CyberArk is the market-leading privileged access management (PAM) platform, providing credential vaulting, privileged session management, endpoint privilege management, and secrets management for enterprise security programs.
Directory
Identity, access & authentication tools
Compare IAM, SSO, MFA, CIAM, IGA, PAM, SCIM, and AI agent identity vendors. Filter by company size, deployment model, open source status, pricing, and integrations.
11 vendors
Teleport provides secure, audited access to SSH, Kubernetes, databases, and internal applications using short-lived certificates and RBAC — designed for engineering teams who need infrastructure access without static credentials.
1Password Business provides enterprise password and credential management for teams, with 1Password Secrets Automation extending to CI/CD secrets, developer vaults, and service account credentials.
Akeyless is an established identity security platform delivering secrets management, certificate lifecycle management, encryption/KMS, and secure remote access from a unified SaaS, using patented Distributed Fragments Cryptography (DFC) instead of a self-managed vault. In 2025–2026 it extended the platform to AI-agent identity with ephemeral, task-scoped access.
BeyondTrust is an enterprise PAM platform providing privileged account management, privileged session management, endpoint privilege management, and secure remote access — a leading alternative to CyberArk.
Privileged access management platform (formed from Thycotic and Centrify) covering secret server, privileged session and remote access.
Keeper Security provides enterprise password management, privileged access management (KeeperPAM), and secrets management for DevOps pipelines — with a strong focus on zero-knowledge architecture and compliance.
Identity portfolio spanning IGA (Identity Manager), PAM (Safeguard) and Active Directory management.
P0 Security provides an authorization control plane that discovers users, service accounts, agents, and MCP servers with sensitive access, then enforces just-in-time, short-lived access and centralized policy governance across cloud providers, Kubernetes, databases, and servers. It positions itself as a cloud-native alternative to traditional PAM.
Saviynt is a cloud-native identity governance and administration platform combining IGA, privileged access management, and cloud infrastructure entitlement management (CIEM) in a single platform.
StrongDM provides a proxy-based infrastructure access management platform — without agents on target systems — giving engineering teams secure, audited access to databases, servers, Kubernetes, and internal applications.
Not sure what to pick?
Run the IAM Stack Finder for a guided shortlist tailored to your stack.
