Compare CyberArk PAS vs. ForgeRock

You must select at least 2 products to compare!
CyberArk PAS Logo
37,597 views|17,802 comparisons
ForgeRock Logo
7,456 views|4,718 comparisons
Most Helpful Review
Anonymous User
Find out what your peers are saying about CyberArk PAS vs. ForgeRock and other solutions. Updated: March 2020.
436,846 professionals have used our research since 2012.
Quotes From Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

The risk of lost password and forbidden access to resources has been drastically reduced which increased the security level for the entire company,CyberArk has been easy for us to implement and the adoption has been good. We've been able to standardize a bunch of things. We've been able to standardize relatively easily with the use of the platforms and managing the policies.CyberArk is a very stable product and it's a stable product because it has a simple design and a simple architecture that allows you to leverage the economies of scale across the base of your infrastructure that you already have implemented. It doesn't really introduce any new complex pieces of infrastructure that would make it that much more difficult to scale.When we started with RPA, there was a requirement that every credential and the bots themselves be protected through the PAM system. From the get-go, we've had CyberArk in the middle... We've got a pretty robust RPA implementation with our PAM platform. Users, bots, the credentials — everything is managed via our PAM solution.Right off the bat, the most valuable feature is the DNA scan. It gives us the ability to scan our environment and find the accounts that we're going to need to take under control.The Password Upload Utility tool makes it easier when setting up a Safe that contains multiple accounts and has cut down the amount of time that it takes to complete the task.For a while, there were individual IDs having privileged access. We wanted to restrict that. We implemented the solution so that it can be more of internal control. We can have session recordings happening and reduce our attacks.There are no issues with scalability. Our clients are very happy to use the product.

More CyberArk PAS Pros »

ForgeRock has CIAM, which other products didn't have, and they have DevOps ready.We create and define the permissions and configurations for the users.The most valuable features are that it is easy to manage and it's stable.The solution's most valuable feature is the authentication for the consumers. The integration with other third-party applications is excellent.

More ForgeRock Pros »

It needs better documentation with more examples for the configuration files and API/REST integrationThere is a bit of a learning curve, but it's a pretty complex solution.CyberArk has to continue to evolve with that threat landscape to make sure that they're still protecting those credentials that are owned by those that have privileged accounts in the firms.The one place where we found that this product really needs to improve is the cloud. Simple integrations don't exist, even today. We don't have anything specific on CyberArk for managing, SaaS products, SaaS vendors, SaaS credentials. I understand it's a vendor-based thing and that they have to coordinate with the other vendors to be able to do that, and there are integrations coming. But these are the major places where CyberArk definitely needs to invest some more time.It's a big program. To scale excessively, locally, on an on-prem application, takes a lot of servers.Currently, in Secure Connect, an end user is required to enter account information manually, and cannot save any of this information for future use.Integration with the ticketing system should allow any number of fields to be used for validation before allowing a user to be evaluated and able to access a server.The initial setup of CyberArk is a challenge if you do not have prior experience with it.

More CyberArk PAS Cons »

Automatic Deployment needs improvement. it could be made easier.I find that it's quite expensive for just an open-source system. Support is quite expensive.They should improve the solution by include reporting.The identity management model needs a bit of improvement.

More ForgeRock Cons »

Pricing and Cost Advice
In comparison to other products on the market, CyberArk is a more costly product.This solution is considered to be more expensive than others out there on the market today.I do not have any opinions to add about the pricing of the product.No, I do not have any advice on the price of the product.Network and security licenses are currently being managed by other outsource vendors, so they are facing some type of problems in the digital aspect.

More CyberArk PAS Pricing and Cost Advice »

It's a bit pricey and could be more competitive.

More ForgeRock Pricing and Cost Advice »

Use our free recommendation engine to learn which Access Management solutions are best for your needs.
436,846 professionals have used our research since 2012.
Questions from the Community
Top Answer: Right off the bat, the most valuable feature is the DNA scan. It gives us the ability to scan our environment and find the accounts that we're going to need to take under control.
Top Answer: Privileged Access Management is a business transformation program. It forces business to look at their overall operating model for system administrative and application based access, and develop a… more »
Top Answer: We're pretty excited about Alero, the third-party access management. As a small company we lean on vendors quite a bit and we do that in multiple areas. That's going to be a big one for us. It's just… more »
Top Answer: We create and define the permissions and configurations for the users.
Top Answer: You need to negotiate the pricing, so how expensive or affordable it ends up being depends on each individual contract.
Top Answer: It's hard to speak with ForgeRock. It's very expensive. I find that it's quite expensive for just an open-source system. Support is quite expensive. We are only 300 users. It would make sense for a… more »
Average Words per Review
Avg. Rating
out of 31 in Access Management
Average Words per Review
Avg. Rating
Popular Comparisons
Compared 18% of the time.
Compared 8% of the time.
Compared 5% of the time.
Also Known As
CyberArk Privileged Access Security, CyberArk Privileged Account Security, SSH Key Manager, Privileged Session Manager, Privileged Threat Analytics, Application Identity Manager, On-Demand Privileges Manager, Endpoint Privilege ManagerForgeRock Identity Platform, ForgeRock OpenIDM

CyberArk is the trusted expert in privileged account security. Designed from the ground up with a focus on security, CyberArk has developed a powerful, modular technology platform that provides the industry's most comprehensive Privileged Account Security Solution.

Open source provisioning solution for real-time user management life cycle automation.
Learn more about CyberArk PAS
Learn more about ForgeRock
Sample Customers
Rockwell AutomationGeico, Thomson Reuters, Salesforce, McKesson, Trinet, SKY, BNP Paribas, Deloitte, Capgemini, North Western University
Top Industries
Financial Services Firm28%
Insurance Company14%
Energy/Utilities Company10%
Comms Service Provider8%
Computer Software Company38%
Comms Service Provider15%
Insurance Company5%
Computer Software Company36%
Comms Service Provider11%
Media Company10%
Company Size
Small Business17%
Midsize Enterprise10%
Large Enterprise73%
Small Business17%
Midsize Enterprise7%
Large Enterprise76%
Small Business33%
Midsize Enterprise22%
Large Enterprise44%
Find out what your peers are saying about CyberArk PAS vs. ForgeRock and other solutions. Updated: March 2020.
436,846 professionals have used our research since 2012.
CyberArk PAS is ranked 1st in Privileged Access Management with 27 reviews while ForgeRock is ranked 6th in Access Management with 4 reviews. CyberArk PAS is rated 9.0, while ForgeRock is rated 7.4. The top reviewer of CyberArk PAS writes "Provides simplicity and ease of implementation for the right level of security controls". On the other hand, the top reviewer of ForgeRock writes "Enables us to define our systems but it is quite expensive ". CyberArk PAS is most compared with BeyondTrust Endpoint Privilege Management, Thycotic Secret Server, Cisco ISE (Identity Services Engine) and Microsoft Azure Active Directory Premium, whereas ForgeRock is most compared with SailPoint IdentityIQ, Microsoft Azure Active Directory Premium, OpenIAM Identity Governance, PingID and WSO2 Identity Server. See our CyberArk PAS vs. ForgeRock report.

See our list of best Access Management vendors.

We monitor all Access Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.