CyberArk Endpoint Privilege Manager vs One Identity Safeguard comparison

CyberArk Endpoint Privilege Manager vs. One Identity Safeguard

Download the complete report

Helped 824,053 peers since 2012

Categories and Ranking

CyberArk Endpoint Privilege...

Ranking in Privileged Access Management (PAM)

7th

Average Rating

8.2

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

Endpoint Compliance (4th), Anti-Malware Tools (6th), Application Control (6th), Ransomware Protection (7th)

One Identity Safeguard

Ranking in Privileged Access Management (PAM)

3rd

Average Rating

8.0

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

User Entity Behavior Analytics (UEBA) (6th)

Mindshare comparison

As of December 2024, in the Privileged Access Management (PAM) category, the mindshare of CyberArk Endpoint Privilege Manager is 4.0%, up from 3.8% compared to the previous year. The mindshare of One Identity Safeguard is 4.5%, down from 5.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Privileged Access Management (PAM)

Featured Reviews

Anish R

Digital Architect - IAM at a manufacturing company with 10,001+ employees

Foolproof and good for controlling access but can be expensive

I've worked in BeyondTrust, also. They have Asian-based solutions, and it's not as heavy as CyberArk. Since I have been working with CyberArk for some time, I feel a little bit more comfortable with CyberArk. BeyondTrust is also not that bad. However, they did not have all the capabilities that CyberArk was offering at that time. That said, this was maybe four or five years ago. I haven't explored anything after that. I'm sure a lot of things have changed. There used to be IBM Privilege Identity Manager as well, but it's not there anymore. Saviynt has its own solution as well. Basically, there are multiple solutions there, however, CyberArk was definitely been our choice for Privilege Identity Manager.

Read full review

Tor Nordhagen

Executive Director at Semaphore

Transparent mode for privileged sessions will greatly simplify our client's administrative situation

We're introducing the solution's transparent mode for privileged sessions. This is part of what the client hasn't used before. It will simplify their administrative situation greatly. So far, the rollout of this feature has been a seamless process, but we're still in the midst of rolling it out. The benefits will be on the risk side. Right now, the way accounts are managed, you don't necessarily know who is using an account. There's a shared admin account, and that's not a good thing. And those accounts are shared in wallets by several people. One of the real benefits of safeguarding here is that the client will have an absolute audit of who is using an administrative interface, whether it's server or network.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It has drastically reduced the attack surface for local administrative rights and the chance of escalation of privilege. We've removed, at this point, close to 98 percent of the local administrative accounts on workstations. If there were an incident, it would stop at that point and we'd be able to know."

"We can do both server and endpoint protection."

"I like that you can remove the admin rights from the user's computer and have control over the environment. That means you can delete the local admins and grant them proper privileges with the console. So, they will get proper permissions for applications they need, but we don't have to do it. In the domain where we don't have control, the user can only do specified actions, but not all of them."

"This is the number one product for privilege account security."

"I am impressed with the product's seamless integration. The PAM wallet and enterprise password wallet are good also good."

"I have always found that CyberArk is a very tight, foolproof product compared to most other products available."

"The product is very flexible"

"The most valuable feature of the solution is its performance."

More CyberArk Endpoint Privilege Manager pros

"It offers high availability and enables end users to deploy the solution with 99.999 percent uptime, which is crucial in an enterprise environment with a large number of endpoints."

"Safeguard can define and update processes and procedures into the security framework of a company, including mobile. It allows us to change the policies and configurations on a mass scale in regards to security."

"There are numerous valuable data protection features, including the content and information that offer us more scalable protection as needed."

"We use the Approval Anywhere, or cloud assistant feature and it is great. It enables us to add an extra layer of security for critical passwords without adding time to the approval process."

"The extensible framework for authentication is one of the most valuable features. We use an MFA plug-in and a lot of different factors, depending on what the business use-cases are. And of course, the auditing functionality is also valuable."

"There are a lot of features, so it's going to sound funny, but one of the most simplistic features, the Favorites feature, is the one we like the best. You do a full run-through of configuration to check out a server and then you can save that whole configuration as a favorite. So the next time you go in, you click on the favorite that you configured and it automatically takes you to the end so you can check the server out that much faster. It saves a lot of time..."

"It's one of the best products we've seen. When you start looking at the functionality and use cases and usability of the product, it's straightforward. They designed this product with the end-user in mind, and they also had the sysadmin who is supporting the product in mind. They really did a nice job. Overall, it's a nice product to work with."

"In terms of the user experience, it is a pretty useful product. It works in a good way."

More One Identity Safeguard pros

Cons

"CyberArk Endpoint Privilege Manager is a perfect solution, but CyberArk Endpoint Privilege Manager for Linux has many issues. Another area for improvement in CyberArk Endpoint Privilege Manager, specifically for Windows, is that there's no way for you to check credential theft from a text file, such as a notepad file."

"The price of the product is an area of concern where improvements are required. The product's price should be made more flexible."

"It cannot be on-prem. It is only cloud-based. Sometimes, that's a restriction in terms of usage."

"The turnaround time of the support team is an area of concern where improvements are required."

"The solution is very expensive."

"CyberArk meets clients' need very spot-on. It covers everything customers ask for. As for improvements, honestly, the feedback's been really positive. I haven't heard any specific areas that need work."

"CyberArk Endpoint Privilege Manager could be improved by simplifying the administration process, specifically when setting up policies and applications."

"The solution's pricing could be better."

More CyberArk Endpoint Privilege Manager cons

"Something for One Identity to look at is having integration guidelines for how to logically group accounts."

"We would like to have the option of importing assets by using the CSV file. It was available in the earlier versions, but it is not available now."

"I would like to see support for RDP over HTTPS so this product can be used in conjunction with the Microsoft terminal."

"One Identity's support is not appropriately structured, and it has a lot of room to improve."

"The automated change of the passwords, which is now integrated, could be improved to be more flexible regarding different systems."

"The deployment affects our privileged users because it takes a long time for them to request privileges, which impacts the SLA."

"The Transparent Mode could be somewhat easier to use."

"We have issues using Safeguard to connect to and record from the cloud. Currently, they don't have a mechanism to record this type of connection."

More One Identity Safeguard cons

Pricing and Cost Advice

"It's not at the lower end of the market. I think the price is reasonable considering the quality it delivers. It is a top-notch solution at a fair price point."

"Pricing depends on how many devices you use. Right now, on-premise, it costs us a little, but it's worth it. It seems like the cloud solution is much more expensive. We got this solution one year ago, and it's like we bought the solution, and now they are not going to support it on-premise anymore. We are in the implementation phase, and we missed this, and we already paid for the licenses. This is wasted time from my perspective, and CyberArk should be more customer-friendly."

"I think that it was in the range of $200,000 that had to get approved."

"The solution's pricing is reasonable compared to other vendors' products."

"I rate the solution's pricing an eight out of ten since the price can be too high for smaller businesses."

"The tool's pricing is reasonable for customers."

"The cost for CyberArk is very high."

"The tool is a bit pricey compared to its competitors. My company does work with competitors, but I don't have hands-on experience with other software. I've just done some comparisons."

More CyberArk Endpoint Privilege Manager pricing and cost advice

"We have a yearly license. The cost depends on how much a company wants to invest in technology. In our organization, we believe in modern digitization and automation processes so we found it affordable. One Identity was not that much less than other solutions and it is not a cheap solution. There were number of cheaper solutions. However, it's the most effective, according to our evaluation."

"Setup cost, pricing and licensing are all very expensive."

"They have comparable pricing. All identity products are essentially priced in a similar way. It's a per-user base."

"Our licensing costs are on a yearly basis."

"The license is very expensive for us, partly due to inflation and partly because of the exchange rate between the Dollar and the Iranian Rial. We purchased a perpetual license that we've been using up until now, but I believe that we are not going to update it in the future. Instead, we plan to find another third-party to support us with the license, in the sense that we would have access to their license as a shared agreement."

"The license is around $3,000 per month."

"Safeguard is cheaper than CyberArk."

"The pricing is about $80,000 per 100 servers. There are few elective costs."

More One Identity Safeguard pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.

See recommendations

824,053 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

15%

Computer Software Company

14%

Manufacturing Company

11%

Government

Computer Software Company

23%

Financial Services Firm

12%

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Looking for recommendations and a pros/cons template for software to detect insider threats

This is an inside-out --- outside-in --- inside-in question, as an insider can be an outsider as well. There is no short answer other than a blend of a PAM tool with Behavioral Analytics and Endpo...

What do you like most about CyberArk Endpoint Privilege Manager?

The most valuable feature of the solution is its performance.

What is your experience regarding pricing and costs for CyberArk Endpoint Privilege Manager?

The tool's pricing is reasonable for customers.

What do you like most about One Identity Safeguard?

The identity discovery is good, and the performance is pretty good value.

What is your experience regarding pricing and costs for One Identity Safeguard?

One Identity Safeguard is expensive. The license is around $3,000 per month.

What needs improvement with One Identity Safeguard?

One Identity's support is not appropriately structured, and it has a lot of room to improve.

CrowdStrike Falcon vs CyberArk Endpoint Privilege Manager

Comparisons

Compared 23% of the time

Microsoft Defender for Endpoint vs CyberArk Endpoint Privilege Manager

Compared 18% of the time

BeyondTrust Endpoint Privilege Management vs CyberArk Endpoint Privilege Manager

Compared 16% of the time

CyberArk Privileged Access Manager vs CyberArk Endpoint Privilege Manager

Compared 10% of the time

Tanium vs CyberArk Endpoint Privilege Manager

Compared 5% of the time

More CyberArk Endpoint Privilege Manager Competitors

CyberArk Privileged Access Manager vs One Identity Safeguard

Compared 37% of the time

WALLIX Bastion vs One Identity Safeguard

Compared 15% of the time

Delinea Secret Server vs One Identity Safeguard

Compared 10% of the time

BeyondTrust Privileged Remote Access vs One Identity Safeguard

Compared 7% of the time

SailPoint Identity Security Cloud vs One Identity Safeguard

Compared 6% of the time

More One Identity Safeguard Competitors

Product Reports

CyberArk Endpoint Privilege Manager

Download CyberArk Endpoint Privilege Manager product report

CyberArk Endpoint Privilege Manager report

One Identity Safeguard

Download One Identity Safeguard product report

Also Known As

Viewfinity

No data available

Learn More

CyberArk

One Identity

Overview

CyberArk Endpoint Privilege Manager, a critical and foundational endpoint control addresses the underlying weaknesses of endpoint defenses against a privileged attacker and helps enterprises defend against these attacks through removing local admin rights, enforcing least privilege, and implementing foundational endpoint security controls across all Windows, macOS and Linux endpoints from hybrid to cloud environments.

Click here for a free 30 day trial: CyberArk Endpoint Privilege Manager free trial

One Identity Safeguard manages and monitors privileged access, enhancing security with features like automatic session recording, real-time monitoring, and credential rotation. It integrates seamlessly, supports compliance with audit trails, and improves operational efficiency across organizations. This robust platform significantly bolsters security protocols while controlling sensitive operations.

Sample Customers

Information Not Available

Cavium

CyberArk Endpoint Privilege Manager vs. One Identity Safeguard