Osirium: Privileged Access Management

Osirium is a UK-founded (2008), privately held Privilege Management software vendor with over 50 employees, serving primarily UK customers while expanding into APAC and the DACH region (especially Germany), with additional plans for MENA. This expansion aligns with a long-standing roadmap and an intent to build a broad channel partner network similar to its UK model. The broader context is digital transformation: organizations must become more agile while facing a growing attack surface from smart manufacturing and IoT, alongside increasing regulatory demands. Because attackers frequently target high-privilege accounts that can access sensitive assets (HR, finance, payroll, intellectual property), Privilege Management is positioned both as a cybersecurity necessity and an IAM discipline, covering password management, runtime access control, session monitoring, and analytics.

Modern Privilege Management has moved beyond traditional password vaulting into integrated platforms that include session monitoring/recording and behavioral analytics, while some vendors differentiate via task-based controls. Osirium’s suite comprises four modules: Privileged Access Management (shared account password management and least-privilege enforcement), Privileged Session Management (monitoring/recording for CLI and graphical sessions), Privileged Task Management (a key differentiator using a task-based model), and Privileged Behaviour Management (machine-learning-driven behavior analytics). Its task approach assigns restricted task sets rather than full privileged account access, supported by an unusually broad set of preconfigured tasks across systems (e.g., Cisco infrastructure, Microsoft SQL Server). Another differentiation is a “gateway” model enabling remote access to older operating systems and software stacks—valuable for operational technology and ICS environments—while enabling single sign-on so passwords never need to reside on administrative workstations. Strengths include task-based least privilege, gateway support, and behavior analytics; challenges include lack of Application Privilege Management, limited global scale and partner ecosystem, and less depth in some feature areas despite broad coverage.

• Osirium was founded in 2008 in the UK and is privately held.
• The company has over 50 employees.
• Osirium primarily serves UK customers and has begun addressing the APAC region.
• Expansion efforts include the DACH region, with a particular focus on Germany.
• Further geographic expansion plans include the MENA region.
• Osirium’s Privilege Management suite has four modules: Privileged Access Management, Privileged Session Management, Privileged Task Management, and Privileged Behaviour Management.
• Privileged Session Management supports monitoring and recording for both command line and graphical remote sessions.
• The task-based approach includes pre-configured tasks for a wide range of systems, including Cisco infrastructure and Microsoft SQL Server.
• Privileged Behavior Analytics in the suite uses machine learning to baseline behavior and alert on anomalies.
• Identified challenges include lack of Application Privilege Management and a limited global partner ecosystem.

• “In the age of digital transformation, the requirements for IT – but also the way IT is done – are changing.”
• “Privilege Management can be considered a domain of Cybersecurity since attackers usually go after the high privilege accounts.”
• “Modern tools for Privilege Management must support a variety of requirements, from protecting the passwords of shared accounts… to session monitoring and behavioral analytics.”
• “While ‘password vaults’ had been at the center of attention in earlier years, capabilities such as advanced analytics… and advanced capabilities in session monitoring… are becoming the new normal.”
• “Instead of granting full access to privileged accounts, customers can assign task sets to their administrators and operators, which allows implementing a real least privilege model.”
• “It creates baseline behaviors for the users and privileged accounts to detect and alert the security team that anomalous behavior is taking place.”
• “These are accessed and managed remotely, allowing the running of old software stacks that are still required for managing certain environments.”
• “Particularly with respect to the emerging demand in Operational Technology Security… this approach appears to be very valuable.”
• “Osirium connects the user to the remote server following a single sign-on approach, which removes the need for password files.”
• “Despite their rather small partner ecosystem, they might be considered in evaluations to have an option for an alternative approach in Privilege Management.”