KuppingerCole
2023 CIEM Leadership Compass
About PrivX:
"While the core product is deliberately lean, it integrates with third parties to add functionality for SIEM systems and HSM. There is support for session recording and compliance, and recordings are encrypted. All SSH/RDP/HTTPS/VNC sessions are audited and logged and be used for forensics or training purposes. As a new functionality, native database connections are supported also. First implementations of Post Quantum Cryptography (NIST compatible) have been implemented."
KuppingerCole
2022 DREAM Leadership Compass Report
"DREAM is new access and entitlements classification coined by KuppingerCole Analysts. It goes beyond just cloud-focused management of entitlements and access, looking at all types of identities, workloads, and all elements of IT. SSH's Hybrid Privileged Access Management (PAM) solution PrivX stood out in the report and was ranked as the Overall Leader, Market Leader, and leader in several other categories."
KuppingerCole
2021 DevOps PAM Leadership Compass
"It is an innovative approach but one that does bring functional and security advantages – access is faster, onboarding and offboarding of privileged users is quick and there are no passwords to issue or lose, since there are no permanent left-behind credentials. Furthermore, users never handle or see any credentials or secrets at any point when accessing servers. Access is also based on roles to further restrict access to only those authorized."
KuppingerCole
2020 PAM Leadership Compass
"PrivX is a relatively new offering in the market by SSH that attempts to offer an alternative to conventional shared account password management technology by providing a certificate authority-based Just-In-Time access for SSH and RDP. Instead, PrivX dispenses with the need for a vault full of credentials and issues short-lived, or ephemeral, certificates for on-demand access."
GARTNER
Remove Standing Privileges Through a Just-in-Time PAM Approach
"Another vendor, SSH, is introducing an approach to JIT access with its “lean” PAM approach. This approach uses “ephemeral” access, granting one-time, short-lived certificates for elevating user access."
Vanson Bourne
Re-Thinking Privileged Access Management for Hybrid Cloud
"We learned that high-risk behaviors in many organizations, including password sharing, excessive access, and the bypassing of software security controls, threaten to undermine the security of corporate IT. And we found that more than half of IT and application development professionals would be willing to sacrifice security for speed, bypassing software security controls if they were under pressure to meet a deadline."
KuppingerCole
PAM for Multi Cloud and DevOps
"PrivX is a PAM solution that supports the theory that storing credentials and passwords is bad practice, even in a vault, and especially in the cloud native environments that DevOps operates. PrivX operates primarily without a vault or permanent credentials. Instead, it establishes a trust relationship between the target server environment and itself by acting as a certificate authority for all SSH and RDP (and HTTPS) access."
IDC
SSH Governance to Reduce Risk and Bridge the Trusted Access Gap
"Universal SSH Key Manager (UKM) is an enterprise-grade SSH user key management solution. UKM takes a nondisruptive approach that enables enterprises to gain and retain control of the SSH infrastructure without interfering with operations in production systems. There is no need to rip and replace how users get their work done or change the hundreds of auto-mated processes that are the lifeblood of ongoing business."
