Privileged Access Management

The Cloud Infrastructure Entitlement Platforms (CIEM) market is generating significant impacts on traditional Privileged Access Management (PAM) systems. Companies like BeyondTrust, CyberArk, and others now offer capabilities resembling CIEM. The demand for dynamic cloud access is increasing, necessitating new PAM solutions that are 100% cloud-native. As an increasing number of organizations create unauthorized clouds, CIEM helps mitigate security risks. The market is seeing a shift, with new entrants focusing on smaller, highly specialized PAM apps rather than full-feature suites, causing a divide between centralized multi-capability platforms and smaller, individualized solutions. Key emerging trends within the PAM market include Just in Time (JIT) provisioning and Zero Standing Privilege (ZSP). Despite ongoing vendor mergers and acquisitions, the number of PAM-capable vendors is on the rise.

PAM capabilities remain essential amidst growing cloud environments. These include account management, authentication, and session management and analytics. New granular scoring by KuppingerCole reflects vendor realignments fitted to emerging digital and cloud-based PAM needs. Key capabilities evaluated include password vaulting, credential management, Endpoint Privilege Management (EPM), Single Sign-On (SSO), Multi-Factor Authentication (MFA), and in-depth session recording and monitoring. PAM leadership choices should go beyond this report, requiring specific criteria evaluations, proof of concepts, and pilot phases. Overall leaders in PAM include ARCON, BeyondTrust, CyberArk, One Identity, Senhasegura, and others.