Best Privileged Access Management (PAM) Software - Page 8

Boundless Access Control

Brainwave GRC

Brainwave GRC is a leading software vendor focused on IAI (Identity Analytics and intelligence). Our mission is to help businesses to fight against fraud, data leakage and cyber risks, by using innovative analytics based GRC solutions.

Britive Platform

Britive is an access management and policy enforcement solution for all your cloud infrastructure and platform services. Cloud native and integrates with all major IaaS, PaaS, SaaS & DaaS platforms, Britive offers Just-in-Time (JIT) Permissioning, Cross-Cloud Visibility, and Secrets Governance all within a single platform. We help secure your identities and privileges so your business can move as fast as the cloud.

CapaOne

CapaOne is a cloud-based endpoint management platform that consolidates the work IT teams normally spread across four to six separate tools. One console, one agent. Application Manager automates third-party application updates and deployment. Privilege Manager removes standing local admin rights and grants just-in-time elevation through Entra ID groups. Provision Manager handles bare-metal OS deployment and vendor-certified, model-aware driver orchestration. Security Monitor maps CVEs to the endpoints they actually affect and prioritizes by exploitability. Experience Monitor tracks device reliability. Mobile Manager covers enrollment, configuration, and app delivery across iOS, iPadOS, and Android. Built for organizations of 200 to 1,000 employees with IT teams of 5 to 20 people. Deployment takes days, not months, with no implementation consultants required. CapaOne is a complete endpoint management platform — designed to work with Microsoft Intune, or entirely without it. Developed by CapaSystems A/S, a Danish software company founded in 1996 with more than 30 years in endpoint management. Danish-built and EU-hosted, with no transfer of endpoint data to US jurisdiction. GDPR-first, NIS2-aligned posture.

CA Trusted Access Manager for Z

CA Trusted Access Manager for Z helps deliver trusted systems and improve business efficiency through comprehensive privileged access management for your mainframe

CloudEnv

Simple End-to-End Encrypted Cloud ENV Variables. Keep your ENV vars synced and versioned with your team (without Git). Simple CLI – Get started in seconds, not minutes. Trusted IP Addresses let you receive an email request before authorizing a new IP address access to your secrets.

Corma

Access and Identity Management made simple. Corma is the access management platform to centralize all your apps, automate access reviews and provisioning while cutting software spend.

Average Rating: 4.8/5.0

Total Reviews: 4

Detexian

In today's dynamic modern business landscape, the reliance on essential apps such as M365, Salesforce, Slack, and Box is undeniable. However, the seamless interconnection of these apps often leads to the widespread sharing of your critical business and customer data. Enter DETEXIAN SAAS DATA BREACH DISCOVERY – the ultimate solution that demands ZERO setup, requires just ONE email, and takes only TWO minutes to unveil potential vulnerabilities. Our product offers actionable insights in clear business language, eliminating the need for an entire team of experts. With DETEXIAN, achieving remarkable ROI is a one-person job, delivering an impressive 90% improvement in critical areas. Our track record speaks volumes – we've identified 200+ unknown apps on average, with over 80% of them capable of unauthorized access, copying, and modification of vital data. Detexian empowers you to tackle SaaS data sprawl effortlessly, ensuring your data security is not only robust but also swift and highly effective.

Devolutions PAM

Devolutions PAM is a privileged access management (PAM) solution that helps small and midsize businesses discover, secure, rotate, and audit privileged accounts across their infrastructure. It belongs to the privileged access management software category and is designed for IT teams, security teams, and managed service providers that need to control and monitor elevated access to critical systems without the complexity typically associated with enterprise PAM tools. Privileged accounts such as administrator, shared, and service accounts hold elevated access and are common targets for attackers and sources of insider risk. Devolutions PAM addresses this by identifying privileged accounts, securing their credentials, automating password rotation, controlling how and when they are used, and recording activity for accountability. It is delivered as part of the Privileged Access Management package and runs on a Devolutions workspace, either the cloud-hosted Devolutions Cloud or the self-hosted Devolutions Server, while integrating with Remote Desktop Manager for connection launching and Devolutions Gateway for secure tunneling. Common use cases include enforcing least-privilege and just-in-time access, eliminating standing privileges, rotating and vaulting privileged credentials, recording privileged sessions, and demonstrating compliance through audit logs. Key features and benefits include: - Discovery of privileged accounts across the environment - Automated password rotation and secure credential vaulting - Just-in-time privilege elevation and check-out approval workflows that reduce standing access - Session recording and tamper-resistant audit logs for monitoring and compliance - Granular role-based access control, allowing users to connect to resources without seeing the underlying credentials Devolutions PAM is designed to provide privileged access controls typically found in enterprise products in a form that is practical for smaller organizations to adopt and operate. Because it integrates with the broader Devolutions suite, organizations can extend from credential management into full privileged access management within a single ecosystem, moving from standing privileges toward zero-standing-privilege access under centralized governance, role-based control, and auditing.

EmpowerID Privileged Access Management

Privileged accounts are both a necessity and a liability. These accounts, with their nearly-unlimited access to system resources are essential for everyday IT operations, yet abuse of privileged accounts is attributed as the cause of 62% of security breaches.

Evo Security

vo Security is a multi-tenant Identity and Access Management (IAM) platform built exclusively for Managed Service Providers (MSPs) and Managed Security Service Providers (MSSPs). Headquartered in Austin, Texas, and backed by industry leaders, we were founded by cybersecurity professionals determined to help IT service providers protect their small to mid-market clients from the most common cyberthreat: compromised credentials. Our platform combines Multi-Factor Authentication (MFA), Single Sign-On (SSO), RADIUS Authentication, Help Desk Verification, and Privileged Access Management (PAM) into a single, user-friendly interface. By delivering these core security tools in one solution, Evo Security saves MSPs time, reduces complexity, and boosts profitability with better gross margins. Most importantly, Evo Security tackles the rising threat of stolen credentials by simplifying how MSPs and MSSPs manage user access. We help administrators and end-users alike enjoy a seamless experience, reinforcing the crucial balance between strong security and efficient operations—all from a single dashboard built with the IT channel in mind. One agent. One dashboard. Total identity management. Built for MSPs.

FilePilot Enterprise Vault

Team credential vault for secure server access — no shared passwords, full audit trail. FilePilot Enterprise Vault is a free, open-source, self-hosted credential server that lets teams share access to FTP, SFTP, FTPS, SCP, S3, and WebDAV servers without ever passing around raw passwords or keys. Instead of emailing credentials, admins provision connection profiles once and issue each teammate a scoped, revocable access token. Every credential is protected with two-tier AES-256-GCM envelope encryption, organized into isolated Vault Groups — each with its own encryption key, IP allowlist, and choice of KMS provider (AWS, Azure, GCP, or HashiCorp Vault). Role-based access control (Admin, Manager, Operator, Auditor) with 20+ granular permissions ensures people only touch what they're supposed to, enforced server-side on every API call. Built for compliance-sensitive teams, the Vault keeps a tamper-evident, hash-chained audit log of every action, streams events to your SIEM via HMAC-signed webhooks, and supports legal/preservation holds to freeze data for regulatory review. A built-in compliance dashboard summarizes encryption, access, audit, and session posture in one view — ready for SOC 2 or HIPAA audits. Setup takes minutes via a browser-based wizard, with support for SQLite, PostgreSQL, or MySQL. Real-time WebSocket sync means token revocations, file reverts, and hold status changes take effect instantly across connected clients. Deploy it anywhere — Docker, on-prem, or your own cloud — with no per-seat cost, no telemetry, and full MIT-licensed source. Best for: Engineering, DevOps, and IT teams who need centralized, auditable, role-based access to shared infrastructure credentials without relying on password managers or spreadsheets. Key features: Central credential vault with encrypted, per-group storage Role-based access control with 20+ fine-grained permissions Scoped, revocable, expiring access tokens Tamper-evident hash-chain audit logging + SIEM webhook integration Legal hold / write-freeze for compliance investigations File version history with one-click remote revert Multi-KMS support (AWS, Azure, GCP, HashiCorp Vault) Self-hosted, MIT licensed, zero telemetry

Fischer Identity

Fischer Identity is a leading developer of enterprise Identity and Access Management (IAM) solutions based on the Zero Trust model. Our products simplify, accelerate and automate the complex task of IAM with cloud-based solutions leveraging the AWS infrastructure without limits of scalability or reach, and ensures constant access to innovation. Fischer Identity solutions are flexible and empowers your organization to build a secure identity management program. Zero Trust starts with Identity.

Average Rating: 4.3/5.0

Total Reviews: 3

FUDO PAM

Fudo Security, a global leader in Privileged Access Management (PAM) and Zero Trust Remote Access solutions, is transforming how organizations secure critical infrastructure and sensitive systems. With deployments in over 35 countries and a rapidly growing partner network, Fudo offers a powerful yet accessible approach to managing privileged accounts, enabling secure remote access, and detecting insider threats in real time.

Gardiyan Privileged Access Management

Gardiyan Privileged Access Management, is a comprehensive cybersecurity platform designed to protect, manage, and audit privileged accounts (admin, root, etc.) that access an institution's most critical data and servers within a centralized "Secure Zone." Built with a Zero Trust architecture, Gardiyan PAM provides dynamic protection against internal and external threats while ensuring compliance with legal regulations such as KVKK and GDPR. The product routes and monitors all access to servers (Windows, Linux, Unix), databases, and network devices through a secure proxy without the need for a VPN. Highlighted Features and Capabilities: Agentless and Flexible Architecture: Operates without requiring any agent software to be installed on target systems (Servers or Clients). This enables rapid installation and deployment without altering the existing network structure. Full Session Recording and Monitoring: Records all sessions conducted via RDP, SSH, VNC, and Telnet protocols as video. Sessions can be monitored live and terminated instantly by an administrator if necessary. Thanks to OCR technology, text and commands within the video recordings are searchable. Centralized Password Management (Vault): Stores privileged account passwords in an isolated and encrypted area. Passwords are rotated automatically or on a scheduled basis according to defined policies. Users can connect securely to target systems via SSO without ever seeing the password. Two-Factor Authentication (2FA/MFA): Integrates with OTP (One-Time Password) solutions like Google Authenticator to enhance access security. It offers multi-factor authentication for remote connections. Advanced Authorization and Approval Mechanism: Access to critical servers can be tied to the approval of specific managers. Unauthorized actions are prevented through the "Four-Eyes Principle" and time-restricted authorization. Third-Party and Vendor Access Management: Provides suppliers and external firm employees (Vendors) with time-restricted and fully controlled access to the internal network via an HTML5-based browser interface, eliminating the need for a VPN. Detailed Reporting and Analytics: Features a dynamic reporting module that answers "Who accessed what, and when?". User activities, inventory status, and system logs can be exported in PDF, Excel, and JSON formats. Benefits: Regulatory Compliance: Ensures full compliance with KVKK and ISO 27001 audits by storing access logs and video recordings in an immutable format. Risk Mitigation: Closes security vulnerabilities caused by shared or unmanaged passwords and reduces the cyber-attack surface. Operational Speed: Lightens the workload of IT teams by providing the ability to manage tens of thousands of assets from a single web interface.