BeyondTrust
More info
- Type
- PAM, remote support
An American security vendor that sells tools for restricting and logging admin privileges — and whose own remote-support product became the way into the US Treasury.
BeyondTrust is one of the big names in PAM, privileged access management: password vaults for admin accounts, session recording, and handing users exactly the rights they need. In 2012 it bought eEye Digital Security, where Marc Maiffret had made his name. In 2018 remote-support company Bomgar acquired BeyondTrust and took its name, so today's company is effectively Bomgar in a new suit.
In December 2024 a stolen API key for its Remote Support SaaS was used in a breach of the US Treasury Department, attributed to Chinese state actors. A security tool becoming the attack surface is not a new irony, but rarely is it this legible.