rapiam.com

What It Is

RAP is an access governance and IAM/IGA platform from rapiam.com. It is designed to help mid-sized companies answer: “Who has what access, why do they have it, and when should it be revoked?” It covers the full access lifecycle, from access requests, manager approvals, and IT execution to eventual revocation and audit evidence. Its focus is on problems such as unrevoked accounts after employee departures, access status being tracked through spreadsheets and emails, and insufficient audit trails.

Core Capabilities and Deployment

In terms of protection type, RAP is closer to an identity governance, access control, and compliance audit tool than a traditional network perimeter security product. Its core features include a self-service access request portal, role and permission management, periodic access reviews, automated provisioning, audit trails, and NIS2 reporting. For deployment, RAP explicitly supports on-premises or private cloud installation, emphasizing that customers retain control over their data and infrastructure. Its PowerShell-first design fits Microsoft/Windows enterprise environments well: IT teams can use standard scripts for integration, while REST APIs, connectors for mainstream systems, and dictionary-based configuration help reduce implementation complexity.

Compliance, Management, and Pricing

RAP is clearly positioned for European compliance scenarios. It claims to be NIS2-ready, covering requirements related to access control and audit trails under NIS2 Article 21, and emphasizes GDPR by design. However, the website does not disclose third-party certifications such as ISO 27001 or SOC 2. On the management side, it can record access events and approval records and generate reports on demand, but it does not specify real-time alerts, SIEM integration, or notification policies. For pricing, pilot projects start at €2,000 and include one system, one department, and up to 100 identities, with delivery in 2–4 weeks. If the pilot moves to a formal deployment, the amount can be credited against the first-year license. Full production pricing is not publicly disclosed.

Pros, Cons, and Best-Fit Users

Its strengths are deployment autonomy, reduced vendor lock-in, suitability for Windows IT administrators to operate in-house, and clear value for NIS2 audit preparation. Public information also indicates that it has 10 years of development history and experience handling nearly 30,000 identities and 146 systems. Its limitations are that its automation capabilities depend on the customer’s PowerShell skills, while full pricing, SLA, support model, and security certification details are insufficiently disclosed. RAP is best suited to mid-sized companies in Poland and Central/Eastern Europe, especially organizations that already have Microsoft enterprise infrastructure, still manage access through spreadsheets and tickets, and are preparing for NIS2 audits.

Access from China and Alternatives

Information on access from China, payment methods, and local support has not been disclosed, so availability should be considered unknown. Chinese companies looking for similar capabilities can evaluate RAP, but should also compare SailPoint, Omada, One Identity, Microsoft Entra ID Governance, and Saviynt, or consider domestic IAM/IGA, zero-trust access control, and permission audit solutions to obtain local compliance, payment, and delivery support.