BeyondTrust Password Safe Reviews

Name: BeyondTrust Password Safe
Brand: BeyondTrust
Rating: 3.9 (21 reviews)

3.9 out of 5

21 reviews
80% willing to recommend

103 followers

What is BeyondTrust Password Safe?

Beyond Trust Password Safe is an automated solution that combines password and privileged session management into a single platform. Password Safe delivers secure access control, auditing, alerting, recording, and monitoring.

Get the BeyondTrust Password Safe Buyer's Guide and find out what your peers are saying about BeyondTrust Password Safe, CyberArk Privileged Access Manager, Azure Key Vault and more!

BeyondTrust Password Safe is the #6 ranked solution in top Enterprise Password Managers and #7 ranked solution in top Privileged Access Management (PAM) solutions. PeerSpot users give BeyondTrust Password Safe an average rating of 7.8 out of 10. Based on the analysis of the 21 most recent BeyondTrust Password Safe reviews, the overall sentiment is positive, with a sentiment score of 6.4. (Among the lowest in the category). BeyondTrust Password Safe is most commonly compared to CyberArk Privileged Access Manager: BeyondTrust Password Safe vs CyberArk Privileged Access Manager. BeyondTrust Password Safe is popular among the large enterprise segment, accounting for 72% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 16% of all views.

Buyer's Guide

BeyondTrust Password Safe

November 2024

Get the report

Helped 816,406 peers since 2012

Featured reviews

Vinay Dabas

Senior Sales Engineer at ForgeRock

The database instance onboarding should be simplified. The problem is that you can scan the assets and databases inside a server, but you cannot onboard them or manage them with the smart tools. It has to be done manually. I think they should try to include more custom platforms. With the databases, there were some issues. The databases are inside the servers, and it was a bit difficult to scan the databases. Apart from that, the rest of the assets were easy to scan and integrate. It's difficult to onboard the database. You can scan and find them, but you have to onboard the databases manually. You cannot onboard databases using Smart Rules databases. Database instances are difficult to onboard and must be done manually. The applications should be more like in the SDK. They have good API support now.

Read full review

Hartmann OLLIVIER De MONTAGUERE

IT Messaging Collaboration L3 Consultant at ATLANSE (missioned at BNP Paribas CIB)

The ability to manage privileged account passwords is the most valuable feature. It gives us the capability of rotating passwords as soon as an event is triggered. Even if Password Safe protects the privileged account, like an admin account, we can request the password from the profile. As soon as it detects that we have the password and it's used for the first time, the password will automatically change so it can't be used again. The strength of the password will be the same. Smart Rules were created to automatically assign the credentials that belong to each user and their profile. We use the Smart Rules feature for automated privileged account management. The Password Safe user interface is simple and very intuitive. I would rate it as a four and a half out of five. It just shows us what we need to see.

Read full review

Gary Jolley

PAM Architect at GCA

It starts with discovery. Its number one feature is discovery. The discovery engine in BeyondTrust is off the charts. When they perform a discovery, you know everything there is about a server, including what software is installed. For example, if you want to group all of your database servers together, you can do that by using discovery and Smart Rules. If a server has Microsoft SQL installed, it gets put into a group based on a Smart Rule. It makes it very easy to determine what is what in your environment. As organizations grow or acquire other companies and merge, they lose track of what they have. BeyondTrust can help you throw a rope around it very rapidly. Its user interface is really nice. It is very visual. When you first log in, based on your job role, you see what you have access to when you look at the screen. As an administrator, I see the configuration screen where I can go in and modify Active Directory and authentication connections. I can set up SAML, or I also have access to create Smart Rules. The access is based on the role that you have when you log in. I have six boxes or six categories of administration items, whereas when an admin user connects, he would only have one or two. So, based on your role, you see what you have access to. It is not like you click something and then it fails because you're not an administrator at that level. You actually see what you have access to, and BeyondTrust is very good at that. BeyondTrust provides the ability to connect by using not just the web interface but also the admin tools such as MobaXterm, PuTTY, or a lengthy list of other types of tools. You can use the connection string and connect through BeyondTrust, and it will be session recorded, keystroke logged, and highly available. When you bring up MobaXterm, you probably bring up one of the most complex ones because MobaXterm has the ability to have two, three, or four concurrent connections, which makes BeyondTrust Password Safe ideal. It is very easy to integrate session management into existing business processes. To make it easy for the engineers, we created templates of the connection strings and then used, believe it or not, Microsoft Excel to create custom strings for each of the engineers. We exported them to a text file that they could then import. In the case of PuTTY, because PuTTY stores the connections and the credentials in the registry, we had to do something different there, but the connection string is customizable enough to make the job fast and easily repeatable for all the other engineers. You don't have 20 or 30 engineers spending two or three days creating all these connection strings. I can create them in a matter of minutes with a Microsoft Excel spreadsheet and then save them to a text file or a CSV file. It is awesome. We are able to integrate session management without disrupting business processes. One of the niceties about BeyondTrust is the ability to integrate it with ticketing systems. For example, as per Sarbanes-Oxley, we have to have a reason for why an administrator is performing something. The integration with a ticketing system is ideal rather than manually typing the reason in the reason field through the GUI where most engineers, after a while, end up just typing in Work. They don't put in enough data to make it clearly visible why they connected. The integration with the ticketing system is ideal for that. Ticket-driven access makes the work very quantifiable.

Read full review

BeyondTrust Password Safe mindshare

Product category:

As of November 2024, the mindshare of BeyondTrust Password Safe in the Enterprise Password Managers category stands at 3.7%, up from 3.0% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Enterprise Password Managers

Key learnings from peers

Last updated Nov 21, 2024

Valuable Features

BeyondTrust Password Safe excels in its intelligent discovery engine, session monitoring, and comprehensive password management. It offers Smart Rules for automated onboarding, enhances security with session recording and keystroke logging, and integrates seamlessly with other applications. The user interface is intuitive and visually appealing. Users appreciate its high availability, integration with ticketing systems, and customizable connection strings, which support efficient management and auditing. The platform's innovative features maintain strong security postures.

"The technical support and customer services are phenomenal."
"The most valuable feature is the architecture capabilities, which allow designated server components for high availability and failover. It works well with identity and access management solutions, allowing users to be automatically onboarded and offboarded. The account mapping feature makes rollout seamless. The session monitoring capabilities are excellent, with keystroke and graphical monitoring. This enhanced our security posture by providing detailed accounts of user actions. It helped us pass our SOX audits."
"It is very easy to deploy. It's easy to use. That's the major thing I like about it."

Room for Improvement

BeyondTrust Password Safe users report that the software's documentation is inconsistent and difficult to navigate. The integration with databases and application management is not streamlined, leading to deployment complexity. Users find the interface outdated and the console management cumbersome. The error notifications lack informative guidance, and the password rotation and Smart Rules features have limitations. Technical support requires improvement, and integration issues exist with other platforms like SAP and Secure Remote Access. Additionally, pricing is considered high.

"The initial server implementation tasks could be easier to process."
"The only improvement I could suggest would be standardizing documentation, but that's more the responsibility of the implementing engineer rather than BeyondTrust Password Trust itself. The documentation must be specific and narrow for implementation, not just broad guidelines."
"The pricing is not cheap, but it could be better."

ROI

Users report mixed outcomes regarding ROI from BeyondTrust Password Safe. Some see eventual ROI due to governance, risk, and compliance requirements, while others achieve rapid returns through faster audits and improved security. Organizations implementing automation reduce manual work and improve security, yet some struggle to measure profit-driven returns. Some users value the efficient implementation and security benefits such as Secure Remote Access, Endpoint Privilege Management, and Identity Security Insights, contributing to overall enterprise protection.

Pricing

BeyondTrust Password Safe features subscription-based licensing, offering competitive and often favorable pricing compared to alternatives like CyberArk. Pricing typically depends on the number of managed assets rather than users, which can benefit organizations with evaluation needs before committing. While some perceive the solution as expensive, many find the cost justifiable given the extensive capabilities and overall value. The annual licensing structure supports flexibility and ongoing system management, making it an appealing choice for enterprises focusing on cost efficiency and feature integration.

"I would rate the pricing a seven out of ten, where one is cheap and ten is expensive."
"The product is quite affordable."
"The pricing structure is better than the competitors. It's much cheaper than CyberArk. They do the licensing on the basis of assets, not on the number of users. For CyberArk, they base the licensing on the number of users, and they have an expensive model of pricing. BeyondTrust has a cheaper model."

Popular Use Cases

Organizations primarily utilize BeyondTrust Password Safe for password vaulting, privileged account management, and session monitoring. It enables secure password rotations and records all activities for auditing. Designed for enterprises, it integrates well with Microsoft, providing cloud, on-premise, and hybrid deployment options. Used extensively in IT environments, it enforces least privilege access, enhancing security by allowing automatic connections to designated privileged accounts while safeguarding and managing credentials effectively across various systems and applications.

Service and Support

BeyondTrust Password Safe's customer service and support receive high praise for prompt responses and global availability, with ratings often close to nine out of ten. Users appreciate their skilled, friendly engineers who quickly address issues, although documentation could improve to minimize reliance on professional services. Some experienced delays in resolution, particularly with UVM-related cases. Despite occasional mixed experiences, the technical support is generally described as phenomenal, addressing critical cases efficiently and being available during unplanned outages.

Deployment

BeyondTrust Password Safe's initial setup varies in complexity. Users note that having prerequisites like governance and guidelines ready is crucial. Some find the setup process straightforward, with structured documentation and easy deployment options. The need for a specialist is highlighted by some, while others suggest the process is manageable with good preparation. Migrating end users can be challenging, but with proper policies, integration with existing systems is achievable. Maintenance requires ongoing management and updates.

Scalability

BeyondTrust Password Safe is frequently described as highly scalable. Many users appreciate its ability to integrate with external systems and efficiently manage large user bases. It is noted for adaptability in expanding environments or implementing active-active configurations. Some believe Windows-based systems limit scalability, though most experiences are positive. Clients range from small to large enterprises, with varied requirements being met effectively. Active infrastructure can enhance scalability by allowing more password servers and databases.

Stability

BeyondTrust Password Safe is generally stable with strong performance and few bugs or glitches. While some earlier versions had issues, the stability has significantly improved. Organizations report stability as high, especially in larger setups with multiple appliances, though requiring regular patches. Some rate stability at seven out of ten, citing occasional crashes or needing a large team for management. Initial server implementation may seem slow, but it's actually intuitive, with most users finding it very reliable.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our BeyondTrust Password Safe Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

16%

Financial Services Firm

15%

Government

Manufacturing Company

Healthcare Company

Media Company

Insurance Company

University

Construction Company

Retailer

Transportation Company

Educational Organization

Energy/Utilities Company

Legal Firm

Comms Service Provider

Hospitality Company

Recreational Facilities/Services Company

Non Profit

Real Estate/Law Firm

Pharma/Biotech Company

Logistics Company

Performing Arts

Consumer Goods Company

Outsourcing Company

Wholesaler/Distributor

Engineering Company

Security Firm

Mining And Metals Company

Marketing Services Firm

Compare BeyondTrust Password Safe with alternative products

Learn more about BeyondTrust Password Safe

This free and open-source password manager supports Windows and Linux, and some ports are available for other platforms as well. Their proprietary algorithm, Twofish, is considered highly secure, with the advantage that it is not affiliated with NIST. The Twofish algorithm secures the data while keys are delivered using SHA-256 authentication.

The application is easy to use, and you can download the Windows app from several sites. Additionally, the application is available in 14 languages.

Beyond Trust Password Safe Key Features

Continuous automated account discovery: Scan, identify and profile assets with the discovery engine. The solution has dynamic categorization that enables the automated onboarding of assets into groups.
Application-to-application password management: Password Safe offers an adaptable API interface including an unlimited number of password caches, therefore providing scalability and redundancy.
Secure SSH key management: The system automatically rotates SSH keys to enforce granular access control and workflow. Private keys securely log users onto systems without exposing them.
Adaptive access control: Evaluates context and provides access requests by considering factors such as time of access and location to determine the user’s authorization level.
Enhanced privileged session management: Admins can record, lock, and document suspicious behavior without disrupting productivity by managing sessions live.
Advanced privileged threat analytics: Password Safe monitors assets and user behavior every day, analyzing what are normal patterns and detecting deviations.
Multi-factor authentication: Password Safe supports 2FA (two-factor authentication) using Yubikey 4, Nano, or Neo.

What can you do with Password Safe?

Cross-device and cross-platform syncing: You can safely store encrypted password files online, where you can access them via Password Safe-compatible apps.
Drag and drop password: Password Safe has a “Dragbar,” which you can use to complete forms by dragging and dropping icons over the form - for example, passwords, usernames, design tiles, and emails.
Autotype: With Password Safe, when you click on a web page or login box, the autotype feature will try to fill in your credentials automatically for you.
Import and export: You can import passwords from text, XML, or CSV fails. You can also export passwords in text, XML, and the PSAFE format.
Password generator: Generate secure passwords by using the algorithm. You can also define your password rules.

Beyond Trust Password Safe Benefits

Controls third-party access: Password Safe secures the connection and automatically checks privileged credentials. The solution records all sessions.
Uses context to determine access: Password Safe considers risk factors like location, day, or time of access and uses them to adjust the permissions and privileges of each user.
Manages access for privileged and non-privileged accounts: By integrating with SailPoint IdentityIQ, Password Safe effectively manages user access for privileged as well as non-privileged accounts.
Reduces cloud risk: Password Safe simplifies secure storage and session management. It supports major cloud providers such as Azure, Amazon, Google, Rackspace, and GoGrid. It also supports social networks - Facebook, LinkedIn, and Twitter.
Integrates password and privilege management: Integrates with Endpoint Privilege Management to control the resources users can access and the actions they are allowed to take

Reviews from Real Users

A PAM Architect at a tech services company says, "BeyondTrust Password Safe's features that I have found most valuable are really those that are knitted in. That is their Smart Rules and Smart Groups, where you design your administration model so you create your AD groups and your asset groups, and configure Password Safe."

An I.S. Architect at a insurance company mentions that "Session recording, password rotation, and password vaulting are the most valuable features."

"One of the most valuable features is that this is a product designed with enterprises in mind," adds a Cybersecurity Architect at a tech vendor.

BeyondTrust Password Safe was previously known as BeyondTrust PowerBroker Password Safe.