BeyondTrust
BeyondTrust sells privileged access management software for enterprises.
On the record
Checkpoint: 12-month window to go clean on critical CVEs and show real PathfinderAI/NHI Governance adoption
The call
BeyondTrust still leads PAM rankings while patching a run of critical CVEs and watching Palo Alto Networks bundle CyberArk into its platform.
BeyondTrust helps companies control who can access sensitive systems and data. It has built a real customer base of 20,000 companies, including most of the Fortune 100, and has held a leading position for six years. However, two problems are hitting hard right now. First, Palo Alto Networks bought CyberArk, BeyondTrust's main competitor, and is now bundling it into a larger security package that makes it much cheaper and easier for customers to buy everything from one seller instead of choosing BeyondTrust separately. Second, BeyondTrust's remote support tool has had multiple serious security holes exploited by hackers in the past year, including one that exposed the U.S. Treasury, which makes customers question whether they can trust the company to keep their systems safe. If Palo Alto keeps bundling CyberArk aggressively and BeyondTrust keeps finding new security problems in its products, the company will struggle to win new customers and keep old ones over the next year or two.
Why
01
AI pressure: Microsoft Entra Agent ID and Copilot for Security building native AI-agent identity governance. Microsoft could fold AI-agent identity governance straight into Entra ID and Azure, cutting demand for BeyondTrust's standalone NHI tools. Could AI do the core job? Unlikely.
02
Bigger players: Palo Alto Networks (via CyberArk acquisition and XSIAM bundling). Palo Alto Networks now bundles market leader CyberArk's PAM into its broader security platform, squeezing standalone vendors like BeyondTrust. Could a giant copy it? Probably.
03
What protects it. 20,000 customers, 75 of the Fortune 100, and six straight years as KuppingerCole's PAM leader keep switching costs high.
What would change this call
A sixth critical CVE disclosed in BeyondTrust's Remote Support product within 12 months. Would show the trust erosion from repeated breaches is continuing, not stabilizing.
Palo Alto Networks announces formal PAM bundling of CyberArk into XSIAM/SASE packages. Would show platform consolidation directly squeezing BeyondTrust's standalone positioning.
PathfinderAI and NHI Governance move from early access to published customer adoption numbers. Would show whether new AI-native products are gaining real traction or stalling.
Palo Alto Networks announces formal PAM bundling of CyberArk into XSIAM/SASE packages. Would show platform consolidation directly squeezing BeyondTrust's standalone positioning.
PathfinderAI and NHI Governance move from early access to published customer adoption numbers. Would show whether new AI-native products are gaining real traction or stalling.
Key numbers
- Revenue near $315M
- ~20,000 customers, 75 of Fortune 100
- Over $1B Blackstone credit facility
Named risks
- Repeated critical CVEs in Remote Support/PAM core, including CVE-2026-1731 (CVSS 9.9) active exploitation mid-2026.
- Palo Alto Networks bundling CyberArk PAM into XSIAM/SASE could squeeze standalone positioning.
- Over $1 billion Blackstone private-credit leverage increases refinancing and interest-rate exposure.
- PathfinderAI and NHI Governance remain in early access with adoption unproven as of mid-2026.
Rivals, as read in July 2026
| Rival | Direction | Evidence |
|---|---|---|
| CyberArk | losing to | CyberArk, PAM market leader, now bundled into Palo Alto Networks XSIAM/SASE platform, 2025-2026 |
| Microsoft (Entra PIM) | gaining on | Entra Privileged Identity Management bundled free into Azure/M365, encroaching on standalone PAM demand |
| SailPoint | contesting | SailPoint identity governance reached ~$813M ARR by late 2024 in adjacent market |
| Delinea | contesting | Delinea positioned as cloud-native PAM challenger in 2026 vendor comparisons |
Questions people ask
- Is BeyondTrust profitable in 2026?
- BeyondTrust is privately held and does not disclose public profit figures. In December 2023 it took on a Blackstone private-credit facility exceeding $1 billion (reported as an $880M loan plus a $120M line of credit), signaling leveraged growth financing rather than confirmed self-funded profitability.
- Who owns BeyondTrust?
- Francisco Partners acquired Bomgar (renamed BeyondTrust) from Thoma Bravo in April 2018. Clearlake Capital Group made a strategic investment alongside Francisco Partners in 2021/2022. No IPO or new priced equity round has been publicly disclosed since, and the company remains private as of July 2026.
- Could AI replace BeyondTrust?
- Unlikely soon. BeyondTrust launched PathfinderAI and a Pathfinder MCP Server on April 27, 2026, letting agents like Microsoft Copilot, OpenAI, and Claude query its identity data, positioning itself as the audited control layer AI agents plug into rather than a workflow AI could bypass.
- Has BeyondTrust been breached?
- Yes. In December 2024, BeyondTrust's Remote Support SaaS was breached (CVE-2024-12356, CVE-2024-12686), linked to a Chinese state-sponsored attack on the US Treasury Department, exposing 17 SaaS customers per February 2025 reporting.
- Who is BeyondTrust's biggest competitor?
- CyberArk is BeyondTrust's closest rival and the PAM market leader; CyberArk has since been folded into Palo Alto Networks, which bundles PAM into its broader XSIAM/SASE platform, intensifying consolidation pressure on BeyondTrust's standalone positioning as of 2026.
- Has BeyondTrust had layoffs?
- No layoffs are documented in available reporting through mid-2026. Headcount estimates from third-party trackers describe growth as plateauing rather than shrinking, though exact company-disclosed headcount figures are not publicly confirmed.
Timeline
- 2026-07-09Launched NHI Governance extending PAM to non-human identities like API keys and AI agents
- 2026-06-08Selected for Anthropic's Project Glasswing initiative to secure critical software infrastructure
- 2026-05-18Named Overall Leader in KuppingerCole's PAM Leadership Compass for sixth consecutive year
- 2026-04-27Launched PathfinderAI and Pathfinder MCP Server for AI-agent identity queries
- 2026-02-26Recognized Leader and Outperformer in GigaOm's CIEM Radar
- 2026-02-03Critical pre-auth RCE CVE-2026-1731 (CVSS 9.9) disclosed, later under active exploitation
- 2025-06-18Critical RCE CVE-2025-5309 (CVSS 8.6) patched; CISA mandated federal fix by July 11, 2025
- 2025-02-26Launched Pathfinder, a unified AI-driven identity security platform
- 2025-02-14Rapid7 found PostgreSQL zero-day CVE-2025-1094 tied to prior breach
- 2023-12-07Blackstone provided private-credit facility exceeding $1 billion to BeyondTrust
Revision history
21 July 2026
First assessed. Losing its protection. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources
- BeyondTrust Stock Price, Funding, Valuation, Revenue & Financial Statements (2024-04-15)
- BeyondTrust - Overview, News & Similar companies (2026-07-19)
- BeyondTrust Delivers Record Recurring Growth and Expands Identity Security Portfolio (2024-02-01)
- BeyondTrust Named an Overall Leader in KuppingerCole's PAM Leadership Compass (2026-05-18)
- BeyondTrust Recognized as a Leader and Outperformer in GigaOm's CIEM Radar (2026-02-26)
- BeyondTrust Number of Employees 2026 (2026-06-29)
- BeyondTrust - Headcount, Funding & Open Jobs (2026-07-08)
- Blackstone Provides $1 Billion in Private Credit for BeyondTrust (2023-12-07)
- BeyondTrust Pathfinder Delivers a One-Platform Approach to Identity-Centric Security (2025-02-26)
- BeyondTrust Launches PathfinderAI to Power AI-Native Identity Security Operations (2026-04-27)
- BeyondTrust Extends Privileged Access Leadership (2026-07-09)
- BeyondTrust Zero-Day Breach Exposed 17 SaaS Customers… (2025-02-01)