CMDashCybersecurity Maturity Dashboard

← All landscape areas

Identity & Access · Core

Privileged Access Mgmt (PAM)

Controls and audits privileged accounts.

8 options listedTypical cost: $70-$250/user/yrPROTECT (PR)

Overview

PAM vaults credentials, brokers and records privileged sessions, and enforces just-in-time elevation for admins and machines. It targets the high-value accounts attackers most want. Priced per privileged user or managed account; deployment is non-trivial. A top control for audit and cyber-insurance requirements.

Locks down the highest-value accounts; common audit/insurer requirement.

Advantages

CyberArk is the deep gold standard
BeyondTrust/Delinea easier to deploy
Teleport OSS for infrastructure access
top control for cyber insurance.

Trade-offs

CyberArk complex and costly to operate
deployment friction with admins
proxy/agent architecture
over-scoping risk.

Vendors & tools in this area

CyberArkCommercial

PAM gold standard; deep but complex; also machine identity.

BeyondTrustCommercial

PAM + secure remote access; easier to deploy.

DelineaCommercial

PAM (Thycotic+Centrify); usability focus.

One IdentityCommercial

IGA + PAM suite.

Teleport (community)Open source

Access for SSH/K8s/DB; community edition.

HashiCorp BoundaryOpen source

Open-source access proxy.

WALLIX BastionCommercial

European PAM leader (session mgmt, password vaulting) strong in EMEA/regulated sectors.

BritiveCommercial

Cloud-native PAM built around just-in-time, zero-standing-privilege access.

Start free trial Browse the full atlas

Privileged Access Mgmt (PAM) — Cybersecurity Landscape Atlas — CMDash