BeyondTrust Password Safe Reviews

Name: BeyondTrust Password Safe
Brand: BeyondTrust
Rating: 4.0 (22 reviews)

4.0 out of 5

22 reviews
81% willing to recommend

104 followers

What is BeyondTrust Password Safe?

Beyond Trust Password Safe is an automated solution that combines password and privileged session management into a single platform. Password Safe delivers secure access control, auditing, alerting, recording, and monitoring.

Get the BeyondTrust Password Safe Buyer's Guide and find out what your peers are saying about BeyondTrust Password Safe, CyberArk Privileged Access Manager, Azure Key Vault and more!

BeyondTrust Password Safe is the #6 ranked solution in top Enterprise Password Managers and #8 ranked solution in top Privileged Access Management (PAM) solutions. PeerSpot users give BeyondTrust Password Safe an average rating of 8.0 out of 10. Based on the analysis of the 22 most recent BeyondTrust Password Safe reviews, the overall sentiment is positive, with a sentiment score of 6.7. (Among the lowest in the category). BeyondTrust Password Safe is most commonly compared to CyberArk Privileged Access Manager: BeyondTrust Password Safe vs CyberArk Privileged Access Manager. BeyondTrust Password Safe is popular among the large enterprise segment, accounting for 72% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 16% of all views.

Buyer's Guide

BeyondTrust Password Safe

November 2024

Get the report

Helped 817,457 peers since 2012

Featured reviews

Vinay Dabas

Senior Sales Engineer at ForgeRock

The database instance onboarding should be simplified. The problem is that you can scan the assets and databases inside a server, but you cannot onboard them or manage them with the smart tools. It has to be done manually. I think they should try to include more custom platforms. With the databases, there were some issues. The databases are inside the servers, and it was a bit difficult to scan the databases. Apart from that, the rest of the assets were easy to scan and integrate. It's difficult to onboard the database. You can scan and find them, but you have to onboard the databases manually. You cannot onboard databases using Smart Rules databases. Database instances are difficult to onboard and must be done manually. The applications should be more like in the SDK. They have good API support now.

Read full review

Hartmann OLLIVIER De MONTAGUERE

IT Messaging Collaboration L3 Consultant at ATLANSE (missioned at BNP Paribas CIB)

The ability to manage privileged account passwords is the most valuable feature. It gives us the capability of rotating passwords as soon as an event is triggered. Even if Password Safe protects the privileged account, like an admin account, we can request the password from the profile. As soon as it detects that we have the password and it's used for the first time, the password will automatically change so it can't be used again. The strength of the password will be the same. Smart Rules were created to automatically assign the credentials that belong to each user and their profile. We use the Smart Rules feature for automated privileged account management. The Password Safe user interface is simple and very intuitive. I would rate it as a four and a half out of five. It just shows us what we need to see.

Read full review

Gary Jolley

PAM Architect at GCA

It starts with discovery. Its number one feature is discovery. The discovery engine in BeyondTrust is off the charts. When they perform a discovery, you know everything there is about a server, including what software is installed. For example, if you want to group all of your database servers together, you can do that by using discovery and Smart Rules. If a server has Microsoft SQL installed, it gets put into a group based on a Smart Rule. It makes it very easy to determine what is what in your environment. As organizations grow or acquire other companies and merge, they lose track of what they have. BeyondTrust can help you throw a rope around it very rapidly. Its user interface is really nice. It is very visual. When you first log in, based on your job role, you see what you have access to when you look at the screen. As an administrator, I see the configuration screen where I can go in and modify Active Directory and authentication connections. I can set up SAML, or I also have access to create Smart Rules. The access is based on the role that you have when you log in. I have six boxes or six categories of administration items, whereas when an admin user connects, he would only have one or two. So, based on your role, you see what you have access to. It is not like you click something and then it fails because you're not an administrator at that level. You actually see what you have access to, and BeyondTrust is very good at that. BeyondTrust provides the ability to connect by using not just the web interface but also the admin tools such as MobaXterm, PuTTY, or a lengthy list of other types of tools. You can use the connection string and connect through BeyondTrust, and it will be session recorded, keystroke logged, and highly available. When you bring up MobaXterm, you probably bring up one of the most complex ones because MobaXterm has the ability to have two, three, or four concurrent connections, which makes BeyondTrust Password Safe ideal. It is very easy to integrate session management into existing business processes. To make it easy for the engineers, we created templates of the connection strings and then used, believe it or not, Microsoft Excel to create custom strings for each of the engineers. We exported them to a text file that they could then import. In the case of PuTTY, because PuTTY stores the connections and the credentials in the registry, we had to do something different there, but the connection string is customizable enough to make the job fast and easily repeatable for all the other engineers. You don't have 20 or 30 engineers spending two or three days creating all these connection strings. I can create them in a matter of minutes with a Microsoft Excel spreadsheet and then save them to a text file or a CSV file. It is awesome. We are able to integrate session management without disrupting business processes. One of the niceties about BeyondTrust is the ability to integrate it with ticketing systems. For example, as per Sarbanes-Oxley, we have to have a reason for why an administrator is performing something. The integration with a ticketing system is ideal rather than manually typing the reason in the reason field through the GUI where most engineers, after a while, end up just typing in Work. They don't put in enough data to make it clearly visible why they connected. The integration with the ticketing system is ideal for that. Ticket-driven access makes the work very quantifiable.

Read full review

BeyondTrust Password Safe mindshare

Product category:

As of December 2024, the mindshare of BeyondTrust Password Safe in the Enterprise Password Managers category stands at 3.7%, up from 3.1% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Enterprise Password Managers

Key learnings from peers

Last updated Dec 1, 2024

Valuable Features

BeyondTrust Password Safe offers valuable features like session recording, password rotation, Smart Rules for automated onboarding, and integration with ticketing systems. Its intuitive UI, comprehensive reporting, and strong integration capabilities enhance usability. The architecture supports high availability, scaling, and seamless onboarding/offboarding. Organizations benefit from advanced auditing, session monitoring, and password vaulting, improving security and efficiency. The platform adapts to market changes, offering flexibility in licensing and API integrations for streamlined processes.

"Overall, I rate the solution ten out of ten."
"The flexibility of the licensing model is significantly better as it offers both unlimited users and unlimited devices, unlike Delinea, which is based on the number of users."
"The technical support and customer services are phenomenal."

Room for Improvement

BeyondTrust Password Safe requires improvements in several areas. Users report the need for better integration with various tools, more intuitive user interfaces, and standardized documentation. They express concerns about lengthy deployment processes due to database setup requirements, limited capacity issues, and slow synchronization. Error messages and support should be more informative. Enhanced API utilization, improved privilege management, better application integration, and cost optimization are also suggested. Users desire better cloud support and efficient user access provisioning.

"Adding user behavior analysis to the server or messaging would be beneficial."
"The initial server implementation tasks could be easier to process."
"The only improvement I could suggest would be standardizing documentation, but that's more the responsibility of the implementing engineer rather than BeyondTrust Password Trust itself. The documentation must be specific and narrow for implementation, not just broad guidelines."

ROI

BeyondTrust Password Safe provides value in compliance and security, aiding organizations in meeting audit requirements. Some report realizing ROI quickly, benefiting from secure system access and reduced manual tasks through automation. Time to value varies, but the ease of implementation is noted. Its cost-efficiency, particularly in licensing, makes it appealing. While some see benefits in data protection and threat mitigation, others question the immediate return.

Pricing

Enterprise buyers evaluating BeyondTrust Password Safe report that its pricing is usually more competitive than alternatives like CyberArk, focusing on system assets rather than user numbers. Users appreciate the subscription-based licensing model, which can be adjusted based on the managed systems. While Pricing is seen as cost-effective given its comprehensive features, intricacies like asset-based costs mean it might vary depending on deployment scale. Clients often find it justifiable due to the overall lower total cost of ownership.

"I would rate the pricing a seven out of ten, where one is cheap and ten is expensive."
"The product is quite affordable."
"The pricing structure is better than the competitors. It's much cheaper than CyberArk. They do the licensing on the basis of assets, not on the number of users. For CyberArk, they base the licensing on the number of users, and they have an expensive model of pricing. BeyondTrust has a cheaper model."

Popular Use Cases

Organizations primarily utilize BeyondTrust Password Safe for managing privileged accounts, secure password storage, and session management. They leverage it for password rotation, compliance with SOC standards, and mitigating security breaches. BeyondTrust is favored for its integration capabilities with various components like SNMP, SIEM, and AD. Users enjoy its features for session recording and access control, ensuring least privilege access, and safeguarding credentials in hybrid and cloud environments.

Service and Support

BeyondTrust Password Safe customer service is praised for its fast and responsive technical support. Many highlight its efficiency and global reach, with support available in multiple regions. Some users note that documentation could be improved for DIY fixes, while others mention long resolution times for complex issues. Enthusiastic responses are common, often rating support highly for its knowledgeable staff and occasional direct engagement with engineers, though some users had mixed or delayed experiences.

Deployment

BeyondTrust Password Safe initial setup is generally straightforward but requires understanding of network architecture and thorough documentation. Many organizations find it helpful to have a specialist for configuration. Setup varies with installation type, environment, and governance policies. Documentation and planning facilitate the process, though migrating users can be challenging. Deployment can be quick if dependencies are managed, taking a few days per site, but integration and policy definition may require more time.

Scalability

BeyondTrust Password Safe is regarded as highly scalable, with capabilities to expand via external databases and add active-active appliances. Many describe its scalability as good, allowing support for both small and large companies, and enabling thousands of users across multiple sites. Some believe the use of Windows impacts scalability, while others have successfully scaled with a mix of Windows and Linux infrastructure. Adjusting CPU, memory, and infrastructure enhances scalability. Ratings generally range from seven to ten out of ten.

Stability

BeyondTrust Password Safe demonstrates high stability, though experiences vary. Some users report no issues, highlighting excellent performance and reliability, while others face occasional crashes, requiring regular patches. Initial versions showed instability, which has improved in recent versions. Organizations using multiple appliances in Active/Active setups express better stability compared to Active/Passive setups. Some report average stability with the need for large management teams. Users rate stability between six to ten out of ten, with many finding it rock solid.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our BeyondTrust Password Safe Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

16%

Financial Services Firm

15%

Government

Manufacturing Company

Healthcare Company

Media Company

Insurance Company

Construction Company

University

Retailer

Transportation Company

Comms Service Provider

Energy/Utilities Company

Educational Organization

Legal Firm

Hospitality Company

Recreational Facilities/Services Company

Non Profit

Real Estate/Law Firm

Pharma/Biotech Company

Logistics Company

Consumer Goods Company

Wholesaler/Distributor

Performing Arts

Outsourcing Company

Engineering Company

Security Firm

Mining And Metals Company

Marketing Services Firm

Compare BeyondTrust Password Safe with alternative products

Learn more about BeyondTrust Password Safe

This free and open-source password manager supports Windows and Linux, and some ports are available for other platforms as well. Their proprietary algorithm, Twofish, is considered highly secure, with the advantage that it is not affiliated with NIST. The Twofish algorithm secures the data while keys are delivered using SHA-256 authentication.

The application is easy to use, and you can download the Windows app from several sites. Additionally, the application is available in 14 languages.

Beyond Trust Password Safe Key Features

Continuous automated account discovery: Scan, identify and profile assets with the discovery engine. The solution has dynamic categorization that enables the automated onboarding of assets into groups.
Application-to-application password management: Password Safe offers an adaptable API interface including an unlimited number of password caches, therefore providing scalability and redundancy.
Secure SSH key management: The system automatically rotates SSH keys to enforce granular access control and workflow. Private keys securely log users onto systems without exposing them.
Adaptive access control: Evaluates context and provides access requests by considering factors such as time of access and location to determine the user’s authorization level.
Enhanced privileged session management: Admins can record, lock, and document suspicious behavior without disrupting productivity by managing sessions live.
Advanced privileged threat analytics: Password Safe monitors assets and user behavior every day, analyzing what are normal patterns and detecting deviations.
Multi-factor authentication: Password Safe supports 2FA (two-factor authentication) using Yubikey 4, Nano, or Neo.

What can you do with Password Safe?

Cross-device and cross-platform syncing: You can safely store encrypted password files online, where you can access them via Password Safe-compatible apps.
Drag and drop password: Password Safe has a “Dragbar,” which you can use to complete forms by dragging and dropping icons over the form - for example, passwords, usernames, design tiles, and emails.
Autotype: With Password Safe, when you click on a web page or login box, the autotype feature will try to fill in your credentials automatically for you.
Import and export: You can import passwords from text, XML, or CSV fails. You can also export passwords in text, XML, and the PSAFE format.
Password generator: Generate secure passwords by using the algorithm. You can also define your password rules.

Beyond Trust Password Safe Benefits

Controls third-party access: Password Safe secures the connection and automatically checks privileged credentials. The solution records all sessions.
Uses context to determine access: Password Safe considers risk factors like location, day, or time of access and uses them to adjust the permissions and privileges of each user.
Manages access for privileged and non-privileged accounts: By integrating with SailPoint IdentityIQ, Password Safe effectively manages user access for privileged as well as non-privileged accounts.
Reduces cloud risk: Password Safe simplifies secure storage and session management. It supports major cloud providers such as Azure, Amazon, Google, Rackspace, and GoGrid. It also supports social networks - Facebook, LinkedIn, and Twitter.
Integrates password and privilege management: Integrates with Endpoint Privilege Management to control the resources users can access and the actions they are allowed to take

Reviews from Real Users

A PAM Architect at a tech services company says, "BeyondTrust Password Safe's features that I have found most valuable are really those that are knitted in. That is their Smart Rules and Smart Groups, where you design your administration model so you create your AD groups and your asset groups, and configure Password Safe."

An I.S. Architect at a insurance company mentions that "Session recording, password rotation, and password vaulting are the most valuable features."

"One of the most valuable features is that this is a product designed with enterprises in mind," adds a Cybersecurity Architect at a tech vendor.

BeyondTrust Password Safe was previously known as BeyondTrust PowerBroker Password Safe.