BeyondTrust Password Safe
Privileged password and session management.
Access Control
Privileged access management (PAM)
Admin accounts stop being one stolen password away from control of everything.
Addresses 210 stories in our coverage in the last 90 days 5 products that provide it
What it is
Vaulting, rotation and just-in-time issue of administrator, service and root credentials, with privileged sessions recorded. Admins get elevated rights only when they need them, for as long as they need them.
How to value it
Ransomware groups and state actors aim for domain admin, cloud root and backup console accounts, because those turn one foothold into a company-wide outage. PAM shrinks the number of standing admin accounts and makes their use visible, which also answers the auditor's question of who could do what.
Questions to ask a vendor
- 1Can it remove standing admin rights with just-in-time elevation, rather than only storing passwords?
- 2Does it cover cloud consoles, service accounts and backup systems, not just servers?
- 3Are privileged sessions recorded and searchable?
- 4What happens if the PAM system itself is down or compromised?
For your risk register
- Risk
- An attacker gains domain or cloud admin rights and disables defences or backups.
- Control
- PAM with just-in-time elevation and credential rotation.
- Owner
- Infrastructure lead.
- Measure
- Number of standing privileged accounts.
A starting point: set the owner and measure to fit your organisation.
Products that provide it
Listed alphabetically by vendor. A listing is not a recommendation: use the questions above to compare them, or tick up to 3 to see them side by side.
Delinea Secret Server
Vault for privileged credentials with discovery, rotation and session recording.
Idira Privileged Access Management
Privileged access management from the former CyberArk portfolio: vaulting, rotation, just-in-time access and session monitoring.
Privileged Access Management
Gives elevated rights to specific applications only where needed, so users do not need local admin accounts.
WALLIX PAM
Privileged access management with session recording, for IT and OT environments.
Recent stories it addresses
612 stories in total- 18 Oct 2026ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants
ConnectWise disables cloud backup after attackers compromise Microsoft 365 tenants.
- 17 Oct 2026Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
Hackers compromised Microsoft 365 tenants via ConnectWise's Cloud Backup service.
- 16 Oct 2026CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing
AI agents accessed sensitive data at Indian organizations during testing, CERT-In reports.
- 16 Oct 2026PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions
PEERSTITCH malware exploits FortiOS flaw to bypass VPN session checks.
- 14 Oct 2026Check Point Reports LiteLLM Flaws Enabling Admin Takeover and API Key Theft
LiteLLM vulnerabilities allow admin takeover and API key theft.
- 13 Oct 2026Agent Baseline Publishes Security Reference Architecture for Software Factories
Agent Baseline releases reference architecture for securing AI-driven software factories.
- 13 Oct 2026Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach
Meta reports hackers accessed GitHub repositories using stolen employee credentials, exposing code and some personal
- 13 Oct 2026LiteLLM flaws let low-privileged users hijack AI gateway and steal provider keys
LiteLLM gateway flaws allow low-privilege users to hijack AI access and steal API keys.
How we list vendors
- A product is listed because it provides the control. Nobody pays to be listed, and on story pages the examples rotate, so no vendor is always first.
- Vendor pages show both the vendor's own research and the incidents involving its products, from our own coverage. We do not leave either out.
- Our summaries are written by us, based on the vendors' own pages. Text in quotation marks or marked "in their own words" is the vendor's own, quoted from its website.
- Logos, product names and quoted text belong to the vendors and are shown to identify them.
- Something wrong? Use "Suggest a correction" on the vendor's page. A product we should look at? Email support@threatnoir.com.