ISO 27001-Compliant Security Vendors

Security vendors are evaluated against ISO 27001 when they handle the workflows this framework governs. Currently, 36 vendors in our Security category hold ISO 27001 certification and 3 hold it partially or conditionally. Each listing below links to the vendor's full compliance profile.

Security vendors that hold ISO 27001 certification

Okta logo

Okta

21/32

Identity and access management platform providing secure authentication, authorization, and single sign-on for enterprises.

ISO/IEC 27001:2022

CrowdStrike logo

CrowdStrike

17/32

Cloud-native endpoint protection platform providing threat intelligence, incident response, and cybersecurity solutions.

ISO/IEC 27001:2022

Zscaler logo

Zscaler

14/32

Cloud-native zero trust security platform (ZIA/ZPA) for secure internet and application access.

Wiz logo

Wiz

13/32

Cloud-native application protection platform (CNAPP) for cloud security.

Splunk logo

Splunk

11/32

Data platform for security, observability, and IT operations (SIEM, log analytics), owned by Cisco.

Netskope logo

Netskope

11/32

Security service edge (SSE) and cloud security platform (CASB, SWG, ZTNA).

Palo Alto Networks logo

Palo Alto Networks

10/32

Cybersecurity platform spanning network security, cloud security, and SOC automation.

Proofpoint logo

Proofpoint

10/32

Email security, threat protection, and data loss prevention platform.

Orca Security logo

Orca Security

10/32

Agentless cloud security platform (CNAPP) for cloud workload and configuration risk.

1Password logo

1Password

9/32

Password manager and secure digital wallet that stores passwords, documents, and sensitive information with end-to-end encryption.

ISO/IEC 27001:2022

Fortinet logo

Fortinet

9/32

Network security and cybersecurity platform (firewalls, SASE, endpoint security).

Cybereason logo

Cybereason

9/32

Endpoint detection and response (EDR/XDR) cybersecurity platform.

Keeper logo

Keeper

9/32

Password management and privileged access security platform.

SentinelOne logo

SentinelOne

8/32

AI-powered endpoint, cloud, and identity security (XDR) platform.

KnowBe4 logo

KnowBe4

8/32

Security awareness training and simulated phishing platform.

2022

Auth0 logo

Auth0

8/32

Identity and access management (authentication-as-a-service) platform, owned by Okta.

Varonis logo

Varonis

8/32

Data security platform for data classification, access governance, and threat detection.

Bitdefender logo

Bitdefender

8/32

Cybersecurity platform for consumer and enterprise endpoint protection.

Snyk logo

Snyk

7/32

Developer security platform for finding and fixing vulnerabilities in code, containers, and cloud infrastructure.

ISO/IEC 27001:2022

Rapid7 logo

Rapid7

7/32

Vulnerability management, detection, and response (SIEM/XDR) security platform.

Bitwarden logo

Bitwarden

7/32

Open-source password manager and secrets management platform.

Tenable logo

Tenable

6/32

Exposure management and vulnerability management platform.

2022

Trend Micro logo

Trend Micro

6/32

Cybersecurity platform for endpoint, cloud, and network security.

2022, plus 27014 and 27034

Mimecast logo

Mimecast

5/32

Email and collaboration security platform for threat protection and data resilience.

Lacework logo

Lacework

5/32

Cloud security and CNAPP platform for workload protection and compliance monitoring, now part of Fortinet.

Vendor states alignment with ISO 27001 as an industry standard, not confirmed as a formal certification

Darktrace logo

Darktrace

5/32

AI-powered cybersecurity platform for threat detection and autonomous response.

2022

McAfee logo

McAfee

5/32

Consumer and enterprise antivirus, identity, and online privacy protection platform.

ESET logo

ESET

5/32

Cybersecurity platform for endpoint protection, antivirus, and threat detection.

2022

Dashlane logo

Dashlane

4/32

Password manager and credential security platform for individuals and businesses.

Ivanti logo

Ivanti

4/32

IT and unified endpoint management, security, and service management software.

Ping Identity logo

Ping Identity

3/32

Enterprise identity and access management (IAM) platform.

LastPass logo

LastPass

3/32

Password management and identity vaulting platform.

Checkmarx logo

Checkmarx

3/32

Application security testing (SAST/SCA) platform.

GitGuardian logo

GitGuardian

3/32

Secrets detection and non-human identity security platform.

Check Point logo

Check Point

2/32

Cybersecurity platform for network, cloud, and endpoint security.

27001 & 27002

JumpCloud logo

JumpCloud

2/32

Cloud directory platform for identity, device, and access management.

For the open directory platform

OneLogin logo

OneLogin

1/32

Identity and access management platform, owned by One Identity.

Vendor has a dedicated ISO 27001:2013 compliance page referenced in search results

Malwarebytes logo

Malwarebytes

1/32

Anti-malware and endpoint protection software for consumers and businesses.

Report available via support portal

Symantec logo

Symantec

0/32

Enterprise cybersecurity software (endpoint, network, email security), owned by Broadcom.

Referenced via Broadcom's ISO 27000 series trust center page, not itemized product-by-product in this pass

These security vendors do not currently hold ISO 27001 certification:

Know a vendor we're missing?

Data sourced from public trust centers. Not legal or compliance advice.

Logos and trademarks are property of their respective owners. Use does not imply endorsement, affiliation, or sponsorship.

© Compliance Posture 2026