Get suggestions

Compare the PAM Market

Create your own software shortlist by taking our quiz to get personal PAM vendor and provider suggestions.
  • Find your top 3 match
  • Compare the market across 100+ vendors
  • Data on why each solution is a good fit vs your business

Let’s create your PAM shortlist now.

Compare the market

Who are the top rated PAM vendors? (Privileged Access Management)

The top rated PAM vendors are Thycotic, IBM, Cyberark, Iraje, Arcon, ManageEngine, Devolutions, BeyondTrust, Centrify, Broadcom and Osirium. PAM features typically include automated password management such as vault capability, auto-rotation and generation.

Here's the list of top rated PAM vendors:

  1. Thycotic
  2. IBM powered by Thycotic
  3. Cyberark
  4. Iraje
  5. Arcon
  6. ManageEngine
  7. Devolutions
  8. BeyondTrust
  9. Centrify
  10. Broadcom (Symantec)
  11. Osirium
What are PAM tools?

PAM tools are an essential security and risk management solution for all organizations. They help ensure that critical assets stay protected by managing privileged accounts, monitoring access to those resources through the use of profiles or policies with customizable triggers such as password changes while maintaining compliance requirements in place at any given time.

11 Best PAM Vendors

SD WAN Readiness Assessment

Take the quiz, create your own personalized SASE Cybersecurity or SD WAN shortlist.

The simplest way for IT decision makers to shortlist Gartner SASE & SD WAN solutions vs your needs.

We've built self assessment quizzes to specifically help IT decision makers create their own unique vendor or managed provider shortlist.

Summary

We've reviewed the 11 best PAM solutions our team believes match the needs of most national and global medium to large Enterprise companies.

If you’re in the market for a PAM solution, you’ve got a lot of options.  There are plenty of solid solutions to choose from whether you need SaaS or on-premise deployment, pre-built or scriptable automation, agent-based endpoint privilege management or cloud identity management, or even if you need all of the above.  This also means that even bigger vendors are getting competitive with pricing, so it’s reasonable for an orgnaization of any size to keep their secrets safe.

10 Best PAM Vendors

Questions to help shortlist solutions

Here are 10 questions to ask your PAM vendor:

  • Can your solution be deployed on-premise, in a private cloud environment, SaaS, or any of these?
  • Do you offer professional services and are they required for a successful deployment?
  • Do you support both Windows and Linux?
  • How big is your 3rd party integration ecosystem?
  • Do you offer native cloud integration and if so, which public clouds are supported?
  • Does your solution provide Endpoint Privilege Management (PEM) capabilities and if so, does it require an agent?
  • Does your solution have user behavior analytics out-of-the-box?
  • How much customization can I do to tailor workflow automation to our business processes?
  • Are ‘canned’ reports available for common compliance tasks like access reviews?
  • Does your solution offer integrations for DevOps CI/CD pipelines?
Thycotic

1. What is Thycotic's PAM Solution?

Thycotic is a prevalent a leader in the Privileged Access Management market, Thycotic’s solution is robust and widely used. There is also a large community of cybersecurity professionals experienced with Thycotic products.  They offer multiple deployment options, including their SaaS (Software-as-a-Service) solution as well as on-premise deployment, although many have noted that their on-premise solutions can be complex and difficult to design and implement. For the cloud and SaaS products there is a limit to the number of “Secrets” available.  They offer a variety of integrations for supporting Active Directory, HSM, SAML single-sign-on, as well as scriptable automation.  It should be noted that the product mix and deployment strategy required for a Windows-only environment can vary from requirements for environments requiring support for mixed operating systems and sign-on types.  A highly incentivized integration between their PAM and endpoint-security solutions is also present.  While their primary solution has historically been their ‘Secrets Server’, their portfolio has expended to include offerings that address PAM challenges, for applications ranging from compliance auditing to DevOps to helpdesk.

Finally, Thycotic was acquired by TPG Capital in early 2021.  Announcements can be found on Thycotic’s website, which describe plans to merge Thycotic with Centrify.

Thycotic_PAM

Resources and Downloadable Content

Request the very latest Thycotic PAM data sheet PDF directly from your local account team. Please check your junk folder if not received.

Complete your details to arrange a demo of Thycotic. You will receive contact requesting available dates and times - please check your junk folder if not received.

Request your local in-country sales contact. You will receive details as soon as possible - please check your junk folder if not received.

IBM (Thycotic)

2. What is IBM (Thycotic)'s PAM Solution?

IBM’s PAM product is Thycotic, so all capabilities, features, and descriptions for Thycotic above can be equally applied to IBM’s PAM offering.           

IBM notes that in addition to IBM’s name and strong financial backing, their Thycotic-powered solution minimizes the cost of entry regarding technical knowledge and requirements necessary for integrating into enterprise customers’ existing architectures and infrastructures.

IBM_PAM (USE)

Resources and Downloadable Content

Request the very latest IBM (Thycotic) PAM data sheet PDF directly from your local account team. Please check your junk folder if not received.

Complete your details to arrange a demo of IBM (Thycotic). You will receive contact requesting available dates and times - please check your junk folder if not received.

Request your local in-country sales contact. You will receive details as soon as possible - please check your junk folder if not received.

Cyberark

3. What is Cyberark's PAM Solution?

In most polls and research findings, Cyberark demands the largest market share of PAM customers. They have a good solution for most use cases and customers of all sizes. Along with their reliability, they offer a range of deployment options ranging from SaaS to on-premise.  Cyberark supports all major operating systems and has a large ecosystem of integration partners.  Additionally, like Thycotic, there are many cybersecurity professionals in most markets that are knowledgeable on the solution and its integration partners. When it comes to innovation, Cyberark is known to be first to market new technologies and is currently one of, if not the only, PAM leaders to offer CIEM (Cloud Infrastructure Entitlements Management) integration.

The deployment of the solutions offered by Cyberark have been reported to be cumbersome and difficult, especially when dealing with the on-premise solution.  This isn’t uncharacteristic of most other enterprise software applications, where SaaS offerings offer ease-of-deployment over on-premise.  Cyberark use this to drive customers toward SaaS products.  Also, while most reports praise Cyberark’s product support, many customers are enjoying a higher-level of support through Cyberark’s Professional Services offerings which are added-on to the total cost of the solution. 

Like most enterprise applications, the Cyberark suite of products is available for most major operating systems but is geared towards Windows users and can be more difficult to deploy and upgrade for Linux and UNIX environments.  In these deployments, professional services are almost always recommended to accompany purchase, even for routine maintenance or upgrades.

Cyberark_PAM

Resources and Downloadable Content

Request the very latest Cyberark PAM data sheet PDF directly from your local account team. Please check your junk folder if not received.

Complete your details to arrange a demo of Cyberark. You will receive contact requesting available dates and times - please check your junk folder if not received.

Request your local in-country sales contact. You will receive details as soon as possible - please check your junk folder if not received.

Iraje

4. What is Iraje's PAM Solution?

Iraje is an underdog not represented in most market research available. They are an Indian company and that is reflected in their GUI and support as English is not the native language. With their solution being much less well-known, the pricing for the Iraje solution reflects their desire to capture more market share. While they have a solid product with most of the components and offerings available from the leaders in the space, they offer far fewer integrations than competitors.  This may mean that development is required as part of the deployment, although Iraje claim that they provide the necessary tools to get this done. As a smaller company, they can innovate faster with less business processes to slow them down. While Iraje does offer support for customer-owned private cloud deployments, they do not have a SaaS version of their product as of now.

Iraje do offer professional services in addition to their standard technical support services, although they are likely better-suited to provide hands-on support for end-users in their region. As Iraje is not a leader and not quite a challenger in the market space, their solution is still developing but is definitely one to keep an eye on.

Iraje_PAM

Resources and Downloadable Content

Request the very latest Iraje PAM data sheet PDF directly from your local account team. Please check your junk folder if not received.

Complete your details to arrange a demo of Iraje. You will receive contact requesting available dates and times - please check your junk folder if not received.

Request your local in-country sales contact. You will receive details as soon as possible - please check your junk folder if not received.

Arcon

5. What is Arcon's PAM Solution?

As a leader in the market space according to Gartner Reports as well as other market research reports, Arcon is a solid solution serving customers of all sizes and capturing a healthy share of the PAM market space. Although it is not the largest or the smallest of the leaders, it is in a particular spot that allows Arcon’s solution to be progressive and innovative while still having the means to achieve longevity in the market space. Their solution is well-known in specific geographic locations (Asia/Pacific and EMEA) but awareness is lacking outside of these areas despite the company’s desire to expand into more geographic areas and their active selling outside their niche market regions. One of the benefits of using Arcon is that they have a reliable solution with deployment options including SaaS or on-premise, many integrations and they are generally sold at a lower price-point due to their desire to grow outside their current geographic user base.

Alongside their competitive pricing, Arcon is offering 24/7 technical support with no distinction between tiers. It is also worth mentioning that they have won awards for their customer service indicating a lot of positive feedback from existing customers. All things considered, Arcon is a leader in the market space and is worth considering for new projects.

Arcon_PAM (USE)

Resources and Downloadable Content

Request the very latest Arcon PAM data sheet PDF directly from your local account team. Please check your junk folder if not received.

Complete your details to arrange a demo of Arcon. You will receive contact requesting available dates and times - please check your junk folder if not received.

Request your local in-country sales contact. You will receive details as soon as possible - please check your junk folder if not received.

ManageEngine

6. What is ManageEngine's PAM Solution?

ManageEngine is identified by most market research as a challenger to the leaders in the PAM market, gaining significant market share rapidly throughout the last couple of years. They are enthusiastic about gaining presence and new business allowing less expensive solutions and more focused care from their sales and support teams. ManageEngine’s solution is tuned to provide advanced analytics, easy-to-deploy contextual integrations and seamless workflow automation to allow their solution to detect anomalies and get to solutions more rapidly than their competitors. Although their solution is not as robust and all-inclusive as some of their competitors' solutions, they do have several more advanced PAM capabilities including SSH key and SSL certificate management processes. One of the key differentiators for ManageEngine is that they are offering stand-alone products for basic Privileged Account and Session Management (PASM) and remote access for privileged users alongside their PAM solution and Endpoint security for Windows devices.

In all, the ManageEngine solution is solid advanced and specific requirements as well as for more basic environments.

ManageEngine_PAM(USE)

Resources and Downloadable Content

Request the very latest ManageEngine PAM data sheet PDF directly from your local account team. Please check your junk folder if not received.

Complete your details to arrange a demo of ManageEngine. You will receive contact requesting available dates and times - please check your junk folder if not received.

Request your local in-country sales contact. You will receive details as soon as possible - please check your junk folder if not received.

Devolutions

7. What is Devolutions' PAM Solution?

Devolutions is an out-of-the-box solution that covers all of the basics of PAM solutions and covers them well. The company’s focus is on the small-to-medium sized business customers, as opposed to the large enterprise customers. This out-of-the-box approach allows Devolutions to offer a more simple deployment and a lower cost to deploy and maintain with the tradeoff of not being completely comprehensive with its solution. Along with the lack of a comprehensive solution is the weak interoperability with third-party systems that many customers would want to integrate with. The market position of Devolutions is still weak in the sense that larger customers are not purchasing their solution with as much enthusiasm as the smaller businesses which means although they are growing, it’s not at as fast a pace as those solutions that successfully target larger enterprise customers.

While Devolutions is not lacking in finance to keep running, their financial position is not as strong as many of their competitors which may raise concerns regarding the longevity of the solution. With something so deeply ingrained in business processes as PAM and the extent to which a customer must go to successfully deploy the solution, one would not want to go through more deployments than they need to, especially the smaller companies with smaller IT budgets, who Devolutions focus on targeting.

Devolutions_PAM(USE)

Resources and Downloadable Content

Request the very latest Devolutions PAM data sheet PDF directly from your local account team. Please check your junk folder if not received.

Complete your details to arrange a demo of Devolutions. You will receive contact requesting available dates and times - please check your junk folder if not received.

Request your local in-country sales contact. You will receive details as soon as possible - please check your junk folder if not received.

BeyondTrust

8. What is BeyondTrust's PAM Solution?

BeyondTrust is an industry leader focused on individual customer success as opposed to a market sector approach taken by other PAM solution manufacturers. While BeyondTrust follows industry best practices and has a comprehensive solution for enterprise customers, their solutions are not cookie-cutter but instead are designed with features targeted at specific customers needs for each and every customer they work with. This provides a very robust and complete solution including physical or virtual on-premises solutions as well as SaaS offerings, but the complexity of design and implementation can be very complicated and require product expertise (professional services purchased from BeyondTrust). In addition to providing next-level customer support as a differentiator, they are an innovator in the PAM market. For instance, BeyondTrust is one of only a few vendors that are currently developing and rolling-out a CIEM (Cloud Infrastructure Entitlement Management) feature. They support both Windows as well as UNIX/Linux endpoint agents and their agents for UNIX/Linux endpoints are considered best-in-class according to published market research.  This isn’t surprising given the widespread adoption of BeyondTrust’s active directory integration for Linux, PBIS-Open.

Unfortunately, BeyondTrust is missing SDK capability that would allow customers to integrate their “Password Safe” with existing solutions, but instead offers CLI (Command Line Interface) only with SSH and Telnet abilities, decreasing their adoption rate with some larger customers.  With their strong market position and financial status they are a top performer when considering PAM solutions and their tailored hands-on approach to deployment and customer support will likely only continue to grow their market share in the enterprise customer market.

BeyondTrust_PAM(USE)

Resources and Downloadable Content

Request the very latest BeyondTrust PAM data sheet PDF directly from your local account team. Please check your junk folder if not received.

Complete your details to arrange a demo of BeyondTrust. You will receive contact requesting available dates and times - please check your junk folder if not received.

Request your local in-country sales contact. You will receive details as soon as possible - please check your junk folder if not received.

Centrify

9. What is Centrify's PAM Solution?

Centrify was purchased by TPG in 2021 which is a private equity firm who also purchased Thycotic. Shortly after, it was announced that they would be merging with Thycotic to create a product called ThycoticCentrify. The merger is still in process and therefore both solutions are still available separately, but updates posted to both Centrify and Thycotic websites continue to state that they are in the process of integrating and merging both solutions. Centrify offers a very inclusive and robust range of PAM solutions including SaaS, private cloud solutions, on-premise server solutions, and analytics suites. While Centrify targets customers of all sizes and has viable solutions for them all, they tend to maintain market share in the Americas and Europe with other regions lagging behind in adoption. With their broad range of applications, design and implementation can be complex and with the merger still in progress, they are likely to continue to have a complex solution that requires plenty of forethought due to the merging of multiple products and interested parties.

That said, they have a large partner ecosystem with many integrations that work out-of-the-box, allowing them to play well in almost any environment. In years to come, if their roadmap goes as planned, they will be a very large player in the market space and will have a very comprehensive product with something for everyone.  Centrify’s Linux capabilities will be a welcome addition to Thycotic’s mature products that currently cater mostly to Windows environments and their combined support network will be able to handle all the business they can muster with the strong financial backing of TPG.

Centrify_PAM(USE)-1

Resources and Downloadable Content

Request the very latest Centrify (ThycoticCentrify) PAM data sheet PDF directly from your local account team. Please check your junk folder if not received.

Complete your details to arrange a demo of Centrify (ThycoticCentrify). You will receive contact requesting available dates and times - please check your junk folder if not received.

Request your local in-country sales contact. You will receive details as soon as possible - please check your junk folder if not received.

Broadcom (Symantec)

10. What is Broadcom (Symantec)'s PAM Solution?

Symantec sold much of their security portfolio to Broadcom, although some products still carry the Symantec name. Broadcom Symantec solution fills a niche in the PAM market as they offer on-premise software solutions only, deployable on dedicated hardware or virtual hardware as required.  They don’t’ have a SaaS offering, and they don’t have a large number of integrations, which forces some customers to develop their own connections to their existing environment. Customers will also need to develop their own automation tasks as Symantec has been reported as having less-than-comprehensive task automation features. Symantec’s ease of scalability and high availability features are very strong as well as their Privileged Elevation and Delegation Management (PEDM) support for Windows, Linux and UNIX. If a customer finds themselves to be a fit for Symantec’s offerings, the price to deploy and manage are less than many others in the PAM market, although they offer less comprehensive feature-sets. As far as innovation goes, Symantec is not at the top of the leaderboard with many customers reporting having to write their own integrations for their environments. As Symantec is such a niche player, their solution is not widely adopted and can be difficult to design and deploy. Once deployed, existing customers report it to be a robust and very manageable solution, though.

Broadcom_PAM

Resources and Downloadable Content

Request the very latest Broadcom (Symantec) PAM data sheet PDF directly from your local account team. Please check your junk folder if not received.

Complete your details to arrange a demo of Broadcom (Symantec). You will receive contact requesting available dates and times - please check your junk folder if not received.

Request your local in-country sales contact. You will receive details as soon as possible - please check your junk folder if not received.

Osirium

11. What is Osirium's PAM Solution?

Osirium is a PAM solution with mid-sized market share and a focus on price and ease of deployment. This is great for some small to medium sized businesses where compliance and reliability are the driving factors for their acquisition and adoption of a PAM solution, leaving PAM as a requirement for them to adopt without an adequately sized IT budget. With the market for PAM becoming quite populated, Osirium is failing to keep up with the leaders as they do not have strong financial support, wide adoption, or a large partner ecosystem. This makes innovation difficult and forces them to really focus on making use of what they currently offer.  With Osirium’s on-premises server architecture, they do not offer cloud integration or SaaS solutions to their customers. The user interface is easy to use and flexible for users, which are key features that keep them in the market with customers looking for simplicity in their PAM solution. Osirium’s integrations are far fewer than the other vendors, again, directing the solution at smaller customers with fewer integration requirements. As a comprehensive solution, Osirium is lacking, but for those that are looking for quick paths to compliance, Osirium’s proven ability to solve that problem can make it a good choice.

Osirium_PAM(USE)

Resources and Downloadable Content

Request the very latest Osirium PAM data sheet PDF directly from your local account team. Please check your junk folder if not received.

Complete your details to arrange a demo of Osirium. You will receive contact requesting available dates and times - please check your junk folder if not received.

Request your local in-country sales contact. You will receive details as soon as possible - please check your junk folder if not received.

IT Decision Makers Report

Download the the complete guide to the top 10 SD WAN solutions.

In this 98 page guide, you'll learn about the leading SD WAN providers and solutions which fit the needs of most businesses. Find out how each solutions meets specific business needs.

Checklist

SD WAN Buyers Checklist

Download our most popular IT decision makers SD WAN checklist. At-a-glance data covering all of the key points you need to understand when buying SD WAN.

Global SD WAN Providers Mindmap Checklist-1

Please provide the following information to request the IT decision makers SD WAN checklist.

Get the checklist

Briefings

Get real advice. Learn about the top 10 vendors and managed providers vs your needs in our free 30 minute Zoom session.

Join us via Zoom to where one of our research team will walk you through 10 top/best vendors and managed providers. We'll talk about your needs and map which Gartner leading solutions, niche players and startups match your requirements.

Netify free vendor Zoom advice briefing-1

Complete your details to learn more about The Netify vendor and managed service provider briefing.

Register interest

Marketplace

There are no results matching your selection.

Resources and Downloadable Content

IT decision makers are challenged to research the SD WAN and SASE security market. Netify vendor and service provider briefings offer clarity with actionable, objective insight into the top 10 Gartner rated solutions. Our research data is backed by proprietary data to help you make better decisions.

Netify Forbes member logo

For Global IT Decision Makers

The Global SD WAN & Cybersecurity Playbook

Download our vendor and managed service provider guide to the top 10 SD WAN & top 10 SASE cybersecurity solutions for Global companies.