We performed a comparison between CyberArk Privileged Access Manager, One Identity Safeguard, and SailPoint IdentityIQ based on real PeerSpot user reviews.
Find out what your peers are saying about CyberArk, Delinea, BeyondTrust and others in Privileged Access Management (PAM)."Creating policies and the password rotation feature have been valuable. We don't have to memorize our password for the ADM account."
"I really like the PTA (Privileged Threat Analytics). I find this the best feature."
"We can make a policy that affects everybody instantly."
"It is one of the best solutions in the market. Ever since I started using this solution, there has not been any compromise when it comes to our lab."
"It helps our customers in their software requirement imports."
"Performance-wise, it is excellent."
"PSM (Privilege Session Manager."
"Technical support is very helpful whenever we have any questions."
"I have found One Identity Safeguard to be stable."
"The Transparent Mode is the number one advantage of the product."
"The transparent mode for privileged sessions is one of the best things for customers, because they don't see the system in-between."
"It's a good solution for managing identities under OneFile for authorization."
"It has greatly helped improve our security posture. Safeguard has an option where it will reset passwords on service accounts, then go out to those servers where that service account is running as a service and update the password on it. That makes password changes very easy. We can regularly change passwords now and are planning on making it an annual activity, where all the people who own service accounts will go in and make sure all their passwords get changed, updated, and reset."
"Safeguard has the ability to record and retrieve in the full-video format."
"We are able to log and get reporting on all privileged activity that is being performed. We like the fact that we can leverage the session recording feature, which is especially valuable when we're dealing with third-party vendors that have to remote into our our boxes and servers to do any work on behalf of the bank. Now, we can record everything they are doing to ensure that they're only doing the changes that were needed. In addition, we use it to leverage knowledge transfer with our internal staff."
"I like Safeguard's snapshot feature that enables us to review the last time an application was opened and by whom. If there are any issues, we can look behind the scenes to see what has been done. We can suspend a user's access or close off a server."
"Great product to manage the access control of users."
"Provisioning in multiple environments."
"The basic concept is most valuable. I like how they have designed the solution. They create an Identity Cube, and then they do all the processes and configuration around the Identity Cube."
"It is a scalable product."
"It is simple and easy to implement."
"Certifications and user provisioning features are the most valuable."
"The solution is very good at the management of the identity lifecycle."
"Deployment takes a bit of time, however, once it's done properly, everything becomes very organized and easy to use."
"There were a lot of manual steps in the initial setup which could have been automated. I read the 10.4 release that was sent out about a month or two ago, and I saw the steps required for upgrade have been reduced by about 90%. That was a big thing for me, but I still haven't seen that yet because we have not upgrade past 9.9.5."
"Stability is a huge concern right now. We are on a version which is very unstable. We have to upgrade to stabilize it. It is fine, but the problem is we have to hire CyberArk to do the upgrade. This costs money, and it is their bug."
"CyberArk has to continue to evolve with that threat landscape to make sure that they're still protecting those credentials that are owned by those that have privileged accounts in the firms."
"Make it easier to deploy."
"This product needs professional consulting services to onboard accounts effectively based user profiles."
"The PTA could be improved. Currently, companies often have multiple domains and sometimes it's difficult to implement CyberArk in this kind of infrastructure. For example, you can add CPM (Central Policy Manager) and PSM (Privileged Session Manager and PVWA (Password Vault Web Access) for access, but if you want to add PTA (Privileged Threat Analysis) to scan Vault logs, it is difficult because this component may be adding multiple domain environments."
"They can do a better job in the PSM space."
"There is room for improvement in the availability of custom connectors on the marketplace for this solution. Additionally, their services for the CICD pipeline and ease of integration could be improved."
"Even though we have two nodes, there's no way to do an upgrade without taking everything completely offline. It would be nice if they could improve that."
"Cost-wise, it is a little bit expensive, which makes it difficult to get management approval. Its price should be reduced."
"I would like to see support for RDP over HTTPS so this product can be used in conjunction with the Microsoft terminal."
"The product uses a lot of resources in current sessions."
"Something for One Identity to look at is having integration guidelines for how to logically group accounts."
"The interface is better now, but it still could be improved a lot. It needs more organization, menus, automatic refresh of information, and Web 2.0."
"Support for One Identity Safeguard could be improved because sometimes the support team doesn't have an answer or solution for some bugs. A feature I found in a competitor would make One Identity Safeguard better, and that is the ability to load balance the traffic in the target."
"On a scale of one to ten, the stability is an eight."
"I think that the onboarding framework could be improved."
"If there's a price reduction for SailPoint IdentityIQ, that would be helpful. Another area for improvement in the product is the technical support, which needs to be more friendly to customers."
"We have had a lot of service breaks because of the lack of support."
"The advanced provisioning features require more improvement."
"The solution's technical support team's response time and skills need improvement since it is an area where there are shortcomings."
"The connectors are far too manual. This needs to be automated a bit."
"The connector for EPIC, ServiceNow, and Duo."
"The mover process for this solution could be improved."
More CyberArk Privileged Access Manager Pricing and Cost Advice →