CyberArk Endpoint Privilege Manager vs One Identity Safeguard comparison

CyberArk Endpoint Privilege Manager vs. One Identity Safeguard

Download the complete report

Helped 844,944 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

ROI

Sentiment score

6.9

CyberArk Endpoint Privilege Manager enhances security and reduces costs, despite challenges in quantifying precise ROI, with immediate benefits.

Sentiment score

7.1

One Identity Safeguard enhances security, compliance, and efficiency, especially benefiting organizations with local infrastructure, by managing privileged access.

Deploying CyberArk Endpoint Privilege Manager has secured the infrastructure, which saves money, time, and resources.

For more quotes and insights, download the CyberArk Endpoint Privilege Manager report

Lead Consultant at Aujas Networks Pvt Ltd

Any PAM solution, when I deploy it well and customers use it, leads to a return on investment.

For more quotes and insights, download the One Identity Safeguard report

Consultant at a tech vendor with 11-50 employees

Customer Service

Sentiment score

6.7

CyberArk Endpoint Privilege Manager support varies; effectiveness depends on user experience, with inconsistent response times and complex contact methods.

Sentiment score

6.6

One Identity Safeguard's customer service is generally strong but experiences inconsistent response times and issue resolution.

They respond immediately to our inquiries, resolve issues promptly, and provide valuable guidance, especially in critical situations.

Security Delivery Analyst at Accenture

We engage them when needed and receive prompt responses that typically resolve our issues.

Global Security Systems Consultant at a insurance company with 10,001+ employees

Earlier, we received support for normal tickets within a day, but now it takes one or two days to resolve issues.

For more quotes and insights, download the CyberArk Endpoint Privilege Manager report

Lead Consultant at Aujas Networks Pvt Ltd

I sometimes need escalations to reach expertise.

Consultant at a tech vendor with 11-50 employees

Sometimes, I get a very helpful response and they address issues on a call.

For more quotes and insights, download the One Identity Safeguard report

Systems Administrator at a university with 10,001+ employees

Scalability Issues

Sentiment score

7.7

CyberArk Endpoint Privilege Manager scales efficiently for small to massive deployments, supporting cloud and on-premise solutions with ease.

Sentiment score

7.0

One Identity Safeguard is scalable and fits diverse needs, but some experience degradation and suggest improvements in scalability.

We can set permissions per team or department, allowing some teams to elevate specific applications while others have different permissions.

Global Security Systems Consultant at a insurance company with 10,001+ employees

CyberArk Endpoint Privilege Manager is quite scalable.

For more quotes and insights, download the CyberArk Endpoint Privilege Manager report

Security Delivery Analyst at Accenture

The available reports and other security tools assist in scaling it according to my organization's needs.

Gani Habib

Cybersecurity Manager at Tata Consultancy

We have a cluster of SPPs and a cluster of SPSs, and we can add a node to that cluster without much fuss.

Systems Administrator at a university with 10,001+ employees

If customer usage increases, I can add new appliances, but this incurs costs.

For more quotes and insights, download the One Identity Safeguard report

Consultant at a tech vendor with 11-50 employees

Stability Issues

Sentiment score

8.2

CyberArk Endpoint Privilege Manager is stable with high performance but occasionally experiences downtime during upgrades, especially on non-Windows systems.

Sentiment score

7.4

One Identity Safeguard is stable with strong functionality and high availability, despite occasional configuration challenges and non-LTS bugs.

It is a robust solution that has effectively supported our environment without major issues.

Security Delivery Analyst at Accenture

Since implementing it, we have not experienced any outages or stability issues.

Global Security Systems Consultant at a insurance company with 10,001+ employees

CyberArk Endpoint Privilege Manager offers multiple options for creating and stopping policies.

For more quotes and insights, download the CyberArk Endpoint Privilege Manager report

Lead Consultant at Aujas Networks Pvt Ltd

I encounter problems primarily with the failover procedure.

Consultant at a tech vendor with 11-50 employees

We have not had any issues with the core product itself, but there is an add-on called SCALUS, which is quite critical to the user experience, and that does not work.

For more quotes and insights, download the One Identity Safeguard report

Systems Administrator at a university with 10,001+ employees

Room For Improvement

CyberArk Endpoint Privilege Manager needs user-friendly enhancements, better integration, faster support, pricing adjustments, and improved threat detection tools.

Users seek improved session management, integration, interface, resource efficiency, technical support, documentation, upgrades, policy management, storage, and cost solutions.

CyberArk Endpoint Privilege Manager could be improved by simplifying the administration process, specifically when setting up policies and applications.

Global Security Systems Consultant at a insurance company with 10,001+ employees

Currently, no user-based policy option is available inside the EPM console.

For more quotes and insights, download the CyberArk Endpoint Privilege Manager report

Lead Consultant at Aujas Networks Pvt Ltd

Some features provided in the self-hosted version of EPM are not supported in the software as a service version, like connection to some analysis applied by Palo Alto.

Marek Neumann

Solution Architect at PwC

For some configurations on the SPS side, if I need to make changes, such as for DNS servers, I must redeploy the machine.

Consultant at a tech vendor with 11-50 employees

There are many steps. We are still in the onboarding phase, and it seems very manual.

For more quotes and insights, download the One Identity Safeguard report

Systems Administrator at a university with 10,001+ employees

Setup Cost

CyberArk Endpoint Privilege Manager is costly, especially for small businesses, with potential discounts for large enterprises.

One Identity Safeguard is a robust, costly enterprise solution favored for its effectiveness despite cheaper alternatives.

CyberArk Endpoint Privilege Manager is slightly expensive, but costs can be negotiated to become more competitive.

Gani Habib

Cybersecurity Manager at Tata Consultancy

CyberArk Endpoint Privilege Manager is costly compared to other solutions.

For more quotes and insights, download the CyberArk Endpoint Privilege Manager report

Lead Consultant at Aujas Networks Pvt Ltd

It is one of those where the more you buy, the cheaper it is.

For more quotes and insights, download the One Identity Safeguard report

Systems Administrator at a university with 10,001+ employees

Valuable Features

CyberArk Endpoint Privilege Manager ensures security and compliance through admin control, ransomware protection, and advanced credential analytics.

One Identity Safeguard offers secure privileged access control, auditing, and seamless integration with features like password vaulting and advanced authentication.

CyberArk Endpoint Privilege Manager effectively reduces malicious content in applications by allowing us to identify and block dangerous applications.

Security Delivery Analyst at Accenture

CyberArk Endpoint Privilege Manager enhances computer security by providing minimal access, effectively preventing ransomware attacks.

Gani Habib

Cybersecurity Manager at Tata Consultancy

The most valuable feature is the ability to control users with admin rights.

For more quotes and insights, download the CyberArk Endpoint Privilege Manager report

Lead Consultant at Aujas Networks Pvt Ltd

The auditing and approval mechanisms are features we did not have before and are greatly appreciated.

Systems Administrator at a university with 10,001+ employees

I think One Identity should improve its documentation because it is vast and not clear, and clear documentation on implementing the solution would be advantageous for consultants.

For more quotes and insights, download the One Identity Safeguard report

Consultant at a tech vendor with 11-50 employees

Categories and Ranking

CyberArk Endpoint Privilege...

Ranking in Privileged Access Management (PAM)

3rd

Average Rating

8.2

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Endpoint Compliance (4th), Anti-Malware Tools (5th), Application Control (5th), Ransomware Protection (7th)

One Identity Safeguard

Ranking in Privileged Access Management (PAM)

4th

Average Rating

8.0

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

User Entity Behavior Analytics (UEBA) (7th), Non-Human Identity Management (NHIM) (4th)

Mindshare comparison

As of April 2025, in the Privileged Access Management (PAM) category, the mindshare of CyberArk Endpoint Privilege Manager is 3.5%, down from 3.6% compared to the previous year. The mindshare of One Identity Safeguard is 4.2%, down from 4.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Privileged Access Management (PAM)

Featured Reviews

Helps secure the infrastructure and control users with admin rights

Lead Consultant at Aujas Networks Pvt Ltd

There are many features that are currently missing. A customization option is required for certain policies. For instance, if we need to stop PowerShell scripting, we have to create a different policy for that. Being able to create a sub-level policy within a top-level policy would be good. Currently, no user-based policy option is available inside the EPM console. We can only create computer-based policies. The database is available, but there is a drawback in not being able to create local groups on the EPM console. We only have to depend on Active Directory. This limits infrastructure security as we depend on the Active Directory team to manage user groups. If they remove any users, we lose control. If we could create groups locally and block them or set specific policies, we would have more control. Local endpoint management is missing from the EPM site. Moreover, there is an issue with policies not running as expected when we make enhancements. We have to find multiple ways to whitelist applications or enhance policies.

Read full review

Tor Nordhagen

Executive Director at Semaphore

Transparent mode for privileged sessions will greatly simplify our client's administrative situation

We're introducing the solution's transparent mode for privileged sessions. This is part of what the client hasn't used before. It will simplify their administrative situation greatly. So far, the rollout of this feature has been a seamless process, but we're still in the midst of rolling it out. The benefits will be on the risk side. Right now, the way accounts are managed, you don't necessarily know who is using an account. There's a shared admin account, and that's not a good thing. And those accounts are shared in wallets by several people. One of the real benefits of safeguarding here is that the client will have an absolute audit of who is using an administrative interface, whether it's server or network.

Read full review

See which vendors are best for you

Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.

See recommendations

844,944 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

15%

Computer Software Company

14%

Manufacturing Company

11%

Government

Computer Software Company

24%

Financial Services Firm

12%

Government

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Looking for recommendations and a pros/cons template for software to detect insider threats

This is an inside-out --- outside-in --- inside-in question, as an insider can be an outsider as well. There is no short answer other than a blend of a PAM tool with Behavioral Analytics and Endpo...

What do you like most about CyberArk Endpoint Privilege Manager?

The most valuable feature of the solution is its performance.

What is your experience regarding pricing and costs for CyberArk Endpoint Privilege Manager?

CyberArk Endpoint Privilege Manager is slightly expensive, but costs can be negotiated to become more competitive.

What do you like most about One Identity Safeguard?

The identity discovery is good, and the performance is pretty good value.

What is your experience regarding pricing and costs for One Identity Safeguard?

One Identity Safeguard is expensive. The license is around $3,000 per month.

What needs improvement with One Identity Safeguard?

I find it complicated to implement HTTPS monitoring because the documentation is unclear. The disaster recovery process is complicated for me. For some configurations on the SPS side, if I need to ...

CrowdStrike Falcon vs CyberArk Endpoint Privilege Manager

Comparisons

Compared 25% of the time

Microsoft Defender for Endpoint vs CyberArk Endpoint Privilege Manager

Compared 16% of the time

BeyondTrust Endpoint Privilege Management vs CyberArk Endpoint Privilege Manager

Compared 14% of the time

CyberArk Privileged Access Manager vs CyberArk Endpoint Privilege Manager

Compared 9% of the time

Tanium vs CyberArk Endpoint Privilege Manager

Compared 5% of the time

More CyberArk Endpoint Privilege Manager Competitors

CyberArk Privileged Access Manager vs One Identity Safeguard

Compared 38% of the time

WALLIX Bastion vs One Identity Safeguard

Compared 18% of the time

Delinea Secret Server vs One Identity Safeguard

Compared 10% of the time

SailPoint Identity Security Cloud vs One Identity Safeguard

Compared 9% of the time

Saviynt vs One Identity Safeguard

Compared 8% of the time

More One Identity Safeguard Competitors

Product Reports

CyberArk Endpoint Privilege Manager

Download CyberArk Endpoint Privilege Manager product report

CyberArk Endpoint Privilege Manager report

One Identity Safeguard

Download One Identity Safeguard product report

Also Known As

Viewfinity

No data available

Overview

CyberArk Endpoint Privilege Manager, a critical and foundational endpoint control addresses the underlying weaknesses of endpoint defenses against a privileged attacker and helps enterprises defend against these attacks through removing local admin rights, enforcing least privilege, and implementing foundational endpoint security controls across all Windows, macOS and Linux endpoints from hybrid to cloud environments.

Click here for a free 30 day trial: CyberArk Endpoint Privilege Manager free trial

CyberArk

One Identity Safeguard manages and monitors privileged access, enhancing security with features like automatic session recording, real-time monitoring, and credential rotation. It integrates seamlessly, supports compliance with audit trails, and improves operational efficiency across organizations. This robust platform significantly bolsters security protocols while controlling sensitive operations.

One Identity

Sample Customers

Information Not Available

Cavium

CyberArk Endpoint Privilege Manager vs. One Identity Safeguard