Try our new research platform with insights from 80,000+ expert users

BeyondTrust Endpoint Privilege Management vs CyberArk Privileged Access Manager comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 6, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.9
BeyondTrust Endpoint Privilege Management boosts ROI by enhancing security and compliance, supporting zero-trust adoption and marketplace participation.
Sentiment score
7.1
CyberArk Privileged Access Manager enhances security by automating tasks, improving compliance, reducing breaches, and increasing efficiency and ROI.
 

Customer Service

Sentiment score
7.1
Mixed reviews for BeyondTrust support, citing knowledgeable help but variable response times and lack of local Australian assistance.
Sentiment score
6.5
CyberArk's support is efficient and knowledgeable, but challenges exist in response times, communication, and handling complex cases.
Response times seem to correlate with the strength of the relationship with the CyberArk account manager, with quicker responses when rapport is strong.
They are helpful, but complex issues can take a long time to resolve, which can delay solutions for urgent customer issues.
CyberArk's customer service has improved recently and is now very responsive.
 

Scalability Issues

Sentiment score
7.4
BeyondTrust Endpoint Privilege Management offers exceptional scalability, effectively supporting large user bases with minimal performance impact and high stability.
Sentiment score
7.7
CyberArk Privileged Access Manager is highly scalable and versatile, though complexity in licensing and configurations may pose challenges.
We started small and expanded it to an enterprise level, and are now moving to the cloud for further growth.
We have different operating systems, database systems, and decentralized infrastructure.
I find SaaS to be more promising in scalability.
 

Stability Issues

Sentiment score
7.5
BeyondTrust Endpoint Privilege Management is mostly stable, with occasional minor bugs, quickly resolved issues, and an eight out of ten rating.
Sentiment score
7.8
CyberArk Privileged Access Manager is stable, with issues mainly from configuration, infrastructure, or resource limitations rather than the software.
Proper fine-tuning and expertise ensure the product performs well.
Overall, the stability of the solution is high.
It has a large customer base and positive feedback within my network.
 

Room For Improvement

BeyondTrust Endpoint Privilege Management needs UI, integration, reporting, compatibility, pricing improvements, and enhanced support and user guidance.
CyberArk Privileged Access Manager needs UI, integration, and performance improvements, simpler setup, cost-effectiveness, and more plugins for usability.
They want everything to be on the cloud, but even in the SaaS version of CyberArk Privileged Access Manager, they need to deploy some servers on-premises.
In the long term, I would like to see these processes simplified, especially for on-premise installations.
Incorporating automated onboarding and offboarding features directly into the product would reduce the maintenance burden on administrators.
 

Setup Cost

BeyondTrust offers flexible licensing with varying costs, seen as both expensive and valuable, especially for Mac clients.
CyberArk Privileged Access Manager is costly, especially for small businesses, though discounts exist for larger purchases.
CyberArk is expensive compared to other products I know.
CyberArk's SaaS solution is particularly expensive.
CyberArk is comparatively expensive compared to other PAM solutions, such as Delinea, especially during renewal.
 

Valuable Features

BeyondTrust Endpoint Privilege Management enhances security with privilege control, risk reduction, and integration capabilities for efficient endpoint security management.
CyberArk Privileged Access Manager enhances security with password management, session monitoring, integration flexibility, and real-time auditing for compliance.
CyberArk Privileged Access Manager helps ensure data privacy because we now know who is using which credentials and at what time.
For me, CyberArk Privileged Access Manager's most valuable features are password and session management.
After giving access, it continually checks if the user is the same user.
 

Categories and Ranking

BeyondTrust Endpoint Privil...
Ranking in Privileged Access Management (PAM)
4th
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
28
Ranking in other categories
Anti-Malware Tools (10th)
CyberArk Privileged Access ...
Ranking in Privileged Access Management (PAM)
1st
Average Rating
8.6
Reviews Sentiment
6.9
Number of Reviews
197
Ranking in other categories
User Activity Monitoring (1st), Enterprise Password Managers (3rd), Mainframe Security (2nd), Operational Technology (OT) Security (3rd)
 

Mindshare comparison

As of December 2024, in the Privileged Access Management (PAM) category, the mindshare of BeyondTrust Endpoint Privilege Management is 4.5%, down from 6.0% compared to the previous year. The mindshare of CyberArk Privileged Access Manager is 20.9%, down from 23.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Privileged Access Management (PAM)
 

Featured Reviews

Marlin B Pohlman - PeerSpot reviewer
Admin rights can be granted and revoked within minutes and that is what everything comes down to, for us
The most important factor is the ability to invoke least privilege, which is required under 27701 and GDPR. We have used the solution to remove users' administrative rights and instead provide on-demand, token-based administrative rights. The latter is an option for a single, temporary increase in privileges for a trusted user for a specific time. We use it in a medical environment for HIPAA compliance or medical compliance in a GDPR case. For example, if you have a clinician who needs access to a specific piece of medical information, or if there is an administrator who needs to have administrator rights to a particular database for a limited period of time, we can give it and then revoke it. That's another reason the tool is useful. Also, the fact that we are able to add events straight from event logs and/or the database is important for crisis management and rapid reaction. This ability helps us meet our SLA requirements. In addition, we can elevate approved applications and actions without broad administrative rights. We can temporarily increase privilege based on tasks. If someone puts in a ticket, we increase their privilege for that ticket. We then watch to see if that ticket has been resolved and then we decrease it. Another feature of the platform is instant risk reduction solutions. We can do a risk metric with it, and we do that as part of our risk evaluation. We can increase and decrease privilege and we can actually show that in the ISO 13485 risk metric. And it provides a single solution for managing endpoint security preferences. It does a good job of that.
SatishIyer - PeerSpot reviewer
Lets you ensure relevant, compliant access in good time and with an audit trail, yet lacks clarity on MITRE ATT&CK
When I was a component owner for PAM's Privileged Threat Analytics (PTA) component, what I wanted was a clear mapping to the MITRE ATT&CK framework, a framework which has a comprehensive list of use cases. We reached out to the vendor and asked them how much coverage they have of the uses cases found on MITRE, which would have given us a better view of things while I was the product owner. Unfortunately they did not have the capability of mapping onto MITRE's framework at that time. PTA is essentially the monitoring interface of the broker (e.g. Privileged Access Management, the Vault, CPM, PSM, etc.), and it's where you can capture your broker bypass and perform related actions. For this reason, we thought that this kind of mapping would be required, but CyberArk informed us that they did not have the capability we had in mind with regard to MITRE ATT&CK. I am not sure what the situation is now, but it would definitely help to have that kind of alignment with one of the more well-known frameworks like MITRE. For CyberArk as a vendor, it would also help them to clearly spell out in which areas they have full functionality and in which ares they have partial or none. Of course, it also greatly benefits the customers when they're evaluating the product.
report
Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.
824,053 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Computer Software Company
13%
Manufacturing Company
10%
Government
8%
Educational Organization
32%
Financial Services Firm
12%
Computer Software Company
11%
Manufacturing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Looking for recommendations and a pros/cons template for software to detect insider threats
This is an inside-out --- outside-in --- inside-in question, as an insider can be an outsider as well. There is no short answer other than a blend of a PAM tool with Behavioral Analytics and Endpo...
What do you like most about BeyondTrust Endpoint Privilege Management?
The solution's least privilege enforcement has helped us ensure access is given to only the required people.
How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
What do you like most about CyberArk Privileged Access Manager?
The most valuable features of the solution are control and analytics.
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
CyberArk Privileged Access Manager comes at a high cost. But the solution is worth its price.
 

Also Known As

BeyondTrust PowerBroker, BeyondTrust Endpoint Privilege Management for Windows, BeyondTrust Endpoint Privilege Management for Mac, BeyondTrust Endpoint Privilege Management for Linux, BeyondTrust Endpoint Privilege Management for Unix, Avecto Defendpoint
CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
 

Overview

 

Sample Customers

Aera Energy LLC, Care New England, James Madison University
Rockwell Automation
Find out what your peers are saying about BeyondTrust Endpoint Privilege Management vs. CyberArk Privileged Access Manager and other solutions. Updated: December 2024.
824,053 professionals have used our research since 2012.