10 Oct 2026 · TrustList Editorial
HPE iMC authentication bypass (CVSS 9.1) is fixed in 7.3 E0713
The flaw needs no credentials or user action and every iMC build before 7.3 E0713 is affected. HPE published the bulletin on 8 October and…
3 of 5 authentication software ranked on evidence in the Q4 2026 edition.
Between them, the 5 authentication software on this page cover mobile authentication (4), biometrics (4), self service portal (3) and out-of-band authentication (3). 5 of them have written a profile you can read before you get in touch.
TrustList ranking
Q4 2026 edition
3 of 5 authentication software ranked on evidence held on 12 October 2026: client reviews, vetting, awards and facts each business states on its own website, which we read and date. Nobody pays to be placed.
Positions are fixed for the quarter; the next edition is due in January 2027.

Single Sign On · Social Sign On · Mobile Authentication
Trusona sells account takeover protection for enterprises. Its ATO Protect product confirms the real person behind a request before a password reset, wire transfer or other…
Why #1: No major incidents in 90 days (status page)
Not yet on record: client reviews, vetting.

Single Sign On · Self Service Portal · Social Sign On
WatchGuard AuthPoint is a multi-factor authentication service delivered entirely from the cloud.
Why #2: 24/7 support · 8 major incidents in 90 days (status page), as stated on its own website, read 5 Oct 2026
Not yet on record: client reviews, vetting.

Single Sign On · Out-of-Band Authentication · Policy Management
RSA SecurID Access is an identity assurance product from RSA that lets organisations control who reaches applications using several authentication methods.
Why #3: 24/7 support, as stated on its own website, read 5 Oct 2026
Not yet on record: client reviews, vetting.

Single Sign On · Self Service Portal · Mobile Authentication
Protectimus is a two-factor authentication provider run by Protectimus Limited. It offers its service as a cloud platform and as an on-premises version, built on OATH standards.

Single Sign On · Self Service Portal · Mobile Authentication
Hypergate Authenticator is a mobile product that turns a phone into a full Active Directory client. It comes from Papers, a Swiss software house that works with web3 ventures.
For vendors
The order is earned on evidence: client reviews, vetting, awards and the facts a business states on its own website, which we read and date. Nobody can pay to move up. Add reviews or verified facts to your free profile to move up at the next edition; there are two ways to stand out now, and each one says what it is.
Not on TrustList yet? Add your product or claim its listing, free.
Free
Paid · always labelled
Every other way we rank authentication software, by what they do and where they are.
Articles on this subject first, then the newest.
10 Oct 2026 · TrustList Editorial
The flaw needs no credentials or user action and every iMC build before 7.3 E0713 is affected. HPE published the bulletin on 8 October and…
4 Oct 2026 · TrustList Editorial
AWS bulletin 2026-124 fixes three flaws in Loom for AWS, its open-source AI agent orchestration platform: an authentication bypass giving…
30 Sept 2026 · TrustList Editorial
Cisco says attackers are exploiting CVE-2026-76504 (CVSS 9.8) in Catalyst SD-WAN Manager, letting an unauthenticated remote attacker reach…
Jump to another ranked category.
Everything here links back to the same verified catalogue. Pick your next stop.