Category
Identity and Access
Who is in the token, and can you kill the session. Workforce login, standing admin, and the secret that should not live in git. Open a shortlist for the buy you are making.
Identity protection
We split identity protection by the accounts attackers actually use. Customer CIAM is a different buy.
ShortlistsPrivileged access
We split PAM by whether the admin session expires. MFA is a factor, not this list.
Shortlists
Secrets management
We split vaults by the lease the app reads. A leaked-key scanner is Application Security.
Shortlists
Passkey tools
We split passkey tools by whether you can ship WebAuthn without a science fair. A password hash is Cryptography.
PAM toolsVault, JIT, and zero standing privilege for humans and machines. ITDR toolsIdentity threat detection when MFA at login still looks green. Certificate lifecycle toolsDiscover, renew, and install certificates before expiry outages.More categories
Questions about Identity and Access
Is this customer login?
No. Customer CIAM is a different buy. These lists are workforce identity and standing admin.
Does MFA replace PAM?
No. MFA is a factor. PAM expires the privileged session.
Where do vaults sit if they are crypto?
A KMS ceremony can live under Cryptography. The lease the app reads is here.
