Identity & Access
Privileged Access Management software
Tools that vault, broker, record and time-limit administrator access to servers, cloud consoles and databases.
- Vendors to know
- 10
- Reviews
- 1
- Comparisons
- 1
- Guides and articles
- 6
Privileged Access Management vendors to know
Established leaders, challengers, newer entrants and the tools practitioners recommend to each other. Being listed is not a ranking or an endorsement, and no vendor paid to appear.
- Established leader
CyberArk Privilege Cloud
CyberArk (Palo Alto Networks)
Named a Leader in the 2025 Gartner Magic Quadrant for PAM for the seventh consecutive time; Palo Alto Networks completed its acquisition of CyberArk on February 11, 2026 and introduced the Idira brand for the platform in May 2026.
- Established leader
BeyondTrust Pathfinder Platform
Named a Leader in the 2025 Gartner Magic Quadrant for PAM, ranked highest of all vendors on ability to execute.
- Established leader
Delinea Secret Server
Named a Leader in Gartner's Magic Quadrant for PAM alongside CyberArk and BeyondTrust; acquired StrongDM in 2026 to add just-in-time infrastructure access.
- Challenger
One Identity Safeguard
PAM offering from One Identity, typically named a Challenger or Niche Player behind the three Gartner PAM Leaders.
- Challenger
Saviynt Privileged Access
Converges PAM with identity governance in one cloud platform; recognized among vendors in Gartner's PAM Magic Quadrant coverage.
- Challenger
WALLIX Bastion
European PAM vendor frequently named a Niche Player in Gartner's PAM Magic Quadrant, popular with regulated EU buyers.
- Emerging
StrongDM
StrongDM (Delinea)
Just-in-time infrastructure access platform popular with DevOps teams; acquired by Delinea to combine PAM with runtime authorization.
- Community favourite
Teleport
Open-source access plane for SSH, Kubernetes, databases and web apps with session recording; described as the strongest open-source PAM starting point for cloud-native teams.
- Community favourite
HashiCorp Boundary
Open-source identity-based access tool for dynamic hosts and infrastructure; favored by teams already using HashiCorp Vault for credential-free access.
- Emerging
Apono
Just-in-time cloud access governance platform for humans, machines and AI agents; acquired by 1Password in June 2026 for $250-300M.
Products we have reviewed
Ordered by our research score. Every score links to the full review and the date its data was checked.
| Product | Fit for you | Starting price | Best for | Score |
|---|---|---|---|---|
| CyberArk Privilege CloudPalo Alto Networks (formerly CyberArk) | Quote only (AWS Marketplace lists $44,712 per year for 25 Standard Privilege Cloud users) | Published 99.95% availability SLA for Privilege Cloud SaaS, per a reseller's UK G-Cloud listing | — |
Research path
Start where you are in the buying process.
Step 1
Understand the category
Step 2