In June 2025, Gartner released the Market Guide for Privileged Access Management in China, providing a comprehensive overview of the functional characteristics, core advantages, and primary application scenarios of Privileged Access Management (PAM) tools. QAX was successfully selected as a Representative Provider in China's PAM market, thanks to its Privileged Account Management System (PAM) and Operation Security Management System (Bastion Host).

Gartner states: "Privileged access refers to permissions that exceed the normal access granted to personnel and machine accounts. It allows users to bypass existing access controls, modify security configurations, or make changes across multiple users or systems. Since privileged access can create, modify, and delete IT infrastructure—including corporate data stored within it—it poses catastrophic risks. Therefore, managing privileged access is a critical security function for every organization and requires a specific set of procedures and tools."

QAX's Privileged Account Management System (PAM) follows a lifecycle-based management process, offering functionalities such as privileged account discovery and integration, automatic password rotation, verification and inspection, risk identification, access control, and account locking/release. This helps customers systematize, standardize, and streamline privileged account management, reducing security risks from mismanagement and preventing attackers from exploiting privileged accounts to steal sensitive data.

QAX's Operation Security Management System (Bastion Host) is designed around the principles of authentication, authorization, access, and auditing. It provides centralized operation and maintenance (O&M) control, real-time monitoring of O&M processes, compliance-based access control, and graphical auditing, enabling unified management and auditing of enterprise IT resources—including network devices, databases, security appliances, host systems, and middleware.

Leveraging the capabilities of these two products, QAX has developed a mature Privileged Access Security Solution that delivers user identity authentication, account security management, just-in-time privilege authorization, fine-grained access control, high-risk command management, and operational auditing in O&M scenarios. This establishes a comprehensive security management framework for enterprise IT centers, covering preventive measures, real-time monitoring, and post-event auditing.



Large enterprises, such as manufacturing company and retail company, often face challenges in unified O&M security management across multiple factories and branches. QAX addresses this by tightly integrating privileged access management with the bastion host system, enabling centralized control over users, assets, accounts, policies, and audit logs. Additionally, the Bastion Host's functionality has been optimized with session proxy components to enhance operational efficiency.

Notably, QAX’s PAM supports a partitioned management model for assets and components, ensuring flexibility and rapid response. These features allow enterprises to benefit from centralized security and convenience while meeting the needs of distributed multi-branch deployments, achieving holistic O&M security management improvements.

Gartner emphasizes: "Privileged Access Management has evolved into a core cybersecurity function in IT environments. Beyond enabling secure and compliant operations while strengthening cyber defenses, it also provides a solid foundation for regulatory compliance."

Source: Gartner, Inc. "Market Guide for Privileged Access Management in China" : Mia Yu, Feng Gao, June 23, 2025.

Gartner Disclaimer

Gartner does not endorse any vendor, product or service depicted in its research publications,and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner's research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.