Try our new research platform with insights from 80,000+ expert users

BeyondTrust Password Safe pros and cons

Vendor: BeyondTrust

4.0 out of 5

27 reviews
84% willing to recommend

Pros & Cons summary

BeyondTrust Password Safe offers advanced session recording, password rotation, and vaulting, enhancing security for enterprises. Smart Rules facilitate automatic onboarding and efficient account management. The discovery engine categorizes server information for diverse IT management while integrated management enhances security posture. However, documentation inconsistency, database deployment challenges, inadequate technical support, and compatibility issues, including lack of SAP integration and session management enhancements, limit scalability and maintenance, affecting its adoption for broader applications.

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.

Prominent pros & cons

PROS

BeyondTrust Password Safe offers valuable features such as session recording, password rotation, and password vaulting, enhancing security and accountability.

Smart Rules is a unique feature that allows automatic onboarding of accounts based on various attributes, reducing manual scripting efforts.

The powerful discovery engine provides comprehensive insights into server details, aiding in effective resource management and tracking.

It integrates password and session management, enhancing compliance and tracking accountability for access types and usage.

BeyondTrust Password Safe supports high availability and failover through its architecture capabilities and offers excellent session monitoring for enhanced security posture.

CONS

Documentation is complicated and inconsistent, leading to users having to search multiple documents for specific information.

Technical support needs improvement as users still have to depend heavily on the support team for backend updates and troubleshooting.

Named accounts have limitations due to directory size constraints when using Smart Rules.

The deployment process is complex, requiring users to set up their own database on a SQL server, which increases deployment time.

Patching issues occur due to Password Safe not being compatible with server updates, impacting maintenance processes.

BeyondTrust Password Safe Pros review quotes

reviewer1447824

I.S. Architect at a insurance company with 10,001+ employees

Dec 23, 2020

Session recording, password rotation, and password vaulting are the most valuable features.

Read full review

reviewer1037646

Cybersecurity Architect at a tech vendor with 1-10 employees

Dec 24, 2021

One of the most valuable features is that this is a product designed with enterprises in mind.

Read full review

Adhiseshan Gunasekaran

Technical Lead at a financial services firm with 5,001-10,000 employees

Jul 25, 2022

I like the session recording feature. I also like the analytics and reports. You can pull up a report, and the UI is fantastic. The system is recording when nobody's there, so we have a record of what's happening.

Read full review

BeyondTrust Password Safe

Free Report: BeyondTrust Password Safe Reviews and More

Learn what your peers think about BeyondTrust Password Safe. Get advice and tips from experienced pros sharing their opinions. Updated: December 2025.

879,422 professionals have used our research since 2012.

PN

PAM Consultant at a insurance company with 10,001+ employees

Jul 28, 2022

Smart Rules is a nice feature in BeyondTrust. It is a unique feature that BeyondTrust has as compared to other vendors such as CyberArk. With Smart Rules, you can do automatic onboarding of accounts. There are a lot of options and features. For example, you can do onboarding based on different AD attributes. It is a nice feature in BeyondTrust that some of the other PAM vendors don't have. With other vendors, we have to create our own scripts, whereas, with BeyondTrust, we can just use the in-built Smart Rules.

Read full review

HM

Cybersecurity Architect with self employed

Aug 10, 2022

It provides integrated password and session management in one solution, which is important for us because, from an auditing standpoint, we are accountable for the type of access being used. We need to ensure that accounts are securely stored and there is the right type of accountability around who is gaining the access. After gaining it, how they're using it, where they're using it, etc.

Read full review

PAM Architect at GCA

Aug 23, 2022

Its number one feature is discovery. The discovery engine in BeyondTrust is off the charts. When they perform a discovery, you know everything there is about a server, including what software is installed. For example, if you want to group all of your database servers together, you can do that by using discovery and Smart Rules. If a server has Microsoft SQL installed, it gets put into a group based on a Smart Rule. It makes it very easy to determine what is what in your environment. As organizations grow or acquire other companies and merge, they lose track of what they have. BeyondTrust can help you throw a rope around it very rapidly.

Read full review

Senior Sales Engineer at ForgeRock

Oct 17, 2022

The best aspect of the product is the ability to onboard devices. You can scan the IP subnets and onboard all the devices. You can then segregate them if it's a network device or a firewall. If it's a Windows server or a UNIX, you can basically scan your IT infrastructure and onboard the efforts, which should be managed. Once they have been onboarded, then the session management and password management are easy and nicely configurable.

Read full review

Hartmann OLLIVIER De MONTAGUERE

IT Messaging Collaboration L3 Consultant at ATLANSE (missioned at BNP Paribas CIB)

Oct 23, 2022

The ability to manage privileged account passwords is the most valuable feature.

Read full review

Senior Specialist at a financial services firm with 1,001-5,000 employees

Oct 24, 2022

The CI/CD and REST API are also satisfactory; the solution has a full PAM feature set and they all work well.

Read full review

SS

Saurabh Sarjine

Sr Security Analyst at a tech services company with 51-200 employees

Oct 26, 2022

Screen recording is valuable, and integration with applications is easy. We can customize whatever we want. We did a lot of application integration using scripting.

Read full review

Show 10 more reviews (out of 25)

BeyondTrust Password Safe Cons review quotes

reviewer1447824

I.S. Architect at a insurance company with 10,001+ employees

Dec 23, 2020

Its documentation can be improved. Its documentation is currently complicated, and it is not good. It needs to be better. Their technical support can also be improved. It is not bad, but it can be better.

Read full review

reviewer1037646

Cybersecurity Architect at a tech vendor with 1-10 employees

Dec 24, 2021

I think that BeyondTrust Password Safe could be improved with more testing. In the beginning, they were practically using customers as beta testers. Maybe the product has evolved since I last used it, but if you look at PAM, privileged access management, whatever's out there has already been done. I don't see there being any other enhancements that are being made regarding PAM, except to support more cloud-based applications.

Read full review

Adhiseshan Gunasekaran

Technical Lead at a financial services firm with 5,001-10,000 employees

Jul 25, 2022

The only feature they could improve is the banners because they aren't informative. For example, if something is not correct and I open the error notification, the dialogue box simply says, "This is an error." It would be great if they could provide some valuable comments about how to fix the errors.

Read full review

BeyondTrust Password Safe

Free Report: BeyondTrust Password Safe Reviews and More

Learn what your peers think about BeyondTrust Password Safe. Get advice and tips from experienced pros sharing their opinions. Updated: December 2025.

879,422 professionals have used our research since 2012.

PN

PAM Consultant at a insurance company with 10,001+ employees

Jul 28, 2022

When we deploy BeyondTrust, we have to deploy our own database on a SQL server. It doesn't deploy the database. I wish BeyondTrust packages the whole solution in one and includes the MySQL database so that when you deploy it, it deploys everything for you. BeyondTrust gives you the software, but you are in charge of setting up your own database. It is a single appliance just for the BeyondTrust portion but not the database. Unless that has changed in later releases, you have to set up your own database for BeyondTrust Password Safe. I find that part complex because we then need the expertise and help of the database team to set it up, which also increases the deployment time. If they can deploy the database, it will reduce the deployment time.

Read full review

HM

Cybersecurity Architect with self employed

Aug 10, 2022

Named accounts don't work well in this solution. If you use named accounts for your administrative access, the way Smart Rules work is that it takes your SAM account name and matches it to the account name of your privileged ID, which creates limitations on size and how big those names can be because the directory has a 20-character limit.

Read full review

PAM Architect at GCA

Aug 23, 2022

If there was one thing, it would be having the documentation standardized. They should keep the documentation consistent. For example, when BeyondTrust updated one of their admin guides, they left out the information on the discovery account requirements, and then over a period of time, we ended up having to search multiple different documents to put together a string of information for a specific topic, which was problematic. It was minor, but it was problematic. Standardized documentation would be the one thing I would suggest.

Read full review

Senior Sales Engineer at ForgeRock

Oct 17, 2022

The database instance onboarding should be simplified. The problem is that you can scan the assets and databases inside a server, but you cannot onboard them or manage them with the smart tools. It has to be done manually. I think they should try to include more custom platforms.

Read full review

Hartmann OLLIVIER De MONTAGUERE

IT Messaging Collaboration L3 Consultant at ATLANSE (missioned at BNP Paribas CIB)

Oct 23, 2022

We weren't aware that the Password Safe virtual appliance runs on a Windows server. As part of our monthly patching process, we ran into an issue. BeyondTrust Password Safe wasn't compatible with the patching we used to put on our server.

Read full review

Senior Specialist at a financial services firm with 1,001-5,000 employees

Oct 24, 2022

There is a limited capacity on the appliance, which I wasn't informed about when I purchased the product. I can have a maximum of 150 rules per appliance; any more than that and rule processing becomes very complex, especially regarding password revision. Hitting a capacity limit you don't know about can be problematic. Ideally, we would not have a limited capacity, allowing us to be in a completely managed state with password rotation for every service account, not just the highly privileged ones.

Read full review

SS

Saurabh Sarjine

Sr Security Analyst at a tech services company with 51-200 employees

Oct 26, 2022

We don't have much control over the appliance. When anything happens in the backend, we have to depend on the support team. We need to raise a case so that they can update the appliance. If we have control over it, we would be able to troubleshoot easily.

Read full review

Show 10 more reviews (out of 25)

Product Categories

Product Categories

Enterprise Password Managers

Privileged Access Management (PAM)

Popular Comparisons

Popular Comparisons

CyberArk Privileged Access Manager vs BeyondTrust Password Safe

Azure Key Vault vs BeyondTrust Password Safe

AWS Secrets Manager vs BeyondTrust Password Safe

HashiCorp Vault vs BeyondTrust Password Safe

Delinea Secret Server vs BeyondTrust Password Safe

One Identity Safeguard vs BeyondTrust Password Safe

BeyondTrust Endpoint Privilege Management vs BeyondTrust Password Safe

Keeper Enterprise Password Manager vs BeyondTrust Password Safe

WALLIX Bastion vs BeyondTrust Password Safe

Bitwarden vs BeyondTrust Password Safe

BeyondTrust Privileged Remote Access vs BeyondTrust Password Safe

1Password Business vs BeyondTrust Password Safe

LastPass Business vs BeyondTrust Password Safe

Delinea Privileged Access Service vs BeyondTrust Password Safe

ManageEngine PAM360 vs BeyondTrust Password Safe

See all alternatives

Product Categories

Product Categories

Enterprise Password Managers

Privileged Access Management (PAM)

Popular Comparisons

Popular Comparisons

CyberArk Privileged Access Manager vs BeyondTrust Password Safe

Azure Key Vault vs BeyondTrust Password Safe

AWS Secrets Manager vs BeyondTrust Password Safe

HashiCorp Vault vs BeyondTrust Password Safe

Delinea Secret Server vs BeyondTrust Password Safe

One Identity Safeguard vs BeyondTrust Password Safe

BeyondTrust Endpoint Privilege Management vs BeyondTrust Password Safe

Keeper Enterprise Password Manager vs BeyondTrust Password Safe

WALLIX Bastion vs BeyondTrust Password Safe

Bitwarden vs BeyondTrust Password Safe

BeyondTrust Privileged Remote Access vs BeyondTrust Password Safe

1Password Business vs BeyondTrust Password Safe

LastPass Business vs BeyondTrust Password Safe

Delinea Privileged Access Service vs BeyondTrust Password Safe

ManageEngine PAM360 vs BeyondTrust Password Safe

See all alternatives

Related questions

12

What are some best practices to implement for secure employee password management?

12

What advice do you have for an enterprise user on Password Day 2021?

13

When evaluating Enterprise Password Managers, what aspect do you think is the most important to look for?

101

Why is Enterprise Password Managers important for companies?

6

What should one take into account when selecting an enterprise password manager?