Identity & Access Management

Now pick what to compare StrongDM against.

StrongDM clear

Open a name for its full profile

Okta Workforce Identity
Capabilities only
Okta · Commercial · 5 capabilities in this domain
Compare →
Microsoft Entra ID
Capabilities only
Microsoft · Freemium · 4 capabilities in this domain
Compare →
Cisco Duo
Capabilities only
Cisco · Freemium · 3 capabilities in this domain
Compare →
CrowdStrike Falcon Identity Protection
Capabilities only
CrowdStrike · Commercial · 3 capabilities in this domain
Compare →
PingOne
Capabilities only
Ping Identity · Commercial · 3 capabilities in this domain
Compare →
CyberArk Privileged Access Manager
Capabilities only
CyberArk · Commercial · 2 capabilities in this domain
Compare →
Microsoft Defender for Identity
Capabilities only
Microsoft · Commercial · 2 capabilities in this domain
Compare →
Microsoft Entra ID Governance
Capabilities only
Microsoft · Commercial · 2 capabilities in this domain
Compare →
Silverfort
Capabilities only
Silverfort · Commercial · 2 capabilities in this domain
Compare →
StrongDM
Capabilities only
StrongDM · Commercial · 2 capabilities in this domain
selected
Teleport
Capabilities only
Teleport · Freemium · 2 capabilities in this domain
Compare →
BeyondTrust Password Safe
Capabilities only
BeyondTrust · Commercial · 1 capabilities in this domain
Compare →
BloodHound Enterprise
Capabilities only
SpecterOps · Freemium · 1 capabilities in this domain
Compare →
Delinea Secret Server
Capabilities only
Delinea · Commercial · 1 capabilities in this domain
Compare →
SailPoint Identity Security Cloud
Capabilities only
SailPoint · Commercial · 1 capabilities in this domain
Compare →
YubiKey
Capabilities only
Yubico · Commercial · 1 capabilities in this domain
Compare →

In Identity & Access Management

BloodHound Enterprise

SpecterOps · Identity & Access Management

Close ×

FreemiumCompany

BloodHound graphs identity relationships and permissions to show choke points attackers would use to escalate, guiding removal of risky privileges.

What it does2 capabilities · 1 at full coverage

1 of 2 at full coverage.

Identity Attack Path ValidationFullIAM · level 4 · 4 providers
Repository Access GovernancePartialSCM · level 2 · 3 providers

What it proves8 controls across 4 frameworks

Satisfied through its capabilities, not claimed by the vendor.

CSF 2.03 / 106ID.IM-02 ID.RA-04 PR.AA-05
CI/CD Top 102 / 10CICD-SEC-2 CICD-SEC-8
CIS Controls2 / 18CIS 18 CIS 6
Scorecard1 / 20Webhooks

What it stops4 techniques · 1 risk

4 techniques countered, 4 of them common

Remote ServicesT1021Very Common
Valid AccountsT1078Very Common
Account ManipulationT1098Common
Malicious or Compromised OAuth IntegrationCommon

1 risks reduced

Excessive standing privilege in engineering platformsHigh

Where it runs2 phases · 2 ways to deploy

Capabilities per lifecycle phase

Code1
Operate2

How it is delivered

SaaSSelf-hosted

What it unlocks2 activities · reaches level 4

Program activities its capabilities support, reaching level 4. Supporting an activity is not completing it.

Level 2

Team-based least-privilege RBAC and access reviewLow effort

Level 4

Identity threat detection and attack path validationMedium effort

How it holds up

Not assessed yet: no strengths, limits or evaluation scores. 47 of 340 products carry an assessment and 29 are scored.

What it costsPlatform enterprise agreement · free tier

LicensingPlatform enterprise agreement

Priced perannual contract

BillingSubscription

Scales withNegotiated scope (developers, assets, modules)

Total cost

Opaque list pricing; benchmark with peers and require clear overage terms.

What it takes to run

No staffing, rollout time or operational commitment recorded.

What it works with

No supported language, standard, integration or named feature recorded.

What else to look at

No alternative, competitor or family sibling is modeled for it.

What backs this up

No measurement, incident or pipeline using it.

Gantry 7.1.0 · OFF.12 · OFF.13