What Balabit does

Balabit, founded in 2000 and headquartered in Budapest, Hungary, is a cybersecurity software vendor whose core offering is Privileged Access Management (PAM) and Log Management. After its 2018 acquisition by One Identity (a Quest Software business), Balabit's PAM technology — most visibly the Safeguard suite for privileged passwords, sessions, analytics, and remote access — has been integrated into One Identity's broader identity-centric security portfolio. The combined platform also includes Identity Manager (IGA), Active Roles (AD management), OneLogin (workforce identity), Password Manager, Defender (MFA), Starling Connect (cloud identity connectors), and Syslog-ng-based log management products, with AI-driven predictive insights and behavior-driven governance positioned as native (not add-on) capabilities. The platform is sold primarily to enterprise organizations and public-sector/government buyers via direct enterprise sales, with supplementary global channel partners, MSPs, and self-service free trials for selected products.

Under the hood, the portfolio architecture follows the "One Identity fabric" approach: previously siloed identity and access tools (PAM, IGA, AD management, MFA, workforce SSO, log collection) are stitched together through shared identity governance and integrations such as Starling Connect. Core technical components include automated privileged password vaulting and rotation, session recording and monitoring, remote access proxies, behavior analytics over access usage, AD/Entra ID management, and centralized log collection via appliances, software, and an open-source variant. Differentiators cited by the company include out-of-the-box AI predictive insights and behavior-driven enforcement of least privilege, though the underlying AI is presented as a product feature rather than as a proprietary model.

The commercial model is enterprise-direct with global channel leverage: pricing is not publicly disclosed and requires sales engagement, free trials are offered for selected products to drive mid-funnel evaluation, and a partner portal plus MSP program extend reach. Geographic coverage explicitly spans the United States, Brazil, France, Germany, Mexico, and Japan, with the Budapest site continuing to host engineering and product roles for the Balabit-origin stack. Balabit itself is no longer reported on a standalone basis, so revenue and headcount figures are subsumed within One Identity.

Name

Balabit

Legal name

One Identity LLC

Website

https://career.balabit.com

Company type

Private

Founded year

2000

Operating status

Operating

Headcount range

1–10 employees

Short description

Balabit, a One Identity business since 2018, provides Privileged Access Management and Log Management software built around its Safeguard suite and Behavior Driven Governance, sold to enterprise and public-sector customers worldwide through direct sales and channel partners.

Ownership category

akta.pro rank

Product category

Identity and Access Management Software

akta.pro primary industry

Secrets Management & Credential Vaulting (HDADAAAJ)

Keywords

• Privileged access management
• Identity governance administration
• Log management software
• Active directory security
• Enterprise identity security

Headquarters

HQ city

Budapest

HQ country

Hungary

HQ region

Europe

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Distribution channels3 records

Marketing channels5 records

Core offering

Balabit (a One Identity business) provides identity-centric cybersecurity software — Privileged Access Management (Safeguard suite for passwords, sessions, analytics, and remote access), Identity Governance and Administration (Identity Manager), Access Management (OneLogin, Password Manager, Defender), Active Directory management (Active Roles), and Log Management products. The portfolio is sold to enterprise and public-sector customers to secure privileged accounts, govern access rights, and centralize log collection.

Product overview

One Identity offers an identity-centric cybersecurity platform that unifies previously siloed identity tools through the One Identity fabric. The portfolio includes Privileged Access Management (with Safeguard suite for privileged passwords, sessions, analytics, and remote access), Identity Governance and Administration (Identity Manager with On Demand and Starling Edition variants, Data Governance, Starling Connect), Access Management (OneLogin Workforce Identity, Password Manager, Defender), Active Directory Management (Active Roles), and Log Management (Appliance, Software, and Open Source). The platform embeds AI natively to deliver predictive insights and supports behavior-driven governance.

Differentiator

Problem solved

Functional benefit

Brands

• Safeguard: Privileged access management solution for securing, controlling, and monitoring privileged accounts and sessions.
• Password Manager
• Defender
• Identity Manager
• Active Roles
• Starling Connect

Products and services

• Safeguard (Privileged Access Management suite) Enterprise-grade privileged access management suite covering password management, session recording, privileged analytics, and remote access for securing and monitoring privileged accounts.
• Identity Manager Identity governance and administration platform for managing user identities, access rights, and compliance across the enterprise, with cloud-hosted and data governance variants.
• Active Roles Active Directory management and security solution for Microsoft identity infrastructure (AD/Entra ID).
• Password Manager Enterprise password management solution for secure credential storage and sharing.
• Defender Multi-factor authentication solution for securing user access.
• OneLogin Workforce Identity Workforce identity and access management platform for enterprise single sign-on and authentication.
• Starling Connect Cloud-based identity connector service for integrating various applications and services into the One Identity fabric.
• Log Management Appliance Hardware appliance for centralized log collection, storage, and management across the enterprise.
• Log Management Software Software solution for enterprise log management and analysis.
• Open Source Log Management Open source log management solution for organizations preferring open-source tools.

Segments2 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability1 record

Feature6 records

Recent moves5 records

Expansion highlights4 records

Direct peers

• BeyondTrust: Direct competitor in the Privileged Access Management space offering privileged password, session, and remote access management. Targets the same enterprise/government customer segments as Balabit.
• Okta: Workforce identity and access management leader. Competes with OneLogin Workforce Identity and Defender in SSO, MFA, and adaptive authentication for enterprise buyers.
• Delinea: Formed from the merger of Thycotic and Centrify, Delinea is a direct PAM competitor offering privileged password vaulting and session management, overlapping closely with Safeguard for Privileged Passwords and Sessions.
• CyberArk: Pure-play leader in Privileged Access Management. Directly competes with Balabit's Safeguard suite in PAM for passwords, sessions, and analytics, serving the same enterprise and regulated-industry buyers.
• SailPoint: Identity Governance and Administration leader directly competing with One Identity's Identity Manager in access certifications, provisioning, and governance for large enterprises.
• OneLogin: Workforce identity/SAML SSO platform now part of the One Identity family. Listed as a product under One Identity but historically a direct SSO/IAM competitor; included as a peer given its prior independent positioning in the same category.

Broad incumbents

• ManageEngine (Zoho): Broad IT management vendor offering PAM, IAM, and Active Directory management capabilities. Competes with Balabit across multiple product lines at typically lower price points for mid-market and cost-sensitive enterprise buyers.
• Microsoft (Entra ID / Active Directory): Broad incumbent whose Entra ID, Azure AD, and AD extensions serve as the default identity foundation that Balabit's Active Roles and broader IAM portfolio integrate with and compete against in adjacent governance/PAM tiers.

Emerging players

• HashiCorp Vault: Cloud- and DevOps-focused secrets management platform that competes with password vaulting/credential management portions of Safeguard for Privileged Passwords in modern infrastructure environments.
• Saviynt: Cloud-native IGA platform competing with Identity Manager On Demand Starling Edition, particularly for enterprises modernizing identity governance to a SaaS delivery model.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xx.com/balabit
• Facebookfacebook.com/BalaBit
• LinkedInlinkedin.com/company/balabit-it-security

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Funding overview

Funding rounds1 record

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Balabit