BeyondTrust - Secure Remote Access and Privileged Access Management

2026 GigaOm Radar for CIEM Names BeyondTrust a Leader and Outperformer

BeyondTrust has been recognized as a Leader and an Outperformer in the 2026 GigaOm Radar for Cloud Infrastructure Entitlement Management (CIEM). We believe this recognition reinforces our commitment to secure every identity across every environment and keep pace with a rapidly changing risk landscape.

What is the GigaOm Radar for CIEM?

The 2026 GigaOm Radar for CIEM evaluated 22 vendors that fit their definition of Cloud Infrastructure Entitlement Management: “specialized security solutions that manage and secure identities and their associated permissions (entitlements) across cloud environments.”

Each evaluated vendor was required to meet several baseline criteria around managing and securing cloud identities and their entitlements, including:

  • Multicloud discovery and visualization

  • Cross-cloud visibility and correlation

  • Real-time monitoring and alerting

  • Permissions rightsizing

  • Guided remediation

  • Reporting and auditing

  • Centralized management console

GigaOm also evaluated solutions based on key features, such as cloud identity threat detection and response, automated least privilege, just-in-time access, automated remediation and rightsizing, and more. Emerging features and business criteria were also considered.

The CIEM Landscape in 2026

The 2026 GigaOm report emphasized just how critical CIEM has become in managing the excessive privileges and “cloud identity debt” seen in many of today’s multicloud environments.

The report noted, “The importance of CIEM has grown substantially as organizations face increasingly dynamic cloud infrastructures where resources are constantly added, modified, or removed. Traditional identity and access management (IAM) systems struggle to keep pace with these rapid changes, creating security gaps and compliance vulnerabilities.​”

In addition to the table stakes features mentioned earlier, the GigaOm report also covered how many of today’s CIEM solutions look to address growing challenges around non-human identity management and cross-domain attack paths. Many CIEM vendors are now focused on incorporating advanced analytics and AI-driven capabilities to keep up with the speed and volume of identities and access in the cloud.

What Differentiates BeyondTrust?

In this year’s CIEM Radar, BeyondTrust was positioned in the Innovation/Platform Play quadrant and ranked as a Leader and Outperformer. The BeyondTrust Pathfinder Platform also received high scores in decision criteria such as:

  • Just-In-Time (JIT) Access: Granting intelligent JIT access based on policies and access request patterns, as well as data from integrations with identity providers, HR systems, ticketing systems, etc.

  • Lifecycle entitlements governance: Automatically provisioning/deprovisioning accounts, right-sizing access when identity drift occurs, and maintaining detailed audit trails.

  • Compliance and identity governance: Continuously monitoring access and evaluating entitlements and policies against benchmarked standards, along with generating immutable audit trails for linking configurations to regulatory requirements.

Giga Om 2026 CIEM Radar Chart
“BeyondTrust is classified as an Outperformer due to industry-first AI agent governance, monthly major capability release (including ML-enhanced analytics and secrets management), and the architectural unification of CIEM with ITDR and PAM.”

—Ivan McPhee, GigaOM Radar for Cloud Infrastructure Management (CIEM). GigaOM. Feb. 25, 2026

The Pathfinder Advantage: Where Identity Security Meets CIEM

We believe that our unified approach to privilege-centric identity security is paramount as identities continue to multiply and access paths tend to cross multiple domains. While CIEM is a key control in understanding who can do what in your cloud and governing access intelligently, it’s only one piece of the puzzle, in our opinion. An attacker who compromises an endpoint, SaaS integration, or system credential can easily pivot into a cloud environment outside of CIEM controls.

This is why we believe that the recognition of BeyondTrust’s Pathfinder Platform as a centralized approach to identity security matters for today’s organizations. Our platform approach unifies our entire product set, providing a one-console approach to privilege-centric identity security, including PAM, CIEM, and ITDR.

To learn more about cross-domain attacks in the cloud, tune into a recent webinar from Phantom Labs™, BeyondTrust’s research team, in which the team demonstrates a real-world attack path involving enterprise AI agents.

CIEM and Beyond with Identity Security Insights and Entitle

Identity Security Insights® and Entitle are the two products within Pathfinder that provide robust CIEM controls, and more. By placing privilege at the center of the risk equation, Identity Security Insights identifies potential attack paths beyond the boundaries of cloud. It is also unique in its ability to provide the attacker's perspective with a view of each identity’s effective privileges (its True Privilege™). Using threat intelligence and proprietary machine learning models, Identity Security Insights offers visibility into the potential privileged pathways of every identity, including across domains. This visualization of privileges and privilege pathways allows security teams to be proactive rather than reactive, safeguarding against compromise across any environment (cloud, SaaS, on-premises, and more).

Complementing this, Entitle automates the provisioning and revocation of cloud access based on risk-scored recommendations, integrating with 100+ apps through a flexible workflow engine. The product eliminates standing access to drastically minimize the threat surface, while ensuring users have exactly the right access, for the moments they need it.

Read the full report to learn more about our recognition in this year’s GigaOm CIEM Radar.

And to gain clear, risk-based visibility into your cloud entitlements and entire identity estate, try our free, award-winning Identity Security Risk Assessment.

"Pathfinder provides a unified interface that integrates CIEM with ITDR and PAM capabilities. Core components include Entitle for cloud permissions automation and Identity Security Insights for cross-domain privilege analysis.”

—Ivan McPhee, 2026 GigaOm Radar for Cloud Infrastructure Entitlement Management (CIEM) Report. Feb 25, 2026.

About the Author
David van Heerden

David van Heerden

Sr Product Marketing Manager

David van Heerden, A general nerd, metalhead, and wannabe film snob, has worked in IT for over 10 years, sharpening his technical skills and developing a knack for turning complex IT and security concepts into clear value oriented topics. At BeyondTrust, he's taken the Sr. Product Marketing Manager role to lead Entitle's marketing strategy.