KuppingerCole’s independent assessment evaluates vendors on their capacity to manage access risks, compliance, and governance automation. Analysts specifically highlighted Pathlock’s proficiency in integrated Separation of Duties (SoD) controls and continuous compliance monitoring, which span workforce, privileged, and non-human identities. Nitish Deshpande, a senior analyst at KuppingerCole, noted that the firm excels in product innovation by unifying identity, application, and privileged access under a single policy framework.

As SaaS adoption and AI agents expand the digital attack surface, traditional control mechanisms struggle to keep pace with machine-generated risks. Damon Tompkins, CEO of Pathlock, emphasized that the firm’s platform is designed to govern not just entitlements, but the specific transactions those entitlements enable. By bridging the gap between identity governance and transactional assurance, Pathlock aims to provide Global 2000 enterprises with a scalable defense for complex SAP, Oracle, and Workday ecosystems.