The Identity Map / CIEM
CIEM: Cloud Infrastructure Entitlement Management
Right-sizing identities and permissions across AWS, Azure, and GCP.
Cloud platforms hand out permissions so generously that most identities, human and machine, end up wildly over-privileged. CIEM discovers every entitlement across AWS, Azure, and GCP, flags the toxic and unused ones, and right-sizes them toward least privilege. The category is rapidly being absorbed into broader cloud security (CNAPP) suites rather than standing alone.
Top picks
Wiz · Microsoft Entra Permissions Management · Sonrai Security · Ermetic (Tenable)
6 vendors on this branch
Microsoft Entra Permissions Management
Top pickUSA
Multi-cloud CIEM
CloudKnox acquisition
View full profileLooking for deep, evaluated profiles in this category? Browse every CIEM vendor on startwithidentity.com.