Analyst Chat #302: PAM Is No Longer a Vault - The New Identity Security Layer

Analyst Chat #302: PAM Is No Longer a Vault - The New Identity Security Layer

From KuppingerCole Analysts by KuppingerCole Analysts

June 8, 2026 · 35 min

About this episode

The episode discusses the evolution of Privileged Access Management and its implications in modern identity security.

Privileged Access Management has outgrown the vault. In this episode, Matthias sits down with lead analyst Alejandro Leal, author of KuppingerCole's newly released PAM Leadership Compass, to explore how the definition of privilege itself has changed, what NHIs and agentic AI mean for PAM, and why deployment sovereignty is now a boardroom conversation. Key Topics: ✅ How the definition of "privilege" has shifted from admin accounts to dynamic runtime identity capabilities ✅ PAM convergence with IGA, CIEM, ITDR, SIEM, and SOAR — the end of the standalone PAM product ✅ Non-Human Identities (NHIs) and agentic AI: the silent accumulation of machine privilege ✅ Just-in-time access: the gap between concept and operational reality ✅ Deployment sovereignty: who controls the keys to the kingdom — SaaS, on-prem, or hybrid? ✅ AI and ML in PAM: separating genuine innovation from marketing inflation "Most enterprises can tell you the number of employees they have — very few can tell you the number of machine identities." If that sounds familiar, this episode is for you.

People in this episode

Host: Matthias

Guest: Alejandro Leal

Topics covered

  • Privileged Access Management
  • Identity Security
  • Non-Human Identities
  • Agentic AI
  • Deployment Sovereignty
  • AI and ML in PAM

Keywords

  • Privileged Access Management
  • identity security
  • dynamic runtime identity
  • Non-Human Identities
  • agentic AI
  • deployment sovereignty
  • AI
  • machine privilege

Mentioned in this episode

Organizations: KuppingerCole

Products: PAM Leadership Compass

More episodes of KuppingerCole Analysts

Explore listener stats, chart rankings, contacts and more on the KuppingerCole Analysts podcast page.