ISO 27018-Compliant Security Vendors

Security vendors are evaluated against ISO 27018 when they handle the workflows this framework governs. Currently, 18 vendors in our Security category hold ISO 27018 certification. Each listing below links to the vendor's full compliance profile.

Security vendors that hold ISO 27018 certification

Okta logo

Okta

21/32

Identity and access management platform providing secure authentication, authorization, and single sign-on for enterprises.

ISO/IEC 27018:2019

Zscaler logo

Zscaler

14/32

Cloud-native zero trust security platform (ZIA/ZPA) for secure internet and application access.

Wiz logo

Wiz

13/32

Cloud-native application protection platform (CNAPP) for cloud security.

Splunk logo

Splunk

11/32

Data platform for security, observability, and IT operations (SIEM, log analytics), owned by Cisco.

Netskope logo

Netskope

11/32

Security service edge (SSE) and cloud security platform (CASB, SWG, ZTNA).

Orca Security logo

Orca Security

10/32

Agentless cloud security platform (CNAPP) for cloud workload and configuration risk.

2025

1Password logo

1Password

9/32

Password manager and secure digital wallet that stores passwords, documents, and sensitive information with end-to-end encryption.

ISO/IEC 27018:2019

Fortinet logo

Fortinet

9/32

Network security and cybersecurity platform (firewalls, SASE, endpoint security).

Cybereason logo

Cybereason

9/32

Endpoint detection and response (EDR/XDR) cybersecurity platform.

Keeper logo

Keeper

9/32

Password management and privileged access security platform.

SentinelOne logo

SentinelOne

8/32

AI-powered endpoint, cloud, and identity security (XDR) platform.

KnowBe4 logo

KnowBe4

8/32

Security awareness training and simulated phishing platform.

Auth0 logo

Auth0

8/32

Identity and access management (authentication-as-a-service) platform, owned by Okta.

Varonis logo

Varonis

8/32

Data security platform for data classification, access governance, and threat detection.

Bitdefender logo

Bitdefender

8/32

Cybersecurity platform for consumer and enterprise endpoint protection.

Darktrace logo

Darktrace

5/32

AI-powered cybersecurity platform for threat detection and autonomous response.

2019

McAfee logo

McAfee

5/32

Consumer and enterprise antivirus, identity, and online privacy protection platform.

Ping Identity logo

Ping Identity

3/32

Enterprise identity and access management (IAM) platform.

These security vendors do not currently hold ISO 27018 certification:

Know a vendor we're missing?

Data sourced from public trust centers. Not legal or compliance advice.

Logos and trademarks are property of their respective owners. Use does not imply endorsement, affiliation, or sponsorship.

© Compliance Posture 2026