ARCON PAM SaaS

Privileged Access Management (PAM) is positioned as a critical cybersecurity control because privileged access now extends far beyond traditional IT administrators to anyone who can reach sensitive assets such as HR and payroll data, DevOps services, financial systems, intellectual property, and even social media accounts. Modern PAM has evolved from basic credential vaulting into broader security management, with baseline capabilities (password rotation, privilege elevation/delegation, session setup, and monitoring) increasingly complemented by advanced analytics, risk-based monitoring, and threat protection. Key drivers include the abuse of shared credentials, privilege hijacking, misuse on third-party systems, accidental overreach by legitimate users, lifecycle ownership tracking, discovery of service/shared accounts, and audit/attestation needs for compliance.

Demand is expanding as smaller and specialist businesses digitize and as supply chains require third-party access. Remote work growth during COVID-19 increased privileged access from potentially insecure endpoints. Vendors are responding either by extending full platforms with modules or by specializing (e.g., DevOps), while the rising complexity is accelerating “PAM as a Service” delivered via SaaS or MSPs, including hybrid deployments for specific lines of business (LOBs).

ARCON, founded in Mumbai in 2006, is entering this space with ARCON PAM SaaS, a zero-trust-based offering intended to match its on-premises feature set. It targets four customer models—SME, Enterprise, MSP, and Partner SaaS—using AWS hosting, secure tunneling/application streaming, and session isolation. A cloud portal streamlines configuration, supports multi-tenant administration, and retains enterprise architecture benefits like high availability and real-time password replication. The platform emphasizes broad interoperability (300+ integrations), flexible privileged account discovery and bulk onboarding, smart session monitoring, and just-in-time (JIT) time-bound access. Strengths center on usability, scalability, and reduced operational burden, while noted gaps include the absence of vaultless/passwordless options and AWS-only deployment.

• Privileged access is described as including HR records, payroll details, DevOps services, financial information, intellectual property, and social media accounts.
• Standard PAM features listed include credential vaulting, password rotation, controlled elevation and delegation of privileges, session establishment, and activity monitoring.
• Advanced PAM capabilities named include privileged user analytics, risk-based session monitoring, and advanced threat protection.
• ARCON was founded in Mumbai in 2006.
• ARCON has local presence in the UK, Canada, South Africa, Dubai, Malaysia, the Philippines, and Kenya, with operations and an R&D center in Mumbai.
• ARCON PAM SaaS is based on implementing a zero-trust security framework for privileged accounts.
• Four customer models are proposed: SME, Enterprise, MSP, and Partner SaaS.
• Connections to target devices use Secure Tunnel (SGW) or application streaming over HTTPS with TLS 1.2, with session isolation via the Application Gateway (AGW).
• ARCON PAM SaaS offers more than 300 integrations available through a GUI.
• All cloud-based solutions are designed to run under AWS.

• “Traditionally, privileged users were mostly confined to various levels of IT administrator but in modern organizations many more users need access to privileged accounts, and the definition of what constitutes privileged has also changed.”
• “In recent years, PAM solutions have become more sophisticated making them robust security management tools in themselves.”
• “The pattern of increased home working due to Covid 19 in 2020/21 has created demand for privileged access from remote endpoints, which may not be secure as they should be.”
• “Vendors are also starting to deliver PAM as a service in which management, security and maintenance of privileged accounts can be undertaken by the vendor.”
• “ARCON PAM SaaS is based on implementing a zero-trust security framework for privileged accounts and does not lack for any features that are provided in the regular on-premises suite that ARCON also provides.”
• “The pages within this are clear and easy to understand (full of pop down menus) which reduces set up time to the minimum.”
• “These enterprise grade features enable the platform to support multi-cloud, multi-tenancy and third-party remote access use-cases which are now common features of digital organizations.”
• “ARCON’s tools for privileged user account discovery are also notable for their flexibility.”
• “Smart session monitoring analyses video, images keystrokes and face recognition to detect suspicious activity and provides comparison of live metadata with recorded activity.”
• “Overall, ARCON PAM SaaS solution, offering capabilities across different IT architectures, is a recommended product for managing privileged access in a heterogenous IT environment and one that deserves further technical evaluation.”