Adjacent Categories

Traditional IAM (Identity and Access Management) is the category of infrastructure that manages human and service identities, roles, and permissions—answering the question of who an actor is and what they are allowed to do at configuration time.

Configuration-time access control is the practice of defining and assigning access permissions before a workload runs, through roles, policies, and infrastructure configuration—as opposed to runtime enforcement during execution.

Posture management identifies and remediates misconfigured permissions, unused credentials, and over-broad roles at rest—while runtime enforcement evaluates and blocks unauthorized actions as they occur during execution.

NHI (Non-Human Identity) security is the practice of discovering, managing, and securing machine identities—service accounts, API keys, tokens, and certificates—used by non-human workloads.

A privileged access proxy (PAP) is an intermediary that brokers privileged access to sensitive systems—recording sessions, enforcing authentication, and controlling access—traditionally for human operators.