CASS Research · The Floor Report № PAM-01

The Floor Report:
Privileged Access Management

An independent reading of the PAM field at the moment the platforms absorbed it. Everyone is ranked by what they clear above the floor — the baseline now set by the security platforms that swallowed standalone privileged access.

11 vendors assessed Q2 2026 edition Author KID A Imprint cassresearch.com
The Floor

Standalone PAM is ending. CyberArk inside Palo Alto, the secrets-and-vault layer folding into the security platforms — the floor for privileged access is now whatever the platform you already own provides. A vendor's right to win is no longer "do you do PAM," it is "what do you do that the platform cannot, and can you do it without belonging to one."

The Standings

Ranked by the axis that matters to you

Pick a measure and the field re-ranks. Each bar is how far a vendor rises above the platform floor — set at zero. Independence from platform is the telling one: it rewards vendors who can be bought, deployed and trusted without committing to a security-platform owner, and discounts those whose privilege story only makes sense inside a suite. The platforms lead on reach but own you; the independents clear the floor precisely where neutrality is the requirement.

Every score is the points a vendor clears above the platform floor on the selected measure. The floor is zero — what a security platform already gives a customer who owns it. Nobody sits below it; if the platform absorbs it, that capability is worth nothing as a paid standalone. Darker bars clear the floor by more.
The Ledger

Vendor scorecard

Sortable. Endpoint and revenue figures are CASS estimates triangulated from public statements, headcount, and channel signal — treat as directional, not audited. Click a column to sort.

Vendor Position Installed base (est.) PAM revenue (est.) Peer sentiment Best buy for