BeyondTrust Corporation is a US cybersecurity software vendor specializing in identity protection and privileged access management, or PAM. Its tools enable organizations to control accounts with extensive powers over their IT systems: administrators, technicians, service providers and service accounts. The aim is to reduce opportunities for intrusion, lateral movement across the network and the compromise of sensitive resources.
A company built through acquisitions
BeyondTrust’s current business largely took shape in 2018 around Bomgar, a remote support specialist founded in 2003. That year, Bomgar acquired Lieberman Software, Avecto and BeyondTrust before adopting the latter’s name. These acquisitions brought together complementary technologies: secure remote access, privileged password management and permission controls on workstations.
This history explains the breadth of the product portfolio. In 2024, BeyondTrust also acquired Entitle, a company specializing in permission management, particularly for cloud environments. The deal extends its development beyond traditional infrastructure administration toward more granular governance of the permissions granted to users.
Controlling permissions and system access
The offering is built on the principle of least privilege: each user or application should have only the permissions necessary for its activities. Password Safe centralizes privileged credential management, with features for rotating secrets and controlling sessions. Endpoint privilege management solutions, meanwhile, allow permanent administrator rights to be removed while permitting certain tasks under defined rules.
BeyondTrust also offers Remote Support for IT support and Privileged Remote Access for sensitive connections, particularly those used by external service providers. These products address distinct use cases but share the goal of ensuring traceability and control over access. The vendor complements this suite with identity analytics capabilities designed to identify exposures and paths that could lead to elevated privileges.
These tools serve both on-premises infrastructure and hybrid environments. Their deployment requires preliminary work to inventory accounts, define policies and integrate with existing directories, authentication services and monitoring tools.
What next?
The proliferation of cloud services, service accounts and third-party access is expanding the scope of identity security. For BeyondTrust, the challenge is to connect its various components so that the detection of risky permissions leads to their effective reduction. Temporary permissions, granted on demand rather than retained indefinitely, are an important part of this evolution.
Its trajectory will depend in particular on its ability to simplify the operation of this portfolio without weakening controls. For customers, value will be measured by the reduction in unnecessary privileges, the quality of audit trails and the maintenance of administration processes that remain practical for everyday use.