emerging · -1.2 market domain

Zero Trust

Score 20.6 / 100 112 providers +3 via APIs 28 APIs Search apis.io →

Providers using this tag (112)

Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.

Exemplar 5 Complete, well-documented, and agent-ready
Amazon WorkSpaces WebAmazon Web ServicesEnd User ComputingSecure BrowserVirtual Desktop14 APIs74.8AembitSecurityIdentityIdentity and Access ManagementWorkload Identity2 APIs74.5Microsoft Active DirectoryActive DirectoryAuthenticationAuthorizationDirectory Services3 APIs71.3Microsoft EntraIdentity and Access ManagementAuthenticationAzure ADEntra2 APIs70.3ZeroTierCompanyNetworkingSoftware Defined NetworkingSDN2 APIs67.1
Strong 15 Solid coverage with minor gaps
KolideCompanyB2BSecurityDevice Trust2 APIs58.7ThreatLockerCybersecurityEndpoint SecurityApplication-Control1 API54.8AccuKnoxCompanySecurityCloud SecurityCloud Native Application Protection Platform4 APIs54.3GraphiantNetworkingNetwork as a ServiceNaaSConnectivity1 API65.9Nord SecurityCybersecurityThreat IntelligenceDark Web MonitoringAttack Surface Management7 APIs65.3Cisco UmbrellaSecurityDNSSecure Web GatewayCloud Security52 APIs63.6TigeraCompanyKubernetesNetworkingNetwork Security1 API62.9Cisco Identity Services EngineIdentityNetwork AccessSecurity104 APIs61.7Amazon PrivateLinkAmazon Web ServicesNetworkingPrivate ConnectivitySecurity4 APIs60.9SmallStepCompanyDeveloper ToolsCertificate AuthorityPKI1 API60.7Amazon Verified AccessIdentity and Access ManagementAmazon Web ServicesSecurity26 APIs59.9CentrifyCompanyIdentityPrivileged Access ManagementIdentity and Access Management15 APIs59.5AxioRankArtificial IntelligenceSecurityGateways1 API58.8VirtruCompanyCybersecurityData SecurityEncryption15 APIs58.7AppOmniSaaS SecuritySSPMComplianceThreat Detection6 APIs56.3
Developing 17 Usable, with meaningful gaps to close
Border0Network AccessSecurityIdentity and Access Management1 API52.3StrongDMCompanySecurityPrivileged Access Management2 APIs46.4ibossCompanySecurityCybersecurity1 API40.3Beyond IdentityAuthenticationPasswordlessIdentity2 APIs52.2BuoyantAI ObservabilityKubernetesLinkerdmTLS3 APIs51.2Google BeyondCorpAccess ControlEnterprise SecurityIdentitySecurity2 APIs51.2CerbosABACAccess ControlAuthorizationAuthZEN1 API50.7Defakto SecuritySecurityIdentityNon-Human IdentityWorkload Identity2 APIs49.6Pangolin (Fossorial)Open SourceNetworkingSecuritySASE1 API47.9TufinCloud SecurityComplianceFirewall ManagementNetwork Security2 APIs47.1Zero NetworksSecurityNetwork SecurityMicrosegmentation1 API47.0P0 SecurityCompanySecurityPrivileged Access ManagementIdentity and Access Management1 API46.2SpiderOakCompanySecurityEncryption1 API44.9SPIREAuthenticationCloud-NativeGraduatedIdentity2 APIs43.6WanderaCompanyCybersecurityMobile Security2 APIs41.8Skyhigh SecurityCompanyCybersecuritySecurity Service EdgeCASB1 API41.6TailscaleVPNMesh NetworkingWireGuard1 API40.1
Thin 29 Limited public surface area
Zero Trust Network AccessAccess ControlCloud SecurityCybersecurityIdentity and Access Management1 API35.2NetBirdNetworkingVPNOpen Source1 API34.7ZscalerCloud SecuritySASENetwork Security5 APIs34.6Duo SecurityAuthenticationMFAIdentity1 API34.0Cisco Secure ClientEndpoint SecurityRemote AccessSecurityVPN1 API32.8RubrikBackupCyber RecoveryData SecurityData Security Posture Management1 API32.4VirsecCompanySecurityCybersecurityApplication Security2 APIs31.7Versa NetworksCompanyNetworkingSecuritySASE2 APIs29.7IllumioCompanySecurityCybersecurity1 API29.4Perimeter 81CompanyCybersecuritySASE1 API28.9BeyondTrustAccessIdentity and Access ManagementComplianceCredentials6 APIs38.6PulseIvantiNetwork SecuritySecure AccessSSL VPN3 APIs37.2WatchGuardCloud SecurityEndpoint SecurityFirewallMFA2 APIs37.2AviatrixCompanyCloud NetworkingCloud SecurityMulti-Cloud36.8AryakaCompanyNetworkingSASESD-WAN36.1Via ScienceCompanySecurityIdentityAuthentication1 API35.1Ambient MeshService MeshIstioKubernetes1 API33.8AxiomaticsCompanyAuthorizationPolicy1 API33.6Consul ConnectConsulEnvoyHashiCorpIntentions1 API33.6JumpCloudIdentityDirectory ServicesSSOMFA1 API33.6SPIFFEAuthenticationCloud-NativeGraduatedIdentity1 API33.2Cato NetworksCompanyCybersecuritySASESSE1 API32.4CyberArkAuthenticationCloud SecurityConjurCredential Vault1 API32.4AkeylessSecrets ManagementCloud SecurityIdentity Security1 API32.0ANHA RegistryCompanyArtificial IntelligenceSecurity2 APIs31.5HyporiCompanySecurityMobileVirtualization1 API29.7Secret Double OctopusCompanyAuthenticationIdentity and Access ManagementPasswordless1 API29.0DispelOT SecurityIndustrial IoTRemote Access1 API28.5TodylCompanyCybersecuritySecurityManaged Service Providers1 API26.4
Emerging 32 Early or largely undocumented
Zero-Trust Security ModelAccess ControlCybersecurityFederalIdentity and Access Management5 APIs24.3NetskopeSecuritySASESSECASB4 APIs23.1Zero Trust ArchitectureAccess ControlAuthenticationAuthorizationCybersecurity5 APIs22.6ElisityCompanyCybersecurityMicrosegmentation18.7COSGrid NetworksCompanyCybersecuritySD-WAN1 API17.4GreymatterEnterpriseKubernetesNetworkingService Mesh3 APIs15.6XageCompanySecurityCybersecurity15.3CloudbrinkincSecurityNetworkingCloud14.1OpenVPNVPNNetwork SecurityRemote Access2 APIs14.0Red AccessCompanySecurityCybersecuritySecure Service Edge12.7TwingateZTNANetwork AccessVPN Replacement1 API11.6SilverfortCompanyIdentitySecurityAuthentication1 API25.6AppaegisCompanySecurityEnterprise Browser1 API25.3CyberArk IdentityIdentityIdentity and Access ManagementSSOMulti-Factor Authentication1 API24.8ForescoutCompanyCybersecurityNetwork SecurityDevice Visibility3 APIs24.4UnisysFortune 1000SecurityNetwork Security4 APIs23.4API DynamicsAPI SecurityAPI DiscoveryAPI Observability1 API20.3AdytonCompanyEnterprise SaasDefense19.8Wodan AICompanyArtificial IntelligenceEncryption19.3SOFTwarfareCompanySecurityIdentityAuthentication17.8NewCoreCompanySecurityIdentityIdentity and Access Management17.7OtterizeCompanyBusiness ApplicationsKubernetesAccess Control17.1IslandCompanyCybersecurityEnterprise Browser16.5SonicWallCybersecurityNetwork SecurityFirewallNext-Generation Firewall16.3Menlo SecurityCompanySecurityCybersecurityBrowser Security16.0VeniceCompanySecurityPrivileged Access ManagementIdentity Security15.9SpirlCompanySecurityIdentityNon-Human Identity15.8AceissCompanySecurityIdentity and Access ManagementAccess Control15.1ZorusCompanyCybersecurityDNS FilteringWeb Protection13.0Banyan SecurityCompanySecurityNetworks12.9IvantiEndpoint ManagementIT Asset ManagementITSMPatch Management5 APIs11.6NileNetworkingEnterprise NetworkingNetwork as a ServiceNaaS11.4
Minimal 11 Almost no public developer surface
GuardicoreCompanySecurityMicrosegmentation2.6WenspiredataCompanyCybersecurityPrivileged Access Management10.4AgentLockAI SecurityAPI GatewayAgent Management10.2ProsimoCompanyCloud NetworkingMulti-CloudNetworking8.6PomeriumProxy1 API6.5Area 1 SecurityCompanySecurityEmail SecurityAnti-Phishing4.5idsmanagerCompanyIdentityAuthenticationAuthorization2.6Soha SystemsCompanySecuritySecure Access2.6CyemptiveCompanyCybersecuritySecurityRansomware2.5HeadscaleCompanyOpen SourceNetworkingVPN2.2TrueFortCompanyCybersecurityMicrosegmentation0.0
Unrated 3 Not yet scored
AporetoCompanySecurityMicrosegmentationInfiotCompanySASENetworkingSD-WANTalonCompanySecurityEnterprise Browser

APIs with this tag (28)

Ranked by the provider's API Evangelist rating — the Kin Score is scored per provider, not per API, so every API of a provider shares its band. How the rating works →

Exemplar 3 Complete, well-documented, and agent-ready
Cloudflare Zero Trust APIThe Cloudflare Zero Trust API enables developers to manage secure access to applications and networks witho...82.5Microsoft Graph Conditional Access APICreate and manage Microsoft Entra Conditional Access policies that enforce access controls based on user, l...71.3Microsoft Entra Global Secure Access APIAPI for managing Microsoft Entra Internet Access and Microsoft Entra Private Access, providing identity-cen...70.3
Strong 1 Solid coverage with minor gaps
AppOmni Identity and Access APIUnified identities that stitch a person's monitored-service accounts together by email, plus AppOmni platfo...56.3
Developing 4 Usable, with meaningful gaps to close
Linkerd Service MeshLinkerd is a CNCF-graduated service mesh for Kubernetes that transparently adds mutual TLS encryption, late...51.2Tufin SecureApp APIAPI for application-centric security policy management and micro-segmentation. SecureApp enables teams to m...47.1Aranya Client APIThe Aranya Client API is the library interface an application uses to talk to the Aranya daemon. It covers ...44.9iboss Zero Trust SSE Platform APIAuthenticated REST administration and reporting surface for the iboss Zero Trust SASE/SSE cloud platform, s...40.3
Thin 7 Limited public surface area
Ivanti Neurons for Zero Trust Access REST APIREST API for managing Ivanti Neurons for Zero Trust Access (nZTA), providing endpoints for managing zero tr...37.2VIA Zero Trust Fabric — OpenID Connect IdentityVIA's OpenID Connect / OAuth 2.0 identity layer, operated on a VIA-run Keycloak server. It is the only mach...35.1Zscaler Private Access (ZPA) APIREST API for managing Zscaler Private Access (ZPA) configurations including segment groups, application seg...34.6Ambient MeshAmbient Mesh provides a sidecar-less service mesh via the Kubernetes Gateway API and Istio ambient mode. It...33.8Cisco Duo Admin APIThe Duo Admin API configures multi-factor authentication policies, users, groups, and integrations used by ...32.8Tailscale APITailscale provides a REST API for managing tailnets (private mesh networks), devices, users, access control...31.8Illumio Core PCE REST APIThe Illumio Policy Compute Engine (PCE) REST API for managing Zero Trust Segmentation — workloads, labels, ...29.4
Emerging 12 Early or largely undocumented
NIST SP 800-207 Zero Trust ArchitectureThe foundational specification of the Zero Trust security model. Defines the seven tenets, the PDP/PEP/PA l...24.3NIST SP 800-207 Zero Trust ArchitectureNIST Special Publication 800-207 defines zero trust architecture (ZTA) and provides a roadmap for organizat...22.6NIST SP 800-207A ZTA for Cloud-Native ApplicationsNIST SP 800-207A extends the original ZTA guidance to cover cloud-native applications in multi-cloud enviro...22.6Open Policy Agent (OPA)Open Policy Agent is a CNCF-graduated open source general-purpose policy engine that enables unified, conte...22.6SPIFFE - Secure Production Identity Framework for EveryoneSPIFFE is a CNCF-graduated open standard for workload identity in dynamic environments. It provides a frame...22.6SPIRE - SPIFFE Runtime EnvironmentSPIRE is the reference implementation of SPIFFE, a CNCF-graduated production-ready toolchain for establishi...22.6HPE Aruba Networking SSE APIThe HPE Aruba Networking SSE (Security Service Edge) API exposes the Axis Security / HPE SSE cloud-delivere...20.7API Dynamics PlatformThe APIDynamics platform provides AI-driven API security and observability including API discovery, traffic...20.3Greymatter Platform APIThe Greymatter Platform API provides programmatic access to configure and manage the Greymatter zero trust ...15.6CloudConnexa Public APIREST API for managing CloudConnexa Zero Trust networks, users, networks, connectors, DNS, routes, and acces...14.0Ivanti Neurons for Zero-Trust AccessREST API for Ivanti Neurons for Zero-Trust Access, providing programmatic configuration of zero-trust polic...11.6Twingate Admin APIGraphQL Admin API for managing Twingate resources, remote networks, connectors, users, groups, devices, ser...11.6
Minimal 1 Almost no public developer surface
PomeriumPomerium is an identity-aware reverse proxy that enables secure, zero-trust access to internal applications...6.5

Companies reaching this through an API (3)

These companies publish an API, specification or operation carrying “Zero Trust” but do not classify their business under it. Listed unranked and kept out of the count above, because one tagged operation is not a statement about what a company does.

Cloudflare HPE Aruba Networking VPN

Score breakdown

Frequency
54.3
log-scaled weighted occurrences
Breadth
1.4
spread across providers
Quality lift
33.3
mean composite of providers using it
Cohesion
0.0
strength of nearest seed neighbor

Related tags

SASE 19 co-occurrences Network Security 24 co-occurrences Identity and Access Management 25 co-occurrences Cloud Security 23 co-occurrences Privileged Access Management 13 co-occurrences ZTNA 10 co-occurrences VPN 12 co-occurrences Microsegmentation 8 co-occurrences

Where this tag comes from

Provider tag112
Api tag28

Cohort brief

Auto-generated

The 104 providers in the APIs.io catalog tagged Zero Trust, scored on the Kin Score. Every figure below is computed from the catalog — nothing here is written.

Providers
104
of 112 in the catalog
Mean Kin Score
33.8
+9.7 vs catalog 24.1
Mean Agent Readiness
16.5
+2.4 vs catalog 14.1
Spread
0–74.8
median 32.4 · σ 19
How the 104 split by band
Exemplar 5Strong 15Developing 16Thin 28Emerging 30Minimal 10
Facet averages, against the whole catalog
FacetThis cohortCatalogDifferenceScored
Developer Ergonomics 37.2 24.5 +12.7 104
Operational Transparency 23.9 13.2 +10.7 104
Contract Quality 25.8 18.6 +7.2 104
Access Clarity 36.6 30 +6.6 104
Discoverability 65.4 59.1 +6.3 104
Contract Governance 15.7 9.7 +6 104

A facet is averaged over the members that carry it, not over the whole cohort — the “Scored” column is that count. Averaging an absent facet as zero would score our own coverage gaps as the providers’ posture.

What this cohort publishes
ArtifactThis cohortCatalogDifference
MCP server (any) 16% 18% -2
MCP server (first-party) 12% 16% -4
Agent Skills 0% 0% 0
OAuth scopes 9% 13% -4
Security 97% 99% -2
Arazzo workflows 2% 1% +1
Governance rules 49% 36% +13

mcp_pct counts any mcp/ artifact including ones API Evangelist derived from the provider OpenAPI; mcp_first_party_pct counts only servers the provider publishes. Prefer the latter.

Top by Kin Score
  1. 1 Amazon WorkSpaces Web 74.8
  2. 2 Aembit 74.5
  3. 3 Microsoft Active Directory 71.3
  4. 4 Microsoft Entra 70.3
  5. 5 ZeroTier 67.1
  6. 6 Graphiant 65.9
  7. 7 Nord Security 65.3
  8. 8 Cisco Umbrella 63.6
  9. 9 Tigera 62.9
  10. 10 Cisco Identity Services Engine 61.7
Top by Agent Readiness
  1. 1 AxioRank 63.4
  2. 2 Aembit 49.3
  3. 3 Tigera 46.5
  4. 4 Nord Security 42.9
  5. 5 Amazon WorkSpaces Web 42.2
  6. 6 ANHA Registry 37.7
  7. 7 Cisco Identity Services Engine 37.2
  8. 8 Google BeyondCorp 36.2
  9. 9 Microsoft Active Directory 36
  10. 10 Amazon PrivateLink 34.7
All 112 members of this roster resolve to a provider in the catalog; 104 carry a score (93%). The figures above describe the scored members only.
Coverage caveat. 81 of 104 scored members had under half their catalog-attributable points satisfied at all (catalog_earned / catalog_max < 0.5). They are INCLUDED in the mean above. A large share here means the cohort mean is partly a measurement of how far our enrichment reached, not only of how these providers publish.Generated from the catalog build of 14 November 2026, across 41591 providers, using the same computation served by the APIs.io cohort API. Briefs are published for rosters of 5 or more scored providers; below that a distribution is not meaningful.

Work with this as data

Every tag here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for tags

7 MCP tools reach this
  • find_tagsBrowse and filter every tag in the catalog.
  • get_cohortThis tag as a scored cohort — every provider carrying it, with scores.
  • cohort_statsPRO — the distribution across this tag: mean, median, band split, adoption rates.
  • cohort_rankingsPRO — the leaderboard, on composite AND agent-readiness axes.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This tag 
curl "https://apis.io/api/v1/tags/zero-trust"
All tags 
curl "https://apis.io/api/v1/tags?limit=25"
As a scored cohort (paid plan)
The distribution (Pro)

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.