Steven LafortunePrivileged access is supposed to make admin work safer. It also has a reputation for making that work slower: another vault, another approval, another tool between the person and the server. The useful question is whether any of that time comes back once PAM is part of the day.
We recently asked that inside Devolutions PAM. It was an in-app survey, run with people already using the product. 1,372 people answered.
What the survey shows
| Time saved | Responses | Share of 1,372 |
|---|---|---|
| 2 to 3 hours per week | 516 | 37.6% |
| More than 10 hours per week | 319 | 23.3% |
| 5 to 10 hours per week | 317 | 23.1% |
| About the same as before | 182 | 13.3% |
| Other | 38 | 2.8% |
1,152 of those 1,372 responses, about 84%, reported hours saved each week. That is the 2 to 3 hour group, the 5 to 10 hour group, and the group that reported more than 10.
Where the time comes back
Info-Tech’s September 2026 tech note, IT-Led Privileged Access Management for SMB, does not measure the hours in the survey. It describes the workflow, and it is explicit about the steps that workflow is meant to remove. In a small or mid-market team, the person using a privileged credential is usually a technician trying to connect and finish the job. Three parts of that description are where a week usually leaks.
The connection carries the credential. Info-Tech calls this the clearest operational advantage. Devolutions PAM integrates with Remote Desktop Manager, so credential use and the connection are one action. You do not take a password out of a separate vault, paste it, and open a second tool. The note’s point is that an approved, recorded, time-bound path only gets used if it is not the long way around.
The password rotates when the session closes. Checkout can ask for a comment, a ticket, or a reason, and an approver can answer from the mobile app, by email, or in the product. When the session closes, the credential is rotated and written back to the vault, so the next person is not copying a new secret into every place that still has the old one.
The session is already recorded. Connections routed through Devolutions Gateway are available for playback from the activity log, including a live view of an active session. The audit is part of the connection, not a project after the fact.
The same September 2026 package includes the infographic A Two-Time PAM Leader. There, Info-Tech ranks Devolutions #2 of 13 on the Data Quadrant composite, at 8.4.
That 8.4 is not a feature score on its own. The infographic says the Data Quadrant is built from real user feedback on two axes: Product Features and Satisfaction, and Vendor Experience and Capabilities. It does not publish the weighting that turns those axes into 8.4. What it does print, under those two headings:
- Vendor support: #1, at 96%. BeyondTrust is at 75%, CyberArk at 77%, Delinea at 78%.
- Implementation satisfaction: #1, at 93%. CyberArk is at 74%, BeyondTrust at 83%, Delinea at 79%.
- Agentless deployment: #1, at 100%. The only perfect score in that comparison. BeyondTrust is at 81%, Delinea and CyberArk at 80%.
- Privileged remote access: #1, at 89%. BeyondTrust is at 82%, Delinea at 80%, CyberArk at 75%.
- Overall feature satisfaction: #2, at 84%. BeyondTrust is at 77%, Delinea at 76%, CyberArk at 75%.
The next composites printed on the same page are BeyondTrust at 8.3, CyberArk at 8.2, and Delinea at 8.1.
Try it against your own week
To put a dollar figure on your own team, open the savings calculator. It assumes a full-time schedule (40 hours a week, 2,080 hours a year).
Download Devolutions PAM and compare one privileged connection with the way the team does it today. A free trial is on the product page.