Try our new research platform with insights from 80,000+ expert users
BeyondTrust Password Safe Logo

BeyondTrust Password Safe pros and cons

Vendor: BeyondTrust
3.9 out of 5
103 followers
Post review

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

BeyondTrust Password Safe offers valuable features such as session recording, password rotation, password vaulting, and integrated password and session management.
Smart Rules in BeyondTrust Password Safe allow for automatic onboarding of accounts based on various attributes, enhancing usability and efficiency compared to competitors.
The discovery engine in BeyondTrust Password Safe provides comprehensive information on servers, aiding in efficient management and categorization of IT infrastructure.
Its architecture allows designated server components for high availability and failover, working well with identity and access management for seamless user onboard and offboard.
BeyondTrust Password Safe enhances security with features like session monitoring and system recording, ensuring accountability and facilitating compliance achievements such as SOX audits.

CONS

Documentation is noted as complicated and inconsistent, lacking essential information, which complicates the deployment process.
Technical support is regarded as effective but could be more responsive, and their reliance on standard procedures can delay issue resolution.
BeyondTrust Password Safe requires users to set up their own databases during deployment, which increases setup complexity and time.
Named accounts are limited by a 20-character limit, creating management limitations for administrative access.
Incremental backups are desired to ensure regular protection of information due to past instances of system crashes.
 

BeyondTrust Password Safe Pros review quotes

Gary Jolley - PeerSpot reviewer
Aug 23, 2022
Its number one feature is discovery. The discovery engine in BeyondTrust is off the charts. When they perform a discovery, you know everything there is about a server, including what software is installed. For example, if you want to group all of your database servers together, you can do that by using discovery and Smart Rules. If a server has Microsoft SQL installed, it gets put into a group based on a Smart Rule. It makes it very easy to determine what is what in your environment. As organizations grow or acquire other companies and merge, they lose track of what they have. BeyondTrust can help you throw a rope around it very rapidly.
Vinay Dabas - PeerSpot reviewer
Oct 17, 2022
The best aspect of the product is the ability to onboard devices. You can scan the IP subnets and onboard all the devices. You can then segregate them if it's a network device or a firewall. If it's a Windows server or a UNIX, you can basically scan your IT infrastructure and onboard the efforts, which should be managed. Once they have been onboarded, then the session management and password management are easy and nicely configurable.
HM
Aug 10, 2022
It provides integrated password and session management in one solution, which is important for us because, from an auditing standpoint, we are accountable for the type of access being used. We need to ensure that accounts are securely stored and there is the right type of accountability around who is gaining the access. After gaining it, how they're using it, where they're using it, etc.
Learn what your peers think about BeyondTrust Password Safe. Get advice and tips from experienced pros sharing their opinions. Updated: November 2024.
816,406 professionals have used our research since 2012.
Ahmad Sallam - PeerSpot reviewer
Oct 24, 2022
The CI/CD and REST API are also satisfactory; the solution has a full PAM feature set and they all work well.
PN
Jul 28, 2022
Smart Rules is a nice feature in BeyondTrust. It is a unique feature that BeyondTrust has as compared to other vendors such as CyberArk. With Smart Rules, you can do automatic onboarding of accounts. There are a lot of options and features. For example, you can do onboarding based on different AD attributes. It is a nice feature in BeyondTrust that some of the other PAM vendors don't have. With other vendors, we have to create our own scripts, whereas, with BeyondTrust, we can just use the in-built Smart Rules.
Adhiseshan Gunasekaran - PeerSpot reviewer
Jul 25, 2022
I like the session recording feature. I also like the analytics and reports. You can pull up a report, and the UI is fantastic. The system is recording when nobody's there, so we have a record of what's happening.
SS
Oct 26, 2022
Screen recording is valuable, and integration with applications is easy. We can customize whatever we want. We did a lot of application integration using scripting.
Charles Newman - PeerSpot reviewer
Aug 15, 2023
The actual innovations offered by the vendor stand out to me. They are quick to respond to market demands and the changing environment of privileged access management.
Hartmann OLLIVIER De MONTAGUERE - PeerSpot reviewer
Oct 23, 2022
The ability to manage privileged account passwords is the most valuable feature.
reviewer1037646 - PeerSpot reviewer
Dec 24, 2021
One of the most valuable features is that this is a product designed with enterprises in mind.
 

BeyondTrust Password Safe Cons review quotes

Gary Jolley - PeerSpot reviewer
Aug 23, 2022
If there was one thing, it would be having the documentation standardized. They should keep the documentation consistent. For example, when BeyondTrust updated one of their admin guides, they left out the information on the discovery account requirements, and then over a period of time, we ended up having to search multiple different documents to put together a string of information for a specific topic, which was problematic. It was minor, but it was problematic. Standardized documentation would be the one thing I would suggest.
Vinay Dabas - PeerSpot reviewer
Oct 17, 2022
The database instance onboarding should be simplified. The problem is that you can scan the assets and databases inside a server, but you cannot onboard them or manage them with the smart tools. It has to be done manually. I think they should try to include more custom platforms.
HM
Aug 10, 2022
Named accounts don't work well in this solution. If you use named accounts for your administrative access, the way Smart Rules work is that it takes your SAM account name and matches it to the account name of your privileged ID, which creates limitations on size and how big those names can be because the directory has a 20-character limit.
Learn what your peers think about BeyondTrust Password Safe. Get advice and tips from experienced pros sharing their opinions. Updated: November 2024.
816,406 professionals have used our research since 2012.
Ahmad Sallam - PeerSpot reviewer
Oct 24, 2022
There is a limited capacity on the appliance, which I wasn't informed about when I purchased the product. I can have a maximum of 150 rules per appliance; any more than that and rule processing becomes very complex, especially regarding password revision. Hitting a capacity limit you don't know about can be problematic. Ideally, we would not have a limited capacity, allowing us to be in a completely managed state with password rotation for every service account, not just the highly privileged ones.
PN
Jul 28, 2022
When we deploy BeyondTrust, we have to deploy our own database on a SQL server. It doesn't deploy the database. I wish BeyondTrust packages the whole solution in one and includes the MySQL database so that when you deploy it, it deploys everything for you. BeyondTrust gives you the software, but you are in charge of setting up your own database. It is a single appliance just for the BeyondTrust portion but not the database. Unless that has changed in later releases, you have to set up your own database for BeyondTrust Password Safe. I find that part complex because we then need the expertise and help of the database team to set it up, which also increases the deployment time. If they can deploy the database, it will reduce the deployment time.
Adhiseshan Gunasekaran - PeerSpot reviewer
Jul 25, 2022
The only feature they could improve is the banners because they aren't informative. For example, if something is not correct and I open the error notification, the dialogue box simply says, "This is an error." It would be great if they could provide some valuable comments about how to fix the errors.
SS
Oct 26, 2022
We don't have much control over the appliance. When anything happens in the backend, we have to depend on the support team. We need to raise a case so that they can update the appliance. If we have control over it, we would be able to troubleshoot easily.
Charles Newman - PeerSpot reviewer
Aug 15, 2023
Documentation is the primary area of improvement.
Hartmann OLLIVIER De MONTAGUERE - PeerSpot reviewer
Oct 23, 2022
We weren't aware that the Password Safe virtual appliance runs on a Windows server. As part of our monthly patching process, we ran into an issue. BeyondTrust Password Safe wasn't compatible with the patching we used to put on our server.
reviewer1037646 - PeerSpot reviewer
Dec 24, 2021
I think that BeyondTrust Password Safe could be improved with more testing. In the beginning, they were practically using customers as beta testers. Maybe the product has evolved since I last used it, but if you look at PAM, privileged access management, whatever's out there has already been done. I don't see there being any other enhancements that are being made regarding PAM, except to support more cloud-based applications.