NETAND HIWARE Privileged Session Management (PSM)

Privileged Access Management (PAM) has shifted from a narrow, administrator-focused practice for on-premises environments to an organization-wide requirement spanning legacy systems, multi-cloud infrastructures, SaaS, and unmanaged endpoint devices. As least privilege and Zero Trust adoption grows, buyers increasingly expect modern PAM to support cloud contexts and integrate into broader identity and governance architectures. The emerging operational reality is a highly dynamic IT landscape combining multiple cloud platforms, on-prem networks, partner ecosystems, and sometimes mainframes—captured in the DREAM paradigm (Dynamic Resource Entitlement and Access Management). Pandemic-driven remote work and “ultra-hybrid” networks intensify the need for controlled, rapid, friction-free privileged access to dynamic and sometimes ephemeral resources, while rising complexity (including edge computing) strains traditional IAM approaches and drives demand for newer access tools.

NETAND, a South Korea–based vendor, offers HIWARE Privilege Session Management (PSM) for servers and a separate, unusual dedicated PSM platform for database management using the same underlying technology. HIWARE is positioned as a basic but cleanly designed session management and policy-based access tool rather than a full traditional PAM suite built around standing privileged accounts and vaulting. It provides a simple dashboard, request workflows via application templates, and deployments across on-prem or cloud environments, with an on-prem hardware appliance acting as a gateway. Authentication supports a two-stage approach with optional step-up controls, MFA options (including OTP/FIDO), and integrations such as AD/LDAP plus HRMS linkages.

Operational controls include command/query filtering via whitelist/blacklist policies with automatic alerts and session termination, plus adequate logging and optional video recording, though analytics depth and SIEM integration are limited. Strengths center on lean deployment, usability, and notably comprehensive database support; challenges include missing classical PAM capabilities, limited reporting, minimal machine identity support, and constrained DevOps fit—though AI functionality, JIT access, and DevOps support are planned.

• NETAND is based in South Korea and has been successful in East Asian markets, especially in financial services.
• HIWARE provides Privilege Session Management for servers and a separate PSM platform specifically for databases.
• Deployments can be on-premises or in cloud environments, but an on-prem hardware appliance is required as a gateway between users, devices, and resources.
• HIWARE uses its own authentication module and supports external authentication plug-ins such as AD and LDAP.
• Authentication can be two-stage, with user authentication followed by protocol/task authentication such as SSH or SFTP.
• MFA options include mobile OTP and email/SMS-based authentication.
• Supported protocols include Telnet, SSH, FTP, SFTP, rlogin, and Windows Terminal.
• Database support includes Oracle, MS-SQL, DB2, SYBASE IQ, HANA DB, MySQL, PostgreSQL, and MariaDB.
• Sessions can be blocked automatically when banned keywords or commands are detected, with manager alerts sent via email or text.
• Session records can be reviewed as text or video, including speed control and split-screen replay.

• “Privileged management use cases now extend across entire organizations, with users requiring task-based and workflow access to data, services, and applications held on legacy systems and multi-cloud-based infrastructures.”
• “Interest in Least Privilege and Zero Trust based architecture and policies has also grown as organizations look to secure the cloud as well as on premises.”
• “The future of business operations will revolve around a new paradigm of a highly dynamic IT architecture that melds multiple cloud platforms with legacy networks on premises, partner networks, and even, in some cases, mainframe installations.”
• “This is what KuppingerCole has christened the Dynamic Resource Entitlement and Access Management (DREAM) paradigm…”
• “These new, ultra-hybrid networks will push existing identity and security frameworks to their limit…”
• “Managing dynamic privileged access from endpoints must be secure and friction free if it is to succeed…”
• “It is not a traditional PAM platform that creates standing privileged accounts and then assigning passwords and restricted access.”
• “Instead, it is a neatly configured session management tool that allows administrators to control access to sensitive and important resources…”
• “For both server and database applications, HIWARE prioritizes policy over roles…”
• “NETAND are to develop the platform further… and AI functionality and JIT access are coming in the pipeline along with new support for DevOps environments.”