The most used security and compliance tools
We track 157 security and compliance tools. The most used is reCAPTCHA, found at 236,136 companies as of October 2026, ahead of Cookiebot (57,798) and Let's Encrypt (54,355).
Security is the second-largest category in the catalog. It includes the certificate authorities that issue a site's TLS certificates (Let's Encrypt, DigiCert, Sectigo), password managers (1Password, LastPass), access and network security (Duo, Tailscale, Palo Alto Networks), email security gateways (Proofpoint, Mimecast) and compliance automation.
Certificate authorities appear on most domains because every HTTPS site needs a certificate; the more telling entries are email security gateways and identity tools, which show a deliberate purchase.
Security and compliance tools ranked by companies using them
“Share” is each tool's part of all 1,099,247 matches in this category; a company that uses two tools counts for both.
| # | Tool | Companies | Share | Last 30 days | Most popular with |
|---|---|---|---|---|---|
| 1 | 236,136 | 21% | +9−12 | Construction (1.6×) | |
| 2 | 57,798 | 5.3% | +7−3 | 1,001–5,000 employees (1.8×) | |
| 3 | 54,355 | 4.9% | +35−1 | 1–10 employees (2.0×) | |
| 4 | 53,342 | 4.9% | +4−2 | 10,000+ employees (4.4×) | |
| 5 | 48,228 | 4.4% | +3 | 10,000+ employees (4.4×) | |
| 6 | 47,963 | 4.4% | +3 | Construction (1.9×) | |
| 7 | 38,960 | 3.5% | +32−1 | 1–10 employees (2.2×) | |
| 8 | 35,830 | 3.3% | +15−2 | 1,001–5,000 employees (2.1×) | |
| 9 | 34,785 | 3.2% | +33−2 | 1–10 employees (2.5×) | |
| 10 | 32,002 | 2.9% | +2−2 | 1,001–5,000 employees (2.2×) | |
| 11 | 30,252 | 2.8% | +1−4 | 10,000+ employees (9.6×) | |
| 12 | 28,255 | 2.6% | +2 | Law Practice (6.5×) | |
| 13 | 26,427 | 2.4% | +23−1 | Insurance (3.2×) | |
| 14 | 23,237 | 2.1% | +1 | Construction (2.0×) | |
| 15 | 18,515 | 1.7% | +1 | Construction (2.0×) | |
| 16 | 17,436 | 1.6% | – | Medical Practice (6.8×) | |
| 17 | 14,539 | 1.3% | +3 | 1,001–5,000 employees (2.6×) | |
| 18 | 14,045 | 1.3% | −1 | 1,001–5,000 employees (2.3×) | |
| 19 | 14,020 | 1.3% | +3 | Automotive (3.9×) | |
| 20 | 12,124 | 1.1% | – | 1,001–5,000 employees (1.5×) | |
| 21 |  Amazon Trust Services | 11,338 | 1.0% | +15−1 | Software (3.4×) |
| 22 | 10,985 | 1.00% | – | Machinery (4.7×) | |
| 23 | 10,214 | 0.93% | +1 | 1,001–5,000 employees (3.0×) | |
| 24 | 8,795 | 0.80% | +1−1 | Government Administration (4.9×) | |
| 25 | 8,396 | 0.76% | +3−1 | 1,001–5,000 employees (3.5×) | |
| 26 | 8,165 | 0.74% | +6 | Construction (2.0×) | |
| 27 | 8,163 | 0.74% | +4 | Software (2.6×) | |
| 28 | 8,127 | 0.74% | – | Construction (3.0×) | |
| 29 | 7,343 | 0.67% | +1 | Automotive (16×) | |
| 30 | 7,132 | 0.65% | +2 | 1,001–5,000 employees (2.7×) | |
| 31 | 7,119 | 0.65% | +68 | 1,001–5,000 employees (2.9×) | |
| 32 | 7,040 | 0.64% | +11 | Construction (2.3×) | |
| 33 | 6,814 | 0.62% | +2−2 | Government Administration (3.6×) | |
| 34 | 6,774 | 0.62% | – | Individual & Family Services (7.3×) | |
| 35 | 6,515 | 0.59% | +1 | Hospitality (3.6×) | |
| 36 | 6,417 | 0.58% | +8 | 1,001–5,000 employees (3.5×) | |
| 37 | 6,243 | 0.57% | +4−3 | 10,000+ employees (13×) | |
| 38 | 5,663 | 0.52% | – | Primary/secondary Education (16×) | |
| 39 | 5,386 | 0.49% | – | Banking (6.1×) | |
| 40 | 5,375 | 0.49% | +10−1 | 10,000+ employees (10×) | |
| 41 | 5,374 | 0.49% | +1 | 1,001–5,000 employees (2.3×) | |
| 42 | 4,751 | 0.43% | +1−1 | Banking (9.8×) | |
| 43 | 4,576 | 0.42% | – | Hospitality (3.3×) | |
| 44 | 3,931 | 0.36% | +1−1 | 1,001–5,000 employees (1.6×) | |
| 45 | 3,675 | 0.33% | +1 | 201–1,000 employees (1.5×) | |
| 46 | 3,253 | 0.30% | +2 | Software (3.0×) | |
| 47 | 3,185 | 0.29% | – | 1,001–5,000 employees (2.0×) | |
| 48 | 2,864 | 0.26% | +4 | Staffing and Recruiting (2.7×) | |
| 49 | 2,706 | 0.25% | +11 | Banking (5.5×) | |
| 50 | 2,515 | 0.23% | +7 | – | |
| 51 | 2,447 | 0.22% | – | Hospitality (2.5×) | |
| 52 | 2,407 | 0.22% | +18−1 | Banking (25×) | |
| 53 | 2,385 | 0.22% | – | 10,000+ employees (9.3×) | |
| 54 | 2,101 | 0.19% | +2 | Logistics and Supply Chain (1.7×) | |
| 55 | 2,063 | 0.19% | +2 | Veterinary (44×) | |
| 56 | 2,016 | 0.18% | – | Software (3.3×) | |
| 57 | 1,910 | 0.17% | – | Government Administration (4.9×) | |
| 58 | 1,872 | 0.17% | – | 201–1,000 employees (1.5×) | |
| 59 | 1,814 | 0.17% | +1−1 | 10,000+ employees (16×) | |
| 60 | 1,808 | 0.16% | – | 1,001–5,000 employees (2.7×) | |
| 61 | 1,726 | 0.16% | – | Government Administration (6.3×) | |
| 62 | 1,628 | 0.15% | +3 | Government Administration (4.3×) | |
| 63 | 1,597 | 0.15% | +1 | 10,000+ employees (9.9×) | |
| 64 | 1,555 | 0.14% | +1 | Broadcast Media (56×) | |
| 65 | 1,458 | 0.13% | – | Apparel & Fashion (5.5×) | |
| 66 | 1,418 | 0.13% | – | Non-profit Organization Management (2.8×) | |
| 67 | 1,400 | 0.13% | +2 | 10,000+ employees (14×) | |
| 68 | 1,395 | 0.13% | – | 10,000+ employees (26×) | |
| 69 | 1,353 | 0.12% | – | 1,001–5,000 employees (3.0×) | |
| 70 | 1,349 | 0.12% | – | Sports (5.1×) | |
| 71 | 1,299 | 0.12% | – | Machinery (6.3×) | |
| 72 | 1,213 | 0.11% | +2 | Software (4.3×) | |
| 73 | 1,202 | 0.11% | – | Government Administration (31×) | |
| 74 | 1,092 | <0.1% | +5 | Computer & Network Security (9.6×) | |
| 75 | 1,055 | <0.1% | +3 | Banking (5.6×) | |
| 76 | 1,019 | <0.1% | – | Government Administration (10×) | |
| 77 | 1,012 | <0.1% | – | 5,001–10,000 employees (7.8×) | |
| 78 | 1,004 | <0.1% | – | Staffing and Recruiting (3.0×) | |
| 79 | 954 | <0.1% | – | Broadcast Media (35×) | |
| 80 | 952 | <0.1% | +1 | Utilities (15×) | |
| 81 | 947 | <0.1% | – | Clothing (117×) | |
| 82 | 938 | <0.1% | +2−1 | 10,000+ employees (4.6×) | |
| 83 | 925 | <0.1% | +1−2 | 10,000+ employees (30×) | |
| 84 | 909 | <0.1% | – | Newspapers (24×) | |
| 85 | 907 | <0.1% | +19 | Mental Health Care (26×) | |
| 86 | 854 | <0.1% | +7 | Government Administration (6.6×) | |
| 87 | 709 | <0.1% | – | Construction (3.3×) | |
| 88 | 684 | <0.1% | – | Banking (13×) | |
| 89 | 670 | <0.1% | – | Higher Education (6.5×) | |
| 90 | 668 | <0.1% | – | Construction (2.3×) | |
| 91 | 660 | <0.1% | +8 | Banking (74×) | |
| 92 | 591 | <0.1% | −1 | Sporting Goods (33×) | |
| 93 | 577 | <0.1% | +1−1 | 10,000+ employees (15×) | |
| 94 | 569 | <0.1% | – | Leisure, Travel & Tourism (13×) | |
| 95 | 567 | <0.1% | – | Events Services (24×) | |
| 96 | 556 | <0.1% | – | Restaurants (31×) | |
| 97 | 543 | <0.1% | – | 10,000+ employees (13×) | |
| 98 | 508 | <0.1% | – | Cosmetics (22×) | |
| 99 | 508 | <0.1% | +2 | 1,001–5,000 employees (3.4×) | |
| 100 | 506 | <0.1% | +1−1 | 10,000+ employees (13×) | |
| 101 | 504 | <0.1% | +5 | B2B (393×) | |
| 102 | 499 | <0.1% | – | Banking (18×) | |
| 103 | 493 | <0.1% | +16−1 | 10,000+ employees (13×) | |
| 104 | 482 | <0.1% | +25 | 10,000+ employees (26×) | |
| 105 | 479 | <0.1% | −1 | 1,001–5,000 employees (5.0×) | |
| 106 | 406 | <0.1% | – | Apparel & Fashion (20×) | |
| 107 | 395 | <0.1% | +10 | Utilities (25×) | |
| 108 | 392 | <0.1% | +2 | 1–10 employees (4.3×) | |
| 109 | 389 | <0.1% | – | 1,001–5,000 employees (4.3×) | |
| 110 | 361 | <0.1% | +2 | Internet (4.0×) | |
| 111 | 349 | <0.1% | +1 | Primary/secondary Education (20×) | |
| 112 | 338 | <0.1% | – | Hospitality (7.5×) | |
| 113 | 320 | <0.1% | +2 | Banking (88×) | |
| 114 |  Seculio | 318 | <0.1% | – | 1–10 employees (6.8×) |
| 115 | 309 | <0.1% | – | Newspapers (107×) | |
| 116 | 298 | <0.1% | – | 1,001–5,000 employees (8.3×) | |
| 117 | 293 | <0.1% | +1 | 1,001–5,000 employees (4.2×) | |
| 118 |  Heyhack | 278 | <0.1% | – | 10,000+ employees (16×) |
| 119 | 270 | <0.1% | – | Software (10.0×) | |
| 120 | 270 | <0.1% | – | 5,001–10,000 employees (25×) | |
| 121 | 265 | <0.1% | +4 | Software (2.2×) | |
| 122 | 245 | <0.1% | – | 1,001–5,000 employees (3.5×) | |
| 123 | 242 | <0.1% | +1 | Healthcare (4.3×) | |
| 124 | 233 | <0.1% | +4 | 51–200 employees (1.3×) | |
| 125 | 232 | <0.1% | +9 | 1,001–5,000 employees (6.8×) | |
| 126 | 230 | <0.1% | – | Apparel & Fashion (28×) | |
| 127 | 220 | <0.1% | – | 1,001–5,000 employees (4.2×) | |
| 128 | 220 | <0.1% | – | 10,000+ employees (46×) | |
| 129 | 215 | <0.1% | – | Banking (32×) | |
| 130 | 203 | <0.1% | +3−1 | 1,001–5,000 employees (6.1×) | |
| 131 | 202 | <0.1% | −1 | Software (6.9×) | |
| 132 | 173 | <0.1% | – | 201–1,000 employees (2.3×) | |
| 133 | 172 | <0.1% | – | – | |
| 134 | 167 | <0.1% | −1 | 201–1,000 employees (2.5×) | |
| 135 | 154 | <0.1% | – | Software (3.3×) | |
| 136 | 138 | <0.1% | – | Newspapers (214×) | |
| 137 | 118 | <0.1% | +1 | 201–1,000 employees (3.6×) | |
| 138 | 109 | <0.1% | +1 | 51–200 employees (1.4×) | |
| 139 | 108 | <0.1% | +3 | – | |
| 140 | 107 | <0.1% | – | Financial Services (8.1×) | |
| 141 | 106 | <0.1% | +1 | 201–1,000 employees (2.7×) | |
| 142 | 104 | <0.1% | – | Retail (6.9×) | |
| 143 | 74 | <0.1% | – | – | |
| 144 | 67 | <0.1% | – | – | |
| 145 | 63 | <0.1% | +1 | 10,000+ employees (70×) | |
| 146 | 62 | <0.1% | – | – | |
| 147 | 38 | <0.1% | – | – | |
| 148 | 37 | <0.1% | +2 | – | |
| 149 | 31 | <0.1% | – | – | |
| 150 | 29 | <0.1% | – | – | |
| 151 | 24 | <0.1% | +3 | – | |
| 152 | 20 | <0.1% | – | – | |
| 153 | 7 | <0.1% | – | – | |
| 154 | 3 | <0.1% | – | – | |
| 155 | 2 | <0.1% | – | – | |
| 156 | 1 | <0.1% | – | – |
“Most popular with” is the industry or company size where the tool is most over-represented compared with all companies we've scanned. Starts and stops compare two scans done the same way.
Who's gaining and losing customers
- Bitwarden: 68 started in the last 30 days
- Let's Encrypt: 35 started, 1 stopped in the last 30 days
- Sectigo: 32 started, 1 stopped in the last 30 days
- Google Trust Services: 33 started, 2 stopped in the last 30 days
- Infoblox: 25 started in the last 30 days
- KnowBe4: 23 started, 1 stopped in the last 30 days
How to compare security and compliance tools
- Which risk you're buying for: phishing, account takeover, network access or audits.
- Compliance frameworks you need (SOC 2, ISO 27001, HIPAA).
- Deployment effort and the impact on employees' daily work.
How we find security and compliance tools
Security tools are visible in CAA records and certificates (certificate authorities), MX records that route mail through a security gateway, domain-verification TXT records and DMARC reporting addresses.
Every company on a tool's page links to the record behind the match. DNS is rechecked weekly and websites monthly, so tools a company stops using drop off the list.
Also tracked, no confirmed customers yet
Kandji
Security & Compliance FAQ
What are the most popular security and compliance tools?
As of October 2026, the most popular security and compliance tools by number of companies using them are reCAPTCHA (236,136 companies), Cookiebot (57,798 companies) and Let's Encrypt (54,355 companies), according to runsonwhat. reCAPTCHA alone accounts for 21% of the 1,099,247 Security & Compliance matches runsonwhat has, and the top three together for 32%. 156 security and compliance tools have at least one confirmed customer.
reCAPTCHA vs Cookiebot: which is more popular?
reCAPTCHA is more popular: 236,136 companies show public evidence of reCAPTCHA, against 57,798 for Cookiebot (4.1× as many), according to runsonwhat (October 2026). Let's Encrypt is third with 54,355.
Which security and compliance tools do small businesses use most?
Among companies with up to 50 employees, the most used security and compliance tools are reCAPTCHA (112,130 companies), Let's Encrypt (24,336 companies) and CookieYes (22,714 companies), according to runsonwhat (October 2026). The counts cover companies with a known headcount; see each tool's page for the full size breakdown.
Which security and compliance tools do large companies use most?
Among companies with more than 1,000 employees, the most used security and compliance tools are reCAPTCHA (9,002 companies), GlobalSign (5,869 companies) and OneTrust (5,299 companies), according to runsonwhat (October 2026). Large companies often run more than one tool in a category, so the same company can count for several.
Which security and compliance tools are most popular in the United States?
In the United States, the most used security and compliance tools are reCAPTCHA (72,006 companies), Proofpoint (28,622 companies) and KnowBe4 (13,754 companies), based on companies runsonwhat has located there (October 2026). reCAPTCHA has 20% of the Security & Compliance matches among companies based in the United States.
Which security and compliance tools are most popular in the United Kingdom?
In the United Kingdom, the most used security and compliance tools are reCAPTCHA (14,954 companies), CookieYes (7,459 companies) and Mimecast (5,985 companies), based on companies runsonwhat has located there (October 2026). reCAPTCHA has 19% of the Security & Compliance matches among companies based in the United Kingdom.
Which security and compliance tools do IT services companies use?
IT services is the industry with the most Security & Compliance matches, and its companies use reCAPTCHA (14,991 companies), Let's Encrypt (5,201 companies) and Sectigo (3,735 companies) most, according to runsonwhat (October 2026). Each tool's page breaks its customers down by industry, so you can check where a tool over-indexes.
Which security and compliance tools are companies adopting right now?
In the 30 days to October 2026, the most new adoptions runsonwhat recorded were for Bitwarden (68 companies), Let's Encrypt (35 companies) and Google Trust Services (33 companies). A start is counted when a recheck finds a tool that the previous check of the same company, done the same way, did not.
Which security and compliance tools are losing customers?
In the 30 days to October 2026, more companies stopped than started using reCAPTCHA (12 stopped, 9 started), OneTrust (4 stopped, 1 started) and Palo Alto Networks (2 stopped, 1 started), according to runsonwhat's rechecks. Short-term moves are small next to each tool's total, so read them as signals rather than trends.
How does runsonwhat rank security and compliance tools?
runsonwhat counts the companies where a public record shows each tool in use and ranks by that count. Security tools are visible in CAA records and certificates (certificate authorities), MX records that route mail through a security gateway, domain-verification TXT records and DMARC reporting addresses. A company counts only when a direct record backs it up. The full method is at https://www.runsonwhat.com/methodology.