PAM
Privileged Access Management. Controls for accounts and credentials with elevated permissions. Includes credential vaulting, session brokering, session recording, and just-in-time elevation.
PAM programs succeed or fail on adoption rather than features. Vaulting and session brokering work only if the privileged path through the tool is faster than the path around it, and engineers will route around a slow one. The modern direction is to reduce what needs vaulting at all by moving to just-in-time elevation and short-lived credentials, so there is less standing privilege to protect.
See also: what is PAM, just-in-time access, zero standing privileges, PAM vendors
Related on Start with Identity
- GlossaryAPI Key
A static secret string used to authenticate an application or caller to an API. Simple but weak: it does not expire on its own, is easy to leak, and should be v
- GlossaryNon-Human Identity (NHI)
Any identity that is not a person: service accounts, API keys, OAuth tokens, certificates, workloads, and AI agents. NHIs now outnumber human identities in most
- GlossarySecrets Rotation
The practice of regularly changing credentials such as API keys, database passwords, and tokens to limit the window an exposed secret is useful. Dynamic secrets
- RankingBest PAM for DevOps: Top 5 Modern Privileged Access Tools
The best PAM tools for DevOps in 2026: Teleport, StrongDM, HashiCorp Boundary, Apono, and CyberArk. Ranked for short-lived access, infrastructure coverage, and
- RankingBest PAM for Enterprises: Top 5 Privileged Access Platforms
The best enterprise PAM platforms in 2026: CyberArk, BeyondTrust, Delinea, One Identity Safeguard, and WALLIX. Ranked for vaulting, session control, just-in-tim
- RankingBest PAM for Small Business: Top 5 Privileged Access Tools
The best PAM tools for small business in 2026: Keeper Security, Delinea, ManageEngine PAM360, StrongDM, and Teleport. Ranked for ease of deployment, value, and