BeyondTrust

Unify identity security, govern AI agents, and secure remote access to help reveal privilege risks and enforce controls across environments.

Reveal identity risks and privilege pathways so teams can prioritize remediation, detect threats, and strengthen least-privilege controls.

Centralize and secure privileged credentials, control access when needed, and monitor sessions to reduce security and compliance risks.

Reduce excessive cloud permissions and IT workload while giving employees secure, timely access to the resources they need.

Reduce endpoint risk and support compliance while giving users the access they need to work without disrupting productivity.

Unify identity management and access controls across Windows, Unix, and Linux while applying consistent security policies and simplifying audits.

Replace static workload secrets with ephemeral, governed credentials and centralized visibility to control and audit workload access across cloud environments.

Implement, optimize, and support BeyondTrust solutions while building product expertise through flexible training and certification options.

Get global, resolution-oriented help troubleshooting product issues, finding workarounds, and escalating problems that require fixes.

BeyondTrust Pathfinder Platform

BeyondTrust Pathfinder is an integrated, privilege-centric identity security platform that unifies PAM, ITDR, Secrets Management, CIEM, and Secure Remote Access. Through a single console, it brings together visibility, intelligence, governance, and controls across human, non-human, workload, and AI identities. The platform helps organizations map paths to privilege, reduce identity exposure, enforce least privilege and just-in-time access, govern AI agents, and secure remote support and privileged access across endpoints, cloud, SaaS, on-premises, and OT environments.

• Unify Identity Security Capabilities
  Bring multiple identity security capabilities together through one platform and console, with shared context across solutions.
• Reveal Identity Risks Across Environments
  Understand identity security across connected environments, helping teams identify unintended privileges and reduce blind spots in their identity attack surface.
• Map Hidden Privilege Pathways
  See how identities and configurations can create routes to elevated privileges, helping teams understand and reduce identity exposure.
• Enforce Least-Privilege Access
  Apply access controls across identity domains, including just-in-time access and removal of standing privileges, to limit access to what is needed and for how long it is needed.
• Control Agent Actions Before They Complete
  Restrict agent access to credentials and files, gate destructive commands, and control MCP and API connections before actions complete.
• Connect Securely Without VPNs
  Provide remote access to critical systems without VPN setups for employees, trusted vendors, and non-human identities.
• Monitor, Record, And Audit Sessions
  Review session activity in real time or afterward, investigate events with recordings and forensic data, and pause or terminate suspicious sessions.
• Support More Devices From Anywhere
  Help desks can support users and systems across platforms and locations with attended or unattended access, including off-network devices.
• Support Devices Without VPNs
  Connect to devices inside or outside the corporate network without VPN complexity, while applying security controls to support sessions.
• Find And Attribute AI Agent Activity
  Discover agents and related tools across endpoints, then trace activity to its source to support investigation and control.
• Govern AI And Non-Human Identities
  Extend identity security controls to AI agents, workloads, and other non-human identities alongside human identities.
• Audit Sessions And Simulate Policies
  Review agent session activity and identify who or what initiated each action. Test policy changes against historical activity before enabling them.
• Prioritize And Remediate Identity Risks
  Turn identity findings into contextual guidance that helps teams understand which issues need attention and how to address them.
• Protect And Inject Privileged Credentials
  Let users connect without knowing or manually entering privileged credentials, which are retrieved and injected according to security parameters.
• Control And Automate Remote Access
  Provision access through rules, restrict users to authorized endpoints and applications, and help reduce unwanted lateral movement.
• Enable Secure Multicloud Access
  Help developers and engineers reach infrastructure, including ephemeral systems across multicloud environments, using familiar tools and API access.
• Record Sessions For Audit And Review
  Use detailed session records, video logs, and reporting to review support activity and provide audit documentation.
• Require Approval For High-Risk Actions
  Keep human approval in the decision process for high-risk actions, including when agents operate autonomously or native guardrails are disabled.
• Govern Agents Across Vendors
  Apply defined policies across supported agent tools and internal models, with automatic support for new models reducing policy maintenance.
• Guide Agents Toward Approved Task Paths
  Start with prebuilt templates, customize policies, and steer agents toward secure paths for task completion while applying defined controls.
• Analyze Identity Data With AI
  Use reporting and AI analysis capabilities to examine identity information and support a clearer understanding of identity risks.
• Detect And Respond To Identity Threats
  Identify anomalous activity and identity risks, then use integrated controls to reduce exposure and respond to threats.
• Connect Security Tools And Workflows
  Integrate with existing platforms and tools to support shared visibility, coordinated security workflows, and incident response.
• Use Flexible Tools And Authentication
  Connect through familiar tools and multiple consoles using supported protocols and authentication methods.
• Simplify Vendor Onboarding
  Delegate vendor-user management and apply group policies to reduce manual administration and eliminate shared accounts.
• Enable Unattended Access At Scale
  Deploy Jump Clients in bulk and use just-in-time access to support systems without a user present.
• Monitor And Coordinate Support Teams
  See team and session status, identify representative availability, manage session distribution, and transfer or take over support sessions.
• Manage And Inject Service Desk Credentials
  Centralize credential discovery and management, with storage, rotation, and injection capabilities for service desk use.
• Scale And Connect Support Workflows
  Use deployment tools, integrations, and an open API to support a growing infrastructure and connect service desk workflows.
• Review Identity Risks With Reports
  Analyze important accounts, access, policy gaps, and trends using preconfigured identity security reports.
• Get Actionable Findings Quickly
  Use native connectors to begin assessing identity risks rapidly, with initial findings and context available within a day.
• Customize The Support Experience
  Adapt the URL, client, portals, invitations, watermarks, and surveys to the organization's deployment.

Identity Security Insights

Identity Security Insights is a cloud-native identity visibility and intelligence platform that continuously assesses identity security posture across endpoints, servers, cloud services, DevOps systems, identity providers, and more. It brings together identity data to show effective privileges and hidden escalation paths, detect anomalous activity and identity-based threats, and provide context-rich recommendations for remediation. With integrations, prebuilt reporting, and integrated PAM controls such as just-in-time access, teams can investigate risks and apply least-privilege controls across human, non-human, and AI identities.

• Reveal Identity Risks Across Connected Environments
  Give teams an ongoing view of identities and potential risks across their environment, helping expose unintended privileges and pathways before they contribute to an incident.
• Map Hidden Paths To Privilege
  Show how identity connections and configurations can create multi-step routes to elevated access, helping teams understand exploitable pathways.
• Detect Identity Threats And Privilege Abuse
  Surface suspicious activity and identity-based threats, helping teams identify potential attacks and understand the impact of compromised identities.
• Prioritize And Remediate Identity Risks
  Turn findings into clear, contextual guidance so teams can understand which issues need attention and take steps to improve identity security posture.
• View Identity Posture In One Place
  Consolidate identity security information into a single interface to assess access, risks, and potential threats.
• Connect Findings To Security Workflows
  Bring identity findings into security and incident response tools to support correlation, context gathering, and response workflows.
• Enforce Least Privilege With PAM Controls
  Connect identity risk insights to privileged access controls, helping organizations limit excessive access and apply just-in-time access.
• Analyze Identity Risks With Ready-Made Reports
  Review important identity accounts, access, policy gaps, and trends using preconfigured reports.
• Get Actionable Findings Quickly
  Begin assessing identity risks rapidly using native connectors, with initial findings and supporting context available within a day.

Password Safe

Password Safe combines privileged account and session management with secrets management to discover, vault, and manage privileged credentials for people, machines, and AI agents. It manages privileged passwords, DevOps secrets, SSH keys, certificates, API keys, and tokens, and provides just-in-time access controls and real-time privileged session monitoring. Workforce Passwords extends management and audit support to employee passwords for business applications. The product integrates with IAM, SIEM, RPA, ITSM, and other enterprise platforms, and can be deployed in the cloud or as a virtual or physical appliance.

• Secure And Rotate Privileged Credentials
  Vault privileged credentials and automate password rotation to help protect sensitive access credentials.
• Monitor And Control Privileged Sessions
  Provide visibility into privileged session activity and tools to document suspicious behavior and lock or terminate sessions.
• Discover And Onboard Privileged Assets
  Find applications, assets, and privileged accounts, then automate onboarding to bring systems and credentials under secure management.
• Protect DevOps Secrets
  Control access to secrets used in DevOps tools, workflows, and CI/CD processes, with auditing for visibility and accountability.
• Grant Contextual Just-In-Time Access
  Help ensure users, machines, and AI agents receive access when needed, using contextual information to support least-privilege controls.
• Eliminate Hard-Coded Credentials
  Help remove credentials embedded in scripts, files, and code, while REST APIs support defined and automated access control.
• Integrate Enterprise Security Tools
  Connect with enterprise platforms to coordinate privileged access management and support identity, security, automation, and IT service workflows.
• Simplify Auditing And Compliance
  Support compliance and investigations through searchable audit information, session reports, and analytics on privileged credentials and DevOps secrets.
• Broker And Monitor Privileged Access
  Mediate access to enclave resources through a gateway while monitoring session activity across locations.
• Manage Employee Business Passwords
  Give IT visibility and control over employee passwords for business applications and provide activity reporting for audits.
• Automate Repetitive Privileged Tasks
  Reduce manual work by automating repetitive tasks and organizing them with smart groups and reporting.
• Deploy Across Enterprise Environments
  Choose cloud, virtual appliance, or physical appliance deployment options.

Entitle

Entitle automates cloud permissions management for cloud infrastructure and SaaS, providing granular just-in-time access without creating IT bottlenecks. It supports self-service access requests, approvals, permission bundling, and automated provisioning. Teams can discover entitlements, apply policy-based controls, automate access reviews and compliance reporting, and maintain audit trails of user activity and requests. Integrations with collaboration tools, cloud resources, on-call tools, and SIEM systems help connect access workflows with existing operations.

• Grant Temporary, Granular Access
  Give employees only the permissions they need, when they need them, and automatically revoke access based on defined conditions.
• Request Access Through Existing Tools
  Allow employees to request access through familiar collaboration and ticketing tools, with approval and provisioning workflows that reduce manual handling.
• Enforce Least-Privilege Access
  Apply policy-based controls to right-size access and help prevent users and AI tools from receiving excessive permissions.
• Revoke Access Automatically
  End temporary permissions when their defined duration or triggering condition is met, reducing the time access remains elevated.
• Automate Reviews And Generate Reports
  Replace manual review processes with automatically collected evidence and reports to help teams review entitlements and complete compliance reporting.
• Discover Hidden Permissions
  Find permissions across accounts and resources in a centralized view, helping identify entitlements that might otherwise go unnoticed.
• Automate Risk-Based Approvals
  Configure approval steps and risk-based provisioning while retaining human review for sensitive resources.
• Track User Activity And Requests
  Review recorded user activity and request history through an audit trail that supports compliance work and investigations.
• Connect Access Workflows Across Tools
  Use integrations with existing collaboration, on-call, cloud, and SaaS tools to connect access management with operational workflows.
• Bundle Permissions Into One Request
  Let users request multiple required permissions together across different resources.
• Create Temporary SSH Keys And Secrets
  Provide temporary credentials and accounts for non-federated systems with only the permissions required.
• Provide Emergency JIT Access
  Connect on-call workflows with automated approvals and temporary provisioning so engineers can obtain needed permissions during emergencies.
• Detect Elevated Access Events
  Send access events into security monitoring workflows to support timely detection and response to unusual or elevated privileges.
• Visualize Permission Structures
  Make users, identities, integrations, resources, and roles easier to view and understand across complex access environments.
• Customize Access Management At Scale
  Use REST APIs and the Terraform Provider to tailor Entitle and support access management at scale.
• Operationalize JIT Access Quickly
  Use streamlined setup to put JIT access management into operation quickly.

Endpoint Privilege Management

BeyondTrust Endpoint Privilege Management dynamically enforces least privilege across Windows, macOS, and Linux endpoints, removing local administrator rights and managing root access. It grants privileges only for the task, command, or application that needs them and supports application control to block malicious scripts, infected attachments, and unauthorized executables. Centralized policy management, file integrity monitoring, reporting, and a secure audit trail support compliance and investigation. The product also provides prebuilt policy templates, integrations with tools such as ServiceNow and SIEM platforms, and flexible user experiences designed to protect endpoints without disrupting productivity.

• Limit Standing Privileges
  Reduce risk from excessive endpoint permissions by providing only the access needed for a task, command, or application.
• Grant Access When Needed
  Provide temporary, task-specific privileges while reducing exposure from persistent administrator or root access.
• Block Unauthorized Applications
  Restrict software execution to applications permitted by policy, helping protect endpoints from malware and other threats.
• Document Privileged Activity
  Provide a centrally accessible record of privileged activity to support investigations and demonstrate adherence to requirements.
• Protect Multiple Endpoint Platforms
  Apply endpoint privilege controls across supported desktop and server environments, on-premises or in the cloud.
• Monitor Endpoint Activity
  Review activity through customizable dashboards and reports to inform security oversight and assess the end-user experience.
• Manage Policies And Monitor File Integrity
  Apply and manage endpoint controls centrally while tracking file integrity and supporting real-time oversight.
• Connect Security Workflows
  Connect endpoint privilege management with service management, security monitoring, threat intelligence, authentication, and identity tools.
• Accelerate Policy Deployment
  Start with prebuilt templates based on deployment experience to implement policies and reduce risk more quickly.
• Tailor User Access Experiences
  Adapt experiences for different user types and AI-powered tools while maintaining privilege controls.

Active Directory (AD) Bridge

Active Directory (AD) Bridge extends Microsoft Active Directory authentication, single sign-on, and Group Policy configuration management to Unix and Linux systems. It provides centralized identity and access management across Windows and non-Windows environments, supports real-time auditing and reporting, and enables organizations to apply consistent security policies across heterogeneous systems. AD Bridge connects Unix and Linux clients to Active Directory, using LDAP to find accounts and Kerberos to authenticate users. Its integrations include Entra ID, Elasticsearch, Samba, Apache, and Network File Sharing.

• Unify Authentication Across Systems
  Use Active Directory credentials to authenticate users on Unix and Linux systems, extending familiar AD authentication beyond Windows.
• Apply Policies Across Platforms
  Manage configuration centrally and apply consistent policy settings across Windows, Unix, and Linux environments.
• Reduce Repeated Credential Entry
  Let users transition between desktops, remote machines, and systems without entering credentials again.
• Control Access To Non-Windows Systems
  Set which users can log on to specific non-Windows systems through Active Directory and policy.
• Centralize Audits And Reports
  Give compliance teams access to audit details and centralized reports, with event data available for storage in supported databases.
• Consolidate Identity Directories
  Replace multiple authentication mechanisms and directories with a single AD-based identity infrastructure.
• Manage Identities Centrally
  Use a centralized toolset to manage digital identities across Windows, Unix, and Linux.
• Connect Unix And Linux Platforms
  Extend Active Directory identity and access management to supported Unix and Linux systems.
• Map Identities To Endpoints
  Create identity mappings for Unix and Linux endpoints in Active Directory and apply them according to computer-object location.
• Deploy Without Schema Changes
  Enable cross-platform identity and access management with a schema-less deployment.
• Extend File-Sharing Capabilities
  Extend file-sharing capabilities to non-Windows systems as part of Unix and Linux security.
• Connect Existing Technology Solutions
  Integrate with identity, search, file-sharing, and web-server technologies to support existing workflows.

Workload Credentials

Workload Credentials is a fully managed SaaS product that uses OIDC identity federation to issue short-lived, auto-expiring credentials to workloads. It provides centralized policy, access governance, and auditing across workflows, repositories, clusters, and cloud accounts. Version-controlled, deny-by-default policies govern access, while a secrets store secures secrets that must be retained.

• Eliminate Stored Workload Secrets
  Allow workloads to authenticate with their own identities without storing long-lived credentials that could be leaked or lost.
• Replace Long-Lived Cloud Credentials
  Provide credentials on demand and automatically expire them shortly afterward, reducing reliance on static cloud credentials.
• Enforce Explicit Workload Access Policies
  Use version-controlled, deny-by-default policies to govern workload access consistently across workflows, clusters, and cloud accounts.
• Audit Every Credential Issuance
  Review credential issuance details, including identity, claims, time to live, and target role, and export the audit trail as structured JSON.
• Reveal Cross-Account Workload Access
  Query workload access across accounts and gain visibility into trust relationships.
• Authenticate GitHub Actions Workflows
  Use GitHub's native identity to authenticate workflows and securely retrieve the credentials they need.
• Reduce Credential Platform Operations
  Offload infrastructure and maintenance responsibilities to the managed SaaS platform, without customer-managed servers, clusters, or agents.
• Secure Retained Secrets
  Manage and audit secrets that cannot be replaced with ephemeral credentials while maintaining version history and traceability.
• Integrate With Terraform Toolchains
  Use a Terraform-native approach to incorporate credential governance into existing infrastructure-as-code workflows.

Professional services and training

BeyondTrust provides services to help customers implement, migrate, integrate, and optimize its solutions. Offerings include product-specific implementation services, cloud migration, integrations and reporting, and health checks to identify opportunities to improve security and usability. Training options include self-paced online courses, instructor-led virtual or on-site sessions, hands-on labs, workshops, and certification. Technical account management provides expert guidance and support for the ongoing operation of customer investments.

• Launch Successful Product Deployments
  Leverage BeyondTrust expertise for implementations across multiple BeyondTrust solutions.
• Build Product Skills Through Flexible Training
  Choose self-paced courses, blended learning, or instructor-led sessions. Virtual and on-site options, labs, workshops, and role-based courses support different learning needs.
• Get Proactive Expert Guidance And Support
  Partner with a technical account manager for proactive support and ongoing operations, with service tiers offering different levels of expertise and assistance.
• Move Deployments To BeyondTrust Cloud
  Migrate Remote Support and Privileged Remote Access deployments to BeyondTrust Cloud.
• Identify Security And Usability Improvements
  Review deployments to uncover opportunities to improve security and usability in response to changing business needs.
• Extend Deployments With Integrations And Reporting
  Add integrations and reporting to Remote Support or Privileged Remote Access deployments.
• Validate Expertise With Product Certifications
  Demonstrate product knowledge and professional achievement through industry-recognized certification exams.

Technical Support

BeyondTrust provides global technical support for covered products, focused on troubleshooting and resolving product issues. Services include online, email, and phone access to trained support staff, workaround assistance, an extensive online knowledge base, and new releases and maintenance updates. Support cases are handled by staff located around the globe, with an escalation path to Engineering for issues requiring product fixes. AI-generated response suggestions and a Customer Portal chat assistant help address common questions alongside trained Technical Support Engineers. A valid maintenance contract is required for support on the relevant product.

• Resolve Product Issues And Find Workarounds
  Get help diagnosing and resolving product issues, including workaround guidance, with support prioritizing production environments.
• Reach Support Through Multiple Channels
  Contact the Technical Support Team online, by email, or by phone, with cases handled by trained staff located around the globe.
• Escalate Issues Requiring Product Fixes
  Issues that require product fixes can follow a defined escalation path from Technical Support to Engineering.
• Find Answers In The Online Knowledge Base
  Use the online knowledge base to find information and try to diagnose or resolve an issue before contacting Technical Support.
• Get Faster Answers To Common Questions
  AI-generated response suggestions and the Customer Portal chat assistant help address common questions, while trained Technical Support Engineers continue to provide support.
• Access Product Releases And Updates
  Receive new releases and maintenance updates for the relevant product when it is covered by a valid maintenance contract.
• Receive Support For Covered Products
  A valid maintenance contract establishes eligibility to receive Technical Support for the product it covers.