HIPAA-Compliant Security Vendors

Security vendors are evaluated against HIPAA when they handle the workflows this framework governs. Currently, 14 vendors in our Security category hold HIPAA certification and 6 hold it partially or conditionally. Each listing below links to the vendor's full compliance profile.

Security vendors that hold HIPAA certification

Okta logo

Okta

21/32

Identity and access management platform providing secure authentication, authorization, and single sign-on for enterprises.

CrowdStrike logo

CrowdStrike

17/32

Cloud-native endpoint protection platform providing threat intelligence, incident response, and cybersecurity solutions.

Zscaler logo

Zscaler

14/32

Cloud-native zero trust security platform (ZIA/ZPA) for secure internet and application access.

Wiz logo

Wiz

13/32

Cloud-native application protection platform (CNAPP) for cloud security.

Splunk logo

Splunk

11/32

Data platform for security, observability, and IT operations (SIEM, log analytics), owned by Cisco.

Netskope logo

Netskope

11/32

Security service edge (SSE) and cloud security platform (CASB, SWG, ZTNA).

Palo Alto Networks logo

Palo Alto Networks

10/32

Cybersecurity platform spanning network security, cloud security, and SOC automation.

BAA supported on select products; not listed as a formal certification on trust center page

1Password logo

1Password

9/32

Password manager and secure digital wallet that stores passwords, documents, and sensitive information with end-to-end encryption.

AgileBits is not defined as a Business Associate pursuant to HIPAA nor subject to a BAA

Fortinet logo

Fortinet

9/32

Network security and cybersecurity platform (firewalls, SASE, endpoint security).

Keeper logo

Keeper

9/32

Password management and privileged access security platform.

Auth0 logo

Auth0

8/32

Identity and access management (authentication-as-a-service) platform, owned by Okta.

BAA available

Varonis logo

Varonis

8/32

Data security platform for data classification, access governance, and threat detection.

Bitdefender logo

Bitdefender

8/32

Cybersecurity platform for consumer and enterprise endpoint protection.

Bitwarden logo

Bitwarden

7/32

Open-source password manager and secrets management platform.

Annual third-party audits against Security Rule

Trend Micro logo

Trend Micro

6/32

Cybersecurity platform for endpoint, cloud, and network security.

BAA available

Mimecast logo

Mimecast

5/32

Email and collaboration security platform for threat protection and data resilience.

Plus HITECH

Clerk logo

Clerk

4/32

Authentication and user management platform for developers.

BAA available on Enterprise plan

WorkOS logo

WorkOS

3/32

Enterprise-readiness platform for SSO, directory sync, and authentication.

BAA available for enterprise-plan customers

Check Point logo

Check Point

2/32

Cybersecurity platform for network, cloud, and endpoint security.

Referenced in compliance solutions navigation

Cisco Duo logo

Cisco Duo

1/32

Multi-factor authentication (MFA) and zero-trust access security platform from Cisco.

Supports HIPAA use cases (protects PHI access); not itself a HIPAA certification

These security vendors do not currently hold HIPAA certification:

Know a vendor we're missing?

Data sourced from public trust centers. Not legal or compliance advice.

Logos and trademarks are property of their respective owners. Use does not imply endorsement, affiliation, or sponsorship.

© Compliance Posture 2026