IRAP-Compliant Security Vendors
Security vendors that hold IRAP certification
Okta
21/32Identity and access management platform providing secure authentication, authorization, and single sign-on for enterprises.
IRAP Protected
CrowdStrike
17/32Cloud-native endpoint protection platform providing threat intelligence, incident response, and cybersecurity solutions.
Tested against Australian Government ISM standards
Zscaler
14/32Cloud-native zero trust security platform (ZIA/ZPA) for secure internet and application access.
Wiz
13/32Cloud-native application protection platform (CNAPP) for cloud security.
Splunk
11/32Data platform for security, observability, and IT operations (SIEM, log analytics), owned by Cisco.
Netskope
11/32Security service edge (SSE) and cloud security platform (CASB, SWG, ZTNA).
Palo Alto Networks
10/32Cybersecurity platform spanning network security, cloud security, and SOC automation.
Proofpoint
10/32Email security, threat protection, and data loss prevention platform.
Orca Security
10/32Agentless cloud security platform (CNAPP) for cloud workload and configuration risk.
Rapid7
7/32Vulnerability management, detection, and response (SIEM/XDR) security platform.
PROTECTED level for Insight Platform
Darktrace
5/32AI-powered cybersecurity platform for threat detection and autonomous response.
These security vendors do not currently hold IRAP certification:
- 1Password (not documented)
- Snyk (not documented)
- Cisco Duo (not documented)
- SentinelOne (not documented)
- Fortinet (not documented)
- Check Point (not documented)
- Tenable (not documented)
- Qualys (not documented)
- Mimecast (not documented)
- KnowBe4 (not documented)
- Auth0 (not documented)
- OneLogin (not documented)
- Ping Identity (not documented)
- JumpCloud (not documented)
- LastPass (not documented)
- Dashlane (not documented)
- Bitwarden (not documented)
- Lacework (not documented)
- Varonis (not documented)
- Cybereason (not documented)
- VMware Carbon Black (not documented)
- Trend Micro (not documented)
- McAfee (not documented)
- Symantec (not documented)
- Sophos (not documented)
- Bitdefender (not documented)
- ESET (not documented)
- Malwarebytes (not documented)
- Keeper Security (not documented)
- Ivanti (not documented)
- Keeper (not documented)
- Tailscale (not documented)
- Checkmarx (not documented)
- Veracode (not documented)
- GitGuardian (not documented)
- Semgrep (not documented)
- Clerk (not documented)
- WorkOS (not documented)
Know a vendor we're missing?