We performed a comparison between CyberArk Privileged Access Manager, Gemalto Protiva, and SailPoint IdentityIQ based on real PeerSpot user reviews.
Find out what your peers are saying about CyberArk, Delinea, BeyondTrust and others in Privileged Access Management (PAM)."Right off the bat, the most valuable feature is the DNA scan. It gives us the ability to scan our environment and find the accounts that we're going to need to take under control."
"It has helped from an auditing perspective identify who has access to privileged accounts."
"It enables us to secure accounts and make sure they are compliant."
"We can make a policy that affects everybody instantly."
"We are able to know who is accessing what and when; having accountability."
"On the EBB user side, we were able to secure all the server root passwords and admin for Windows. This was a big win for us."
"DVR like video recording and text-based recording for easier audits."
"Automatic password management, which will automatically change passwords based on compliance requirements."
"The most valuable feature for us is the ability to use Active Directory groups as virtual containers instead of domains because it means that we can control our access groups better."
"It offers a single source of truth. Everything can be handled from one tier."
"Provides good authorization and authentication system functionality."
"The big one now is that they're adding AI and machine learning to figure out automated approvals and make recommendations to their reviewers. So, if I bring up Doug McPherson and it says he has access to this application, the system will make a review based on peer group analysis. That's one of the biggest new things. The problem used to be that people would get everything loaded on, and they created too much work for themselves. Now, they can use these policies and start to let the machine pick the less risky things."
"Access certification and provisioning are two of the solutions most valuable features."
"What I like most about SailPoint IdentityIQ is that it's simple to use and easy to configure and deploy."
"It is a stable tool, which we run in our complex environment."
"One of the most valuable aspects of SailPoint is its open integration interface."
"SailPoint IdentityIQ has more enriched out-of-box connectors than the others."
"For users to access a system via CyberArk Privileged Session Manager, a universal connector needs to be coded in a language called AutoIT and its support for web browsers is so-so. Other products like Centrify have browser plugins that can help automate the process when using their products."
"The continuous scanning of the assets is limited to Windows and Unix. We like to have the solution scan any databases, network devices, and security devices for privileged accounts. That would be very helpful."
"One of our current issues is a publishing issue. If we whitelist Google Chrome, all the events of Google Chrome should be gone. It is not happening."
"it manages creds based on Organizational Units. That is, a "safe" is limited to specific OUs. That makes for very elaborate OU structure, or you risk exposing too many devices by putting most of them in fewer OUs."
"It can be made user-friendly, in the sense of the console is pretty outdated."
"Stability is a huge concern right now. We are on a version which is very unstable. We have to upgrade to stabilize it. It is fine, but the problem is we have to hire CyberArk to do the upgrade. This costs money, and it is their bug."
"The interface on version 9 looks old."
"The admin interface of the Password Vault Web Access (PVWA) is moving from an old style (the classic interface) to a new style (the v10 interface) and unfortunately, this process is quite slow."
"The user interface needs improvement."
"I would like to see more Cloud management from this product."
"One needs to understand that SailPoint is into full-fledged IAM practice with a long-term vision, and customers will get a quick ROI with best practices implementation."
"The UI of the solution could be more customizable so we could change the workflows to suit our needs."
"SailPoint IdentityIQ needs to improve its customization. It should also incorporate some standardized tools for implementation."
"Finding integration experts for SailPoint in the North American market can be challenging, and transitioning to a no-code or low-code setup could reduce dependence on specialized skills."
"Compared to at least one other product some of the administrative tasks could be easier or more intuitive."
"The user interface is not very user-friendly."
"It is not readily available and cannot be downloaded from the net."
More CyberArk Privileged Access Manager Pricing and Cost Advice →
Earn 20 points