Try our new research platform with insights from 80,000+ expert users

CyberArk Endpoint Privilege Manager vs Forescout Platform comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 4, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
6.9
CyberArk Endpoint Privilege Manager enhances security and reduces costs, despite challenges in quantifying precise ROI, with immediate benefits.
Sentiment score
6.7
Forescout Platform is valued for enhancing security, automating remediation, saving costs, and improving network reliability and privacy.
Deploying CyberArk Endpoint Privilege Manager has secured the infrastructure, which saves money, time, and resources.
 

Customer Service

Sentiment score
6.7
CyberArk Endpoint Privilege Manager support varies; effectiveness depends on user experience, with inconsistent response times and complex contact methods.
Sentiment score
6.7
Forescout Platform's customer service is responsive and helpful, but varies in response time, knowledge, and consistency.
They respond immediately to our inquiries, resolve issues promptly, and provide valuable guidance, especially in critical situations.
We engage them when needed and receive prompt responses that typically resolve our issues.
Earlier, we received support for normal tickets within a day, but now it takes one or two days to resolve issues.
 

Scalability Issues

Sentiment score
7.7
CyberArk Endpoint Privilege Manager scales efficiently for small to massive deployments, supporting cloud and on-premise solutions with ease.
Sentiment score
7.7
Forescout Platform scales efficiently with seamless appliance additions, despite potential cost concerns, proving reliable in large deployments.
We can set permissions per team or department, allowing some teams to elevate specific applications while others have different permissions.
CyberArk Endpoint Privilege Manager is quite scalable.
The available reports and other security tools assist in scaling it according to my organization's needs.
Scalability can be costly since a physical box needs to be installed for every site.
 

Stability Issues

Sentiment score
8.2
CyberArk Endpoint Privilege Manager is stable with high performance but occasionally experiences downtime during upgrades, especially on non-Windows systems.
Sentiment score
8.0
Forescout Platform is praised for its stability and reliability, with minor issues that do not overshadow its performance.
It is a robust solution that has effectively supported our environment without major issues.
Since implementing it, we have not experienced any outages or stability issues.
CyberArk Endpoint Privilege Manager offers multiple options for creating and stopping policies.
I would rate its stability as 9.5 out of ten.
 

Room For Improvement

CyberArk Endpoint Privilege Manager needs user-friendly enhancements, better integration, faster support, pricing adjustments, and improved threat detection tools.
Forescout Platform struggles with usability, integration, false positives, high costs, needing improved analytics, support, scalability, and simplified licensing.
CyberArk Endpoint Privilege Manager could be improved by simplifying the administration process, specifically when setting up policies and applications.
Currently, no user-based policy option is available inside the EPM console.
Some features provided in the self-hosted version of EPM are not supported in the software as a service version, like connection to some analysis applied by Palo Alto.
The console is a fat client, and a web interface would be preferable.
 

Setup Cost

CyberArk Endpoint Privilege Manager is costly, especially for small businesses, with potential discounts for large enterprises.
Forescout Platform is costly but offers flexible licensing and comprehensive features, competing well with Cisco ISE.
CyberArk Endpoint Privilege Manager is slightly expensive, but costs can be negotiated to become more competitive.
CyberArk Endpoint Privilege Manager is costly compared to other solutions.
Installing a physical box on each site can be expensive.
 

Valuable Features

CyberArk Endpoint Privilege Manager ensures security and compliance through admin control, ransomware protection, and advanced credential analytics.
Forescout Platform offers excellent device visibility, network control, and integration, praised for agentless operation, flexibility, and real-time alerts.
CyberArk Endpoint Privilege Manager effectively reduces malicious content in applications by allowing us to identify and block dangerous applications.
CyberArk Endpoint Privilege Manager enhances computer security by providing minimal access, effectively preventing ransomware attacks.
The most valuable feature is the ability to control users with admin rights.
One of the most valuable features of Forescout Platform is its automation, particularly the ability to automate remediation of rogue devices on the network.
 

Categories and Ranking

CyberArk Endpoint Privilege...
Ranking in Endpoint Compliance
4th
Average Rating
8.2
Reviews Sentiment
6.8
Number of Reviews
35
Ranking in other categories
Privileged Access Management (PAM) (3rd), Anti-Malware Tools (5th), Application Control (5th), Ransomware Protection (7th)
Forescout Platform
Ranking in Endpoint Compliance
5th
Average Rating
8.4
Reviews Sentiment
6.6
Number of Reviews
76
Ranking in other categories
Network Access Control (NAC) (4th), IoT Security (2nd), Extended Detection and Response (XDR) (16th)
 

Mindshare comparison

As of April 2025, in the Endpoint Compliance category, the mindshare of CyberArk Endpoint Privilege Manager is 6.5%, up from 6.3% compared to the previous year. The mindshare of Forescout Platform is 4.4%, down from 4.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Compliance
 

Featured Reviews

Sumit Chavan - PeerSpot reviewer
Helps secure the infrastructure and control users with admin rights
There are many features that are currently missing. A customization option is required for certain policies. For instance, if we need to stop PowerShell scripting, we have to create a different policy for that. Being able to create a sub-level policy within a top-level policy would be good. Currently, no user-based policy option is available inside the EPM console. We can only create computer-based policies. The database is available, but there is a drawback in not being able to create local groups on the EPM console. We only have to depend on Active Directory. This limits infrastructure security as we depend on the Active Directory team to manage user groups. If they remove any users, we lose control. If we could create groups locally and block them or set specific policies, we would have more control. Local endpoint management is missing from the EPM site. Moreover, there is an issue with policies not running as expected when we make enhancements. We have to find multiple ways to whitelist applications or enhance policies.
Odai Halawani - PeerSpot reviewer
It's an easy and effective solution, especially for device profiling without agents
Forescout Platform's most valuable aspect is its excellent device profiling for devices without agents, which is crucial for our work due to challenges with agent-based devices. Its isolation and blocking actions are particularly effective for network security. The device compliance feature helps us ensure device compliance through immediate actions like updating antivirus software. We have already integrated Forescout with antivirus and vulnerability assessment tools, allowing it to monitor vulnerability scores and automatically isolate devices if critical vulnerabilities are detected.
report
Use our free recommendation engine to learn which Endpoint Compliance solutions are best for your needs.
845,406 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
14%
Manufacturing Company
11%
Government
8%
Educational Organization
33%
Computer Software Company
10%
Financial Services Firm
8%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Looking for recommendations and a pros/cons template for software to detect insider threats
This is an inside-out --- outside-in --- inside-in question, as an insider can be an outsider as well. There is no short answer other than a blend of a PAM tool with Behavioral Analytics and Endpo...
What do you like most about CyberArk Endpoint Privilege Manager?
The most valuable feature of the solution is its performance.
What is your experience regarding pricing and costs for CyberArk Endpoint Privilege Manager?
CyberArk Endpoint Privilege Manager is slightly expensive, but costs can be negotiated to become more competitive.
What advice do you have for others considering Forescout Platform?
Forescout is a very powerful NAC product that does not rely on port level configuration. It can detect and block unauthorized devices very quickly. But it has a lot of capabilities and really would...
What advice do you have for others considering Forescout Platform?
I would rate the Forescout Device and Visibility Control Platform at a six out of ten.
What advice do you have for others considering Forescout Platform?
I recommend doing a compression demo. If people use it, they will buy it. So they have to see the product in place. That's the main recommendation is to do a proof of concept. If they do, they will...
 

Also Known As

Viewfinity
Forescout Platform, CounterACT for Endpoint Compliance, ForeScout CounterACT
 

Overview

 

Sample Customers

Information Not Available
NHS Sussex, SAP, SEGA, Vistaprint, Miami Children's Hospital, Pioneer Investments, New York Law School, OmnicomGroup, Meritrust
Find out what your peers are saying about CyberArk Endpoint Privilege Manager vs. Forescout Platform and other solutions. Updated: March 2025.
845,406 professionals have used our research since 2012.