9 Oct 2026 · TrustList Editorial
Citrix fixes CVSS 9.5 NetScaler SAML flaw; no attacks seen so far
Only appliances configured as a SAML service provider or identity provider are exposed; Citrix knows of no exploitation yet, and…
3 of 5 authentication software ranked on evidence in the Q4 2026 edition.
Between them, the 5 authentication software on this page cover mobile authentication (4), biometrics (4), self service portal (3) and out-of-band authentication (3). 5 of them have written a profile you can read before you get in touch.
TrustList ranking
Q4 2026 edition
3 of 5 authentication software ranked on evidence held on 12 October 2026: client reviews, vetting, awards and facts each business states on its own website, which we read and date. Nobody pays to be placed.
Positions are fixed for the quarter; the next edition is due in January 2027.

Social Sign On · Multifactor Authentication · Mobile Authentication
Trusona sells account takeover protection for enterprises. Its ATO Protect product confirms the real person behind a request before a password reset, wire transfer or other…
Why #1: No major incidents in 90 days (status page)
Not yet on record: client reviews, vetting.

Self Service Portal · Social Sign On · Multifactor Authentication
WatchGuard AuthPoint is a multi-factor authentication service delivered entirely from the cloud.
Why #2: 24/7 support · 8 major incidents in 90 days (status page), as stated on its own website, read 5 Oct 2026
Not yet on record: client reviews, vetting.

Multifactor Authentication · Out-of-Band Authentication · Policy Management
RSA SecurID Access is an identity assurance product from RSA that lets organisations control who reaches applications using several authentication methods.
Why #3: 24/7 support, as stated on its own website, read 5 Oct 2026
Not yet on record: client reviews, vetting.

Self Service Portal · Multifactor Authentication · Mobile Authentication
Protectimus is a two-factor authentication provider run by Protectimus Limited. It offers its service as a cloud platform and as an on-premises version, built on OATH standards.

Self Service Portal · Multifactor Authentication · Mobile Authentication
Hypergate Authenticator is a mobile product that turns a phone into a full Active Directory client. It comes from Papers, a Swiss software house that works with web3 ventures.
For vendors
The order is earned on evidence: client reviews, vetting, awards and the facts a business states on its own website, which we read and date. Nobody can pay to move up. Add reviews or verified facts to your free profile to move up at the next edition; there are two ways to stand out now, and each one says what it is.
Not on TrustList yet? Add your product or claim its listing, free.
Free
Paid · always labelled
Every other way we rank authentication software, by what they do and where they are.
Articles on this subject first, then the newest.
9 Oct 2026 · TrustList Editorial
Only appliances configured as a SAML service provider or identity provider are exposed; Citrix knows of no exploitation yet, and…
4 Oct 2026 · TrustList Editorial
A new NetScaler flaw, CVE-2026-88779, affects Gateway and AAA deployments that use SAML and was exploited before a fix. Citrix says it is…
29 Sept 2026 · TrustList Editorial
Microsoft will enforce a Content Security Policy on login.microsoftonline.com from mid-October 2026, allowing only Microsoft-hosted…
Jump to another ranked category.
Everything here links back to the same verified catalogue. Pick your next stop.