Identity & Access Management

Pick the first of two products.

Open a name for its full profile

Okta Workforce Identity
Capabilities only
Okta · Commercial · 5 capabilities in this domain
Select
Microsoft Entra ID
Capabilities only
Microsoft · Freemium · 4 capabilities in this domain
Select
Cisco Duo
Capabilities only
Cisco · Freemium · 3 capabilities in this domain
Select
CrowdStrike Falcon Identity Protection
Capabilities only
CrowdStrike · Commercial · 3 capabilities in this domain
Select
PingOne
Capabilities only
Ping Identity · Commercial · 3 capabilities in this domain
Select
CyberArk Privileged Access Manager
Capabilities only
CyberArk · Commercial · 2 capabilities in this domain
Select
Microsoft Defender for Identity
Capabilities only
Microsoft · Commercial · 2 capabilities in this domain
Select
Microsoft Entra ID Governance
Capabilities only
Microsoft · Commercial · 2 capabilities in this domain
Select
Silverfort
Capabilities only
Silverfort · Commercial · 2 capabilities in this domain
Select
StrongDM
Capabilities only
StrongDM · Commercial · 2 capabilities in this domain
Select
Teleport
Capabilities only
Teleport · Freemium · 2 capabilities in this domain
Select
BeyondTrust Password Safe
Capabilities only
BeyondTrust · Commercial · 1 capabilities in this domain
Select
BloodHound Enterprise
Capabilities only
SpecterOps · Freemium · 1 capabilities in this domain
Select
Delinea Secret Server
Capabilities only
Delinea · Commercial · 1 capabilities in this domain
Select
SailPoint Identity Security Cloud
Capabilities only
SailPoint · Commercial · 1 capabilities in this domain
Select
YubiKey
Capabilities only
Yubico · Commercial · 1 capabilities in this domain
Select

In Identity & Access Management

Delinea Secret Server

Delinea · Identity & Access Management

Close ×

CommercialCompany

Secret Server discovers privileged accounts, rotates credentials and brokers sessions.

What it does2 capabilities · 1 at full coverage

1 of 2 at full coverage.

Privileged Access ManagementFullIAM · level 3 · 5 providers
Automated Secret RotationPartialSECRETS · level 3 · 10 providers

What it proves7 controls across 5 frameworks

Satisfied through its capabilities, not claimed by the vendor.

CIS Controls2 / 18CIS 5 CIS 6
CSF 2.02 / 106PR.AA-05 RS.MI-01
ASVS 5.01 / 17V11
CI/CD Top 101 / 10CICD-SEC-6
SAMM 2.01 / 90I-SD-3-B

What it stops3 techniques · 1 risk

3 techniques countered, 3 of them common

OS Credential DumpingT1003Very Common
Valid AccountsT1078Very Common
Account ManipulationT1098Common

1 risks reduced

Leaked credential enables unauthorized accessCritical

Where it runs1 phase · 2 ways to deploy

Capabilities per lifecycle phase

Operate2

How it is delivered

SaaSSelf-hosted

What it unlocks2 activities · reaches level 3

Program activities its capabilities support, reaching level 3. Supporting an activity is not completing it.

Level 3

Automated rotation and log and artifact scanningMedium effort
Phishing-resistant MFA and just-in-time privilegeMedium effort

How it holds up

Not assessed yet: no strengths, limits or evaluation scores. 47 of 340 products carry an assessment and 29 are scored.

What it costsPer user subscription

LicensingPer user subscription

Priced peruser per month or year

BillingSubscription

Scales withNamed or licensed users

Total cost

Bundles such as Microsoft 365 E5 spread cost across many products; value depends on actually deploying the included capabilities.

What it takes to run

No staffing, rollout time or operational commitment recorded.

What it works with

No supported language, standard, integration or named feature recorded.

What else to look at

No alternative, competitor or family sibling is modeled for it.

What backs this up

No measurement, incident or pipeline using it.

Gantry 7.1.0 · OFF.12 · OFF.13