← All work
Zero Trust · Coforge (formerly Encora) · 2022 – 2025

Privileged access and endpoint privilege at scale

Self-hosted PAM for ~4,200 users and endpoint privilege management for ~5,000 users across Windows, macOS and Linux.

~4,200PAM users
~5,000EPM users
Lowercyber-insurance premiums

Context

Antivirus alone couldn’t keep up with how attackers were abusing privileged credentials, and there was limited visibility or control over who held admin rights.

Approach

Privileged access management first, for the accounts that could do the most damage, then endpoint privilege management across Windows, macOS and Linux so admin rights were granted just-in-time instead of by default. Credential rotation and approvals were automated so the controls didn’t add friction.

Outcome

Consistent privileged-access practice organisation-wide, automated credential management, stronger ISO compliance and audit reporting, and lower cyber-insurance premiums.