emerging · 1.5 market domain

Zero Trust

Score 21.8 / 100 98 providers 26 APIs Search apis.io →
Variants seen in the corpus: Zero Trustzero-trust

Providers using this tag (98)

Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.

Exemplar 1 Complete, well-documented, and agent-ready
Cisco Identity Services EngineIdentityNetwork AccessSecurity197 APIs67.8
Strong 7 Solid coverage with minor gaps
CloudflareAI GatewayAPI GatewayArtificial IntelligenceCDN87 APIs62.0Cisco UmbrellaSecurityDNSSecure Web GatewayCloud Security26 APIs61.1ZeroTierCompanyNetworkingSoftware Defined NetworkingSDN8 APIs58.3Beyond IdentityAuthenticationPasswordlessIdentity17 APIs56.3KolideCompanyB2BSecurityDevice Trust17 APIs56.3SmallStepCompanyDeveloper ToolsCertificate AuthorityPKI6 APIs55.9Microsoft Active DirectoryActive DirectoryAuthenticationAuthorizationDirectory Services14 APIs54.3
Developing 17 Usable, with meaningful gaps to close
Microsoft Azure Active DirectoryAuthenticationAuthorizationIdentityMicrosoft12 APIs52.8ThreatLockerCybersecurityEndpoint SecurityApplication-Control18 APIs52.6Amazon WorkSpaces WebEnd User ComputingSecure BrowserVirtual Desktop10 APIs51.8TigeraCompanyKubernetesNetworkingNetwork Security7 APIs50.8Microsoft EntraAccess ManagementAuthenticationAzure ADEntra17 APIs50.7Nord SecurityCybersecurityThreat IntelligenceDark Web MonitoringAttack Surface Management10 APIs50.7GraphiantNetworkingNetwork as a ServiceNaaSConnectivity1 API50.2VirtruCompanyCybersecurityData SecurityEncryption14 APIs49.6Defakto SecuritySecurityIdentityNon-Human IdentityWorkload Identity2 APIs47.0TufinCloud SecurityComplianceFirewall ManagementNetwork Security14 APIs45.5Border0Network AccessSecurityIdentity and Access Management15 APIs45.2P0 SecurityCompanySecurityPrivileged Access ManagementIdentity and Access Management2 APIs43.2Amazon PrivateLinkNetworkingPrivate ConnectivitySecurityVPC4 APIs41.8WanderaCompanyCybersecurityMobile Security2 APIs40.8CerbosABACAccess ControlAuthorizationAuthZEN13 APIs40.0AkeylessSecrets ManagementCloud SecurityIdentity Security1 API39.9Amazon Verified AccessAccess ManagementSecurity26 APIs39.7
Thin 27 Limited public surface area
AryakaCompanyNetworkingSASESD-WAN39.0WatchGuardCloud SecurityEndpoint SecurityFirewallMFA11 APIs38.7CyberArkAuthenticationCloud SecurityConjurCredential Vault10 APIs37.8RubrikBackupCyber RecoveryData SecurityData Security Posture Management8 APIs37.7Skyhigh SecurityCompanyCybersecuritySecurity Service EdgeCASB1 API37.1StrongDMCompanySecurityPrivileged Access Management1 API37.1SPIREAuthenticationCloud-NativeGraduatedIdentity5 APIs36.8Google BeyondCorpAccess ControlEnterprise SecurityIdentitySecurity3 APIs35.4AviatrixCompanyCloud NetworkingCloud SecurityMulti-Cloud35.3AppOmniSaaS SecurityComplianceThreat DetectionCASB3 APIs35.1SSHSSHSecure ShellRemote AccessCryptography6 APIs34.5Consul ConnectConsulEnvoyHashiCorpIntentions4 APIs34.0JumpCloudIdentityDirectory ServicesSSOMFA7 APIs33.1Zero Trust Network AccessAccess ControlCloud SecurityCybersecurityIdentity Management12 APIs33.1VirsecCompanySecurityCybersecurityApplication Security2 APIs32.8NetBirdNetworkingVPNOpen-Source39 APIs32.6SPIFFEAuthenticationCloud-NativeGraduatedIdentity4 APIs32.0TailscaleVPNMesh NetworkingWireGuard7 APIs31.8Perimeter 81CompanyCybersecuritySASE17 APIs31.6Versa NetworksCompanyNetworkingSecuritySASE2 APIs28.9VPNEncryptionNetworkingPrivacySecurity6 APIs28.8IllumioCompanySecurityCybersecurity1 API28.6CentrifyCompanyIdentityPrivileged Access ManagementAccess Management1 API28.3Cisco Secure ClientEndpoint SecurityRemote AccessSecurityVPN11 APIs28.3BeyondTrustAccessAccess ManagementComplianceCredentials6 APIs28.0CyberArk IdentityIdentityAccess ManagementIAMSingle Sign-On8 APIs27.3Cato NetworksCompanyCybersecuritySASESSE1 API26.6
Emerging 34 Early or largely undocumented
Zero-Trust Security ModelAccess ControlCybersecurityFederalIdentity Management5 APIs25.8AppaegisCompanySecurityEnterprise Browser1 API25.1SilverfortCompanyIdentitySecurityAuthentication1 API24.7HPE Aruba NetworkingNetworkingSwitchingWi-FiSD-WAN10 APIs23.1Zero Trust ArchitectureAccess ControlAuthenticationAuthorizationCybersecurity5 APIs22.6ForescoutCompanyCybersecurityNetwork SecurityDevice Visibility3 APIs22.5UnisysFortune 1000SecurityNetwork Security4 APIs21.6BuoyantAI ObservabilityKubernetesLinkerdmTLS2 APIs20.7Duo SecurityAuthenticationMFAIdentity7 APIs20.0AdytonCompanyEnterprise SaasDefense19.9Ambient MeshService MeshIstioKubernetes1 API19.6GreymatterEnterpriseKubernetesNetworkingService Mesh3 APIs19.5PulseIvantiNetwork SecuritySecure AccessSSL VPN3 APIs18.9OtterizeCompanyBusiness ApplicationsKubernetesAccess Control18.6ElisityCompanyCybersecurityMicrosegmentation18.0SonicWallCybersecurityNetwork SecurityFirewallNext-Generation Firewall17.7OpenVPNVPNNetwork SecurityRemote Access2 APIs16.0Cloudflare.comAliasApplication ServicesCDNDNS1 API15.5VeniceCompanySecurityPrivileged Access ManagementIdentity Security15.5AceissCompanySecurityIdentity and Access ManagementAccess Control15.2Menlo SecurityCompanySecurityCybersecurityBrowser Security15.1TwingateZTNANetwork AccessVPN Replacement1 API14.8SpirlCompanySecurityIdentityNon-Human Identity14.6NewCoreCompanySecurityIdentityIAM14.2API DynamicsAPI SecurityAPI DiscoveryAPI Observability1 API13.6IslandCompanyCybersecurityEnterprise Browser13.5NileNetworkingEnterprise NetworkingNetwork as a ServiceNaaS13.0ZscalerCloud SecuritySASENetwork Security2 APIs12.4Red AccessCompanySecurityCybersecuritySecure Service Edge12.3Menlo SecurityCompanySecurityBrowser Security12.2NetskopeSecuritySASESSECASB2 APIs11.7WenspiredataCompanyCybersecurityPrivileged Access Management11.7ZorusCompanyCybersecurityDNS FilteringWeb Protection11.5IvantiEndpoint ManagementIT Asset ManagementITSMPatch Management5 APIs11.1
Minimal 12 Almost no public developer surface
ProsimoCompanyCloud NetworkingMulti-CloudNetworking10.6PomeriumProxy1 API10.5OasisCompanySecurityNon-Human IdentityIdentity and Access Management10.0TrueFortCompanyCybersecurityMicrosegmentation7.6Area 1 SecurityCompanySecurityEmail SecurityAnti-Phishing6.9AporetoCompanySecurityMicrosegmentation5.0GuardicoreCompanySecurityMicrosegmentation5.0idsmanagerCompanyIdentityAuthenticationAuthorization5.0InfiotCompanySASENetworkingSD-WAN5.0Soha SystemsCompanySecuritySecure Access5.0TalonCompanySecurityEnterprise Browser5.0CyemptiveCompanyCybersecuritySecurityRansomware3.0

APIs with this tag (26)

Ranked by the provider's API Evangelist rating — the Kin Score is scored per provider, not per API, so every API of a provider shares its band. How the rating works →

Strong 2 Solid coverage with minor gaps
Cloudflare Zero Trust APIThe Cloudflare Zero Trust API enables developers to manage secure access to applications and networks witho...62.0Microsoft Graph Conditional Access APICreate and manage Microsoft Entra Conditional Access policies that enforce access controls based on user, l...54.3
Developing 3 Usable, with meaningful gaps to close
Microsoft Entra Global Secure Access APIAPI for managing Microsoft Entra Internet Access and Microsoft Entra Private Access, providing identity-cen...50.7Graphiant Portal REST APIThe Graphiant Portal REST API is the machine-readable surface of the Graphiant NaaS platform. It exposes 52...50.2Tufin SecureApp APIAPI for application-centric security policy management and micro-segmentation. SecureApp enables teams to m...45.5
Thin 4 Limited public surface area
Teleport Access Management APITeleport is a modern SSH infrastructure access platform providing certificate-based authentication, session...34.5Tailscale APITailscale provides a REST API for managing tailnets (private mesh networks), devices, users, access control...28.8Illumio Core PCE REST APIThe Illumio Policy Compute Engine (PCE) REST API for managing Zero Trust Segmentation — workloads, labels, ...28.6Cisco Duo Admin APIThe Duo Admin API configures multi-factor authentication policies, users, groups, and integrations used by ...28.3
Emerging 16 Early or largely undocumented
NIST SP 800-207 Zero Trust ArchitectureThe foundational specification of the Zero Trust security model. Defines the seven tenets, the PDP/PEP/PA l...25.8HPE Aruba Networking SSE APIThe HPE Aruba Networking SSE (Security Service Edge) API exposes the Axis Security / HPE SSE cloud-delivere...23.1NIST SP 800-207 Zero Trust ArchitectureNIST Special Publication 800-207 defines zero trust architecture (ZTA) and provides a roadmap for organizat...22.6NIST SP 800-207A ZTA for Cloud-Native ApplicationsNIST SP 800-207A extends the original ZTA guidance to cover cloud-native applications in multi-cloud enviro...22.6Open Policy Agent (OPA)Open Policy Agent is a CNCF-graduated open source general-purpose policy engine that enables unified, conte...22.6SPIFFE - Secure Production Identity Framework for EveryoneSPIFFE is a CNCF-graduated open standard for workload identity in dynamic environments. It provides a frame...22.6SPIRE - SPIFFE Runtime EnvironmentSPIRE is the reference implementation of SPIFFE, a CNCF-graduated production-ready toolchain for establishi...22.6Linkerd Service MeshLinkerd is a CNCF-graduated service mesh for Kubernetes that transparently adds mutual TLS encryption, late...20.7Ambient MeshAmbient Mesh provides a sidecar-less service mesh via the Kubernetes Gateway API and Istio ambient mode. It...19.6Greymatter Platform APIThe Greymatter Platform API provides programmatic access to configure and manage the Greymatter zero trust ...19.5Ivanti Neurons for Zero Trust Access REST APIREST API for managing Ivanti Neurons for Zero Trust Access (nZTA), providing endpoints for managing zero tr...18.9CloudConnexa Public APIREST API for managing CloudConnexa Zero Trust networks, users, networks, connectors, DNS, routes, and acces...16.0Twingate Admin APIGraphQL Admin API for managing Twingate resources, remote networks, connectors, users, groups, devices, ser...14.8API Dynamics PlatformThe APIDynamics platform provides AI-driven API security and observability including API discovery, traffic...13.6Zscaler Private Access (ZPA) APIREST API for managing Zscaler Private Access (ZPA) configurations including segment groups, application seg...12.4Ivanti Neurons for Zero-Trust AccessREST API for Ivanti Neurons for Zero-Trust Access, providing programmatic configuration of zero-trust polic...11.1
Minimal 1 Almost no public developer surface
PomeriumPomerium is an identity-aware reverse proxy that enables secure, zero-trust access to internal applications...10.5

Score breakdown

Frequency
57.1
log-scaled weighted occurrences
Breadth
2.7
spread across providers
Quality lift
34.5
mean composite of providers using it
Cohesion
0.0
strength of nearest seed neighbor

Related tags

Network Security 23 co-occurrences SASE 16 co-occurrences Cloud Security 20 co-occurrences VPN 11 co-occurrences Privileged Access Management 9 co-occurrences ZTNA 8 co-occurrences Microsegmentation 7 co-occurrences MFA 8 co-occurrences

Where this tag comes from

Provider tag94
Api tag26

Cohort brief

Auto-generated

The 98 providers in the APIs.io catalog tagged Zero Trust, scored on the Kin Score. Every figure below is computed from the catalog — nothing here is written.

Providers
98
all scored
Mean Kin Score
28.7
+8.0 vs catalog 20.7
Mean Agent Readiness
13.3
+3.6 vs catalog 9.7
Spread
3–67.8
median 28.2 · σ 16.1
How the 98 split by band
Exemplar 1Strong 7Developing 17Thin 27Emerging 34Minimal 12
Facet averages, against the whole catalog
FacetThis cohortCatalogDifferenceScored
Developer Ergonomics 30.2 17.9 +12.3 98
Contract Quality 26.4 17.5 +8.9 98
Discoverability 66.7 60.4 +6.3 98
Operational Transparency 17.5 11.3 +6.2 98
Contract Governance 12 6.4 +5.6 98
Access Clarity 27.9 22.3 +5.6 98

A facet is averaged over the members that carry it, not over the whole cohort — the “Scored” column is that count. Averaging an absent facet as zero would score our own coverage gaps as the providers’ posture.

What this cohort publishes
ArtifactThis cohortCatalogDifference
MCP server (any) 19% 16% +3
MCP server (first-party) 6% 7% -1
Agent Skills 0% 0% 0
OAuth scopes 7% 9% -2
Security 96% 88% +8
Arazzo workflows 3% 2% +1
Governance rules 26% 13% +13

mcp_pct counts any mcp/ artifact including ones API Evangelist derived from the provider OpenAPI; mcp_first_party_pct counts only servers the provider publishes. Prefer the latter.

Top by Kin Score
  1. 1 Cisco Identity Services Engine 67.8
  2. 2 Cloudflare 62
  3. 3 Cisco Umbrella 61.1
  4. 4 ZeroTier 58.3
  5. 5 Beyond Identity 56.3
  6. 6 Kolide 56.3
  7. 7 SmallStep 55.9
  8. 8 Microsoft Active Directory 54.3
  9. 9 Microsoft Azure Active Directory 52.8
  10. 10 ThreatLocker 52.6
Top by Agent Readiness
  1. 1 Tigera 50.2
  2. 2 Nord Security 45.7
  3. 3 Cloudflare 44.5
  4. 4 Cisco Identity Services Engine 36.2
  5. 5 Beyond Identity 33.1
  6. 6 Microsoft Azure Active Directory 32.4
  7. 7 SmallStep 32.2
  8. 8 Amazon WorkSpaces Web 32
  9. 9 Cisco Umbrella 31.8
  10. 10 Graphiant 30.7
All 98 members of this roster resolve to a scored provider in the catalog.Generated from the catalog build of 25 August 2026, across 26891 providers, using the same computation served by the APIs.io cohort API. Briefs are published for rosters of 5 or more scored providers; below that a distribution is not meaningful.

Work with this as data

Every tag here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for tags

7 MCP tools reach this
  • find_tagsBrowse and filter every tag in the catalog.
  • get_cohortThis tag as a scored cohort — every provider carrying it, with scores.
  • cohort_statsPRO — the distribution across this tag: mean, median, band split, adoption rates.
  • cohort_rankingsPRO — the leaderboard, on composite AND agent-readiness axes.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools

Call it yourself

curl for this page
This tag 
curl "https://apis.io/api/v1/tags/zero-trust"
All tags 
curl "https://apis.io/api/v1/tags?limit=25"
As a scored cohort 
curl "https://apis.io/api/v1/cohorts/tag/zero-trust"
The distribution (Pro) 
curl "https://apis.io/api/v1/cohorts/tag/zero-trust/stats" \
  -H "X-API-Key: $APIS_IO_KEY"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.