Top Free Privileged Access Management (PAM) Software - Page 3

Devolutions Server

Devolutions Server (DVLS) is a self-hosted privileged access management (PAM) and credential management solution that helps organizations centralize, secure, and audit shared accounts, passwords, and privileged access on infrastructure they control. It belongs to the privileged access management and password management software categories and is designed for IT teams, security teams, and organizations that need to keep credential storage and access governance within their own environment for control, compliance, or data-residency reasons. DVLS acts as a centralized data source for Devolutions tools such as Remote Desktop Manager and Devolutions Password Manager, providing the vault, permissions, and auditing layer behind them. Administrators store shared credentials in an encrypted vault, define who can access them through role-based access control, and monitor usage through session auditing and activity logs. Because it is deployed on the organization's own servers, on-premises or in a private cloud, teams retain ownership of their data while gaining centralized access-management capabilities. Common use cases include securing privileged and shared accounts, granting and revoking access based on roles, recording and auditing privileged sessions for compliance, and serving as the single system of record for credentials across an IT environment. Key features and benefits include: - A self-hosted, centralized vault for shared accounts, passwords, and privileged credentials, deployed on the organization's own infrastructure - Role-based access control (RBAC) that governs who can view, use, or manage specific credentials and connections - Session auditing, activity logging, and privileged session management to support visibility and compliance - Integration with Active Directory and Microsoft Entra ID for identity and access alignment - A shared backend for Remote Desktop Manager and Devolutions Password Manager, giving users a governed common workspace Organizations choose Devolutions Server when they require on-premises or private-cloud control over sensitive credentials rather than a managed service. It is suited to regulated industries and IT environments with strict data-control or compliance obligations, and it scales from small teams to larger organizations that need centralized, auditable management of privileged access.

Average Rating: 4.5/5.0

Total Reviews: 3

Okera

Okera, the universal data authorization company, helps modern, data-driven enterprises accelerate innovation, minimize data security risks, and enforce compliance with data privacy regulations. The Okera Dynamic Access Platform automatically enforces universal fine-grained access control policies. This allows employees, customers, and partners to use data responsibly, while protecting them from inappropriately accessing data that is confidential, personally identifiable, or regulated. Okera’s robust audit capabilities and data usage intelligence deliver the real-time and historical information that data security, compliance, and data delivery teams need to respond quickly to incidents, optimize processes, and analyze the performance of enterprise data initiatives. Okera began development in 2016 and now dynamically authorizes access to hundreds of petabytes of sensitive data for the world’s most demanding F100 companies and regulatory agencies. The company is headquartered in San Francisco and is backed by Bessemer Venture Partners, ClearSky Security, and Felicis Ventures. For more information, visit www.okera.com or contact info@okera.com.

Average Rating: 4.0/5.0

Total Reviews: 10

UserLock

UserLock delivers Identity & Access Management (IAM) for organizations built on Microsoft Active Directory. It protects logins to corporate networks and SaaS applications across hybrid, remote, and even offline or air-gapped environments. UserLock verifies AD identity access with multi-factor authentication (MFA), single sign-on (SSO), and context-aware access controls, making secure logins seamless for users and simple for IT teams. Unlike cloud-first IAM solutions, it strengthens security without replacing AD or requiring complex identity migrations. Administrators gain real-time visibility and control over user sessions to stop account sharing, limit concurrent logins, and respond instantly to suspicious activity. Detailed auditing and reporting help organizations meet compliance standards such as ISO 27001, HIPAA, and NIS2.

Average Rating: 4.7/5.0

Total Reviews: 9

ReShield

ReShield is an advanced Identity and Access Governance solution designed for companies looking to seamlessly secure and manage access to their critical data and infrastructure. It simplifies identity and permission management for both human and machine identities across Cloud, Databases, Kubernetes, and SaaS applications. Built specifically for Security, IT, and DevOps teams, ReShield helps you: - Gain complete visibility into user access, permissions, and identity-related risks. - Achieve least-privilege access through fine-grained controls accessible via Slack, Teams, and web interfaces. - Streamline compliance with automated user access reviews and detailed reporting. - Proactively identify and mitigate threats with real-time insights into identity and access risks. Tailored for modern cloud environments, ReShield can be deployed quickly, enabling teams to get started within a day instead of months.

Average Rating: 5.0/5.0

Total Reviews: 2

Adaptive

Adaptive is a cloud security company with a modern approach to data protection with its unique control plane that safeguards data and brokers’ access to human and non-human identities. The Adaptive architecture protects data closer to the source, ensuring strict access control over every database connection and minimizing sensitive data exposure. Adaptive’s combined approach to data access and protection eliminates blind spots in data security, making it ideal for modern organizations where data is constantly in motion. Due to Adaptive’s agentless architecture, end users get faster and auditable access and data protection across infrastructure without changing existing workflows and tools.

Average Rating: 5.0/5.0

Total Reviews: 1

Application Control Plus

ManageEngine Application Control Plus is an integrated application control and privilege management solution that secures endpoints by allowing only trusted applications to run. It enforces least privilege, blocks unauthorized software, and provides centralized control thus reducing attack surface while maintaining user productivity and compliance.

Average Rating: 5.0/5.0

Total Reviews: 1

Formal

Over the past decade, the data stack has evolved, bringing new technologies and vulnerabilities. Nowadays, company data is scattered across every type of data store imaginable. This scattered data is also being accessed by numerous employees across the company. With the modern data stack growing more decentralized every year, it's hard to collect and control these sprawling data stores, so that consistent and commonsense rules can be applied to them all. Formal products enable real-time understanding of an organization's data schema, sensitive data storage, consumption across teams, and the ability to secure everything from one place. It allows for the design of access and encryption policies. Our aim is to be the operating system for secure data management. Formal provides a protocol-aware access proxy, supports discovery, categorization, and policy enforcement in data stores.

Average Rating: 5.0/5.0

Total Reviews: 1

Locker Password Manager

Locker is a cross-platform password manager that goes beyond the mere concept of password management. It helps users secure sensitive data such as passwords, secret notes, payment cards, crypto assets and online identities. It stores passwords and autofill information for popular websites, logs you into your favorite sites, and scans for data breaches to ensure that your privacy is protected. Locker offers other additional security-related features, such as private emails (allows you to hide your original email), built-in authenticator,... A plus point is that those features are available on our most supported platforms and in a single Locker app. Every feature in Locker is built on the foundation of privacy and transparency to ensure the highest security for users. We believe everyone deserves a secure and seamless internet experience, and Locker strives to provide just that. No matter if you are tech-savvy or not, you can always keep yourself safe online with Locker. Locker for Business is an advanced business password manager. Mitigate risks. Improve productivity. Locker is a product of CyStack Security - a leading cybersecurity company based in Vietnam. CyStack has been a reputable partner providing security applications and security-managed services for many large and small businesses in Vietnam and around the world.

Average Rating: 3.5/5.0

Total Reviews: 8

OpenText NetIQ Privileged Account Manager

Micro Focus NetIQ Privileged Account Manager (PAM) facilitates administrative access across your complex, hybrid infrastructure. Discover your privileged identities, along with what dependencies exist to effectively simplify your privilege structure. Then, implement identity-powered access controls with automation, so policies are consistently and constantly enforced across systems and users have just enough access to do the job, no more, no less. Finally, monitor privileged activity and unauthorized changes to ensure governance and compliance throughout the entire identity lifecycle. Micro Focus allows you to reduce the risk and complexity of managing privileged access in your organization.

Average Rating: 4.5/5.0

Total Reviews: 1

P0 Security

P0 Security is the next-generation Privileged Access Management (PAM) platform that secures privileged access for every identity—human, machine and agentic—across cloud and hybrid environments. Production access is broken. Enterprises are drowning in break-glass accounts, static tokens, and over-privileged roles, with no clear view of who—or what—actually has access. Legacy tools like PAM, IGA and CIEM were built for a static, perimeter-driven world. They create blind spots, create extra work for security teams who have to manage proxies, bastions, shared accounts and static credentials. P0 was built differently. We unify visibility, governance, and orchestration into one platform. At the foundation is Access DNA—a continuously updated inventory of all human, non-human, and AI identities, their entitlements, and effective permissions across hybrid and cloud environments. On top of that, our Identity Graph maps relationships, reveals risky pivots, and surfaces toxic privilege combinations. And through API-led orchestration, P0 enforces policies natively in every system—without proxies, vaults, or static credentials. The result: * Privileged resources clearly identified * No standing privileged access * All access ephemeral, granted just-in-time, and fully auditable With P0, organizations finally have a clear path from today’s chaotic baseline to zero standing privilege—reducing risk, streamlining compliance, and enabling developer velocity.

Average Rating: 4.5/5.0

Total Reviews: 1

QueryPie

QueryPie is a leading all-in-one access governance platform founded in Silicon Valley, helping teams manage and secure access to databases, servers, Kubernetes, and internal web apps — now with powerful AI agent support. Used by top organizations like Kakao, Shinhan, Toss, MUSINSA, HYBE, and Yanolja, QueryPie is fully compliant with global security standards (ISMS, PCI-DSS, GDPR) and trusted by over 130 enterprises. With the launch of the QueryPie Community Edition — a free, self-hosted version available to anyone for one year — startups and SMEs can now access enterprise-grade infrastructure security to stay compliant and productive without the overhead. 🚀 Now Available: QueryPie Community Edition Deploy unified access control for your infrastructure — completely free up to 5 active users. From SQL masking and SSH auditing to Kubernetes RBAC and web app activity logging, everything is included in our self-hosted Community Edition, with no sales call required. ✅ SQL query-level masking & approval ✅ Command-level SSH session control with live replay ✅ Kubernetes API-level access policies ✅ User behavior recording on web apps ✅ Centralized audit logs & enforcement 📘 Setup guide: https://www.querypie.com/resources/learn/documentation/querypie-install-guide 🤖 New: QueryPie AI Hub is Now Public Build and run LLM-powered agents with MCP (Model Context Protocol) — connect external SaaS tools and your own internal systems, all from a single interface. - Smart Tool Discovery powered by RAG - Edge Tunnel for secure internal tool connection (no firewall changes needed) - Custom MCP Server support (SSE-based) - Optional governance layer to control and audit agent behavior 🎯 Try it today: https://app.querypie.com/login 📺 See how it collaboratively works: Watch the demo at https://youtu.be/GdWEW45rJPA Need a unified layer to manage access and securely scale your AI workflows? QueryPie brings it all together — with enterprise-grade control and developer-ready tools.

Average Rating: 4.0/5.0

Total Reviews: 1

System Frontier

System Frontier is like a proxy server for admin rights. It enables organizations to empower IT support staff with delegated, fine-grained permissions to manage systems and execute automation tasks. Using a real-time web console, help desk staff, developers, vendors or any other support personnel can safely manage servers, workstations, network devices, user accounts and anything with an API, without agents or complicated user interfaces.

Average Rating: 5.0/5.0

Total Reviews: 1

12Port Privileged Access Management

12Port is a modern, agentless Privileged Access Management (PAM) platform designed to secure, control, and audit privileged access without adding unnecessary operational complexity. Founded by cybersecurity leaders with decades of experience building identity security and PAM solutions, 12Port was created to deliver enterprise-grade privileged access security that is easier to deploy, manage, and use. 12Port combines secure credential vaulting and automated rotation with brokered privileged access, MFA, approvals, credential injection, session monitoring and recording, and AI-assisted session analysis. Administrators, third parties, applications, and automation can securely access critical systems without exposing or sharing privileged credentials. The platform also extends privileged access controls to non-human identities, including AI agents, machine workloads, scripts, and DevOps processes. Built around an agentless architecture, 12Port supports existing administrator workflows and native tools across Windows, Linux, Unix, network devices, web applications, and cloud environments. Organizations can secure privileged access across on-premises, cloud, hybrid, segmented, and isolated environments while integrating with existing identity infrastructure, including AD, LDAP, Entra ID, SSO, and MFA.

BastionZero

BastionZero is a Zero Trust access platform for infrastructure, offering passwordless access to various resources like servers and Kubernetes, paired with Identity Providers (IdP) for policy-based access control. It eliminates the need for VPNs, SSH keys, and provides real-time visibility into user activity, continuous validation of security postures, and instant revocation of access when necessary. It's a cloud service reducing operational overhead and removing single points of compromise while preserving existing engineering workflows.

Britive Platform

Britive is an access management and policy enforcement solution for all your cloud infrastructure and platform services. Cloud native and integrates with all major IaaS, PaaS, SaaS & DaaS platforms, Britive offers Just-in-Time (JIT) Permissioning, Cross-Cloud Visibility, and Secrets Governance all within a single platform. We help secure your identities and privileges so your business can move as fast as the cloud.