# Privileged access management: what AI models recommend, November 2026

Gane Index, November 2026 Edition. Asked as "privileged access management platform" and as "PAM tool", six framings each, to fourteen models with search on, on behalf of a mid-market B2B company. Page: https://www.gane.ai/index/it/identity/privileged-access-management

**Standing:** Delinea Secret Server leads with 39% of first choices; verdict contested. 51 first choices across the direct, paraphrase, budget and scale prompts.

## First-choice share

| Rank | Product | Share | Negative rate | Labels |
|---|---|---|---|---|
| 1 | [Delinea Secret Server](https://www.gane.ai/index/it/vendors/delinea-secret-server/index.md) | 39% | 19% | 64 |
| 2 | [ManageEngine PAM360](https://www.gane.ai/index/it/vendors/manageengine-pam360/index.md) | 22% | 12% | 52 |
| 3 | [KeeperPAM](https://www.gane.ai/index/it/vendors/keeperpam/index.md) | 10% | 5% | 40 |
| 5 | [miniOrange PAM](https://www.gane.ai/index/it/vendors/miniorange-pam/index.md) | 4% | 0% | 14 |
| 6 | [BeyondTrust](https://www.gane.ai/index/it/vendors/beyondtrust/index.md) | 4% | 37% | 54 |
| 7 | [Securden Unified PAM](https://www.gane.ai/index/it/vendors/securden-unified-pam/index.md) | 2% | 10% | 20 |
| 8 | [StrongDM](https://www.gane.ai/index/it/vendors/strongdm/index.md) | 2% | 12% | 17 |
| 15 | [Teleport](https://www.gane.ai/index/it/vendors/teleport/index.md) | 0% | 8% | 26 |
| 16 | [One Identity Safeguard](https://www.gane.ai/index/it/vendors/one-identity-safeguard/index.md) | 0% | 19% | 21 |
| 18 | [HashiCorp Vault](https://www.gane.ai/index/it/vendors/hashicorp-vault/index.md) | 0% | 32% | 19 |
| 27 | [WALLIX Bastion](https://www.gane.ai/index/it/vendors/wallix-bastion/index.md) | 0% | 30% | 10 |
| 84 | [CyberArk Privileged Access Manager](https://www.gane.ai/index/it/vendors/cyberark-privileged-access-manager/index.md) | 0% | 56% | 57 |

Rank is by share of first choices among all 84 products named; products with the same share are tied, and the order among them carries no meaning. The table lists those with at least 10 labels.

## Each model's first choice on the direct prompt

- Claude Haiku 4.5: Delinea Secret Server, ManageEngine PAM360; alternatives Netwrix Privilege Secure, One Identity Safeguard
- GPT-5.4 mini: ManageEngine PAM360; alternatives BeyondTrust Password Safe, CyberArk Privileged Access Manager
- Gemini 3.5 Flash: Delinea Secret Server; alternatives BeyondTrust, KeeperPAM, ManageEngine PAM360, StrongDM
- Perplexity Sonar: Delinea Secret Server; alternatives KeeperPAM, ManageEngine PAM360
- Grok 4.20: BeyondTrust, Delinea Secret Server; alternatives KeeperPAM, ManageEngine PAM360, Securden Unified PAM, miniOrange PAM
- Mistral Small: Delinea Secret Server; alternatives KeeperPAM, ManageEngine PAM360
- DeepSeek V4 Flash: ManageEngine PAM360; alternatives Delinea Secret Server, Securden Unified PAM
- Llama 4 Maverick: miniOrange PAM; alternatives Delinea Secret Server, HashiCorp Vault, ManageEngine PAM360
- Qwen 3.7 Flash: Delinea Secret Server; alternatives BeyondTrust, ManageEngine PAM360, Microsoft Entra ID Privileged Identity Management
- Kimi K2: Delinea Secret Server, ManageEngine PAM360; alternatives Securden Unified PAM, miniOrange PAM
- GLM 4.7 FlashX: ManageEngine PAM360; alternatives BeyondTrust PAM, Delinea Secret Server, Securden Unified PAM, miniOrange PAM
- MiniMax M2.5: ManageEngine PAM360; alternatives BeyondTrust, Delinea Secret Server, KeeperPAM
- GPT-6 Luna: Delinea Secret Server Cloud; alternatives BeyondTrust, KeeperPAM, ManageEngine PAM360
- Muse Glimmer 30B: Delinea Secret Server; alternatives BeyondTrust Remote, ManageEngine PAM360, miniOrange PAM

## Sources the answers cite

77 of 84 answers came back with a source list, from 14 of 14 models. Sites named in the most answers:

- aimultiple.com: 33 answers, 34 citations
- delinea.com: 27 answers, 43 citations
- securden.com: 23 answers, 36 citations
- manageengine.com: 21 answers, 26 citations
- jumpserver.com: 19 answers, 19 citations
- expertinsights.com: 18 answers, 18 citations
- startwithidentity.com: 17 answers, 24 citations
- netwrix.com: 16 answers, 22 citations

Pages named in the most answers:

- https://aimultiple.com/pam-solutions (33 answers)
- https://gane.ai/index/it/identity/privileged-access-management (15 answers)
- https://expertinsights.com/identity-and-access-management/the-top-privileged-access-management-pam-solutions (14 answers)
- https://jumpserver.com/blog/top-10-pam (13 answers)
- https://ciopages.com/buyer-guides/privileged-access-management (11 answers)
- https://consilien.com/news/best-pam-solutions-2026 (11 answers)
- https://netwrix.com/en/resources/blog/pam-solutions (11 answers)
- https://delinea.com/hubfs/Delinea/reports/delinea-frost-radar-privileged-access-management-2024.pdf (10 answers)
- https://systemsdigest.com/posts/best-pam-solutions-mid-size-teams-2026 (10 answers)
- https://akeyless.io/blog/top-pam-solutions-for-enterprise-environments (9 answers)

## Warned against

- BeyondTrust: 20 of 54 labels negative. "This is the most concerning one right now... CVSS 9.2 pre-authentication bypass... actively exploited by a suspected Chinese state-aligned threat group" (DeepSeek V4 Flash, negative prompt)
- CyberArk Privileged Access Manager: 32 of 57 labels negative. "Avoid enterprise giants like CyberArk, BeyondTrust, or One Identity unless you qualify for heavy discounts" (Grok 4.20, budget prompt)
- Delinea Secret Server: 12 of 64 labels negative. "Be cautious with: BeyondTrust and Delinea specifically due to recent active exploitation patterns" (Kimi K2, negative prompt)
- ManageEngine PAM360: 6 of 52 labels negative. "ManageEngine PAM360 ... Limited external-facing portal ... Less modern architecture" (GLM 4.7 FlashX, negative prompt)

## Movement since October 2026

Floor: 11 points of share, measured on the calibration repeat.
Same leader: Delinea Secret Server at 39%.

- Delinea Secret Server: 37% to 39%, +2. Inside the floor by 9 points · rank 1 of 84, unchanged.
- ManageEngine PAM360: 24% to 22%, −2. Inside the floor by 9 points · rank 2 of 84, unchanged.
- BeyondTrust: 6% to 4%, −2. Inside the floor by 9 points · rank 4 → 6 of 84.
- StrongDM: 0% to 2%, +2. Inside the floor by 9 points · rank 17 → 8 of 84.
- Teleport: 2% to 0%, −2. Inside the floor by 9 points · rank 8 → 15 of 84.
- HashiCorp Vault: 2% to 0%, −2. Inside the floor by 9 points · rank 9 → 18 of 84.
- KeeperPAM: 9% to 10%, +1. Inside the floor by 10 points · rank 3 of 84, unchanged.
- miniOrange PAM: 4% to 4%, ±0. Inside the floor by 11 points · rank 5 of 84, unchanged.
- Securden Unified PAM: 2% to 2%, ±0. Inside the floor by 11 points · rank 7 of 84, unchanged.
- One Identity Safeguard: 0% to 0%, ±0. Inside the floor by 11 points · rank 19 → 16 of 84.
- Netwrix Privilege Secure: 0% to 0%, ±0. Inside the floor by 11 points · rank 16 → 20 of 84.
- WALLIX Bastion: 0% to 0%, ±0. Inside the floor by 11 points · rank 69 → 27 of 84.

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.