2026 GigaOm Radar for CIEM Names BeyondTrust a Leader and Outperformer

BeyondTrust has been recognized as a Leader and an Outperformer in the 2026 GigaOm Radar for Cloud Infrastructure Entitlement Management (CIEM). We believe this recognition reinforces our commitment to secure every identity across every environment and keep pace with a rapidly changing risk landscape.

What is the GigaOm Radar for CIEM?

The 2026 GigaOm Radar for CIEM evaluated 22 vendors that fit their definition of Cloud Infrastructure Entitlement Management: “specialized security solutions that manage and secure identities and their associated permissions (entitlements) across cloud environments.”

Each evaluated vendor was required to meet several baseline criteria around managing and securing cloud identities and their entitlements, including:

• Multicloud discovery and visualization

• Cross-cloud visibility and correlation

• Real-time monitoring and alerting

• Permissions rightsizing

• Guided remediation

• Reporting and auditing

• Centralized management console

GigaOm also evaluated solutions based on key features, such as cloud identity threat detection and response, automated least privilege, just-in-time access, automated remediation and rightsizing, and more. Emerging features and business criteria were also considered.

The CIEM Landscape in 2026

The 2026 GigaOm report emphasized just how critical CIEM has become in managing the excessive privileges and “cloud identity debt” seen in many of today’s multicloud environments.

The report noted, “The importance of CIEM has grown substantially as organizations face increasingly dynamic cloud infrastructures where resources are constantly added, modified, or removed. Traditional identity and access management (IAM) systems struggle to keep pace with these rapid changes, creating security gaps and compliance vulnerabilities.​”

In addition to the table stakes features mentioned earlier, the GigaOm report also covered how many of today’s CIEM solutions look to address growing challenges around non-human identity management and cross-domain attack paths. Many CIEM vendors are now focused on incorporating advanced analytics and AI-driven capabilities to keep up with the speed and volume of identities and access in the cloud.

We believe that our unified approach to privilege-centric identity security is paramount as identities continue to multiply and access paths tend to cross multiple domains. While CIEM is a key control in understanding who can do what in your cloud and governing access intelligently, it’s only one piece of the puzzle, in our opinion. An attacker who compromises an endpoint, SaaS integration, or system credential can easily pivot into a cloud environment outside of CIEM controls.

This is why we believe that the recognition of BeyondTrust’s Pathfinder Platform as a centralized approach to identity security matters for today’s organizations. Our platform approach unifies our entire product set, providing a one-console approach to privilege-centric identity security, including PAM, CIEM, and ITDR.

To learn more about cross-domain attacks in the cloud, tune into a recent webinar from Phantom Labs™, BeyondTrust’s research team, in which the team demonstrates a real-world attack path involving enterprise AI agents.

CIEM and Beyond with Identity Security Insights and Entitle

Identity Security Insights® and Entitle are the two products within Pathfinder that provide robust CIEM controls, and more. By placing privilege at the center of the risk equation, Identity Security Insights identifies potential attack paths beyond the boundaries of cloud. It is also unique in its ability to provide the attacker's perspective with a view of each identity’s effective privileges (its True Privilege™). Using threat intelligence and proprietary machine learning models, Identity Security Insights offers visibility into the potential privileged pathways of every identity, including across domains. This visualization of privileges and privilege pathways allows security teams to be proactive rather than reactive, safeguarding against compromise across any environment (cloud, SaaS, on-premises, and more).

Complementing this, Entitle automates the provisioning and revocation of cloud access based on risk-scored recommendations, integrating with 100+ apps through a flexible workflow engine. The product eliminates standing access to drastically minimize the threat surface, while ensuring users have exactly the right access, for the moments they need it.

Read the full report to learn more about our recognition in this year’s GigaOm CIEM Radar.

And to gain clear, risk-based visibility into your cloud entitlements and entire identity estate, try our free, award-winning Identity Security Risk Assessment.