What Clutch Security is
Clutch has a very strong NHI product with robust discovery and mapping of access from users to API tokens and roles. They also offer IP whitelisting to help and put some guardrails around the use of the tokens. The vendor site is www.clutch.security. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Clutch Security covers
Clutch Security is in the catalog for these capabilities. Categories: Identity.
How to evaluate Clutch Security in a security program
Use Clutch Security as a stack candidate, not as diligence evidence. The oneNorma score for Clutch Security is 4.8/10 (percentile 34). If the real gap is in Identity, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.clutch.security publishes. Contrast it with pentesting and Security Cloud & Compliance.
