CyberArk Privileged Access Manager Reviews

Name: CyberArk Privileged Access Manager
Brand: CyberArk
Rating: 4 (193 reviews)

Vendor: CyberArk

4.3 out of 5

193 reviews
94% willing to recommend

4,103 followers

Post review

What is CyberArk Privileged Access Manager?

CyberArk Privileged Access Manager is a next-generation solution that allows users to secure both their applications and their confidential corporate information. It is extremely flexible and can be implemented across a variety of environments. This program runs with equal efficiency in a fully cloud-based, hybrid, or on-premises environment. Users can now protect their critical infrastructure and access it in any way that best meets their needs.

Get the CyberArk Privileged Access Manager Buyer's Guide and find out what your peers are saying about CyberArk Privileged Access Manager, Netgate pfSense, Microsoft Entra ID and more!

CyberArk Privileged Access Manager is the #1 ranked solution in top User Activity Monitoring solutions, #1 ranked solution in top Privileged Access Management (PAM) solutions, #2 ranked solution in top Enterprise Password Managers, #3 ranked solution in top Mainframe Security solutions, and #3 ranked solution in top Operational Technology (OT) Security solutions. PeerSpot users give CyberArk Privileged Access Manager an average rating of 8.6 out of 10. CyberArk Privileged Access Manager is most commonly compared to Netgate pfSense: CyberArk Privileged Access Manager vs Netgate pfSense. CyberArk Privileged Access Manager is popular among the large enterprise segment, accounting for 49% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a educational organization, accounting for 30% of all views.

Buyer's Guide

CyberArk Privileged Access Manager

November 2024

Get the report

Helped 814,649 peers since 2012

Featured reviews

SatishIyer

Assistant Vice President at a financial services firm with 10,001+ employees

From a functional point of view, I would not have a concrete idea of how CyberArk has improved our organization because that information is better provided by someone from the operations team. Those kind of evaluations are typically done at a much higher level, probably at COO or a similar level, and they have a close alignment with the enterprise architecture group. On a practical note, with CyberArk there is integration with your identity management system such that, when done properly, you can ensure that anyone from an administrator to production support personnel will gain the relevant access they need in good time. PAM offers integration with Active Directory, LDAP, and so on, and is fairly compliant with these kinds of approaches to identity.

Read full review

reviewer0714174

CyberArk Product and Vendor Contract Manager at UBS Financial

We use CyberArk to secure the last resort accounts by introducing dual control approval, ticket validation, temporary access, and regular password rotation. It also allows us to introduce location-aware access controls with multiple sites having access to specific location-protected content…

Read full review

Jonathan Hawes

CyberArk PAS Administrator at L3Harris Technologies

Our implementation is air-gapped from the outside world, and as such, we utilize a completely on-prem solution. Our highest risk is from privileged insiders, and CyberArk's answer to this challenge was the implementation of a Privileged Session Manager (PSM). With PSM, we were able to secure, control, and more importantly, monitor privileged access to highly critical network servers by using PSM to manage accounts and create detailed session audits and video recordings of all IT administrator privileged sessions on our most critical servers. The established sessions on the target systems are fully isolated and the privileged account credentials are never exposed to the end-users or their client applications and devices.

Read full review

CyberArk Privileged Access Manager mindshare

Product category:

As of November 2024, the mindshare of CyberArk Privileged Access Manager in the Privileged Access Management (PAM) category stands at 21.2%, down from 24.0% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Privileged Access Management (PAM)

Key learnings from peers

Last updated Oct 6, 2024

Valuable Features

CyberArk Privileged Access Manager's key features include the Central Policy Manager, which automates password changes and monitors privileged sessions. Enterprise Password Vault stores passwords securely. Privileged Session Manager allows session recording, monitoring, and isolation. The automation of credential rotation reduces security risks. Users appreciate its modularity, high scalability, ease of installation, and strong integration capabilities. Its flexibility supports various platforms, providing robust privilege management and security compliance, valuable for large organizations.

"We have the identity provider for all the authentication processes. However, sometimes, we need access to different applications for customers or clients that are not integrated into the identity provider. For these, we need to store a password to gain access. For example, we use the CyberArk Password Vault for third-party services. This vault needs to be shared with many people in our company."
"Password rotation is the most valuable feature"
"The most valuable features of the solution are control and analytics."

Room for Improvement

CyberArk Privileged Access Manager faces challenges with its complex deployment, which users find cumbersome, and its user interface, which is considered outdated and inconsistent. Users express the need for improved integration capabilities, especially with third-party solutions, and more out-of-the-box connectors. Licensing and pricing are a concern due to their perceived inflexibility and high cost. Enhancements in reporting and performance are desired, along with better documentation and training support for more intuitive use.

"The main challenge was integrating with in-house IT and business applications, which are not standard. We needed to create special updates for that kind of integration."
"The solution should be able to mitigate internal threats"
"The session monitoring and recording feature is also a good feature feature, but we're currently experiencing an issue with session monitoring not working correctly. We're working with CyberArk to resolve it.We aren't able to view active sessions or historical recordings of sessions."

ROI

CyberArk Privileged Access Manager significantly reduces risk and provides substantial time savings related to credential management and audit processes. It enhances security by automating password rotation and improving compliance with regulations like SOX. Many reported decreased time on security management and noted improved security postures, contributing to peace of mind. Institutions have seen risk reduction, better management of privileged accounts, and the elimination of manual processes, leading to efficiency and security improvements.

Pricing

CyberArk Privileged Access Manager is often described as expensive, particularly for small to mid-sized companies, though perceived as justified due to its comprehensive features and strong market position. Pricing varies based on factors such as company size and licensing model, with options for subscription and perpetual licenses. Discounts may occur with higher volume purchases. Users emphasize starting small, gradually increasing procurement, and involving CyberArk partners for optimal design and cost-effectiveness. Additional fees may include implementation and maintenance.

"The solution is available at a high price"
"Compared to other solutions, it is costly."
"I rate the tool's pricing an eight out of ten."

Popular Use Cases

Organizations primarily use CyberArk Privileged Access Manager for securing privileged accounts and access control. It is utilized for privileged account management, session management, credential rotation, and auditing. Many users emphasize its role in identity management, protecting against attacks, and ensuring compliance with industry standards like SOX and HIPAA. Users deploy it for password management, reducing credential exposure, and facilitating secure, monitored access to critical systems across various platforms, including cloud environments.

Service and Support

CyberArk Privileged Access Manager is praised for its knowledgeable technical support team, quick responses, and improvement over the years. However, some users highlight delays in initial responses and escalation issues. Users experience variability in support based on issue criticality and have noted that full resolution can sometimes require persistent follow-ups. Geographical localization and communication challenges can also impact user satisfaction, especially when dealing with complex issues or when language barriers arise.

Deployment

Users found CyberArk Privileged Access Manager's initial setup to vary in complexity. Many appreciated its straightforward process conditioned by adequate preparation and clear documentation. Some described challenges due to technical dependencies, architecture complexity, or specific organizational needs. Larger environments or unique configurations sometimes required extended planning and resources. Assistance from professional support or experienced consultants was often beneficial, especially for customizing features and ensuring successful deployment in complex scenarios.

Scalability

CyberArk Privileged Access Manager demonstrates excellent scalability. Most users report no issues with expanding capacity as organizational needs grow. Proper planning at the initial stage is crucial for optimal performance. The architecture supports both horizontal and vertical scaling. Features like adding modules improve flexibility and scalability. Although some encounter license and database challenges, the platform handles large-scale environments effectively. Preparation for high availability during implementation ensures seamless scaling.

Stability

CyberArk Privileged Access Manager exhibits impressive stability in most implementations. While some challenges are cited, such as issues with the PSM Servers and reliance on Windows infrastructure, users generally report a reliable experience. Stability improvements are often noted with new versions or proper configuration. Several users highlight human error or infrastructure as causes of instability. CyberArk's support and redundancy features further enhance operational reliability for many environments.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our CyberArk Privileged Access Manager Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Educational Organization

30%

Financial Services Firm

13%

Computer Software Company

11%

Manufacturing Company

Government

Insurance Company

Healthcare Company

Retailer

Energy/Utilities Company

University

Real Estate/Law Firm

Construction Company

Comms Service Provider

Media Company

Non Profit

Hospitality Company

Legal Firm

Logistics Company

Outsourcing Company

Transportation Company

Wholesaler/Distributor

Pharma/Biotech Company

Recreational Facilities/Services Company

Engineering Company

Consumer Goods Company

Performing Arts

Compare CyberArk Privileged Access Manager with alternative products

Learn more about CyberArk Privileged Access Manager

CyberArk Privileged Access Manager possesses a simplified and unified user interface. Users are able to manage the solution from one place. The UI allows users to view and manage all of the information and controls that administrators need to be able to easily access. Very often, management UIs do not have all of the controls and information streamlined in a single location. This platform provides a level of visibility that ensures users will be able to view all of their system’s most critical information at any time that they wish.

Benefits of CyberArk Privileged Access Manager

Some of CyberArk Privileged Access Manager’s benefits include:

The ability to manage IDs and permissions across a cloud environment. In a world where being able to work remotely is becoming increasingly important, CyberArk Privileged Access Manager is a very valuable tool. Administrators do not need to worry about infrastructure security when they are away from the office. They can assign and manage security credentials from anywhere in the world.
The ability to manage the program from a single centralized UI. CyberArk Privileged Access Manager’s UI contains all of the system controls and information. Users now have the ability to view and use all of their system’s most critical information and controls from one place.
The ability to automate user management tasks. Administrators can save valuable time by assigning certain management tasks to be fulfilled by the system itself. Users can now reserve their time for tasks that are most pressing. It can also allow for the system to simplify the management process by having the platform perform the most complex functions.

Reviews from Real Users

CyberArk Privileged Access Manager’s software stands out among its competitors for one very fundamental reason. CyberArk Privileged Access Manager is an all-in-one solution. Users are given the ability to accomplish with a single platform what might usually only be accomplished with multiple solutions.

PeerSpot users note the truly all-in-one nature of this solution. Mateusz K., IT Manager at a financial services firm, wrote, "It improves security in our company. We have more than 10,000 accounts that we manage in CyberArk. We use these accounts for SQLs, Windows Server, and Unix. Therefore, keeping these passwords up-to-date in another solution or software would be impossible. Now, we have some sort of a platform to manage passwords, distribute the inflow, and manage IT teams as well as making regular changes to it according to the internal security policies in our bank."

Hichem T.-B., CDO & Co-Founder at ELYTIK, noted that “This is a complete solution that can detect cyber attacks well. I have found the proxy features most valuable for fast password web access.”

CyberArk Privileged Access Manager was previously known as CyberArk Privileged Access Security, CyberArk Enterprise Password Vault.