All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.
BeyondTrust sells its Pathfinder platform to enterprises and government agencies. Pathfinder controls and records privileged access, the elevated rights of administrators, machines, and AI agents. The company began in 2003 as ExpertVNC and later operated as Bomgar. Bomgar acquired BeyondTrust in 2018 and adopted its name. Francisco Partners acquired it in 2018, and Clearlake Capital invested in 2021. It reports over 20,000 customers, including 75 of the Fortune 100. It reported over $400 million in recurring revenue in 2024 while profitable. BeyondTrust announced a seventh consecutive Leader placement in Gartner's ranking of privileged access vendors. A departing customer has to reroute privileged sessions and re-point the scripts that fetch credentials from its Password Safe vault.
| Description | BeyondTrust sells privilege-centric identity security on its Pathfinder platform, which brings together privileged access management, secrets management, cloud entitlement management, identity threat detection, and secure remote access for human, machine, and AI identities. | [f1] |
|---|---|---|
| HQ | Atlanta, Georgia, United States | [f2] |
| Latest funding | Clearlake Capital investment, closed August 2021 | [f3] |
| Product | What it does |
|---|---|
| Pathfinder Platform | Integrated console unifying BeyondTrust's privilege-centric identity security products into one platform. |
| Password Safe | Vaults and rotates privileged passwords, secrets, and SSH keys, records privileged sessions, and removes hard-coded credentials from scripts and DevOps pipelines. |
| Endpoint Privilege Management | Enforces least privilege on endpoints with application control, allow-listing, and policy templates across Windows, macOS, and Linux. |
| Privileged Remote Access | Mediates and records privileged sessions for employees, contractors, and vendors without VPNs, with patented session monitoring. |
| Entitle | Automates just-in-time cloud access and identity governance with self-serve requests and integrations across IaaS and PaaS platforms. |
| Identity Security Insights | Correlates identity data from BeyondTrust and third-party tools to surface Paths to Privilege and detect anomalous privileged activity. |
| Remote Support | Secure attended and unattended help-desk access with session monitoring, least privilege controls, and service-desk integrations. |
| Active Directory Bridge | Extends Microsoft Active Directory authentication and Group Policy to Unix and Linux systems. |
Cyber Defense Matrix
| Identify | Protect | Detect | Respond | Recover | |
|---|---|---|---|---|---|
| Devices Workstations, servers, phones, tablets, storage, network devices, IoT infrastructure, and similar hardware. | |||||
| Applications Software, interactions, and application flows on the devices. | |||||
| Networks Connections and traffic flowing among devices and apps, plus communication paths. | |||||
| Data Content at rest, in transit, or in use across devices, apps, and networks. | |||||
| Users The people using the devices, apps, networks, and data. |
BeyondTrust's privileged access management, endpoint privilege management, and privileged remote access protect privileged identities and the endpoints they reach, and Identity Security Insights adds identity posture and anomalous-activity detection, mapping these lines to the Cyber Defense Matrix. [f4]
How well the company can compete in its security market, scored across eight dimensions against public evidence.
| Dimension | Score | Rationale |
|---|---|---|
| Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. | 4/5 | BeyondTrust names a clear buyer and problem, the security teams that must control privileged credentials, sessions and remote access. Independent sources document harm in that domain. CISA added the Remote Support and Privileged Remote Access command injection flaw to its known exploited catalog in February 2026 and later activated its ransomware-campaign indicator, and BleepingComputer reports that a stolen API key was used to compromise 17 Remote Support SaaS instances, including the Treasury’s. [s1, s19, s20, s21] |
| Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs and third-party validation. | 3/5 | BeyondTrust's product pages document concrete mechanics, including credential injection into brokered sessions, session recording, secrets control for CI/CD pipelines, and Kerberos sign-on for Unix and Linux. BeyondTrust announced its analyst Leader placements itself, and the reviewed record contains no third-party technical evaluation of those capabilities. [s1, s9, s10, s6, s7] |
| Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. | 3/5 | AI agents that act with privileged access are the enabler BeyondTrust cites for its June 2026 AI Agent Security launch, and privileged access management is an established budget category. The buyer-side signals in the reviewed record are an October 2025 Gartner placement and a May 2026 KuppingerCole placement. Both are analyst category notes that BeyondTrust announced itself, so they count as one signal kind. [s6, s7, s16, s2] |
| Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. | 3/5 | Chief Executive Officer Janine Seebeck joined BeyondTrust in 2016 as Chief Financial Officer and succeeded Matt Dircks in 2022, as BankInfoSecurity reported. According to BeyondTrust's leadership page, Chief Technology Officer Marc Maiffret held security leadership roles at eEye Digital Security and FireEye. The reviewed record contains no in-domain product build led by the current team. [s26, s27, s25] |
| GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. | 5/5 | BeyondTrust reports more than 20,000 customers, including 75 of the Fortune 100. Private Equity Wire, citing market sources, put its recurring revenue at around $500 million in 2025. According to BleepingComputer, the U.S. Treasury ran a Remote Support SaaS instance, and BeyondTrust's homepage quotes managers at customers DXC Technology and AMOCO Federal Credit Union. [s17, s18, s19, s2, s6] |
| Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. | 3/5 | Read at scale as output per capital, BeyondTrust reported surpassing $400 million in annual recurring revenue in 2024 while maintaining profitability by exceeding the Rule of 40, and market sources cited by Private Equity Wire put recurring revenue near $500 million in 2025. The profitability claim is BeyondTrust’s own, the Private Equity Wire figure is revenue scale rather than capital deployed or margins, and no amount is disclosed for the Francisco Partners acquisition or the Clearlake investment, so efficiency is unconfirmed. [s4, s18, s3] |
| Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. | 4/5 | Private Equity Wire describes BeyondTrust as a privileged access management specialist, a category with a dedicated Gartner Magic Quadrant, and BeyondTrust announced a Leader placement there for the seventh consecutive edition. BeyondTrust published that placement in its own release, so the evidence supports a recognized category member below category-defining. [s18, s6, s7, s1] |
| Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. | 3/5 | Credential vaulting, session brokering, and secrets delivery to scripts and pipelines run through BeyondTrust products once deployed, so an identity suite vendor seeking the account faces real migration work to displace them. The reviewed record contains no cross-customer data asset or procurement mandate that a bundling vendor could not eventually replicate. [s9, s10, s1] |
BeyondTrust sells privilege-centric identity security to enterprises and government agencies that must control who holds elevated access. Its Pathfinder platform covers privileged passwords and secrets, endpoint privilege, cloud entitlements, identity threat detection, and secure remote access.
Privileged access management is an established category. Gartner ranks vendors in a dedicated Magic Quadrant, and BeyondTrust announced a Leader placement for the seventh consecutive edition in October 2025.
BeyondTrust now extends that problem statement to AI agents, which its homepage describes as a growing class of privileged identity with little governance. It launched AI Agent Security in 2026 to govern what those agents may do on endpoints. [s1, s2, s6, s16]
BeyondTrust documents specific mechanics across its products. Privileged Remote Access brokers connections through one access pathway and injects credentials so users can connect without knowing passwords. Password Safe vaults privileged credentials and controls the secrets that CI/CD pipelines and scripts use.
Identity Security Insights assesses identity posture and detects attacks on privileged accounts, and its True Privilege Graph maps escalation paths across human, workload, and machine identities. Active Directory Bridge extends Kerberos sign-on to Unix and Linux.
BeyondTrust describes its session monitoring as patented, and a granted United States patent assigned to it covers secure access and elevated rights for remote support. [s9, s10, s8, s1, s23]
BeyondTrust positions breadth as its differentiator, selling one platform that combines privileged access, secrets, cloud entitlements, identity threat detection, and remote access. Its homepage includes Leader placements from Gartner, Forrester, GigaOm, and KuppingerCole across those categories.
BeyondTrust announced it was positioned highest for Ability to Execute in the 2025 Gartner Magic Quadrant for privileged access management. That release also states that Gartner does not endorse the vendors in its research, so the placement is a ranking by Gartner analysts.
AI agent governance is where BeyondTrust is extending the platform, with AI Agent Security in private beta and general availability planned for Fall 2026 as an add-on to Endpoint Privilege Management. [s2, s6, s16]
BeyondTrust operates at enterprise scale. It reports more than 20,000 customers, including 75 of the Fortune 100, and reported surpassing $400 million in recurring revenue in July 2024 while exceeding the Rule of 40.
Two independent outlets add to that picture. Private Equity Wire, citing market sources, put BeyondTrust's recurring revenue at around $500 million in August 2025, and BleepingComputer reported a BeyondTrust Remote Support deployment at the U.S. Treasury.
Federal buyers can use its secure remote access offering, which the FedRAMP Marketplace lists as certified at the moderate level since April 2024. DXC Technology and AMOCO Federal Credit Union appear as customers speaking on BeyondTrust's homepage. [s17, s4, s18, s19, s14, s2]
BeyondTrust operates under private equity ownership. Francisco Partners acquired the company in 2018, and Clearlake Capital closed an investment in 2021.
Janine Seebeck joined as chief financial officer in 2016 and succeeded Matt Dircks as chief executive in 2022, according to BankInfoSecurity. Dircks had led the company since 2014. Chief Technology Officer Marc Maiffret leads product strategy and engineering.
Bomgar acquired BeyondTrust in 2018 and took its name, and BeyondTrust acquired Entitle in 2024 for just-in-time cloud access. [s3, s26, s27, s24, s25, s12]
BeyondTrust publishes a broad set of certifications on its trust center, including SOC 2 Type 2 reports scoped to named cloud products, TX-RAMP Level 2, and FedRAMP Moderate authorization for Remote Support and Privileged Remote Access.
Regulated buyers can use those attestations in security review, and federal agencies can adopt the secure remote access offering through its FedRAMP authorization.
Federal agencies also had to secure BeyondTrust's remote access products under a CISA order in February 2026. CISA added a Remote Support and Privileged Remote Access flaw to its known exploited catalog in February 2026, and BeyondTrust reported exploitation limited to unpatched self-hosted instances. BeyondTrust patched its cloud instances automatically, while self-hosted customers without automatic updates had to apply the patch manually. [s13, s14, s19, s21, s22]
| Company | Relationship | Note | Compare |
|---|---|---|---|
| CyberArk | competes with | N/AWe captured the evidence for these companies under different evidence-model versions (v1 vs v2), so the totals were scored under different conditions and are not directly comparable. | |
| Delinea | competes with | ||
| Okta | adjacent | ||
| Cyolo | adjacent |
Add analyzed competitors to compare them side by side with BeyondTrust.
A closer look at the company's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.
press the advantage
BeyondTrust sells enterprises and government agencies software that controls privileged access, the elevated rights of administrators and machines. Its products route privileged sessions through a single pathway and supply the credentials that customer scripts and build pipelines fetch. A departing customer has to reroute those sessions and re-point every credential lookup. For purchases requiring FedRAMP authorization, a federal agency needs an authorized replacement for BeyondTrust's remote access service. Its patent on secure remote support access is one a rival could design around. BeyondTrust discloses no cross-customer data set. A vendor already running a customer's identity directory could add privileged access controls.
| Dimension | Score | Rationale |
|---|---|---|
| Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. | 1/3 | BeyondTrust sells the Pathfinder platform and its privileged access, secrets, and remote access products as cloud services or self-hosted software. The customer's team operates the software and owns the outcomes. |
| Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. | 2/3 | Privileged Remote Access brokers connections through one access pathway and injects credentials, and Password Safe supplies the secrets scripts and CI/CD pipelines use, so a departing customer rebuilds that brokering and re-points those credential lookups. The cited record documents the mechanism but does not size the exit, so the documented case is meaningful friction rather than a genuinely expensive migration. |
| Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. | 2/3 | The FedRAMP Marketplace lists BeyondTrust's secure remote access offering as certified at the moderate level since April 2024. For federal purchases requiring an authorized cloud service, a rival needs comparable authorization, which is slow but feasible. The SOC 2 Type 2 attestations on its trust center are entry cost a funded competitor can also obtain. |
| Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. | 3/3 | Brokering privileged sessions with credential injection, rotating secrets for pipelines, extending Kerberos sign-on to Unix and Linux, and mapping escalation paths across human and machine identities take years of specialized systems engineering. |
| Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. | 3/3 | The buyer is the regulated enterprise and the government agency. FedRAMP certification of the secure remote access offering and BleepingComputer's report of a Treasury Remote Support instance document government buyers, and BeyondTrust counts 75 Fortune 100 companies among its customers. |
| Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. | 3/3 | Scripts, code, and CI/CD pipelines draw their credentials from Password Safe through its REST APIs. Active Directory Bridge extends Kerberos sign-on to Unix and Linux systems. Both are infrastructure positions that other systems depend on at runtime. |
| Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. | 2/3 | BeyondTrust Corporation, formerly Bomgar, is the recorded assignee of granted United States patent US9742779B2, which covers securely providing access and elevated rights for remote support. The reviewed record evidences no cross-customer dataset beyond it. A funded rival could design around this patented capability over time. |
BeyondTrust sells to large enterprises and government agencies that must control privileged access. It reports more than 20,000 customers, including 75 of the Fortune 100, and its secure remote access offering appears on the FedRAMP Marketplace for federal use.
Privileged access management is an established category with its own analyst coverage. Gartner ranks privileged access management vendors in a Magic Quadrant, and Private Equity Wire describes BeyondTrust as a specialist in that category.
The capability core is privileged access control across several products. Password Safe vaults privileged credentials and secrets, Privileged Remote Access brokers sessions with credential injection, Endpoint Privilege Management enforces least privilege on endpoints, and Entitle grants self-service access that is revoked automatically.
BeyondTrust applies AI in its products and extends its controls to AI identities. Its 2024 results release describes AI/ML-powered threat detections, Identity Security Insights monitors AI agents and automated workloads as identities, and AI Agent Security, in private beta, governs what AI agents may do on endpoints.
Separately, BeyondTrust plans to use Claude Mythos Preview for finding and fixing vulnerabilities in its own products. BeyondTrust describes that work as applying the model to its own product portfolio and platform code.
BeyondTrust reports enterprise scale in revenue and customers. In July 2024 it reported surpassing $400 million in annual recurring revenue while maintaining profitability. A BeyondTrust blog post announcing the same milestone reported more than 800 new customers in that year's first half.
Private Equity Wire, citing market sources in August 2025, put BeyondTrust's recurring revenue at around $500 million. Inc. placed BeyondTrust on its 2026 Inc. 5000 list, which ranks companies by revenue growth from 2022 to 2025.
BeyondTrust announced its analyst recognition in its own releases, including a seventh consecutive Gartner Leader placement for privileged access management and a sixth consecutive KuppingerCole Overall Leader rating.
BeyondTrust sells its products as modules on the Pathfinder platform . AI Agent Security will first be offered as an add-on to Endpoint Privilege Management, and Workforce Passwords is sold as an add-on to Password Safe.
BeyondTrust invites buyers to contact the company through its products page to get started.
BeyondTrust delivers its products both as cloud services and as self-hosted deployments. Its SOC 2 Type 2 reports cover cloud versions of Entitle, Identity Security Insights, Password Safe, and its secure remote access products, and its 2026 security advisory covers self-hosted Remote Support customers.
Attackers have exploited BeyondTrust's remote access products in two separate incidents. According to BleepingComputer, attackers used a stolen API key to compromise Remote Support SaaS instances, including the Treasury's. Later, CISA added CVE-2026-1731, a Remote Support and Privileged Remote Access flaw, to its known exploited catalog on February 13, 2026.
For CVE-2026-1731, BeyondTrust patched its cloud instances automatically on February 2, 2026, while self-hosted customers without automatic updates had to apply the patch manually. BeyondTrust reported that the exploitation it observed was limited to internet-facing self-hosted instances that remained unpatched before February 9, 2026, and CISA later flagged the flaw as used in ransomware campaigns.
BeyondTrust publishes a broad certification set on its trust center, including SOC 2 Type 2 reports scoped to named cloud products, TX-RAMP Level 2, and FedRAMP Moderate authorization for Remote Support and Privileged Remote Access.
Federal agencies can adopt the secure remote access offering through its FedRAMP authorization, and regulated buyers can use the other attestations in security review.
Pathfinder is BeyondTrust's integrated platform console for its products. The homepage describes it as unifying privileged access management, identity threat detection, secrets management, cloud entitlement management, and secure remote access.
Identity Security Insights extends that platform to data from other vendors' tools, correlating it with BeyondTrust's own data to show identities, accounts, and escalation paths in one view.
BeyondTrust operates under private equity ownership. Francisco Partners acquired the company in 2018, and Clearlake Capital closed an investment in 2021.
Janine Seebeck joined as chief financial officer in 2016 and succeeded Matt Dircks as chief executive in 2022, according to BankInfoSecurity. BeyondTrust expanded its portfolio by acquiring Entitle in 2024.
Private Equity Wire reported in August 2025 that Francisco Partners was exploring a sale of BeyondTrust, with talks at an early stage.
| Id | Source | Tier | Accessed |
|---|---|---|---|
| f1 | https://www.beyondtrust.com/ | official | 2026-09-16 |
| f2 | https://www.beyondtrust.com/press/h1-2024-momentum | official | 2026-09-16 |
| f3 | https://www.beyondtrust.com/press/beyondtrust-completes-transaction-with-clearlake-capital-and-francisco-partners | official | 2026-09-16 |
| f4 | https://www.beyondtrust.com/products | official | 2026-09-16 |
This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.
The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.
Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.
The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.
To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.
Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.
Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.