What BeyondTrust does

BeyondTrust is a privately held, PE-backed cybersecurity company headquartered in Johns Creek (Atlanta), Georgia, that sells a unified, privilege-centric identity security platform to enterprise customers globally. The company is reported to have more than 1,500 employees and a customer base of more than 20,000 organizations including 75 of the Fortune 100, operating across financial services, healthcare, government, manufacturing, education, and law enforcement. It was founded in 1999 under the Bomgar name and rebranded to BeyondTrust in 2017; Clearlake Capital provided private equity backing in June 2021. CEO Janine Seebeck leads the company.

The core product is the BeyondTrust Pathfinder Platform, a single console that integrates Privileged Access Management (PAM), Identity Threat Detection and Response (ITDR), Cloud Infrastructure Entitlement Management (CIEM) — acquired via the April 2024 acquisition of Entitle — Enterprise Secrets Management, and Secure Remote Access, covering human, non-human, and AI agent identities across endpoints, cloud, SaaS, on-premises identity infrastructure, OT, and workloads. Proprietary capabilities include the True Privilege Graph for AI-powered attack-path visualization and the Identity Security Risk Assessment (ISRA), a complimentary five-pillar diagnostic delivered within 24 hours and mapped to NIST 800-53 and MITRE ATT&CK. Modular components offered individually or as a suite include Identity Security Insights, Password Safe, Privileged Remote Access, Endpoint Privilege Management, Entitle, Remote Support, Active Directory Bridge, and Total PASM. In 2026 the company extended the platform with an AI Agent Security module that governs agentic identities across Claude Code, Microsoft Copilot, Cursor, OpenAI Codex, AWS Bedrock, Azure Copilot, Salesforce Agentforce, and ServiceNow AI agents, and was selected for Anthropic's Project Glasswing initiative.

BeyondTrust generates revenue primarily through subscription and recurring licensing across its platform and individual products, with quote-based annual enterprise pricing distributed via three channels: a direct enterprise field-sales organization, the PartnerTrust network of more than 1,000 channel partners worldwide, and a bundled AWS Marketplace listing co-developed with Ping Identity. It maintains FedRAMP Moderate authorization for Identity Security Insights for Government, a global office footprint (US, Canada, UK, France, Germany, UAE, Israel, Singapore, Australia) with India expansion launched in May 2026, and recurring analyst recognition including seven consecutive years as a Gartner Magic Quadrant Leader for PAM, a Forrester Wave Leader position for Privileged Identity Management in Q3 2025, and six consecutive years as an Overall Leader in the KuppingerCole Leadership Compass for PAM.

Name

BeyondTrust

Legal name

BeyondTrust Corporation

Website

https://beyondtrust.com

Company type

Private

Founded year

1999

Operating status

Operating

Headcount range

1,001–5,000 employees

Short description

BeyondTrust is a privately held cybersecurity company providing the unified Pathfinder Platform for privileged access management, ITDR, CIEM, secrets management, and AI-agent governance, serving 20,000+ enterprise customers including 75 of the Fortune 100 globally.

Ownership category

akta.pro rank

Product category

Privileged Access Management (Identity Security)

NAICS

Software Publishers (5132)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Privileged Access Management (PAM) (HDAEAJAD)

akta.pro secondary industries

Secrets Management & Machine Identity (API keys, certificates, workload identity) (HDAEAJAJ), Identity & Access Security Services (IAM, PAM, Zero Trust) (BPAKAHAI)

Keywords

• Privileged access management
• Identity security
• Endpoint privilege management
• Secrets management
• Zero trust access

Headquarters

HQ city

Atlanta

HQ country

United States

HQ region

North America

Offices12 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Subscription / Recurring Licensing: BeyondTrust operates primarily on a subscription and recurring licensing model for its Pathfinder Platform and its component products (Identity Security Insights, Password Safe, Privileged Remote Access, Endpoint Privilege Management, Entitle, Remote Support, Active Directory Bridge). Customers can purchase individual products or bundled suites (e.g., Total PASM). The subscription model supports enterprise field sales, channel partner sales, and marketplace distribution, generating recurring annual revenue from a base of 20,000+ customers.

Pricing tiers

Go-to-market motion3 records

Distribution channels4 records

Marketing channels9 records

Core offering

BeyondTrust sells the Pathfinder Platform, a unified identity security platform that combines Privileged Access Management (PAM), Identity Threat Detection and Response (ITDR), Cloud Infrastructure Entitlement Management (CIEM), Secrets Management, and Secure Remote Access to secure human, non-human, and AI agent identities across endpoints, cloud, SaaS, on-premises, and OT environments. Customers can purchase individual modules such as Identity Security Insights, Password Safe, Privileged Remote Access, Endpoint Privilege Management, Entitle, Remote Support, and Active Directory Bridge, or subscribe to bundled suites including Total PASM, on an annual subscription basis.

Product overview

BeyondTrust offers a unified platform architecture called the Pathfinder Platform that integrates Privileged Access Management (PAM), Identity Threat Detection and Response (ITDR), Cloud Infrastructure Entitlement Management (CIEM), Secrets Management, and Secure Remote Access capabilities. The platform is designed to secure human, machine, and AI agent identities across hybrid, multicloud, and SaaS environments. Individual modules including Identity Security Insights (AI-powered analytics), Password Safe (privileged credentials management), Privileged Remote Access (zero trust access), Endpoint Privilege Management (endpoint least privilege), Entitle (cloud permissions management), Total PASM (session management bundle), Remote Support (help desk remote access), and Active Directory Bridge (Unix/Linux AD integration) can be deployed individually or as an integrated suite from a single console.

Differentiator

Problem solved

Functional benefit

Brands

• BeyondTrust Pathfinder Platform: Unified platform integrating PAM, ITDR, Secrets Management, CIEM, and Secure Remote Access capabilities
• Identity Security Insights
• Password Safe
• Privileged Remote Access
• Endpoint Privilege Management
• Remote Support
• Entitle
• Active Directory Bridge
• True Privilege Graph
• PathfinderAI

Products and services

• BeyondTrust Pathfinder Platform BeyondTrust's unified platform that integrates Privileged Access Management (PAM), Identity Threat Detection and Response (ITDR), Cloud Infrastructure Entitlement Management (CIEM), Secrets Management, and Secure Remote Access into a single console for managing identity security across human, non-human, and AI agent identities. Sold as a platform subscription to enterprise customers.
• Identity Security Insights AI-powered identity security visibility and analytics platform providing holistic visibility into human, non-human, and AI identities, detecting anomalous activity and compromised credentials in real time with actionable risk ratings and recommendations. Built on the True Privilege Graph.
• Password Safe Privileged password and secrets management solution that discovers, vaults, and manages privileged credentials for human and non-human identities with just-in-time access, adaptive controls, session monitoring, and recording. Integrates with DevOps tools for secrets management.
• Privileged Remote Access Zero trust remote access solution providing automated, rule-based access provisioning without VPN, enabling secure connection of employees, contractors, and vendors to critical systems with patented session monitoring and real-time pause or terminate capabilities.
• Endpoint Privilege Management Least privilege security solution for endpoints that grants privileges only as needed, blocking malicious scripts, infected attachments, and unauthorized executables while maintaining seamless productivity.
• Entitle Cloud permissions management solution acquired by BeyondTrust in April 2024 that automates just-in-time access controls for cloud entitlements across AWS, Azure, and Google Cloud, with self-service access requests, permission bundling, and 100+ integrations.
• Total PASM Bundled Privileged Access and Session Management suite combining privilege management and session security capabilities for comprehensive endpoint and access control.
• Remote Support Remote support solution enabling help desk teams to fix any device on any platform without VPN, providing attended and unattended access with enterprise-grade security features, session monitoring, and least privilege controls.
• Active Directory Bridge Solution extending Microsoft Active Directory's Kerberos authentication and single sign-on to Unix and Linux environments, enabling AD-credential login and extending Group Policy to non-Windows systems.
• AI Agent Security Module for the Pathfinder platform that controls and secures AI coworkers and autonomous agents on endpoints, applying least-privilege principles to AI tools including Claude Code, Microsoft Copilot, Cursor, and OpenAI Codex. Currently in private beta.

Named customers17 records

Segments7 records

Ideal customer profiles7 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration12 records

AI capability7 records

Feature10 records

Partnerships

Eight partnerships are on record, tiered core and minor.

• AnthropiccoreStrategic or Co-development Partner · 8 June 2026BeyondTrust was selected to join Project Glasswing, Anthropic's collaborative initiative to secure critical digital infrastructure. BeyondTrust gains access to Claude Mythos Preview AI model to identify vulnerabilities across its products, strengthening cybersecurity defenses against AI-driven threats. This places BeyondTrust among vendors whose codebases maintain critical digital infrastructure across global commerce, government, healthcare, and essential services.
• Ping IdentitycoreStrategic or Co-development Partner · 9 December 2025BeyondTrust and Ping Identity announced a strategic partnership to deliver a unified identity security solution integrating PAM, IAM, and IGA into a single AI-driven framework. The combined offering automates access decisions across human and non-human identities, enabling organizations to strengthen Zero Trust initiatives, streamline governance, and secure AI agents. The joint solution is available through designated integration partners and the AWS Marketplace.
• AWS MarketplacecoreChannel Partner/ Reseller/ Distributor · 3 December 2025BeyondTrust and Ping Identity launched a unified identity security solution as a bundled package on AWS Marketplace, allowing customers to purchase and manage the entire suite through consolidated AWS billing. The joint offering addresses fragmented identity systems across hybrid and multi-cloud environments, supporting just-in-time least privilege access and Zero Trust models.
• ServiceNowcoreTechnology or Integration · 9 September 2025BeyondTrust maintains deep integrations with ServiceNow ITSM and CSM platforms, enabling customers to centralize and improve support workflows. The integration allows privileged access management capabilities to be embedded within ServiceNow workflows, streamlining IT service desk operations and security governance.
• AWScoreTechnology or IntegrationAWS is featured as a key technology alliance partner. BeyondTrust integrates with AWS cloud environments and the BeyondTrust + Ping Identity unified solution is available through AWS Marketplace. BeyondTrust supports AWS environments as part of its CIEM and cloud security capabilities.
• MicrosoftcoreTechnology or IntegrationBeyondTrust integrates with Microsoft environments including Azure, Entra ID, Microsoft Defender for Identity, and Office. BeyondTrust's research on Microsoft vulnerabilities (annual Microsoft Vulnerabilities Report) and its AI agent governance coverage for Azure Copilot demonstrates deep Microsoft interoperability.
• CyberIAMminorChannel Partner/ Reseller/ DistributorCyberIAM, a leading global IAM and PAM services provider, is a BeyondTrust channel partner. CyberIAM values its relationship with BeyondTrust for delivering identity and PAM services, and is excited about the partnership's future.
• DotNetminorChannel Partner/ Reseller/ DistributorDotNet is a BeyondTrust channel partner in the ANZ region. The partnership is described as long-standing, built on trust and integrity, with BeyondTrust providing a leading vision, strategy, and product portfolio that empowers partners.

Scale indicators6 records

Recent moves9 records

Expansion highlights7 records

Broad incumbents

• Okta: Workforce identity and access management incumbent that competes with BeyondTrust in SSO/federation, lifecycle management, and increasingly in privileged access through Okta Privileged Access. Much broader portfolio than BeyondTrust but overlapping significantly in the identity security narrative.
• Microsoft (Entra ID): Microsoft Entra ID (formerly Azure AD) and Entra ID Privileged Identity Management (PIM) ship with E3/E5 licensing and represent the most consequential competitive threat. Competes across SSO, identity governance, and basic PAM within every Microsoft-centric enterprise that BeyondTrust sells into.
• SailPoint: Leading identity governance and administration (IGA) vendor that increasingly intersects with PAM through SailPoint Identity Security Cloud. Competes with BeyondTrust's identity governance and lifecycle provisioning capabilities and is now part of the broader identity security platform conversation.

Emerging players

• Akeyless: Cloud-native secrets management and zero-trust access platform competing with BeyondTrust's Password Safe and Privileged Remote Access. Targets developer and DevOps buyers with SaaS-delivered vaulting and just-in-time credentials for machine identities.
• Saviynt: Cloud-native IGA and privileged access management vendor that has rapidly expanded into converged identity security. Overlaps with BeyondTrust in cloud entitlements management (CIEM), privileged access, and identity threat detection for large enterprises undergoing identity stack modernization.
• Sonrai Security: Specialist CIEM vendor focused on cloud identity, entitlement, and privilege risk across AWS, Azure, and GCP. Directly comparable to BeyondTrust's Entitle product and relevant to the broader CIEM category where GigaOm named BeyondTrust a Leader and Outperformer in 2026.

Direct peers

• Delinea: Formed from the merger of Thycotic and Centrify, Delinea is a direct PAM competitor focused on privileged account, session, and credential management for mid-market and enterprise customers. Competes with BeyondTrust across Password Safe, Privileged Remote Access, and Endpoint Privilege Management categories.
• One Identity (Quest Software): Quest's One Identity portfolio offers PAM (One Identity Safeguard), IGA, and AD bridging — directly overlapping with BeyondTrust's Password Safe, AD Bridge, and Identity Security Insights. A long-standing pure-play identity security competitor serving similar enterprise and regulated-vertical customers.
• CyberArk: The largest pure-play Privileged Access Management vendor and BeyondTrust's most direct competitor. Both companies compete head-to-head in enterprise PAM and have been consistently named Leaders in the Gartner Magic Quadrant for PAM for multiple consecutive years.
• HashiCorp: Competes most directly with BeyondTrust's Secrets Management and CIEM capabilities via HashiCorp Vault and Boundary. Both vendors target developer and platform engineering teams managing secrets, dynamic credentials, and just-in-time access across hybrid cloud environments.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks5 records

Key highlights7 records

Customer concentration

• Xx.com/BeyondTrust
• Facebookfacebook.com/BeyondTrust
• LinkedInlinkedin.com/company/beyondtrust

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles14 records

Funding overview

Funding rounds3 records

Investors4 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A4 records

Investments2 records

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about BeyondTrust