Who is RSA Security?
RSA Security is a cybersecurity vendor that provides identity, authentication, access management, and risk-based security solutions for enterprises and public sector organizations.
- Identity and access management platforms for workforce and customer users
- Multi-factor authentication and credential assurance across applications and devices
- Risk-based and adaptive access controls for cloud, on-premises (on-prem), and hybrid environments
- Governance, risk, and compliance-oriented tooling for security and access policies
- Services and integrations to connect identity and security controls with existing enterprise infrastructure
Show more
More About RSA Security
RSA Security focuses on enterprise identity and access management (IAM), authentication, and risk-based security controls that support IT, security, and compliance teams. Its platforms are used to verify user identities, manage access to applications and data, and apply policies that reflect business risk and regulatory requirements. Organizations deploy RSA Security offerings to support distributed workforces, customer-facing digital services, and hybrid IT architectures that span on-prem systems and public cloud platforms.
The company’s authentication offerings (authentication and access security) provide multi-factor authentication across VPNs, virtual desktops, Software-as-a-Service (SaaS) applications, and internal web resources. These capabilities typically include support for hardware tokens, mobile authenticators, one-time passwords, and modern push-based or biometric methods, enabling stronger assurance than password-only logins. Risk-based access capabilities evaluate contextual signals such as device, network, and behavioral patterns to adjust controls, for example by prompting for additional factors when activity appears unusual.
RSA Security’s identity and access management solutions (identity and access management) cover lifecycle functions such as provisioning, deprovisioning, and role-based access governance. These tools integrate with directories, HR systems, and application stacks to centralize how user identities and entitlements are created, modified, and revoked. They also support policy models that align with common enterprise frameworks, such as least-privilege access, Separation of Duties (SoD), and step-up authentication for higher-risk transactions.
In many environments, RSA Security platforms interoperate with standards-based technologies and protocols associated with identity and security, such as Security Assertion Markup Language (SAML), OAuth, OpenID Connect (OIDC), RADIUS, and LDAP. This standards support allows enterprises to integrate RSA Security offerings with existing Single Sign-On (SSO) services, Virtual Private Network (VPN) gateways, Network Access Control (NAC) tools, and cloud identity providers. The products are typically deployed as part of a layered security architecture that also includes endpoint security, network security, and Security Information and Event Management (SIEM) tooling.
From a marketplace and taxonomy standpoint, RSA Security fits into categories including identity and access management, multi-factor authentication, risk-based and adaptive access, and governance, risk, and compliance-oriented security controls. Enterprises and institutions use these offerings to enforce authentication policies at scale, centralize identity governance, and align access controls with internal security standards and external regulatory requirements.
Our description of RSA Security. Updated December 2025.
