CyberArk Endpoint Privilege Manager Reviews

Name: CyberArk Endpoint Privilege Manager
Brand: CyberArk
Rating: 4 (30 reviews)

4.1 out of 5

30 reviews
82% willing to recommend

671 followers

What is CyberArk Endpoint Privilege Manager?

CyberArk Endpoint Privilege Manager, a critical and foundational endpoint control addresses the underlying weaknesses of endpoint defenses against a privileged attacker and helps enterprises defend against these attacks through removing local admin rights, enforcing least privilege, and implementing foundational endpoint security controls across all Windows, macOS and Linux endpoints from hybrid to cloud environments.

Get the CyberArk Endpoint Privilege Manager Buyer's Guide and find out what your peers are saying about CyberArk Endpoint Privilege Manager, CrowdStrike Falcon, Microsoft Defender for Endpoint and more!

CyberArk Endpoint Privilege Manager is the #5 ranked solution in top Endpoint Compliance solutions, #6 ranked solution in top Privileged Access Management (PAM) solutions, #6 ranked solution in top Application Control solutions, #7 ranked solution in top Ransomware Protection solutions, and #8 ranked solution in top Anti-Malware Tools. PeerSpot users give CyberArk Endpoint Privilege Manager an average rating of 8.2 out of 10. CyberArk Endpoint Privilege Manager is most commonly compared to CrowdStrike Falcon: CyberArk Endpoint Privilege Manager vs CrowdStrike Falcon. CyberArk Endpoint Privilege Manager is popular among the large enterprise segment, accounting for 70% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 15% of all views.

Buyer's Guide

CyberArk Endpoint Privilege Manager

November 2024

Get the report

Helped 814,649 peers since 2012

Featured reviews

Kaspars Vasilevskis

Security Delivery Associate Manager at Accenture

Setting up CyberArk Endpoint Privilege Manager was challenging for me due to the involvement of multiple components. The process required a good understanding of each component and its configuration. It is not a straightforward setup, and familiarity with the system is crucial to ensure everything is correctly configured. I would rate the easiness of the initial setup as a six out of ten. The deployment of CyberArk Endpoint Privilege Manager takes about a day. It is not as quick as some Linux, which can be up and running in just a couple of hours. CyberArk's deployment is more complex due to the various components that need to be set up and validated to ensure they work together seamlessly. Once the deployment is complete, you can then proceed with tasks like account onboarding.

Read full review

Anish R

Digital Architect - IAM at a manufacturing company with 10,001+ employees

I've worked in BeyondTrust, also. They have Asian-based solutions, and it's not as heavy as CyberArk. Since I have been working with CyberArk for some time, I feel a little bit more comfortable with CyberArk. BeyondTrust is also not that bad. However, they did not have all the capabilities that CyberArk was offering at that time. That said, this was maybe four or five years ago. I haven't explored anything after that. I'm sure a lot of things have changed. There used to be IBM Privilege Identity Manager as well, but it's not there anymore. Saviynt has its own solution as well. Basically, there are multiple solutions there, however, CyberArk was definitely been our choice for Privilege Identity Manager.

Read full review

Asim-Bhatti

Cybersecurity Consultant at Infosec Technologies Ltd

We use the solution to secure direct access to servers. Users could open their browsers and access resources. This applies to different teams, such as DevOps, IT services, and development teams. They can no longer use RDP connections directly to the server for their day-to-day tasks. Instead, they…

Read full review

CyberArk Endpoint Privilege Manager mindshare

Product category:

As of November 2024, the mindshare of CyberArk Endpoint Privilege Manager in the Privileged Access Management (PAM) category stands at 3.9%, up from 3.7% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Privileged Access Management (PAM)

Key learnings from peers

Last updated Oct 6, 2024

Valuable Features

CyberArk Endpoint Privilege Manager offers valuable features like managing admin rights removal, DNS scanning, and lifecycle key management. It supports password and session management, local admin group oversight, and application control. It integrates with SIEM and is easy to deploy at scale. It includes password vaulting, threat analytics, and credential protection. Its high performance and seamless integration with cloud services enhance security for privileged access, protecting against ransomware and unauthorized access attempts.

"The tool is an endpoint management system. It monitors everything a standard user does and helps elevate privileges when necessary for advanced users. It keeps an auditable trail of all activities. Practically, it stops and blocks potentially hazardous user behavior, whether intentional or unintentional. Certain companies must use endpoint management software because of national or international rules or ISO norms."
"The biggest benefit of CyberArk EPM for our customers is control over privileged access for endpoints. Endpoints are often the starting point for attackers to enter and move within a network. CyberArk EPM bridges the gap between security and operations teams. Operations teams are happy because work isn't stopped due to admin rights issues, while security teams are satisfied that full admin rights aren't given to all users."
"The product is very flexible"

Room for Improvement

CyberArk Endpoint Privilege Manager requires improvements in performance, UI consistency, and integration. Users find the interface outdated, desire better support, and seek enhanced access management features. Price flexibility and simpler installation are also needed. Technical support is slow, and there's a need for better integration with Azure AD and automation. The application should offer improved Linux compatibility, address credential management issues, and enhance reporting and analytics capabilities. Additionally, it should expand advanced threat detection and user experience features.

"The product is expensive."
"My recommendation for improvement is to add functionality for when users request access to an application. There's a pop-up UI, but it's not very customizable. I suggest creating a UI where we can write scripts or use SDKs to enhance it. This could automatically create tickets in a system like ServiceNow when users request an application. If a manager approves, we could automatically push policies to those users."
"The turnaround time of the support team is an area of concern where improvements are required."

ROI

CyberArk Endpoint Privilege Manager provides valuable protection for critical information, enhancing security against breaches. Organizations have observed financial returns, with some reporting an ROI of approximately $10,000 so far. Although challenging to quantify, reducing risk is paramount as a breach could greatly impact reputation and stock prices. Many find CyberArk EPM a reliable and efficient tool, despite its complexity. Even without precise ROI figures, the investment elevates security effectiveness and reduces vulnerability.

Pricing

CyberArk Endpoint Privilege Manager is primarily used by large enterprises, with pricing perceived as high. Costs are influenced by the number of privileged users, onboarded accounts, and concurrent sessions, with professional services incurring additional fees. Prices can range from $17 per user to significant upfront investments, with reports of substantial discounts for large enterprises. While deemed reasonable against competitors, the solution requires an annual license and additional support costs. Users typically rate the pricing at a high level.

"The tool is a bit pricey compared to its competitors. My company does work with competitors, but I don't have hands-on experience with other software. I've just done some comparisons."
"The tool's pricing is reasonable for customers."
"I feel that the price of the product is nominal. It must be around 10 to 15 USD per installation. I rate the product price an eight to nine out of ten, where one is high price, and ten is low price."

Popular Use Cases

Organizations primarily use CyberArk Endpoint Privilege Manager for controlling and managing privileged accounts and applications on endpoints. They implement it to secure enterprise passwords, monitor and audit privileged activities, and remove admin rights from users while allowing specific application access. The system is deployed across various platforms to help block unwanted access, enhance malware prevention, and ensure compliance with security policies. Additionally, it offers break-glass for multi-factor authentication and just-in-time access for sensitive operations.

Service and Support

CyberArk Endpoint Privilege Manager's customer service scores highly, but technical support experiences mixed feedback. Average ratings suggest they are helpful and responsive, yet some find responses delayed and cumbersome. Issues like needing certification to file tickets can complicate processes. Some users praise the expertise, efficient ticket handling, and available resources, while others encounter frustrating waits and unhelpful interactions. The support community and documentation offer valuable self-service options, aiding independent resolution of common issues.

Deployment

CyberArk Endpoint Privilege Manager's initial setup varies in complexity. For experienced users, it is straightforward, while novices find it challenging, taking several days to weeks. The setup involves managing multiple components and configurations, especially when federated credentials or high-availability customizations are required. Deployment time depends on organizational size, with smaller environments set up more quickly. Proper documentation aids the process, yet handling endpoints and integrating systems can complicate the setup further.

Scalability

CyberArk Endpoint Privilege Manager is considered highly scalable by many users. Organizations find it easy to expand usage to thousands of endpoints, though some encounter challenges with management and configuration. Most agree it's suitable for varying environments, from small setups to large enterprises. Despite requiring effort for large deployments, it supports flexibility with distributed architecture. Users rate its scalability highly, highlighting capabilities like cloud-based features and adaptable infrastructure for seamless expansion.

Stability

CyberArk Endpoint Privilege Manager is considered highly stable, reliable, and performs well. Users report it doesn't crash or freeze, with minimal bugs or glitches. Server-side issues require weekly restarts. Upgrading involves downtime. Stability ratings range from seven to ten out of ten. It works effectively online and offline, with Windows performing better than Linux. High availability and disaster recovery features enhance reliability. Users highlight a small memory footprint and commend its uptime at 99.99 percent.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our CyberArk Endpoint Privilege Manager Buyer's Guide for additional reliable information.