# The most used security and compliance tools

As of October 2026, the most used of the 157 security and compliance tools runsonwhat tracks is reCAPTCHA, found at 238,433 companies, ahead of Cookiebot (58,300) and Let's Encrypt (54,360).

Security is the second-largest category in the catalog. It includes the certificate authorities that issue a site's TLS certificates (Let's Encrypt, DigiCert, Sectigo), password managers (1Password, LastPass), access and network security (Duo, Tailscale, Palo Alto Networks), email security gateways (Proofpoint, Mimecast) and compliance automation.

Certificate authorities appear on most domains because every HTTPS site needs a certificate; the more telling entries are email security gateways and identity tools, which show a deliberate purchase.

## Security and compliance tools ranked by companies using them

| # | Tool | Companies | Share of category | Last 30 days | Most popular with |
|---|---|---|---|---|---|
| 1 | [reCAPTCHA](https://www.runsonwhat.com/reverse/recaptcha) | 238,433 | 22% | +9 −12 | Construction (1.6×) |
| 2 | [Cookiebot](https://www.runsonwhat.com/reverse/cookiebot) | 58,300 | 5.3% | +8 −3 | 1,001–5,000 employees (1.8×) |
| 3 | [Let's Encrypt](https://www.runsonwhat.com/reverse/letsencrypt) | 54,360 | 4.9% | +35 −1 | 1–10 employees (2.0×) |
| 4 | [GlobalSign](https://www.runsonwhat.com/reverse/globalsign) | 53,343 | 4.8% | +4 −2 | 10,000+ employees (4.4×) |
| 5 | [Proofpoint](https://www.runsonwhat.com/reverse/proofpoint) | 48,229 | 4.4% | +3 | 10,000+ employees (4.4×) |
| 6 | [CookieYes](https://www.runsonwhat.com/reverse/cookieyes) | 48,166 | 4.4% | +3 | Construction (1.9×) |
| 7 | [Sectigo](https://www.runsonwhat.com/reverse/sectigo) | 38,962 | 3.5% | +32 −1 | 1–10 employees (2.2×) |
| 8 | [DigiCert](https://www.runsonwhat.com/reverse/digicert) | 35,830 | 3.2% | +15 −2 | 1,001–5,000 employees (2.1×) |
| 9 | [Google Trust Services](https://www.runsonwhat.com/reverse/google-trust) | 34,786 | 3.2% | +33 −2 | 1–10 employees (2.5×) |
| 10 | [Valimail](https://www.runsonwhat.com/reverse/valimail) | 32,003 | 2.9% | +2 −2 | 1,001–5,000 employees (2.2×) |
| 11 | [OneTrust](https://www.runsonwhat.com/reverse/onetrust) | 30,339 | 2.7% | +1 −4 | 10,000+ employees (9.6×) |
| 12 | [Mimecast](https://www.runsonwhat.com/reverse/mimecast) | 28,255 | 2.6% | +2 | Law Practice (6.5×) |
| 13 | [KnowBe4](https://www.runsonwhat.com/reverse/knowbe4) | 26,427 | 2.4% | +23 −1 | Insurance (3.2×) |
| 14 | [Cloudflare Turnstile](https://www.runsonwhat.com/reverse/turnstile) | 23,405 | 2.1% | +1 | Construction (1.9×) |
| 15 | [Barracuda](https://www.runsonwhat.com/reverse/barracuda) | 18,515 | 1.7% | +1 | Construction (2.0×) |
| 16 | [UserWay](https://www.runsonwhat.com/reverse/userway) | 17,552 | 1.6% | – | Medical Practice (6.8×) |
| 17 | [dmarcian](https://www.runsonwhat.com/reverse/dmarcian) | 14,539 | 1.3% | +3 | 1,001–5,000 employees (2.6×) |
| 18 | [accessiBe](https://www.runsonwhat.com/reverse/accessibe) | 14,084 | 1.3% | +3 | Automotive (3.9×) |
| 19 | [Sophos](https://www.runsonwhat.com/reverse/sophos) | 14,045 | 1.3% | −1 | 1,001–5,000 employees (2.3×) |
| 20 | [EasyDMARC](https://www.runsonwhat.com/reverse/easydmarc) | 12,125 | 1.1% | – | 1,001–5,000 employees (1.5×) |
| 21 | [Amazon Trust Services](https://www.runsonwhat.com/reverse/amazon-trust) | 11,338 | 1.0% | +15 −1 | Software (3.4×) |
| 22 | [iubenda](https://www.runsonwhat.com/reverse/iubenda) | 11,073 | 1.0% | – | Machinery (4.7×) |
| 23 | [Usercentrics](https://www.runsonwhat.com/reverse/usercentrics) | 10,246 | 0.93% | +1 | 1,001–5,000 employees (3.0×) |
| 24 | [Duo](https://www.runsonwhat.com/reverse/duo) | 8,795 | 0.80% | +1 −1 | Government Administration (4.8×) |
| 25 | [Have I Been Pwned](https://www.runsonwhat.com/reverse/hibp) | 8,396 | 0.76% | +3 −1 | 1,001–5,000 employees (3.5×) |
| 26 | [CleanTalk](https://www.runsonwhat.com/reverse/cleantalk) | 8,186 | 0.74% | – | Construction (3.0×) |
| 27 | [Hornetsecurity](https://www.runsonwhat.com/reverse/hornetsecurity) | 8,165 | 0.74% | +6 | Construction (2.0×) |
| 28 | [1Password](https://www.runsonwhat.com/reverse/1password) | 8,163 | 0.74% | +4 | Software (2.6×) |
| 29 | [AudioEye](https://www.runsonwhat.com/reverse/audioeye) | 7,374 | 0.67% | +1 | Automotive (16×) |
| 30 | [Red Sift OnDMARC](https://www.runsonwhat.com/reverse/redsift) | 7,132 | 0.65% | +2 | 1,001–5,000 employees (2.7×) |
| 31 | [Bitwarden](https://www.runsonwhat.com/reverse/bitwarden) | 7,122 | 0.65% | +70 | 1,001–5,000 employees (2.9×) |
| 32 | [Check Point Harmony Email](https://www.runsonwhat.com/reverse/avanan) | 7,041 | 0.64% | +12 | Construction (2.3×) |
| 33 | [hCaptcha](https://www.runsonwhat.com/reverse/hcaptcha) | 6,850 | 0.62% | +2 −2 | Government Administration (3.6×) |
| 34 | [Osano](https://www.runsonwhat.com/reverse/osano) | 6,786 | 0.62% | – | Individual & Family Services (7.3×) |
| 35 | [CookieScript](https://www.runsonwhat.com/reverse/cookie-script) | 6,551 | 0.59% | +1 | Hospitality (3.6×) |
| 36 | [Trend Micro](https://www.runsonwhat.com/reverse/trend-micro) | 6,417 | 0.58% | +8 | 1,001–5,000 employees (3.5×) |
| 37 | [Jamf](https://www.runsonwhat.com/reverse/jamf) | 6,243 | 0.57% | +4 −3 | 10,000+ employees (13×) |
| 38 | [Termly](https://www.runsonwhat.com/reverse/termly) | 5,698 | 0.52% | – | Primary/secondary Education (16×) |
| 39 | [AppRiver](https://www.runsonwhat.com/reverse/appriver) | 5,386 | 0.49% | – | Banking (6.1×) |
| 40 | [Imperva](https://www.runsonwhat.com/reverse/imperva) | 5,375 | 0.49% | +10 −1 | 10,000+ employees (10×) |
| 41 | [PowerDMARC](https://www.runsonwhat.com/reverse/powerdmarc) | 5,374 | 0.49% | +1 | 1,001–5,000 employees (2.4×) |
| 42 | [Cisco Secure Email](https://www.runsonwhat.com/reverse/cisco-email) | 4,751 | 0.43% | +1 −1 | Banking (9.9×) |
| 43 | [Axeptio](https://www.runsonwhat.com/reverse/axeptio) | 4,604 | 0.42% | – | Hospitality (3.3×) |
| 44 | [URIports](https://www.runsonwhat.com/reverse/uriports) | 3,931 | 0.36% | +1 −1 | 1,001–5,000 employees (1.6×) |
| 45 | [Cookie Information](https://www.runsonwhat.com/reverse/cookie-information) | 3,686 | 0.33% | +1 | 201–1,000 employees (1.5×) |
| 46 | [DMARC Digests](https://www.runsonwhat.com/reverse/dmarcdigests) | 3,253 | 0.29% | +2 | Software (3.0×) |
| 47 | [consentmanager](https://www.runsonwhat.com/reverse/consentmanager) | 3,225 | 0.29% | – | 1,001–5,000 employees (2.0×) |
| 48 | [Symantec Email Security.cloud](https://www.runsonwhat.com/reverse/symantec-email) | 2,864 | 0.26% | +4 | Staffing and Recruiting (2.7×) |
| 49 | [SwissSign](https://www.runsonwhat.com/reverse/swisssign) | 2,707 | 0.25% | +12 | Banking (5.5×) |
| 50 | [Vanta](https://www.runsonwhat.com/reverse/vanta) | 2,515 | 0.23% | +7 | B2B (70×) |
| 51 | [CookieFirst](https://www.runsonwhat.com/reverse/cookiefirst) | 2,454 | 0.22% | – | Hospitality (2.5×) |
| 52 | [QuoVadis](https://www.runsonwhat.com/reverse/quovadis) | 2,407 | 0.22% | +18 −1 | Banking (25×) |
| 53 | [Agari](https://www.runsonwhat.com/reverse/agari) | 2,385 | 0.22% | – | 10,000+ employees (9.4×) |
| 54 | [N-able Mail Assure](https://www.runsonwhat.com/reverse/spamexperts) | 2,101 | 0.19% | +2 | Logistics and Supply Chain (1.7×) |
| 55 | [TrustArc](https://www.runsonwhat.com/reverse/trustarc) | 2,075 | 0.19% | +2 | Veterinary (44×) |
| 56 | [Detectify](https://www.runsonwhat.com/reverse/detectify) | 2,016 | 0.18% | – | Software (3.3×) |
| 57 | [Klaro](https://www.runsonwhat.com/reverse/klaro) | 1,910 | 0.17% | – | Government Administration (4.9×) |
| 58 | [CookieHub](https://www.runsonwhat.com/reverse/cookiehub) | 1,881 | 0.17% | – | 201–1,000 employees (1.5×) |
| 59 | [AdOpt](https://www.runsonwhat.com/reverse/adopt) | 1,821 | 0.17% | – | 1,001–5,000 employees (2.7×) |
| 60 | [Wiz](https://www.runsonwhat.com/reverse/wiz) | 1,814 | 0.16% | +1 −1 | 10,000+ employees (16×) |
| 61 | [Cookie Control](https://www.runsonwhat.com/reverse/civic-cookie-control) | 1,731 | 0.16% | – | Government Administration (6.3×) |
| 62 | [Fortinet](https://www.runsonwhat.com/reverse/fortinet) | 1,628 | 0.15% | +3 | Government Administration (4.2×) |
| 63 | [Zscaler](https://www.runsonwhat.com/reverse/zscaler) | 1,597 | 0.14% | +1 | 10,000+ employees (10×) |
| 64 | [DataDome](https://www.runsonwhat.com/reverse/datadome) | 1,558 | 0.14% | +1 | Broadcast Media (56×) |
| 65 | [Nagich](https://www.runsonwhat.com/reverse/nagich) | 1,458 | 0.13% | – | Apparel & Fashion (5.5×) |
| 66 | [NordPass](https://www.runsonwhat.com/reverse/nordpass) | 1,418 | 0.13% | – | Non-profit Organization Management (2.8×) |
| 67 | [HackerOne](https://www.runsonwhat.com/reverse/hackerone) | 1,410 | 0.13% | +2 | 10,000+ employees (12×) |
| 68 | [Google Threat Intelligence DTM](https://www.runsonwhat.com/reverse/google-dtm) | 1,395 | 0.13% | – | 10,000+ employees (26×) |
| 69 | [EqualWeb](https://www.runsonwhat.com/reverse/equalweb) | 1,358 | 0.12% | – | Sports (5.1×) |
| 70 | [CERT Polska](https://www.runsonwhat.com/reverse/cert-polska) | 1,353 | 0.12% | – | 1,001–5,000 employees (3.0×) |
| 71 | [CCM19](https://www.runsonwhat.com/reverse/ccm19) | 1,307 | 0.12% | – | Machinery (6.3×) |
| 72 | [Tailscale](https://www.runsonwhat.com/reverse/tailscale) | 1,213 | 0.11% | +2 | Software (4.3×) |
| 73 | [Acquia Optimize](https://www.runsonwhat.com/reverse/monsido) | 1,202 | 0.11% | – | Government Administration (31×) |
| 74 | [SafeBase](https://www.runsonwhat.com/reverse/safebase) | 1,092 | <0.1% | +5 | Computer & Network Security (9.6×) |
| 75 | [Forcepoint Email Security](https://www.runsonwhat.com/reverse/forcepoint-email) | 1,055 | <0.1% | +3 | Banking (5.6×) |
| 76 | [tarteaucitron](https://www.runsonwhat.com/reverse/tarteaucitron) | 1,027 | <0.1% | – | Government Administration (10×) |
| 77 | [SpyCloud](https://www.runsonwhat.com/reverse/spycloud) | 1,012 | <0.1% | – | 5,001–10,000 employees (7.8×) |
| 78 | [TermsFeed](https://www.runsonwhat.com/reverse/termsfeed) | 1,011 | <0.1% | – | Staffing and Recruiting (3.0×) |
| 79 | [Ketch](https://www.runsonwhat.com/reverse/ketch) | 956 | <0.1% | – | Broadcast Media (35×) |
| 80 | [Eye-Able](https://www.runsonwhat.com/reverse/eye-able) | 955 | <0.1% | +1 | Utilities (15×) |
| 81 | [Friendly Captcha](https://www.runsonwhat.com/reverse/friendly-captcha) | 950 | <0.1% | +2 −1 | 10,000+ employees (4.6×) |
| 82 | [Forter](https://www.runsonwhat.com/reverse/forter) | 947 | <0.1% | – | Clothing (117×) |
| 83 | [Palo Alto Networks](https://www.runsonwhat.com/reverse/paloalto) | 925 | <0.1% | +1 −2 | 10,000+ employees (30×) |
| 84 | [HUMAN Security](https://www.runsonwhat.com/reverse/human-security) | 911 | <0.1% | – | Newspapers (24×) |
| 85 | [Paubox](https://www.runsonwhat.com/reverse/paubox) | 907 | <0.1% | +19 | Mental Health Care (26×) |
| 86 | [Actalis](https://www.runsonwhat.com/reverse/actalis) | 854 | <0.1% | +7 | Government Administration (6.6×) |
| 87 | [Enzuzo](https://www.runsonwhat.com/reverse/enzuzo) | 711 | <0.1% | – | Construction (3.3×) |
| 88 | [Commanders Act](https://www.runsonwhat.com/reverse/commanders-act) | 685 | <0.1% | – | Banking (13×) |
| 89 | [AbuseIPDB](https://www.runsonwhat.com/reverse/abuseipdb) | 670 | <0.1% | – | Higher Education (6.4×) |
| 90 | [SpamTitan](https://www.runsonwhat.com/reverse/spamtitan) | 668 | <0.1% | – | Construction (2.2×) |
| 91 | [D-Trust](https://www.runsonwhat.com/reverse/d-trust) | 660 | <0.1% | +8 | Banking (74×) |
| 92 | [Signifyd](https://www.runsonwhat.com/reverse/signifyd) | 592 | <0.1% | −1 | Sporting Goods (33×) |
| 93 | [Securiti](https://www.runsonwhat.com/reverse/securiti) | 584 | <0.1% | +1 −1 | 10,000+ employees (15×) |
| 94 | [Sirdata](https://www.runsonwhat.com/reverse/sirdata) | 573 | <0.1% | – | Leisure, Travel & Tourism (13×) |
| 95 | [Transcend](https://www.runsonwhat.com/reverse/transcend) | 567 | <0.1% | – | Events Services (24×) |
| 96 | [Sift](https://www.runsonwhat.com/reverse/sift) | 560 | <0.1% | – | Restaurants (31×) |
| 97 | [BeyondTrust](https://www.runsonwhat.com/reverse/beyondtrust) | 543 | <0.1% | – | 10,000+ employees (13×) |
| 98 | [NoFraud](https://www.runsonwhat.com/reverse/nofraud) | 509 | <0.1% | – | Cosmetics (22×) |
| 99 | [Trellix Email Security](https://www.runsonwhat.com/reverse/trellix-email) | 508 | <0.1% | +2 | 1,001–5,000 employees (3.4×) |
| 100 | [F5 Distributed Cloud](https://www.runsonwhat.com/reverse/f5-distributed-cloud) | 506 | <0.1% | +1 −1 | 10,000+ employees (13×) |
| 101 | [Oneleet](https://www.runsonwhat.com/reverse/oneleet) | 504 | <0.1% | +5 | B2B (401×) |
| 102 | [Radware](https://www.runsonwhat.com/reverse/radware) | 499 | <0.1% | – | Banking (18×) |
| 103 | [IdenTrust](https://www.runsonwhat.com/reverse/identrust) | 493 | <0.1% | +16 −1 | 10,000+ employees (14×) |
| 104 | [Bugcrowd](https://www.runsonwhat.com/reverse/bugcrowd) | 489 | <0.1% | −1 | Health, Wellness and Fitness (5.4×) |
| 105 | [Infoblox](https://www.runsonwhat.com/reverse/infoblox) | 483 | <0.1% | +25 | 10,000+ employees (30×) |
| 106 | [Riskified](https://www.runsonwhat.com/reverse/riskified) | 407 | <0.1% | – | Apparel & Fashion (20×) |
| 107 | [Telekom Security](https://www.runsonwhat.com/reverse/telesec) | 395 | <0.1% | +10 | Utilities (25×) |
| 108 | [Riot](https://www.runsonwhat.com/reverse/riot-security) | 392 | <0.1% | +2 | 1–10 employees (4.3×) |
| 109 | [AccessiWay](https://www.runsonwhat.com/reverse/accessiway) | 389 | <0.1% | – | 1,001–5,000 employees (4.3×) |
| 110 | [Keybase](https://www.runsonwhat.com/reverse/keybase) | 361 | <0.1% | +2 | Internet (4.0×) |
| 111 | [Mosyle](https://www.runsonwhat.com/reverse/mosyle) | 349 | <0.1% | +1 | Primary/secondary Education (20×) |
| 112 | [DigiAccess](https://www.runsonwhat.com/reverse/digiaccess) | 340 | <0.1% | – | Hospitality (7.5×) |
| 113 | [TruValidate](https://www.runsonwhat.com/reverse/truvalidate) | 321 | <0.1% | +2 | Banking (88×) |
| 114 | [Seculio](https://www.runsonwhat.com/reverse/seculio) | 318 | <0.1% | – | 1–10 employees (6.9×) |
| 115 | [Conversant Consent Tool](https://www.runsonwhat.com/reverse/conversant-consent-tool) | 309 | <0.1% | – | Newspapers (107×) |
| 116 | [Specops Software](https://www.runsonwhat.com/reverse/specops) | 298 | <0.1% | – | 1,001–5,000 employees (8.4×) |
| 117 | [Retarus](https://www.runsonwhat.com/reverse/retarus) | 293 | <0.1% | +1 | 1,001–5,000 employees (4.3×) |
| 118 | [Heyhack](https://www.runsonwhat.com/reverse/heyhack) | 278 | <0.1% | – | 10,000+ employees (17×) |
| 119 | [Drata](https://www.runsonwhat.com/reverse/drata) | 270 | <0.1% | – | Software (10×) |
| 120 | [UsableNet](https://www.runsonwhat.com/reverse/usablenet) | 270 | <0.1% | – | 5,001–10,000 employees (25×) |
| 121 | [Probely](https://www.runsonwhat.com/reverse/probely) | 265 | <0.1% | +4 | Software (2.2×) |
| 122 | [Accessible360](https://www.runsonwhat.com/reverse/accessible360) | 245 | <0.1% | – | 1,001–5,000 employees (3.5×) |
| 123 | [Virtru](https://www.runsonwhat.com/reverse/virtru) | 242 | <0.1% | +1 | Healthcare (4.3×) |
| 124 | [Cloudflare Email Security](https://www.runsonwhat.com/reverse/cloudflare-email-security) | 233 | <0.1% | +4 | 201–1,000 employees (1.4×) |
| 125 | [Traction Guest](https://www.runsonwhat.com/reverse/traction-guest) | 232 | <0.1% | +9 | 1,001–5,000 employees (7.6×) |
| 126 | [Konduto](https://www.runsonwhat.com/reverse/konduto) | 230 | <0.1% | – | Apparel & Fashion (28×) |
| 127 | [Offensity](https://www.runsonwhat.com/reverse/offensity) | 220 | <0.1% | – | 1,001–5,000 employees (4.3×) |
| 128 | [ThreatMetrix](https://www.runsonwhat.com/reverse/threatmetrix) | 220 | <0.1% | – | 10,000+ employees (46×) |
| 129 | [Crownpeak Evidon](https://www.runsonwhat.com/reverse/evidon) | 217 | <0.1% | – | Banking (32×) |
| 130 | [FortiWeb Cloud](https://www.runsonwhat.com/reverse/fortiweb-cloud) | 203 | <0.1% | +3 −1 | 1,001–5,000 employees (6.1×) |
| 131 | [Secureframe](https://www.runsonwhat.com/reverse/secureframe) | 202 | <0.1% | −1 | Software (7.0×) |
| 132 | [Ethiack](https://www.runsonwhat.com/reverse/ethiack) | 173 | <0.1% | – | 201–1,000 employees (2.4×) |
| 133 | [Queue-it](https://www.runsonwhat.com/reverse/queue-it) | 172 | <0.1% | – | – |
| 134 | [SentinelOne](https://www.runsonwhat.com/reverse/sentinelone) | 168 | <0.1% | −1 | 201–1,000 employees (2.6×) |
| 135 | [ProjectDiscovery](https://www.runsonwhat.com/reverse/projectdiscovery) | 154 | <0.1% | – | Software (3.4×) |
| 136 | [Sourcepoint](https://www.runsonwhat.com/reverse/sourcepoint) | 138 | <0.1% | – | Newspapers (214×) |
| 137 | [SoSafe](https://www.runsonwhat.com/reverse/sosafe) | 118 | <0.1% | +1 | 201–1,000 employees (3.6×) |
| 138 | [Tinfoil Security](https://www.runsonwhat.com/reverse/tinfoil) | 109 | <0.1% | +1 | 51–200 employees (1.4×) |
| 139 | [Astra Security](https://www.runsonwhat.com/reverse/astra-security) | 108 | <0.1% | +3 | – |
| 140 | [GeeTest](https://www.runsonwhat.com/reverse/geetest) | 107 | <0.1% | – | Financial Services (8.1×) |
| 141 | [Check Point CloudGuard](https://www.runsonwhat.com/reverse/check-point) | 106 | <0.1% | +1 | 201–1,000 employees (2.8×) |
| 142 | [Myra Security](https://www.runsonwhat.com/reverse/myra) | 104 | <0.1% | – | Retail (6.9×) |
| 143 | [Arcules](https://www.runsonwhat.com/reverse/arcules) | 74 | <0.1% | – | – |
| 144 | [SafeBreach](https://www.runsonwhat.com/reverse/safebreach) | 67 | <0.1% | – | – |
| 145 | [BioCatch](https://www.runsonwhat.com/reverse/biocatch) | 63 | <0.1% | +1 | 10,000+ employees (70×) |
| 146 | [Comp AI](https://www.runsonwhat.com/reverse/comp-ai) | 62 | <0.1% | – | – |
| 147 | [Censys](https://www.runsonwhat.com/reverse/censys) | 38 | <0.1% | – | – |
| 148 | [Probo](https://www.runsonwhat.com/reverse/probo) | 37 | <0.1% | +2 | – |
| 149 | [snigel AdConsent](https://www.runsonwhat.com/reverse/snigel-adconsent) | 31 | <0.1% | – | – |
| 150 | [HyperComply](https://www.runsonwhat.com/reverse/hypercomply) | 29 | <0.1% | – | – |
| 151 | [Jumio](https://www.runsonwhat.com/reverse/jumio) | 24 | <0.1% | +3 | – |
| 152 | [HashiCorp Vault](https://www.runsonwhat.com/reverse/vault) | 20 | <0.1% | – | – |
| 153 | [Evervault](https://www.runsonwhat.com/reverse/evervault) | 7 | <0.1% | – | – |
| 154 | [LastPass](https://www.runsonwhat.com/reverse/lastpass) | 3 | <0.1% | – | – |
| 155 | [CrowdStrike](https://www.runsonwhat.com/reverse/crowdstrike) | 2 | <0.1% | – | – |
| 156 | [Snyk](https://www.runsonwhat.com/reverse/snyk) | 2 | <0.1% | – | – |

Share is each tool's part of all 1,103,258 matches in this category; a company using two tools counts for both.

## How to compare security and compliance tools

- Which risk you're buying for: phishing, account takeover, network access or audits.
- Compliance frameworks you need (SOC 2, ISO 27001, HIPAA).
- Deployment effort and the impact on employees' daily work.

## How runsonwhat finds security and compliance tools

Security tools are visible in CAA records and certificates (certificate authorities), MX records that route mail through a security gateway, domain-verification TXT records and DMARC reporting addresses.

Also tracked, no confirmed customers yet: Kandji.

## FAQ

### What are the most popular security and compliance tools?

As of October 2026, the most popular security and compliance tools by number of companies using them are reCAPTCHA (238,433 companies), Cookiebot (58,300 companies) and Let's Encrypt (54,360 companies), according to runsonwhat. reCAPTCHA alone accounts for 22% of the 1,103,258 Security & Compliance matches runsonwhat has, and the top three together for 32%. 156 security and compliance tools have at least one confirmed customer.

### reCAPTCHA vs Cookiebot: which is more popular?

reCAPTCHA is more popular: 238,433 companies show public evidence of reCAPTCHA, against 58,300 for Cookiebot (4.1× as many), according to runsonwhat (October 2026). Let's Encrypt is third with 54,360.

### Which security and compliance tools do small businesses use most?

Among companies with up to 50 employees, the most used security and compliance tools are reCAPTCHA (112,130 companies), Let's Encrypt (24,336 companies) and CookieYes (22,714 companies), according to runsonwhat (October 2026). The counts cover companies with a known headcount; see each tool's page for the full size breakdown.

### Which security and compliance tools do large companies use most?

Among companies with more than 1,000 employees, the most used security and compliance tools are reCAPTCHA (9,002 companies), GlobalSign (5,869 companies) and OneTrust (5,299 companies), according to runsonwhat (October 2026). Large companies often run more than one tool in a category, so the same company can count for several.

### Which security and compliance tools are most popular in the United States?

In the United States, the most used security and compliance tools are reCAPTCHA (72,006 companies), Proofpoint (28,622 companies) and KnowBe4 (13,754 companies), based on companies runsonwhat has located there (October 2026). reCAPTCHA has 20% of the Security & Compliance matches among companies based in the United States.

### Which security and compliance tools are most popular in the United Kingdom?

In the United Kingdom, the most used security and compliance tools are reCAPTCHA (14,954 companies), CookieYes (7,459 companies) and Mimecast (5,985 companies), based on companies runsonwhat has located there (October 2026). reCAPTCHA has 19% of the Security & Compliance matches among companies based in the United Kingdom.

### Which security and compliance tools do IT services companies use?

IT services is the industry with the most Security & Compliance matches, and its companies use reCAPTCHA (14,991 companies), Let's Encrypt (5,201 companies) and Sectigo (3,735 companies) most, according to runsonwhat (October 2026). Each tool's page breaks its customers down by industry, so you can check where a tool over-indexes.

### Which security and compliance tools are companies adopting right now?

In the 30 days to October 2026, the most new adoptions runsonwhat recorded were for Bitwarden (70 companies), Let's Encrypt (35 companies) and Google Trust Services (33 companies). A start is counted when a recheck finds a tool that the previous check of the same company, done the same way, did not.

### Which security and compliance tools are losing customers?

In the 30 days to October 2026, more companies stopped than started using reCAPTCHA (12 stopped, 9 started), OneTrust (4 stopped, 1 started) and Palo Alto Networks (2 stopped, 1 started), according to runsonwhat's rechecks. Short-term moves are small next to each tool's total, so read them as signals rather than trends.

### What is reCAPTCHA's market share among security and compliance tools?

reCAPTCHA has 22% of the Security & Compliance matches runsonwhat has found (238,433 companies of 1,103,258), as of October 2026; Cookiebot has 5.3%. This is share of companies with public evidence of each tool, not share of revenue or seats, and a company that runs two tools counts for both.

### How does runsonwhat rank security and compliance tools?

runsonwhat counts the companies where a public record shows each tool in use and ranks by that count. Security tools are visible in CAA records and certificates (certificate authorities), MX records that route mail through a security gateway, domain-verification TXT records and DMARC reporting addresses. A company counts only when a direct record backs it up. The full method is at https://www.runsonwhat.com/methodology.

## Related categories

- [Email Delivery](https://www.runsonwhat.com/tools/email-delivery.md)
- [Workspace](https://www.runsonwhat.com/tools/email-workspace.md)
- [Collaboration](https://www.runsonwhat.com/tools/collaboration.md)
- [Dev Tools](https://www.runsonwhat.com/tools/developer-tools.md)
- [People & HR](https://www.runsonwhat.com/tools/hr-recruiting.md)
- [Finance & Legal](https://www.runsonwhat.com/tools/finance-legal.md)

---

Source: runsonwhat, https://www.runsonwhat.com/tools/security-compliance (updated October 2026). Counts are companies with direct public evidence of the tool (DNS records, certificates, website code, a real-browser crawl, subprocessor lists), so they are lower bounds. Methodology: https://www.runsonwhat.com/methodology.