No more typing reviews! Try our Samantha, our new voice AI agent.

Digital Guardian vs Idira Privileged Access Manager comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare One
Sponsored
Average Rating
8.6
Reviews Sentiment
6.5
Number of Reviews
23
Ranking in other categories
Email Security (20th), Secure Web Gateways (SWG) (13th), Data Loss Prevention (DLP) (22nd), Cloud Access Security Brokers (CASB) (13th), Distributed Denial-of-Service (DDoS) Protection (9th), Software Defined WAN (SD-WAN) Solutions (12th), Access Management (11th), Bot Management (3rd), ZTNA as a Service (9th), ZTNA (4th), Secure Access Service Edge (SASE) (9th), Remote Browser Isolation (RBI) (3rd)
Digital Guardian
Average Rating
6.8
Reviews Sentiment
6.5
Number of Reviews
13
Ranking in other categories
Data Loss Prevention (DLP) (17th), Endpoint Encryption (6th), Mobile Data Protection (3rd), Advanced Threat Protection (ATP) (27th), Endpoint Detection and Response (EDR) (56th)
Idira Privileged Access Man...
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
230
Ranking in other categories
User Activity Monitoring (1st), Enterprise Password Managers (2nd), Privileged Access Management (PAM) (1st), Mainframe Security (1st), Operational Technology (OT) Security (3rd)
 

Mindshare comparison

Data Loss Prevention (DLP) Mindshare Distribution
ProductMindshare (%)
Digital Guardian2.7%
Microsoft Purview Data Loss Prevention6.2%
Forcepoint Data Loss Prevention4.7%
Other86.4%
Data Loss Prevention (DLP)
Privileged Access Management (PAM) Mindshare Distribution
ProductMindshare (%)
Idira Privileged Access Manager9.9%
One Identity Safeguard4.4%
Delinea Secret Server4.0%
Other81.7%
Privileged Access Management (PAM)
 

Featured Reviews

CV
Network Architect at IP Dimension
Cloud security has improved remote access and has reduced costs for smaller client sites
I have used Cloudflare One's Identity-Aware Proxy, and it is quite straightforward from what I have seen so far. The app registration on the Azure side integrates fully into Cloudflare, and I am very satisfied with that part because it is easy to set up. The integration of Cloudflare One's Secure Web Gateway and Zero Trust Network Access works without any issues. That part is pretty automatic, and if you complete the rest of the setup, it comes together by itself with no issues from my side. What makes it nice is that we can actually start replacing on-site firewalls at this stage for the smaller clients because it does not matter if they go to a coffee shop or work from home; they are still secured by the same connection. The hops get shorter and you get better latency. We have done testing to see if it is better. One thing that we did notice with our proof of concept with our current client is that they have people connecting from the UK. When they used their previous VPN solution, uploading CAD drawings and other files to the server took a long time. They mentioned that it is much quicker on Cloudflare One's solution. I definitely believe that is part of the improved performance, and I am satisfied with that as well. What is nice about Cloudflare One is that it makes the setup easier and also easier to train technicians to maintain it. Compared to legacy systems, we do not need to get fancy firewalls in place that are costly. That is definitely also a cost-saver with Cloudflare One.
Syed Mubeen - PeerSpot reviewer
Cyber Security Researcher at a tech services company with 11-50 employees
Enterprise data protection has supported regulatory compliance and integrates with classification tools
In terms of functionality, many features are valuable in Digital Guardian, as the first thing for most customers is that they are using solutions such as Boldon James and Titus, which fall under the classification side, and Digital Guardian can easily integrate with this data classification solution and has a very granular level of configuration and policy tuning. Digital Guardian's data protection policies are indeed useful for my clients. Regarding Digital Guardian, I find it to be a very good solution, and in fact, it is an enterprise-level solution that has very tight integration with most of the products, with Fortra but also with others.
Atul-Gujar - PeerSpot reviewer
CyberArk manager at a comms service provider with 10,001+ employees
Secures critical infrastructures with essential user session audit records
A potential area for improvement is enhancing support for cluster environments and distributed Vaults. Clients in multiple countries that need central access have different challenges that require better solutions from CyberArk. For financial services, CyberArk can improve incident response by ensuring fast support for critical priority tickets to meet compliance requirements. Providing more documentation on CyberArk is recommended for new team members to enhance their troubleshooting capabilities. I understand it's up to the client, but 99% fail to change the demo key, so it's crucial for CyberArk to emphasize changing the key and documenting it as part of the installation process.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Enables me to work from two locations."
"Cloudflare Access is part of the Zero Trust philosophy."
"I'm very satisfied with the environment and the dashboard."
"Cloudflare, in my opinion, was easy to implement."
"Cloudflare One has assisted in securing my remote workforce through a SASE solution with Cloudflare One and the Workers part, although I am not currently using the Workers component."
"It's the endpoint exposition. We don't need to expose our VPN server to the internet and need a zero-test solution. I can apply some conditional access to the endpoint that's connecting to our network to check their security policies or the security condition of their workstation. Once the workstation is trying to connect to my internal network, then I would like to check the discrete condition of these endpoints that are trying to access my internal network. We created some conditional access. We have CrowdStrike, to check if the CrowdStrike is installed, to check if it's updated, and to check for Windows updates. We created some conditional policies to check it."
"It is a stable solution."
"Cloudflare DDoS is better than its competitors for its security, deployment, and scalability."
"Enhance your skills if you can to use Digital Guardian, in terms of data security, to its fullest."
"There is a built-in endpoint detection response that helps save money."
"It has been scalable."
"Data security is now one of the most important aspects for any organization."
"So if you look at enterprise data loss prevention this solution is the best."
"I like the solution's adaptive inspection and container inspection."
"The strong impact of Digital Guardian on my organization is in preventing sensitive data leaks to USB, email, and cloud, and in blocking unauthorized access in real time."
"It has the added advantage of offering forensic analysis."
"It is a central repository. Therefore, if someone needs to access a server, then they go through CyberArk PAM. It provides a secure way to do this and CyberArk PAM records everything. For example, if you are connecting to a Linux server, then once you get into the Linux server and if it is integrated with CyberArk, it will automatically start recording everything that is being done. In most banks, seeing the recordings is very useful. If there are any gaps or something has happened which shouldn't have happened, then we can check the logs and videos. So, it gives security, in a robust manner, to the organization."
"The best feature is vaulting. CyberArk has a separate vault, which is their proprietary vault, which provides multiple encryptions for every password object, as well as tamper-proof recording."
"We also use CyberArk’s Secrets Manager. Because AWS is the biggest area for us, we have accounts in AWS that are being rotated by CyberArk. We also have a manual process for the most sensitive of our AWS accounts, like root accounts. We've used Secrets Manager on those and that has resulted in a significant risk reduction, as well."
"I love the ability to customize the passwords: the forbidden characters, the length of the password, the number of capital, lowercase, and special characters. You can customize the password so that it tailor fits, for example, mainframes that can't have more than eight characters. You can say, "I want a random password that doesn't have these special characters, but it is exactly eight characters," so that it doesn't throw errors."
"The technical support is good."
"The users have the ability to rotate passwords on a daily basis with a Reconcile Account. Or, if they want to do one-time password checkouts, we can manage those, check in, check out. I like the flexibility of the changing of the password, specifically."
"I primarily use the solution to record any actions taken on specific important targets, allowing management to look at actions and play them back to see what was done within the environment."
"I'm no longer the product owner for PAM, but I can say that the most useful feature is the vault functionality, which keeps all your passwords secure in a digital vault."
 

Cons

"Operating and tuning the product is difficult."
"Feedback could be enhanced."
"Cloudflare DDoS has poor technical support."
"Automation could be improved where you can easily add a TLS and SSL certificate to an application or web app if the developer did not include it."
"Cloudflare Zero Trust Platform needs to improve its documentation. It took time to do the implementation."
"When there are any dynamic changes in complex applications, the tool takes a lot of time, making its analytics-related area a major matter of concern where improvements are needed."
"The tool should provide on-premise versions. Currently, all versions are cloud-based."
"From a logging perspective, it is still a bit difficult to see exactly what users are being blocked with the current views."
"My biggest lesson learned from dealing with this product is that they commit to something but they don't deliver it."
"The solution has complexities around policy creation and deployment."
"I would like to see the workflow, to get all the rules and policies set up, be less complicated."
"Digital Guardian is, compared to other tools, more complex to implement."
"I think the whole system needs improvement, even though it works fine the way they designed it."
"If the client uses Windows 10 or 11 and Microsoft updates the operating system's version, Digital Guardian must update their product to match compatibility."
"When considering potential areas for improvement, it may be beneficial for Digital Guardian to optimize its processes and reduce the computational demands on the system, particularly with regard to high CPU usage. Although Digital Guardian offers numerous benefits, it can consume a substantial amount of RAM and CPU power."
"For vendor support, such as Fortra support, I would rate it a seven because all the support comes from different parts that sometimes have challenges meeting time zones, and sometimes they reroute to distributors and rely on partners."
"The initial setup could be simplified. Right now, in comparison to its nearest competitors, it's quite complex."
"In terms of mean time to respond, I acknowledge variable response time. The L1 team is proactive, yet the vendor often pushes to close incidents swiftly, even when issues remain unresolved."
"CyberArk has two disadvantages; the first is that it's insanely expensive and the other is it's very complex."
"Based on the user experience that I see on a day-to-day basis, some changes could be made to the Privileged Session Manager tool to make it more user-friendly. The user interface of that tool could be more advanced and understandable to laymen, rather than being more of a developer tool."
"In CyberArk Privileged Access Manager, the UI has room for improvement, as does the dashboard reporting, which could be made better or easier to use."
"It's not a cheap application. It's very expensive."
"The solution needs better features for end users to manage their own whitelisting for API retrieval."
"Cost efficiency is the number one thing that can be improved in my mind."
 

Pricing and Cost Advice

"The solution is not that expensive."
"The solution's pricing lacks transparency."
"The price tag is no longer $200,000, but rather $300,000 to $400,000. It's twice."
"The prices are slightly expensive."
"My company has to make yearly payments towards the licensing costs attached to the solution. There are no hidden charges apart from the licensing costs of the solution."
"The pricing is somewhere in the middle. I would rate the pricing a seven out of ten."
"The pricing of the solution is cheap. The licensing cost is also very low. I rate the cost and pricing a three out of ten."
"Cloudflare Zero Trust Platform's pricing is good."
"If I compare Digital Guardian with Symantec, the license cost is lower, but McAfee can be cheaper than Digital Guardian. It depends on how many licenses you plan to buy and how big the project is. The cost is not so high as Symantec, but not as cheap as McAfee. They can easily sell the solution for price."
"The price of Digital Guardian is on the higher end compared to other vendors."
"The cost was around $300,000."
"I rate the solution's pricing an eight out of ten because Digital Guardian is expensive."
"The price of Digital Guardian is expensive."
"Digital Guardian has both, subscription and perpetual licenses, but I think when everything (all technologies) will go to the cloud they will only offer subscriptions."
"I do not have any opinions to add about the pricing of the product."
"I'm aware that the organization had purchased licensing for almost all of CyberArk's solutions including licensing for PTA, EPM, and the Application Identity Manager. But when it comes to PSM, this is one of the components where there's an additional charge for any extra PSMs that you want to deploy. I believe that there's some rider where the vendor has a bit of leeway to, at times, charge a premium on whatever additional services you may require above the board."
"This solution is considered to be more expensive than others out there on the market today."
"Previously, the pricing was very meager. They started publicizing and advertising the solution, growing CyberArk, as an organization. They also changed their pricing with that growth, e.g., the pricier the product, the more people who will purchase it."
"The solution is available at a high price"
"Licensing fees are paid on a yearly basis."
"The price of the solution is reasonable."
"Pricing and licensing depend on the environment."
report
Use our free recommendation engine to learn which Data Loss Prevention (DLP) solutions are best for your needs.
904,054 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
19%
Comms Service Provider
10%
Financial Services Firm
9%
Manufacturing Company
8%
Financial Services Firm
12%
Manufacturing Company
10%
Comms Service Provider
8%
Construction Company
7%
Financial Services Firm
13%
Manufacturing Company
10%
Construction Company
7%
Computer Software Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise1
Large Enterprise12
By reviewers
Company SizeCount
Small Business11
Large Enterprise4
By reviewers
Company SizeCount
Small Business59
Midsize Enterprise42
Large Enterprise175
 

Questions from the Community

What needs improvement with Cloudflare Zero Trust Platform?
In my opinion, Cloudflare One can be improved mainly through compatibility, as the integration should be much simpler...
What is your primary use case for Cloudflare Zero Trust Platform?
Cloudflare One's primary use case for my organization is to protect servers and to provide remote access with the VPN...
What needs improvement with Digital Guardian?
In my experience, the area closest for improvement is the occurrence of strong false positives. Digital Guardian can ...
What is your primary use case for Digital Guardian?
My main use case for Digital Guardian is to prevent or stop sensitive data from being copied to USB, email, or cloud,...
What advice do you have for others considering Digital Guardian?
Digital Guardian has significantly improved incident response time by providing real-time detection, instant alerts, ...
How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to m...
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
My thoughts on the pricing of CyberArk Privileged Access Manager depend entirely on the vendors' requirements. If the...
What needs improvement with CyberArk Privileged Access Manager?
I believe account discovery and rolling support need to be improved. Account discovery is important when integrating ...
 

Also Known As

Cloudflare Area 1 Email Security, Cloudflare Bot Management, Cloudflare Gateway, Cloudflare Zero Trust Platform, Cloudflare DDoS, Cloudflare SASE & SSE Platform
No data available
CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
 

Overview

 

Sample Customers

23andMe
The Fifth Avenue Theatre, Jabil Circuit
Rockwell Automation
Find out what your peers are saying about Microsoft, Forcepoint, Check Point Software Technologies and others in Data Loss Prevention (DLP). Updated: June 2026.
904,054 professionals have used our research since 2012.