CISO Tribune

Vendor comparison · 2 companies

BeyondTrust vs Permiso

BeyondTrust sells privileged access management and identity security solutions, and says it discovers, onboards, secures, and right-sizes privileges across an enterprise. Permiso's Universal Identity Graph connects every identity to the credentials it owns, the machines it creates, the agents it runs and every action it takes in real time. CISO Tribune files both under Non-human identity security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • BeyondTrust
  • Permiso
BeyondTrust vs Permiso: Products, Customers and Funding Compared
BeyondTrustBeyondTrust sells privileged access management and identity security solutions, and says it discovers, onboards, secures, and right-sizes privileges across an enterprise.beyondtrust.comPermisoPermiso's Universal Identity Graph connects every identity to the credentials it owns, the machines it creates, the agents it runs and every action it takes in real time.permiso.io
What it sells
  • Password Safe[6][9]Enterprise password management for privileged credentials and secrets.
  • Endpoint Privilege Management[6][10]Enforces least privilege dynamically to prevent malware, ransomware, and identity-based attacks.
  • Privileged Remote Access[7][11][13][18][20]Provides just-in-time access to cloud, on-premises, and OT environments.
  • AI Agent Security[6][16][21]Extends privileged-action enforcement to AI agents at runtime.
  • Entitle[6][7]Automates cloud permissions management.
  • Permiso Discover[3]Provides an inventory of human, non-human and AI identities wherever they live.
  • Permiso Protect[3]Evaluates the risk posture of identities based on usage patterns, exposure and entitlements.
  • Universal Identity Graph[3][11]Connects every identity to the credentials it owns, the machines it creates and the agents it runs.
  • Identity Threat Detection and Response[7]Detects threats to human and non-human identities across environments.
  • Identity Runtime Attribution[3]Ties agent runs, events and tool calls to the identity behind them.
  • SandyClaw[11]Runs agent skills in a controlled sandbox.
Categories
Headquarters
Johns Creek, United States[3]Not stated on its pages
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Owned by Francisco Partners since 2018[2][14][15]Owned by Okta since 2026[2][5]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • October 21, 2026BeyondTrust announced general availability of AI Agent Security on its Pathfinder Platform, together with new Phantom Labs research on AI agent activity.[21]
  • July 9, 2026BeyondTrust announced NHI Governance, a new solution on its Pathfinder platform for governing non-human identities across cloud, SaaS, endpoint and on-premises environments.[4]
  • July 30, 2026Okta said it signed a definitive agreement to acquire Permiso Security, a startup whose software detects attackers abusing identities across cloud, SaaS and AI agent environments.[14]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, BeyondTrust sells mainly to organizations that need to secure privileged access for human, machine, and AI agent identities. BeyondTrust also addresses vendors, outsourcers, and managed service providers that need access tools for customer systems. BeyondTrust also offers OT security solutions for industrial networks and critical infrastructure. Password Safe secures credentials across cloud, hybrid, and on-premises environments.Its platform is described for identities across cloud, SaaS and on-prem environments. Permiso presents its tools to security teams. Its watchlist capability is aimed at threats from employees, contractors and other trusted individuals.
Last verified
November 2, 2026November 2, 2026

Where they overlap

  • BeyondTrust and Permiso are both filed under Non-human identity security.

Where they differ, field by field

  • BeyondTrust's primary category is Privileged access management; Permiso's is Identity threat detection and response.
  • Permiso is also filed under Cloud detection and response.
  • BeyondTrust lists Password Safe, Endpoint Privilege Management, Privileged Remote Access, AI Agent Security and Entitle. Permiso lists Permiso Discover, Permiso Protect, Universal Identity Graph, Identity Threat Detection and Response, Identity Runtime Attribution and 1 more.
  • BeyondTrust is headquartered in Johns Creek, United States.
  • BeyondTrust is owned by Francisco Partners, since 2018. Permiso is owned by Okta, since 2026.

What it sells: BeyondTrust

What Password Safe does[6][9]
Password Safe onboards and manages the privileged credentials and secrets that employees depend on. It stores privileged credentials, including DevOps secrets and SSH keys, and rotates privileged passwords by policy. Password Safe also monitors, audits, and manages privileged sessions.
What Endpoint Privilege Management does[6][10]
Endpoint Privilege Management removes local admin rights and controls root access across Windows and Mac desktops and Linux and Windows Servers. It is described as reducing the cyberattack surface and protecting against malware, ransomware, insider threats and identity-based attacks.
What Privileged Remote Access does[7][11][13][18][20]
Privileged Remote Access gives IT teams automated, rule-based access provisioning without VPN setups. It connects employees, contractors, and vendors to critical systems from anywhere while enforcing least privilege access.
What AI Agent Security does[6][16][21]
AI Agent Security provides vendor-agnostic governance across Claude Code, GitHub Copilot, Cursor, internal models, and other agentic tools. Policies for AI agents are applied at the endpoint, before the action completes.
What Entitle does[6][7]
Entitle automates cloud permissions management with just-in-time access controls. It offers self-service access requests, permission bundling, and 100+ integrations.

What it sells: Permiso

What Permiso Discover does[3]
Permiso Discover gives enterprises an inventory of human, non-human and AI identities wherever they live. Permiso inventories identities and assesses exposure risk in identity providers, cloud service providers and SaaS applications.
What Permiso Protect does[3]
Permiso Protect continuously evaluates the risk posture of identities based on usage patterns, exposure and entitlements. Permiso Protect surfaces and quantifies high-risk identities, stale access and toxic combinations across human, vendor, AI and non-human accounts.
What Universal Identity Graph does[3][11]
The Universal Identity Graph connects every identity to the credentials it owns, the machines it creates, the agents it runs and every action it takes in real time. Permiso states that the chain stays unbroken from a human SSO login to a Lambda function to an MCP tool call. Permiso's Universal Identity Graph inventories identities in all cloud environments and assesses exposure risk.
What Identity Threat Detection and Response does[7]
Permiso provides identity threat detection and response for human and non-human identities across environments. The detection engine has 1500+ detection rules engineered by the P0 Labs team. Permiso detects access and behavioral anomalies in environments such as AWS, Azure, GCP, GitHub, Slack and Salesforce.
What Identity Runtime Attribution does[3]
Permiso launched AI agent runtime security, bringing Identity Runtime Attribution to every agent in production. Permiso ties every run, event and tool call to the identity behind it in real time. Every agent action is tied to a specific human, non-human or AI identity in real time and is preserved as a complete audit trail.
What SandyClaw does[11]
SandyClaw runs every skill in a controlled sandbox before it touches the environment. SandyClaw records every action, every tool call and every downstream request.

Questions about BeyondTrust and Permiso

What do BeyondTrust and Permiso sell?
BeyondTrust sells Password Safe, Endpoint Privilege Management, Privileged Remote Access, AI Agent Security and Entitle. Permiso sells Permiso Discover, Permiso Protect, Universal Identity Graph, Identity Threat Detection and Response, Identity Runtime Attribution and 1 more.
Are BeyondTrust and Permiso in the same category?
They share Non-human identity security. BeyondTrust's primary category is Privileged access management and Permiso's is Identity threat detection and response.
Where are BeyondTrust and Permiso headquartered?
BeyondTrust is headquartered in Johns Creek, United States.
Who owns BeyondTrust and Permiso?
BeyondTrust is owned by Francisco Partners, since 2018. Permiso is owned by Okta, since 2026.
Who are BeyondTrust and Permiso sold to?
From its own pages, BeyondTrust sells mainly to organizations that need to secure privileged access for human, machine, and AI agent identities. Its platform is described for identities across cloud, SaaS and on-prem environments.
What have BeyondTrust and Permiso announced recently?
October 21, 2026: BeyondTrust announced general availability of AI Agent Security on its Pathfinder Platform, together with new Phantom Labs research on AI agent activity. July 30, 2026: Okta said it signed a definitive agreement to acquire Permiso Security, a startup whose software detects attackers abusing identities across cloud, SaaS and AI agent environments.

About BeyondTrust

BeyondTrust sells privileged access management and identity security solutions, and says it discovers, onboards, secures, and right-sizes privileges across an enterprise. BeyondTrust Identity Security and Privileged Access Management solutions are deployed for security, service desk, compliance, and industry-specific use cases. BeyondTrust says it has 20 years of privilege-centric identity security for thousands of customers.[5][8][16]

BeyondTrust says the BeyondTrust Pathfinder Platform unifies PAM, ITDR, Secrets Management, CIEM, and Secure Remote Access so that identities can be seen, understood, and controlled as a single, connected system. The apps named under the platform are Identity Security Insights, AI Agent Security, Entitle, Secure Remote Access, Endpoint Privilege Management, Password Safe, and Workload Credentials. Identity Security Insights correlates data from BeyondTrust and third-party solutions to provide a single, unified view of all identities, accounts, elevated access, and Paths to Privilege. BeyondTrust says Pathfinder Intelligence is its AI assistant and identity expert, built into the platform. The BeyondTrust Pathfinder Model Context Protocol (MCP) server enables Pathfinder Intelligence and other AI agents to orchestrate privilege-safe actions.[6][7][10][17]

BeyondTrust says AI agents request access, execute actions, and escalate privileges at machine speed. BeyondTrust discovers agentic identities across AWS, Azure, Google, OpenAI, Salesforce, and ServiceNow, then enforces the same privilege controls that secure human administrators. AI Agent Security extends proven privileged-action enforcement to AI agents at runtime. Policies for AI agents are applied at the endpoint, before the action completes. AI Agent Security provides vendor-agnostic governance across Claude Code, GitHub Copilot, Cursor, internal models, and other agentic tools. AI agent discovery covers shadow AI, sub-agents, skills, and MCP servers running across endpoints.[6][16][19]

Password Safe is the BeyondTrust enterprise password management product. Password Safe onboards and manages privileged credentials and secrets, including DevOps secrets and SSH keys, and rotates privileged passwords by policy. Password Safe manages service account passwords and credentials for cloud services, app to app access, RPA workflows, agentic AI, and other non-human accounts. Password Safe also monitors, audits, and manages privileged sessions. Endpoint Privilege Management enforces least privilege dynamically to prevent malware, ransomware, and identity-based attacks. Endpoint Privilege Management removes local admin rights and controls root access across Windows and Mac desktops and Linux and Windows Servers. Entitle automates cloud permissions management with just-in-time access controls.[7][9][10][20]

Privileged Remote Access gives IT teams automated, rule-based access provisioning without VPN setups. BeyondTrust says Privileged Remote Access connects employees, contractors, and vendors to critical systems from anywhere. Remote Support complements Privileged Remote Access with screen sharing, remote camera sharing, and more for vendors, all within the BeyondTrust Pathfinder Platform. BeyondTrust Privileged Remote Access enables organizations to secure industrial networks, while allowing the use of local tools to maintain user workflows.[7][13][18]

BeyondTrust says its solutions help enable NIST's seven core tenets of zero trust by identifying and securing every privileged user, asset, and session across a digital estate. BeyondTrust Privileged Remote Access and Remote Support are FedRAMP authorized. BeyondTrust has completed an IRAP assessment for four of its solutions against the Australian Government Information Security Manual's PROTECTED level controls. BeyondTrust supports SOX compliance with privilege-centric identity security solutions to control who accesses which resources, and for how long. BeyondTrust says it has provided solutions and guidance to help customers align with the NIST CSF 2.0 framework.[11][19]

ivision is named as a BeyondTrust customer. DXC Technology is a named customer. Texas A&M University is a named customer. Keller Group is a named customer.[1][5][6][7][8][10][12][13][18]

BeyondTrust on the record

Sources

BeyondTrust full record

  1. [1]OverviewBeyondTrust · beyondtrust.com · published March 23, 2026 · Tier A
  2. [2]Beyondtrust completes transaction with clearlake capital and francisco partnersBeyondTrust · beyondtrust.com · published August 17, 2021 · Tier A
  3. [3]Beyondtrust recognized in the atlanta business chronicles 2021 pacesetters awards for fastest growing companiesBeyondTrust · beyondtrust.com · undated page, accessed September 27, 2026 · Tier A
  4. [4]BeyondTrust Extends Privileged Access Leadership with Release of NHI Governance for Every Non-Human and AI IdentityBeyondTrust · undated page, accessed September 27, 2026 · Tier A
  5. [5]Identity Security and Privileged Access Management (PAM) Solutions | BeyondTrustBeyondTrust · undated page, accessed October 23, 2026 · Tier A
  6. [6]Identity and Access SecurityBeyondTrust · undated page, accessed October 23, 2026 · Tier A
  7. [7]Pathfinder Platform | BeyondTrustBeyondTrust · undated page, accessed October 23, 2026 · Tier A
  8. [8]SaaS | BeyondTrustBeyondTrust · undated page, accessed October 23, 2026 · Tier A
  9. [9]Enterprise Password Management | Password Safe | BeyondTrustBeyondTrust · undated page, accessed October 23, 2026 · Tier A
  10. [10]Endpoint Privilege Management | BeyondTrustBeyondTrust · undated page, accessed October 23, 2026 · Tier A
  11. [11]Align with IT Compliance Mandates | BeyondTrustBeyondTrust · undated page, accessed October 23, 2026 · Tier A
  12. [12]Industry Solutions | BeyondTrustBeyondTrust · undated page, accessed October 23, 2026 · Tier A
  13. [13]Operational Technology (OT) Security Solutions | BeyondTrustBeyondTrust · undated page, accessed October 23, 2026 · Tier A
  14. [14]BeyondTrust Remote Support Reviews & Product Details - G2G2 · undated page, accessed October 23, 2026 · Tier C
  15. [15]BeyondTrust Reviews, Ratings & Features 2026 | Gartner Peer InsightsGartner Peer Insights · undated page, accessed October 23, 2026 · Tier C
  16. [16]AI Agent Security | BeyondTrustBeyondTrust · undated page, accessed November 3, 2026 · Tier A
  17. [17]AI Security Solutions for Agents and Workloads | BeyondTrustBeyondTrust · undated page, accessed November 3, 2026 · Tier A
  18. [18]Third Party Remote Access | BeyondTrustBeyondTrust · undated page, accessed November 3, 2026 · Tier A
  19. [19]Zero Trust Solutions | Privileged Access & Identity Security | BeyondTrustBeyondTrust · undated page, accessed November 3, 2026 · Tier A
  20. [20]Privileged Remote Access | BeyondTrustBeyondTrust · undated page, accessed November 3, 2026 · Tier A
  21. [21]BeyondTrust AI Agent Security Now Generally AvailableBeyondTrust · published October 21, 2026 · Tier A

Permiso full record

  1. [1]permiso.ioPermiso · permiso.io · undated page, accessed September 27, 2026 · Tier A
  2. [2]Okta signs definitive agreement to acquire permiso securityOkta · okta.com · published August 26, 2026 · Tier A
  3. [3]Detect and protect against human and non-human identity threats in real-timePermiso · undated page, accessed October 27, 2026 · Tier A
  4. [4]Identity Security Posture Management + Identity Threat Detection & ResponsePermiso · undated page, accessed October 27, 2026 · Tier A
  5. [5]Coverage across cloud environments to better secure the attack surfacePermiso · undated page, accessed November 10, 2026 · Tier A
  6. [6]Human and Non-Human Identity Inventory, Risk Posture and GovernancePermiso · undated page, accessed November 10, 2026 · Tier A
  7. [7]Identity Threat Detection and Response (ITDR) for Human and Non-Human IdentitiesPermiso · undated page, accessed November 10, 2026 · Tier A
  8. [8]How Permiso Detects Compromised Credentials In Your EnvironmentPermiso · undated page, accessed November 10, 2026 · Tier A
  9. [9]What Are Non-Human Identities? Complete Guide to NHI Security for 2025Permiso · undated page, accessed November 10, 2026 · Tier A
  10. [10]Non-Human Identity (NHI) Threat Detection and ResponsePermiso · undated page, accessed November 10, 2026 · Tier A
  11. [11]Secure Every AI Agent, Skill, and Action | PermisoPermiso · undated page, accessed November 10, 2026 · Tier A
  12. [12]Security - At Permiso, we don't take security lightlyPermiso · undated page, accessed November 10, 2026 · Tier A
  13. [13]Learn about how we make cloud zeros into cloud heroes | PermisoPermiso · undated page, accessed November 10, 2026 · Tier A
  14. [14]Okta to acquire Permiso Security in reported $200M identity security deal - SiliconANGLESiliconANGLE · published July 30, 2026 · Tier B

Spot a factual error? Request a correction.