Rodney DapilmotoSystems Admin Analyst 3 at CPS Energy
Tor NordhagenExecutive Director at Semaphore
We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
"When we started with RPA, there was a requirement that every credential and the bots themselves be protected through the PAM system. From the get-go, we've had CyberArk in the middle... We've got a pretty robust RPA implementation with our PAM platform. Users, bots, the credentials — everything is managed via our PAM solution."
"Right off the bat, the most valuable feature is the DNA scan. It gives us the ability to scan our environment and find the accounts that we're going to need to take under control."
"CyberArk is a very stable product and it's a stable product because it has a simple design and a simple architecture that allows you to leverage the economies of scale across the base of your infrastructure that you already have implemented. It doesn't really introduce any new complex pieces of infrastructure that would make it that much more difficult to scale."
"CyberArk has been easy for us to implement and the adoption has been good. We've been able to standardize a bunch of things. We've been able to standardize relatively easily with the use of the platforms and managing the policies."
"The risk of lost password and forbidden access to resources has been drastically reduced which increased the security level for the entire company,"
"The technical support is good."
"The most valuable feature is Special Monitoring."
"The Password Upload Utility tool makes it easier when setting up a Safe that contains multiple accounts and has cut down the amount of time that it takes to complete the task."
"It offers the possibility of secure administration of hardware devices, as well as Linux systems administration from a Windows environment."
"Ease of use because of its monolithic software."
"The most valuable feature is session monitoring."
"The user interface is quite good. It's very straightforward."
"I find it really easy and computer confident, and the experience with the product is really good. Additionally, customizations are easy."
"The GUI interface is well-designed and user-friendly."
"What I like best about this product is the interface."
"I have found the password management and the secret management features to be the most valuable. Our customers find its ease of integration and the use of power shells really attractive."
"The one place where we found that this product really needs to improve is the cloud. Simple integrations don't exist, even today. We don't have anything specific on CyberArk for managing, SaaS products, SaaS vendors, SaaS credentials. I understand it's a vendor-based thing and that they have to coordinate with the other vendors to be able to do that, and there are integrations coming. But these are the major places where CyberArk definitely needs to invest some more time."
"It's a big program. To scale excessively, locally, on an on-prem application, takes a lot of servers."
"CyberArk has to continue to evolve with that threat landscape to make sure that they're still protecting those credentials that are owned by those that have privileged accounts in the firms."
"There is a bit of a learning curve, but it's a pretty complex solution."
"It needs better documentation with more examples for the configuration files and API/REST integration"
"We found a lot of errors during the initial setup. They should work to improve the implementation experience and to remove errors from the process."
"The authentication port is available in CyberArk Alero but not Fortinet products."
"Currently, in Secure Connect, an end user is required to enter account information manually, and cannot save any of this information for future use."
"I would like to see the shadowing of ongoing terminal sessions (Remote Desktop Mirroring)."
"Documentation could be improved if they were to include more about connectors. There is not enough documentation."
"Having more detailed reporting would improve this solution."
"There could be tweaks here and there. For example, instead of going to one main function to do this and another main function to do that, the solution could remap the user interface so that a person only has to go through one function. The way that function branches off should make a bit more sense."
"There are some things that I know are really important to include like A/B version features which are available in Windows. I would say that they should be included in the road map."
"This product is excellent in every way except minor details in handling extremely large environments."
"I think that the main interface should integrate better with non-standard applications and clients, to connect with other systems."
"We always ask for partner enablement, which is more like a soft requirement rather than a product requirement. It would be great if they can provide us deeper knowledge of their products for integration."
"I believe that this solution is priced well. It's the market leader and I think that it's the best solution."
"Overall, its pricing is really good. The main difference from all the other vendors is that they have one package that covers all the functionality and modules of the basic PAM, except the add-on modules like adware and server protection. It also doesn't include the licenses for domain controller protection or maybe an API call-related feature. For the basic privileged access management, the bundle pricing is really good, but when it comes to an agent-based solution for advanced cyber protection or application identity managers, it is expensive. Services are also very expensive if you hire the services team from CyberArk, but these guys are really good. For a couple of large banking projects, we had an experience with them. The banks wanted to have things quickly and efficiently, so we had to hire them. If we take four weeks, these guys can do everything on a weekend. They charge quite a big sum of money, but they know the system well."
"The price of this solution is quite reasonable."
"The solution is very expensive and requires a license. We pay for an enterprise license."
"Pricing is quite high and it could be improved."
"They have two types of licensing: purchase and subscription. You have to pay for each admin user, such as Microsoft admin, mail admin, database admin, etc."
"The price of this solution is good."
"Pricing is comparable to competing products."
"The pricing is standard in this business and we have no complaints about it."
"Its price is okay. We don't compete on pricing. We seldom use price to win over our competitors. We prefer it this way because if we can sustain the price, we make more margin as well. We don't want the price to go down to the bottom where despite the win, there's no margin at all."
"Secret Server is expensive when compared to the cost to some alternatives."
"There are different plans and additional licensing costs that can be instituted for add-ons."
CyberArk is the trusted expert in privileged access management and a global leader Identity Security. Designed from the ground up with a focus on security, CyberArk has developed a powerful, modular technology platform that provides the industry's most comprehensive Privileged Account Security Solution.
Secret Server is a fully-featured Privileged Access Management (PAM) solution available both on premise and in the cloud. It empowers security and IT ops teams to secure and manage all types of privileged accounts and offers the fastest time to value of any PAM solution.
CyberArk Privileged Access Manager is ranked 1st in Privileged Access Management with 15 reviews while Thycotic Secret Server is ranked 3rd in Privileged Access Management with 9 reviews. CyberArk Privileged Access Manager is rated 8.2, while Thycotic Secret Server is rated 8.2. The top reviewer of CyberArk Privileged Access Manager writes "Provides simplicity and ease of implementation for the right level of security controls". On the other hand, the top reviewer of Thycotic Secret Server writes "Excellent access management that can serve very large networks". CyberArk Privileged Access Manager is most compared with BeyondTrust Endpoint Privilege Management, Azure Active Directory, SailPoint IdentityIQ, Cisco ISE (Identity Services Engine) and WALLIX Bastion, whereas Thycotic Secret Server is most compared with HashiCorp Vault, Microsoft Azure Key Vault, IBM Security Secret Server, BeyondTrust Endpoint Privilege Management and CyberArk Enterprise Password Vault. See our CyberArk Privileged Access Manager vs. Thycotic Secret Server report.
See our list of best Privileged Access Management vendors.
We monitor all Privileged Access Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.