# Non-human identity management for enterprise buyers: what AI models recommend, November 2026

Gane Index, November 2026 Edition. Asked as "non-human identity management platform" and as "machine identity and service account security tool", six framings each, to fourteen models with search on, on behalf of an enterprise B2B company. Added to the November 2026 Edition. Page: https://www.gane.ai/index/it/identity/non-human-identity-management/enterprise

**Standing:** CyberArk Identity Security Platform leads with 20% of first choices; verdict contested. 49 first choices across the direct, paraphrase, budget and scale prompts.

## First-choice share

| Rank | Product | Share | Negative rate | Labels |
|---|---|---|---|---|
| 1 | [CyberArk Identity Security Platform](https://www.gane.ai/index/it/vendors/cyberark-identity-security-platform/index.md) | 20% | 17% | 53 |
| 2 | [Oasis Security](https://www.gane.ai/index/it/vendors/oasis-security/index.md) | 12% | 10% | 29 |
| 3 | [SailPoint Machine Identity Security](https://www.gane.ai/index/it/vendors/sailpoint-machine-identity-security/index.md) | 10% | 25% | 28 |
| 4 | [Akeyless Identity Security Platform](https://www.gane.ai/index/it/vendors/akeyless-identity-security-platform/index.md) | 8% | 8% | 38 |
| 5 | [Saviynt Identity Cloud](https://www.gane.ai/index/it/vendors/saviynt-identity-cloud/index.md) | 8% | 19% | 31 |
| 6 | [JumpCloud](https://www.gane.ai/index/it/vendors/jumpcloud/index.md) | 8% | 0% | 11 |
| 7 | [Microsoft Entra ID](https://www.gane.ai/index/it/vendors/microsoft-entra-id/index.md) | 6% | 30% | 23 |
| 8 | [Venafi](https://www.gane.ai/index/it/vendors/venafi/index.md) | 4% | 14% | 21 |
| 9 | [Microsoft](https://www.gane.ai/index/it/vendors/microsoft/index.md) | 4% | 10% | 10 |
| 10 | [Astrix Security](https://www.gane.ai/index/it/vendors/astrix-security/index.md) | 2% | 13% | 30 |
| 11 | [Token Security](https://www.gane.ai/index/it/vendors/token-security/index.md) | 2% | 0% | 11 |
| 12 | [HashiCorp Vault](https://www.gane.ai/index/it/vendors/hashicorp-vault/index.md) | 2% | 32% | 37 |

Rank is by share of first choices among all 92 products named; products with the same share are tied, and the order among them carries no meaning. The table lists those with at least 10 labels.

## Each model's first choice on the direct prompt

- Claude Haiku 4.5: no first choice
- GPT-5.4 mini: CyberArk Identity Security Platform; alternatives Okta, SailPoint Machine Identity Security
- Gemini 3.5 Flash: Oasis Security; alternatives Aembit, CyberArk Privileged Access Manager, Entro Security, HashiCorp Vault
- Perplexity Sonar: Oasis Security; alternatives Astrix Security, CyberArk Identity Security Platform, Microsoft Entra ID
- Grok 4.20: Astrix Security; alternatives Aembit, Akeyless Identity Security Platform, Oasis Security
- Mistral Small: CyberArk Identity Security Platform, Saviynt Identity Cloud; alternatives Aembit, Microsoft Entra ID, Oasis Security
- DeepSeek V4 Flash: Microsoft Entra ID; alternatives Aembit, CyberArk Identity Security Platform, GitGuardian NHI Governance, Saviynt Identity Cloud
- Llama 4 Maverick: no first choice
- Qwen 3.7 Flash: CyberArk Identity Security Platform; alternatives Akeyless Identity Security Platform, HashiCorp Vault, Venafi
- Kimi K2: Oasis Security, Token Security; alternatives Clutch Security, CyberArk Identity Security Platform, Saviynt Identity Cloud, ServiceNow NHI Security
- GLM 4.7 FlashX: CyberArk Identity Security Platform, Saviynt Identity Cloud; alternatives One Identity
- MiniMax M2.5: Microsoft; alternatives Astrix Security, CyberArk Identity Security Platform, Oasis Security, Saviynt Identity Cloud
- GPT-6 Luna: Oasis Security; alternatives Aembit, CyberArk Identity Security Platform
- Muse Glimmer 30B: Microsoft, Saviynt Identity Cloud; alternatives CyberArk Identity Security Platform, HashiCorp Vault, Teleport

## Sources the answers cite

78 of 84 answers came back with a source list, from 14 of 14 models. Sites named in the most answers:

- startwithidentity.com: 36 answers, 51 citations
- research.isg-one.com: 28 answers, 38 citations
- oneidentity.com: 28 answers, 28 citations
- expertinsights.com: 26 answers, 27 citations
- startupstash.com: 23 answers, 25 citations
- g2.com: 21 answers, 27 citations
- securityboulevard.com: 19 answers, 25 citations
- akeyless.io: 18 answers, 25 citations

Pages named in the most answers:

- https://oneidentity.com/learn/top-non-human-identity-and-agentic-ai-security-tools.aspx (24 answers)
- https://expertinsights.com/identity-and-access-management/top-nhi-management-solutions (23 answers)
- https://research.isg-one.com/buyers-guide/information-technology/cybersecurity/non-human-identities-platforms/2026?hs_amp=true (22 answers)
- https://startupstash.com/top-non-human-identity-management-platforms (20 answers)
- https://gane.ai/index/it/identity/non-human-identity-management/enterprise (17 answers)
- https://startwithidentity.com/rankings (16 answers)
- https://research.isg-one.com/buyers-guide/information-technology/cybersecurity/non-human-identities-platforms/2026 (13 answers)
- https://wwt.com/blog/non-human-identity-security-platform-assessment (12 answers)
- https://sourceforge.net/software/non-human-identity-management (11 answers)
- https://akeyless.io/blog/top-5-non-human-identity-management-tools-for-2026 (10 answers)

## Warned against

- HashiCorp Vault: 12 of 37 labels negative. "HashiCorp Vault and SailPoint have been noted for limitations in NHI support, scalability, and ease of deployment, making them risky choices" (Mistral Small, negative prompt)
- Okta: 9 of 28 labels negative. "Avoid using these as your *only* NHI management solution. Use them only for authentication, not for governance or lifecycle management." (GLM 4.7 FlashX, negative prompt)
- CyberArk Identity Security Platform: 9 of 53 labels negative. "Avoid relying on CyberArk if your primary constraint is cost predictability" (Qwen 3.7 Flash, budget prompt)
- Microsoft Entra ID: 7 of 23 labels negative. "Only Authenticate: (e.g., Okta, Entra ID) — Do not govern actions." (GLM 4.7 FlashX, negative prompt)

## Movement since October 2026

Floor: 11 points of share, measured on the calibration repeat.
Same leader: CyberArk Identity Security Platform at 20%.

- Aembit: 8% to 0%, −8. Inside the floor by 3 points · rank 3 → 19 of 92.
- Oasis Security: 6% to 12%, +6. Inside the floor by 5 points · rank 6 → 2 of 92.
- Saviynt Identity Cloud: 2% to 8%, +6. Inside the floor by 5 points · rank 11 → 5 of 92.
- JumpCloud: 2% to 8%, +6. Inside the floor by 5 points · rank 13 → 6 of 92.
- Microsoft Entra ID: 0% to 6%, +6. Inside the floor by 5 points · rank 89 → 7 of 92.
- HashiCorp Vault: 8% to 2%, −6. Inside the floor by 5 points · rank 4 → 12 of 92.
- Akeyless Identity Security Platform: 4% to 8%, +4. Inside the floor by 7 points · rank 7 → 4 of 92.
- Microsoft: 0% to 4%, +4. Inside the floor by 7 points · rank 33 → 9 of 92.
- One Identity: 4% to 0%, −4. Inside the floor by 7 points · rank 9 → 22 of 92.
- Venafi: 6% to 4%, −2. Inside the floor by 9 points · rank 5 → 8 of 92.
- Astrix Security: 4% to 2%, −2. Inside the floor by 9 points · rank 8 → 10 of 92.
- Okta: 2% to 0%, −2. Inside the floor by 9 points · rank 25 → 24 of 92.

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.