BeyondTrust Hits 1 Billion Secure Remote Sessions... With No Signs of Slowing Down

This summer, BeyondTrust crossed a major milestone: one billion secure remote sessions (and counting), powered by BeyondTrust Remote Support and Privileged Remote Access (PRA) solutions.

Each one of those billion secure connections enabled IT, operational technology (OT), and security teams to support users, protect critical infrastructure, and keep businesses moving across the globe. With the average cost of a data breach reaching $4.4 million in 2025, each one of those billion sessions represents a secured connection that protected a business from potentially devastating financial and reputational harm.

From the service desk to the server room, BeyondTrust has enabled secure access across industries, time zones, and devices, keeping remote employees productive, third parties accountable, and critical systems protected. Over 500 million of those sessions happened in just the past five years, reflecting the rapid adoption of our trusted secure remote access solutions as hybrid work became the norm and attack surfaces grew.

This milestone represents more than just scale. It’s a reflection of the trust our customers place in us every single day, and a testament to the outcomes we’ve delivered together.

Here’s what this milestone means for our customers, the future of secure access, and the broader industry shift that’s already underway.

Secure access is the backbone of business continuity. Without secure access, every remote connection can become a Path to Privilege™ for attackers, creating opportunities for lateral movement, data exfiltration, or ransomware deployment.

Some of the most common remote access weaknesses that are routinely exploited by threat actors for initial access include:

• VPN sprawl – VPNs were traditionally designed to enable remote connectivity, and, over time, this led to VPN sprawl: multiple tunnels across the enterprise. Without the proper security controls, these significantly broaden the attack surface of an organization, while creating blind spots that further increase the risk of exposure.

• Unmanaged third-party access – Third-party access remains one of the riskiest blind spots for organizations. Contractors, suppliers, and partners often require urgent entry into critical systems, but unmanaged connections and shared credentials make it difficult to enforce accountability or revoke access when no longer needed. Industry reports show that at least 35.5% of breaches trace back to compromised vendor access, making secure, auditable connections a necessity.

• Weak credential management – Even within the service desk, weak credential management is a daily reality. Service desk technicians and admins often hold elevated access. If these credentials are compromised, attackers can escalate quickly into sensitive systems.

This is why each of our one billion secure sessions matters. Every single one represents a connection that was properly authenticated, monitored, and closed off the moment it was no longer needed. Whether you're managing a remote team, running a 24/7 factory, or securing a highly distributed workforce, BeyondTrust helps you do it confidently. No VPN sprawl. No black-box tools. No tradeoffs between usability and security.

The increasing momentum of BeyondTrust’s Remote Support and Privileged Remote Access products is a reflection of the broader industry narrative: more organizations are shifting away from traditional remote access technologies in favor of more secure and robust solutions that can help support business continuity.

According to recent findings:

• 65% of organizations plan to replace VPN services within the year, a 23% jump from last year.

• 96% of organizations favor a zero trust approach, with 81% planning to implement zero trust strategies within the next 12 months.

These stats further validate that modern secure access practices that have evolved to meet the real-world security needs of evolving workplaces are essential to business operations—and our customers know it.

BeyondTrust is already aligned with the industry’s momentum. Our Remote Support and Privileged Remote Access solutions enable organizations to build zero trust into every remote connection. Whether it’s a service desk technician troubleshooting a device within their global workforce, a third-party vendor accessing critical OT systems, or an engineer connecting to equipment on the factory floor, Remote Support and Privileged Remote Access help organizations modernize how they connect to people and systems.

We achieve this by embedding security and compliance directly into our solutions, ensuring our customers can operate confidently in any regulated industry. In fact, BeyondTrust Remote Support is the only solution in its class with FIPS 140-2, Level 1 Validation, a critical security standard for government, healthcare, and other public and private sector organizations, and both Remote Support and PRA are FedRAMP® authorized.

Together, these solutions are built to meet a wide array of strict compliance requirements, including:

• NIST CSF 2.0: Helps organizations align with the leading U.S. cybersecurity framework to better manage and reduce cyber risk.

• HIPAA: Provides the necessary security controls to protect sensitive patient health information (PHI), which is crucial for organizations in the healthcare sector.

• CMMC: Meets the stringent requirements for contractors working with the Department of Defense (DoD) to protect sensitive information.

• SOC 2: Verifies that your systems and data are protected through robust controls for security, availability, processing integrity, confidentiality, and privacy.

• GDPR: Enables compliance with European Union data protection regulations for handling the personal data of EU citizens.

• ISO 27001: Adheres to the premier international standard for creating and managing an information security management system (ISMS).

From healthcare to manufacturing, our solutions scale with your business, simplify IT, and strengthen security, even as the traditional network perimeter continues to disappear.

Our journey to one billion sessions is powered by continuous innovation. Here are some of the key features and updates we’ve introduced for Remote Support and Privileged Remote Access:

Remote Support

• Endpoint Automation - Empower your service desk to resolve issues at scale by running scripts across multiple endpoints simultaneously. We created this to dramatically reduce issue resolution time and eliminate repetitive tickets. For example, instead of fixing 50 endpoints one by one, an admin can run a single script across all affected devices at once, resolving issues in a fraction of the time. Customers can also use this feature to address zero-day vulnerabilities quickly and secure user devices by deploying patches via jump clients.

• Real-Time KPI Dashboard - Make smarter, data-driven decisions with instant visibility into your service desk operations. This dashboard gives IT admins on-demand access to the data they need for resource and capacity management. Forget waiting for reports from your ITSM, you can now monitor performance and meet your KPIs with real-time, accurate insights.

• Enhanced Security with Multi-Factor Authentication (MFA) - This year, we fully implemented MFA to bring identity security to the heart of your service desk. IT technicians are prime targets for cyberattacks due to their privileged access to sensitive data and critical systems. By requiring a second form of verification, MFA reduces the risk of unauthorized access, even if credentials are compromised.

Privileged Remote Access

• Cloud-Native & Hybrid Access - Listening to customers’ needs for cloud-native access, PRA now supports modern workloads, including cloud databases, Kubernetes clusters, and Docker-deployed Jumpoints, along with direct integrations with cloud vaults like AWS Secrets Manager. PRA also extends secure access to third-party vendor support, ensuring external users can work safely in the same controlled framework as internal teams.

• Password Safe Integration & Discovery – PRA can discover Windows endpoints and credentials from BeyondTrust Password Safe and AWS secrets. This enables credential injection across on-prem and cloud environments, including Kubernetes workloads and cloud databases, without exposing sensitive passwords.

• Seamless Session Handoff – Technicians and vendors can securely transfer live privileged sessions without disruption, whether accessing on-prem systems, cloud databases, or containerized applications.

• Multi-Layer Jump Proxy Support – PRA chains Jumpoints to extend secure access into deeply segmented IT and OT environments. Jumpoints can be deployed in Docker containers to reach cloud-native workloads while maintaining strict network separation.

• Workflow & ITSM Integrations – Privileged Remote Access aligns privileged access with enterprise processes. Just-in-time approvals, ticket association, and event-driven controls apply equally to cloud services and on-prem systems, reducing risk while keeping operations productive. PRA integrates with leading ITSM platforms like ServiceNow, Jira, and others to ensure privileged access is always tied to the right workflows.

Each one of our billion sessions reflects a business outcome:

• A remote employee who couldn’t connect to their VPN - within seconds, IT used Remote Support to jump into their machine, fix the config, and get them back online without ever exposing a single password.

• A contractor at a manufacturing plant who needed urgent access to a SCADA system - Privileged Remote Access granted just-in-time (JIT) access, recorded the session, and cut off access the moment the task was complete, enforcing zero trust principles.

• A global IT team rolling out critical security updates overnight across thousands of employee devices – Remote Support streamlined the process, rolling out the updates simultaneously without interrupting users, introducing risk, or relying on legacy tools.

These moments happen regularly in all organizations and they’re a reminder of why secure access matters.