What is NIST CSF?
The US NIST Cybersecurity Framework offers voluntary guidance on managing and reducing cybersecurity risk, and is frequently used for alignment statements.
NIST CSF (Cybersecurity Framework) is tracked across the 422 vendors in our directory. Buyers frequently require it from vendors during procurement, and compliance is typically demonstrated through independent audits, official registries, or formal certifications. Timeframes vary. Most organizations plan months, not weeks, to prepare, be audited, and certify. For exact requirements, refer to the official NIST CSF program ↗.
Vendors with NIST CSF
14Analytics
Communication
DevOps & Monitoring
HR & People Ops
Infrastructure & Cloud
Productivity & Docs
Security
Partial or conditional
5These vendors meet it under specific conditions. Hover a card for the condition, or see their profiles.
Salesforce
NIST SP 800-171 documentation published
27/32
Lacework
Referenced as an alignment standard
5/32
BigCommerce
Security program is aligned with NIST CSF, not independently assessed or certified against it
14/32
Checkmarx
Partial per the vendor's trust center; the specific condition is not detailed there.
3/32
Weights & Biases
Partial per the vendor's trust center; the specific condition is not detailed there.
5/32
Not certified
1Finance & Payments
402 unverified
For these vendors, NIST CSF status is not publicly documented. That does not mean they lack the certification.
15Five1Password8x8A-LIGNAcronisActiveCampaignAcumaticaAdobe AcrobatAdobe AnalyticsAdobe CommerceAdobe Creative CloudAdobe XDADPAdyenAffirmAfterpayAhrefsAirbyteAirtableAirwallexAkamaiAlchemerAmplitudeAnthropicApolloAppDynamicsApplitoolsAsanaAuth0AvalaraBackblazeBambooHRBasecampBench AccountingBetterworksBetty BlocksBill.comBitbucketBitdefenderBitwardenBlackboardBlueJeansBoxBraintreeBrazeBrevoBrexBrowserStackBubbleBufferBugsnagCampaign MonitorCanvaCarboniteCeridian DayforceCertiniaChargebeeCheck PointCheckout.comChorus.aiCircleCICisco DuoCisco WebexClariClayClerkClickUpClioCloseCodaCohereConfluenceConnectWiseConstant ContactContentfulContractPodAiCopperCornerstone OnDemandCoursera for BusinessCraftCrazy EggCrowdStrikeCulture AmpCybereasonCypress.ioDarktraceDashlaneDatabricksDatadogDatto RMMdbt LabsDeelDialpadDigitalOceanDiscordDivvyDoceboDocuSignDomoDrataDriftDropboxDropbox SignDrupal (Acquia)DruvaEcwidElasticsearchEpicorESETEvernoteExpensifyFastlyFigmaFirebaseFivetranFlexportFly.ioFormstackFortinetFourKitesFramerFreshBooksFreshdeskFreshsalesFreshserviceFrontFullStoryGitGuardianGitHubGitLabGladlyGlideGoCardlessGongGoogle AnalyticsGoogle ApigeeGoogle WorkspaceGorgiasGoTo MeetingGrafana CloudGrasshopperGreenhouseGrooveGroqGustoHeapHeightHelp ScoutHerokuHiBobHoneycombHootsuiteHotjarHubSpotHubSpot CMSHugging FaceHyperproofiCIMSIFSInforInformaticaInsightlyInstapageInstructure CanvasIntercomInVisionIroncladIterableIvantiJazzHRJenkinsJFrogJiraJira Service ManagementJotformJumpCloudJuroJustworksKaseyaKayakoKeapKeeperKeeper SecurityKenticoKinstaKlarnaKlaviyoKnowBe4KongKustomerLaikaLambdaTestLangSmithLastPassLaterLatticeLaunchDarklyLawPayLeverLinearLinkedIn LearningLinodeLiveChatLogicGateLogRocketLookerLoomLucidchartLushaMailchimpMailerLiteMakeMalwarebytesManageEngineMarketoMarqetaMcAfeeMelioMendixMetricStreamMicrosoft Dynamics 365Microsoft OneNoteMimecastMiroMistral AIMixpanelMonday.comMotiveMozMuleSoftMyCasen8nNamelyNetlifyNetskopeNew RelicNimble CRMNinjaOneNotionOdooOmnisendOneLoginOneTrustOnfleetOpenAIOptimizelyOracle EloquaOracle ERP CloudOracle NetSuiteOrca SecurityOutreachOutSystemsPagerDutyPalo Alto NetworksPandaDocPaychexPaylocityPayPalPendoPerplexity AIPersonioPilot.comPineconePing IdentityPipedrivePlaidPlanetScalePodioPostHogPostmanPracticePantherPrestaShopproject44ProofHubProofpointQlikQualtricsQualysQuickBooks OnlineRailwayRampRapid7Re:amazeRechargeRecurlyRedis CloudRemote.comRenderResendResolverRetoolRevolut BusinessRingCentralRipplingRollbarRSA ArcherRubrikSage IntacctSalesforce PardotSalesloftSamsaraSanity.ioSAPSAP S/4HANASauce LabsScale AIScytaleSeamless.aiSecureframeSegmentSemgrepSemrushSendGridSentinelOneSentryServiceNowSharpSpringShipBobShipStationShopifyShopwareShortcutSisenseSitecoreSketchSkillsoftSlackSmartRecruitersSmartsheetSnowflakeSnykSoftrSolarWindsSonarQubeSophosSplunkSprintoSprout SocialSquareSquarespaceStrapiSugarCRMSupabaseSurveyMonkeySymantecTableauTailscaleTalendTalentLMSTaxJarTeamwork.comTenableTestRailThoropassThoughtSpotTidioTipaltiTodoistTogether AITravis CITrelloTrend MicroTriNetTrustArcTykTypeformUdemy BusinessUKGUnbounceVantaVaronisVeracodeVercelVimeoVMware Carbon BlackVolusionVonageVultrVWOWasabiWave AccountingWeaviateWebflowWherebyWireWiseWixWizWooCommerceWordPress VIPWorkableWorkOSWP EngineWrikeXeroZapierZendeskZoho CRMZoho DeskZoomZoomInfoZuora
Browse by category
NIST CSF-compliant analytics
NIST CSF-compliant artificial intelligence
NIST CSF-compliant communication
NIST CSF-compliant devops & monitoring
NIST CSF-compliant e-commerce
NIST CSF-compliant hr & people ops
NIST CSF-compliant infrastructure & cloud
NIST CSF-compliant productivity & docs
NIST CSF-compliant sales & crm
NIST CSF-compliant security
Don't see a vendor you need? Submit it