The Identity Map / PAM
Privileged Access Management (PAM)
Securing, vaulting, and monitoring the most powerful accounts and credentials.
Privileged accounts are the keys to the kingdom: domain admins, root, service accounts, and the credentials that can rewrite everything else. PAM vaults those secrets, brokers just-in-time access to them, and records privileged sessions for forensic review. The category is being pulled in two directions at once, toward legacy on-prem vaulting and toward cloud-native, ephemeral, zero-standing-privilege access.
Top picks
CyberArk · Delinea · BeyondTrust · One Identity · WALLIX
20 vendors on this branch
CyberArk
AcquiredUSA / Israel
Privileged access, secrets, machine ID
Acquired by Palo Alto (~$25B)
View full profileDelinea
AcquiredUSA
PAM (Thycotic + Centrify)
Largest independent PAM; acquired Authomize (ITDR)
View full profileBeyondTrust
AcquiredUSA
Privileged + remote access, EPM
Gartner Leader; acquired Entitle (JIT/CIEM)
View full profileProcyon
AcquiredUSA
Just-in-time cloud PAM
Acquired by Ping (2025); now PingOne Privilege
View full profile