resources clearly identified * No standing privileged access * All access ephemeral, granted just-in-time, and fully auditable With P0, organizations finally have a clear path from today’s chaotic baseline to zero standing privilege—reducing risk, streamlining compliance, and enabling developer velocity.

Average Rating: 4.5/5.0

Total Reviews: 1

RequestRocket

RequestRocket's is a hyper scalable universal API authentication and authorization service. RequestRocket empowers organisations to centralise the management of access to third party systems, while offering the ability to down-scope permissions with fine grained access controls for any platform API. Our API's enable on demand configuration of authentication proxies across 6 continents allowing for low latency and high availability security improvements that comply with data sovereignty requirements.

Average Rating: 5.0/5.0

Total Reviews: 1

ReShield

ReShield is an advanced Identity and Access Governance solution designed for companies looking to seamlessly secure and manage access to their critical data and infrastructure. It simplifies identity and permission management for both human and machine identities across Cloud, Databases, Kubernetes, and SaaS applications. Built specifically for Security, IT, and DevOps teams, ReShield helps you: - Gain complete visibility into user access, permissions, and identity-related risks. - Achieve least-privilege access through fine-grained controls accessible via Slack, Teams, and web interfaces. - Streamline compliance with automated user access reviews and detailed reporting. - Proactively identify and mitigate threats with real-time insights into identity and access risks. Tailored for modern cloud environments, ReShield can be deployed quickly, enabling teams to get started within a day instead of months.

Average Rating: 5.0/5.0

Total Reviews: 2

Savvy SaaS Security Platform

Savvy is the identity-first security platform built for the way work happens today — in the browser, across hundreds of SaaS apps, on devices you don’t always control. We protect the layer where risk begins and other tools are blind to. Gaps like SSO bypass, unmanaged app usage, risky credentials and MFA misconfigurations. Our patent-pending Enterprise Browsing System combines a secure browser, a lightweight extension, and cloud-based automation to deliver real-time visibility and enforcement — without breaking the way users work. From discovering every app and account, to enforcing your security policies using just-in-time guardrails, Savvy turns identity security into a continuous, proactive layer of protection. Whether you're a CISO, IAM, or IT leader — Savvy gives you control, visibility, and assurance where it matters most: the browser.

Average Rating: 5.0/5.0

Total Reviews: 1

YeshID Onboard

YeshID is the all-in-one identity management tool for growing organizations and the only identity and access management tool built specifically for Google Workspace. Sign up for free at yeshid.com/onboard. Watch video demos at https://www.youtube.com/@YeshID. YeshID helps you be more safe, compliant, and efficient in 5 minutes, no IT or security experience required — because futzing around in Google Workspace’s admin console isn’t what you had in mind when you started a company.

Average Rating: 5.0/5.0

Total Reviews: 1

ZITADEL

Open-source identity infrastructure that scales with your business Zitadel delivers enterprise-grade identity management without the enterprise complexity. Built for modern applications, it provides secure authentication, authorization, and user management through clean APIs and intuitive interfaces. Why developers choose Zitadel: 1. Zero vendor lock-in - Open source with self-hosting options 2. Multi-tenant by design - Isolate customers while sharing infrastructure 3. Modern standards - Native support for OpenID Connect, OAuth2, SAML, and Passkeys/FIDO2 4. Developer-friendly - Comprehensive APIs, webhooks, and customizable workflows 5. Production-ready - Built-in audit trails, monitoring, and enterprise security Perfect for SaaS platforms, B2B applications, and any product requiring sophisticated user management. Deploy in minutes, customize as you scale. Key Features: Multi-tenancy, Passkeys/FIDO2, Self-service management, OpenID Connect, OAuth2, SAML, LDAP, OTP, Audit trails, API-first architecture

Average Rating: 5.0/5.0

Total Reviews: 1

AccessLens

AccessLens is a comprehensive platform designed to enhance the security and management of Microsoft Entra ID access controls. It provides organizations with the tools to analyze, visualize, and optimize their Conditional Access policies, ensuring robust protection against unauthorized access and compliance with industry standards. One of the core capabilities of AccessLens is its Live Graph API integration, which allows for real-time synchronization with your Microsoft Entra tenant. This feature enables the platform to pull live data without the need for agents or additional infrastructure, ensuring that your policy analysis is always current and accurate. AccessLens offers interactive flow diagrams that transform complex Conditional Access policies into clear, visual representations. These diagrams illustrate the full decision paths, including users, conditions, grant controls, and session outcomes, making it easier to understand and manage intricate policy logic. The platform includes a Conflict Detection feature that automatically identifies and highlights various types of policy conflicts, such as blocking conflicts, redundant rules, shadowed policies, and contradictory controls. By surfacing these issues proactively, AccessLens helps prevent access incidents and security gaps before they occur in production environments. AccessLens also provides Framework Mapping capabilities, aligning your existing policies with industry standards like ISO 27001, SOC 2, NIST 800-53, and Cyber Essentials. This unified view allows organizations to track implementation progress per control and pinpoint areas where coverage may be lacking. The What-If Simulator is another valuable tool within AccessLens, enabling users to model various scenarios involving different users, applications, locations, and devices against their live policy set. This simulation helps predict policy outcomes without affecting the production environment, facilitating informed decision-making and policy adjustments. With over 50 expert-configured security checks, the Gap Analysis feature benchmarks your policies against best-practice guidance from Microsoft, CIS, CISA, and NCSC. Each finding includes severity ratings, impact explanations, and step-by-step remediation instructions, which can be exported for audit documentation. The Change Tracker keeps you informed about upcoming Microsoft Entra enforcement changes, detailing which of your policies will be impacted. Each tracked change includes severity classification, before-and-after impact analysis, and numbered remediation steps, allowing your team to prepare effectively. AccessLens is built for security teams seeking clarity and efficiency in managing access controls. By connecting directly to the Microsoft Graph API with read-only permissions, it transforms access controls into interactive diagrams, automated security checks, OAuth permission audits, and enforcement change tracking. This centralized visibility helps prevent misconfigurations, resolve policy conflicts, and streamline compliance processes. In summary, AccessLens provides a single platform where IT administrators can explore their entire access landscape, run simulations to test changes before deployment, track upcoming enforcement changes, and generate audit-ready compliance reports. Whether preparing for a security review, onboarding a new tenant, or monitoring a client environment, AccessLens delivers the centralized clarity needed for confident decision-making.

Adaptive

Adaptive is a cloud security company with a modern approach to data protection with its unique control plane that safeguards data and brokers’ access to human and non-human identities. The Adaptive architecture protects data closer to the source, ensuring strict access control over every database connection and minimizing sensitive data exposure. Adaptive’s combined approach to data access and protection eliminates blind spots in data security, making it ideal for modern organizations where data is constantly in motion. Due to Adaptive’s agentless architecture, end users get faster and auditable access and data protection across infrastructure without changing existing workflows and tools.

Average Rating: 5.0/5.0

Total Reviews: 1

AD Pro Toolkit

AD Pro Toolkit is an Active Directory management and reporting software solution that helps IT administrators manage users, groups, computers, and security across on-premises Active Directory environments. It provides more than 40 built-in management tools and over 200 reports for common Active Directory administration and reporting tasks. AD Pro Toolkit helps administrators perform routine tasks in bulk, investigate directory information, and maintain a cleaner and more secure Active Directory environment without relying on PowerShell scripts or switching between multiple tools.

Authress

Authress provides an authorization API and identity management as a service for any application. With Authress your software application sets fully integrated access management for your team. The Authress APIs and SDKs provide ease of configuration and use within any software service or interface to ensure the right user gets the right access at the right time.

AuthZed

AuthZed is the Authorization Platform for AI and modern applications, replacing homegrown and identity-bound permissions systems with a purpose-built, centralized service delivering extreme performance at global scale. AuthZed delivers the authorization infrastructure that powers critical applications for businesses like OpenAI, Workday, and Zoom. AuthZed's authorization infrastructure eliminates complex permission management while delivering enterprise-scale performance and consistent access control. AuthZed provides a single source of truth for permissions across all services, data, and users. Instead of embedding access logic throughout the codebase, teams define it once and enforce it everywhere. Our system is built on the same relationship-based model behind Google, enabling fine-grained, dynamic access control at massive scale. It delivers low-latency permission checks, handles billions of relationships, and integrates with any identity provider or stack. The result is a shift in how authorization is built and operated, from bespoke, fragile point integrations to a standardized, reliable infrastructure platform, freeing teams to focus on their core product.

Bravas

### Revolutionize Your SME's IT Management with Bravas.io Are you a startup or small-to-medium enterprise (SME) struggling to manage your IT infrastructure and secure your devices and users? Look no further than Bravas.io - the revolutionary IT management platform designed specifically for businesses like yours. ### Simplify IT, Empower Your Team Bravas.io understands that you didn't start your business to become an IT expert. That's why our platform is engineered to be a turnkey solution, allowing you to easily manage and secure your entire IT ecosystem without the need for specialized knowledge or resources.
 ### Comprehensive Device Management and Security Bravas.io gives you complete control over your devices. Ensure your data is protected, your employees are productive, and your IT infrastructure is running smoothly - all from a single, intuitive dashboard.
 ### Tailored for SMEs, Trusted by Businesses We know that every SME is unique, with its own set of challenges and requirements. Our team of experts is dedicated to ensuring your success, providing personalized support and guidance every step of the way.
 ### Unlock the Power of Automation Say goodbye to manual, time-consuming IT tasks. Bravas.io harnesses the power of automation to streamline your IT management, freeing up your team to focus on what really matters - growing your business.
 ### Join the Bravas.io Revolution Experience the future of IT management for SMEs. Connect with us to learn more about how Bravas.io can transform your business and unlock your full potential.

Clarity Security

Clarity Security helps enterprises autonomously govern identity with speed, intelligence, and simplicity. We give IT and security teams a smarter way to mature their identity posture—cutting the time and cost of access reviews, reducing audit stress, and eliminating the ticket fatigue that slows operations. With seamless onboarding, lifecycle management, and access provisioning, employees get what they need from day one, and IT becomes an enabler of transformation rather than a bottleneck. We give enterprises a fast and unified way to govern every identity—human or machine—across cloud, hybrid, and on-prem environments. We go beyond legacy tools by automating cleanup, lifecycle management, and access provisioning with a single click, slashing the cost and time of routine identity work. With Clarity Security, your team will get: - Unified Identity Governance: Manage all human and non-human identities across cloud, hybrid, and on-prem environments in one platform. - Attribute-Based Access Control (ABAC): Dynamically grant least-privilege access based on real-time attributes like job title, role, location, and device. - Lifecycle Management Automation: Automate onboarding, off-boarding, and role changes to cut cost and save time. - One-Click Cleanup & Provisioning: Instantly remove or adjust permissions and provision access without manual ticketing. - Autonomous Access Reviews: Simplify audits with automated, accurate, and context-rich access certification. - Broad Protocol & System Support: Govern direct permissions, SAML and SCIM integrations, on-prem federation, and local accounts with ease. Whether managing high-turnover workforces, multi-role employees, or complex technology shifts, Clarity Security delivers a one-click, context-aware approach that saves money, reduces risk, and scales effortlessly with your business.

Average Rating: 4.5/5.0

Total Reviews: 2

Devolutions PAM

Devolutions PAM is a privileged access management (PAM) solution that helps small and midsize businesses discover, secure, rotate, and audit privileged accounts across their infrastructure. It belongs to the privileged access management software category and is designed for IT teams, security teams, and managed service providers that need to control and monitor elevated access to critical systems without the complexity typically associated with enterprise PAM tools. Privileged accounts such as administrator, shared, and service accounts hold elevated access and are common targets for attackers and sources of insider risk. Devolutions PAM addresses this by identifying privileged accounts, securing their credentials, automating password rotation, controlling how and when they are used, and recording activity for accountability. It is delivered as part of the Privileged Access Management package and runs on a Devolutions workspace, either the cloud-hosted Devolutions Cloud or the self-hosted Devolutions Server, while integrating with Remote Desktop Manager for connection launching and Devolutions Gateway for secure tunneling. Common use cases include enforcing least-privilege and just-in-time access, eliminating standing privileges, rotating and vaulting privileged credentials, recording privileged sessions, and demonstrating compliance through audit logs. Key features and benefits include: - Discovery of privileged accounts across the environment - Automated password rotation and secure credential vaulting - Just-in-time privilege elevation and check-out approval workflows that reduce standing access - Session recording and tamper-resistant audit logs for monitoring and compliance - Granular role-based access control, allowing users to connect to resources without seeing the underlying credentials Devolutions PAM is designed to provide privileged access controls typically found in enterprise products in a form that is practical for smaller organizations to adopt and operate. Because it integrates with the broader Devolutions suite, organizations can extend from credential management into full privileged access management within a single ecosystem, moving from standing privileges toward zero-standing-privilege access under centralized governance, role-based control, and auditing.