ISO 27001-Compliant Security Vendors
Security vendors that hold ISO 27001 certification
Okta
21/32Identity and access management platform providing secure authentication, authorization, and single sign-on for enterprises.
ISO/IEC 27001:2022
CrowdStrike
17/32Cloud-native endpoint protection platform providing threat intelligence, incident response, and cybersecurity solutions.
ISO/IEC 27001:2022
Zscaler
14/32Cloud-native zero trust security platform (ZIA/ZPA) for secure internet and application access.
Wiz
13/32Cloud-native application protection platform (CNAPP) for cloud security.
Splunk
11/32Data platform for security, observability, and IT operations (SIEM, log analytics), owned by Cisco.
Netskope
11/32Security service edge (SSE) and cloud security platform (CASB, SWG, ZTNA).
Palo Alto Networks
10/32Cybersecurity platform spanning network security, cloud security, and SOC automation.
Proofpoint
10/32Email security, threat protection, and data loss prevention platform.
Orca Security
10/32Agentless cloud security platform (CNAPP) for cloud workload and configuration risk.
1Password
9/32Password manager and secure digital wallet that stores passwords, documents, and sensitive information with end-to-end encryption.
ISO/IEC 27001:2022
Fortinet
9/32Network security and cybersecurity platform (firewalls, SASE, endpoint security).
Cybereason
9/32Endpoint detection and response (EDR/XDR) cybersecurity platform.
Keeper
9/32Password management and privileged access security platform.
SentinelOne
8/32AI-powered endpoint, cloud, and identity security (XDR) platform.
KnowBe4
8/32Security awareness training and simulated phishing platform.
2022
Auth0
8/32Identity and access management (authentication-as-a-service) platform, owned by Okta.
Varonis
8/32Data security platform for data classification, access governance, and threat detection.
Bitdefender
8/32Cybersecurity platform for consumer and enterprise endpoint protection.
Snyk
7/32Developer security platform for finding and fixing vulnerabilities in code, containers, and cloud infrastructure.
ISO/IEC 27001:2022
Rapid7
7/32Vulnerability management, detection, and response (SIEM/XDR) security platform.
Bitwarden
7/32Open-source password manager and secrets management platform.
Tenable
6/32Exposure management and vulnerability management platform.
2022
Trend Micro
6/32Cybersecurity platform for endpoint, cloud, and network security.
2022, plus 27014 and 27034
Mimecast
5/32Email and collaboration security platform for threat protection and data resilience.
Lacework
5/32Cloud security and CNAPP platform for workload protection and compliance monitoring, now part of Fortinet.
Vendor states alignment with ISO 27001 as an industry standard, not confirmed as a formal certification
Darktrace
5/32AI-powered cybersecurity platform for threat detection and autonomous response.
2022
McAfee
5/32Consumer and enterprise antivirus, identity, and online privacy protection platform.
ESET
5/32Cybersecurity platform for endpoint protection, antivirus, and threat detection.
2022
Dashlane
4/32Password manager and credential security platform for individuals and businesses.
Ivanti
4/32IT and unified endpoint management, security, and service management software.
Ping Identity
3/32Enterprise identity and access management (IAM) platform.
LastPass
3/32Password management and identity vaulting platform.
Checkmarx
3/32Application security testing (SAST/SCA) platform.
GitGuardian
3/32Secrets detection and non-human identity security platform.
Check Point
2/32Cybersecurity platform for network, cloud, and endpoint security.
27001 & 27002
JumpCloud
2/32Cloud directory platform for identity, device, and access management.
For the open directory platform
OneLogin
1/32Identity and access management platform, owned by One Identity.
Vendor has a dedicated ISO 27001:2013 compliance page referenced in search results
Malwarebytes
1/32Anti-malware and endpoint protection software for consumers and businesses.
Report available via support portal
Symantec
0/32Enterprise cybersecurity software (endpoint, network, email security), owned by Broadcom.
Referenced via Broadcom's ISO 27000 series trust center page, not itemized product-by-product in this pass
These security vendors do not currently hold ISO 27001 certification:
Know a vendor we're missing?