The Access Management Bill of Rights

I'm continuously shocked by how poorly the PAM industry has treated customers to date. Shame on CyberArk, Delinea, and all the rest of you for persisting with such predatory models.

• The business model is "squeeze the blood out of them, then squeeze harder."
• The deployment model is "you'll never stop paying our Professional Services fees if you ever want a deployment."
• The support model is "you'll pay maintenance forever because you can't keep this stuff alive without us, much less upgrade it."
• The adoption model is "it's supposed to be painful, you'll get used to it."

The world deserves better. YOU deserve better. 

Here's my bill of rights for admins and privileged users:

1. You have the right to a product that covers your entire infrastructure, not just the 4 things your PAM or secret store decided are enough.
2. You have the right to streamlined, simple deployment without the need for professional services.
3. You have the right to not fear, but embrace your PAM partner because they actually care about solving your problems and not the balance in your bank account.
4. You have the right to say "YES!" because anyone can use the technology to do their job without suffering.
5. You have the right to get time back because automation, cloud-native concepts, and resiliency were design principles from day one.
6. You have the right to full visibility of activities, and should have the option to connect it all to your monitoring tools so that you have the security awareness to react to events and make good decisions.
7. You have a right to simply and easily produce access-related evidence for audits and investigations.
8. As a privileged user, you have a right to securely and easily connect to the infrastructure needed to do your job using your preferred tools or methods.
9. You have a right to easily add new technologies to your stack, knowing that it will not take weeks or months of work to be added to your privileged access management tool.
10. You have the right to be confident that all access tied to a specific user has been deprovisioned when they change teams or get a new role.
11. You have the right to easily request access to the tools you need, and have those requests approved and provisioned, or declined, within a reasonable timeframe–not days or weeks.
12. You have the right to an easily-managed identity lifecycle across your infrastructure, supported by open standards such as SCIM, OIDC, and SAML, so you can meet compliance requirements.

You deserve better than the solutions provided by PAM providers. And this bill of rights is the starting point for demanding it.

Your PAM shouldn't scare you and your users to death. Make a change—StrongDM is the Zero Trust PAM platform (a better, more modern and flexible PAM) that puts you back in control of your business. Our G2 customer reviews can't be beat!