CIOPages
For vendors— is your company listed?
Claim a listing Submit a listing Promote your companyPricing & info
DirectoryAthenz

Athenz

Open Source

About Athenz

Athenz is an open source identity and access management platform designed for dynamic cloud and hybrid infrastructures. It provides service authentication using short-lived X.509 certificates and fine-grained role-based access control (RBAC) with industry standard JWT tokens. The platform enables secure communication among workloads through mutual TLS (mTLS), supporting zero trust security principles such as traffic encryption, authentication, authorization, and least privilege access.

Targeted at enterprises managing complex hybrid environments and Kubernetes clusters, Athenz addresses challenges around workload identity, secure API authentication, and centralized authorization management. It supports issuing service identities for container workloads, enabling them to authenticate with Kubernetes APIs and establish secure service-to-service communication. Additionally, Athenz facilitates issuing AWS temporary credentials for on-premises services, eliminating the need for static AWS IAM credentials. Its extensible APIs and integration capabilities make it suitable for large-scale cloud platforms seeking a single source of truth for service identity and authorization.

How to evaluate Identity & Access Management

This is how the CIOPages Research Team evaluates this category. It is not an assessment of Athenz. It comes from our Identity & Access Management (IAM) buyer guide.

30%
Authentication & SSO
Phishing-resistant MFA and passkeys/FIDO2 as first-class methods, device-bound credentials, SAML/OIDC/WS-Fed breadth, adaptive and risk-based step-up, device trust, session management and continuous evaluation, and graceful fallback and recovery that does not become the help-desk attack vector
20%
Lifecycle & Provisioning
HR-driven joiner-mover-leaver automation, SCIM and LDAP provisioning, depth and maintenance of the application connector catalog, self-service access requests, fast and reliable deprovisioning, and handling of contractors, partners, and seasonal populations
15%
Directory & Hybrid Architecture
Universal/cloud directory, coexistence with on-prem Active Directory and LDAP, hybrid agents and write-back, multi-domain and multi-forest support, data residency options, and the resilience and blast radius of the directory as a revenue-critical dependency
15%
Identity Threat Detection & Response (ITDR)
Post-authentication risk evaluation, session and token-theft detection, anomaly and impossible-travel signals, identity security posture (dormant accounts, over-privilege, MFA gaps), and how cleanly signals flow to and from the SIEM/XDR and trigger automated response
10%
Machine & Agent Identity
Issuance of scoped, short-lived credentials for service accounts, workloads, and first-party APIs (OAuth client-credentials, workload identity federation), discovery and governance of non-human identities, secrets handling, and emerging support for AI-agent identities acting on a user’s behalf
10%
Deployment, Integration & Commercial Fit
Pre-built connectors for your actual top applications (verified, not catalog-counted), migration tooling and coexistence, API and SDK quality, administrative usability, the pricing unit relative to your user and machine population, and the realism of support and professional services

CIOPages put this listing together from public sources. It’s information, not an endorsement. How we build listings. Work here? Claim this listing or .

Quick Facts

www.athenz.io
FoundedNot on file
HeadquartersNot on file

We publish a detail only when we can point at the page it came from. Claim this listing to fill in the rest.