BeyondTrust Password Safe
Privileged password and session management.
Access Control
Privileged access management (PAM)
Admin accounts stop being one stolen password away from control of everything.
Addresses 324 stories in our coverage in the last 90 days 5 products that provide it
What it is
Vaulting, rotation and just-in-time issue of administrator, service and root credentials, with privileged sessions recorded. Admins get elevated rights only when they need them, for as long as they need them.
How to value it
Ransomware groups and state actors aim for domain admin, cloud root and backup console accounts, because those turn one foothold into a company-wide outage. PAM shrinks the number of standing admin accounts and makes their use visible, which also answers the auditor's question of who could do what.
Questions to ask a vendor
- 1Can it remove standing admin rights with just-in-time elevation, rather than only storing passwords?
- 2Does it cover cloud consoles, service accounts and backup systems, not just servers?
- 3Are privileged sessions recorded and searchable?
- 4What happens if the PAM system itself is down or compromised?
For your risk register
- Risk
- An attacker gains domain or cloud admin rights and disables defences or backups.
- Control
- PAM with just-in-time elevation and credential rotation.
- Owner
- Infrastructure lead.
- Measure
- Number of standing privileged accounts.
A starting point: set the owner and measure to fit your organisation.
Products that provide it
Listed alphabetically by vendor. A listing is not a recommendation: use the questions above to compare them, or tick up to 3 to see them side by side.
Delinea Secret Server
Vault for privileged credentials with discovery, rotation and session recording.
Idira Privileged Access Management
Privileged access management from the former CyberArk portfolio: vaulting, rotation, just-in-time access and session monitoring.
Privileged Access Management
Gives elevated rights to specific applications only where needed, so users do not need local admin accounts.
WALLIX PAM
Privileged access management with session recording, for IT and OT environments.
Recent stories it addresses
798 stories in total- 13 Nov 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE
PostgreSQL patches 52 flaws, including a 22-year-old bug enabling authenticated RCE.
- 13 Nov 2026Apify Confirms Customer Data Accessed in Cyberattack
Apify confirms customer data accessed in cyberattack via compromised credentials.
- 13 Nov 2026Check Point warns of zero-day flaw exploited for root access
Check Point warns of zero-day flaw exploited for root access.
- 13 Nov 2026Ransomware at the hypervisor layer: how attackers use ESXi and vCenter features for malicious purposes
BlackNevas ransomware group targets VMware ESXi and vCenter, destroying VMs and backups.
- 13 Nov 2026Nightmare Eclipse Drops Windows Zero-Day Exploit ‘SignDrop’
Nightmare Eclipse drops Windows zero-day exploit 'SignDrop' abusing CLFS and Windows Defender.
- 13 Nov 2026Hackers Exploit Check Point Firewall Flaws to Gain Root Access and Deploy Wiper Malware on VMware ESXi
Hackers exploit Check Point firewall flaws, deploy wiper malware on VMware ESXi.
- 13 Nov 2026FBI Says US Seized $1.2 Billion Worth of Cryptocurrency Stolen From Binance
US Seizes $1.2B in Crypto Stolen from Binance; North Korea Blamed for Separate $400M Theft
- 12 Nov 2026Self-hosted Claude Managed Agents keeps agent credentials in your environment
Anthropic releases self-hosted Claude Managed Agents for private beta.
How we list vendors
- A product is listed because it provides the control. Nobody pays to be listed, and on story pages the examples rotate, so no vendor is always first.
- Vendor pages show both the vendor's own research and the incidents involving its products, from our own coverage. We do not leave either out.
- Our summaries are written by us, based on the vendors' own pages. Text in quotation marks or marked "in their own words" is the vendor's own, quoted from its website.
- Logos, product names and quoted text belong to the vendors and are shown to identify them.
- Something wrong? Use "Suggest a correction" on the vendor's page. A product we should look at? Email support@threatnoir.com.