Try our new research platform with insights from 80,000+ expert users

CyberArk Privileged Access Manager vs SailPoint Identity Security Cloud comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 8, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Customer Service

Sentiment score
6.8
CyberArk Privileged Access Manager's support is efficient and knowledgeable, but response times and communication can vary, especially with outsourcing.
Sentiment score
6.6
SailPoint Identity Security Cloud provides efficient support with responsive service, though some experience delays and language challenges in specific regions.
Sometimes, the support is slow, and they often suggest resorting to expert services.
 

Room For Improvement

Sentiment score
6.7
Enhancements sought include user-friendliness, integration, automation, reporting, customization, API support, cost efficiency, deployment, documentation, and updates.
Sentiment score
4.9
SailPoint struggles with high costs, technical issues, and lacks user-friendly features, requiring improvements in integration and automation.
SailPoint lacks some features like privileged account management and access management features found in products like Okta.
IdentityIQ should be more widely available on the cloud, especially in regions like the Middle East where residency issues are present.
 

Scalability Issues

Sentiment score
7.1
CyberArk Privileged Access Manager offers seamless and flexible scalability for organizations, though licensing challenges may occur.
Sentiment score
7.5
SailPoint Identity Security Cloud effectively scales for large businesses, though challenges exist with virtualized platforms and high processing demands.
The solution is scalable and can be upgraded to accommodate increased user counts.
The solution scales well as long as we provide the necessary resources.
 

Setup Cost

Sentiment score
5.0
CyberArk Privileged Access Manager is costly but offers high value and comprehensive security, with subscription models benefiting larger installations.
Sentiment score
5.6
SailPoint's pricing is high but offers value with flexible identity management, though setup costs may deter small businesses.
The pricing of SailPoint could be better.
The costs are slightly higher than SailPoint IQ due to included charges for maintenance.
 

Stability Issues

Sentiment score
7.8
CyberArk Privileged Access Manager is stable, with occasional bugs, but upgrades and redundancy features improve reliability and performance.
Sentiment score
7.9
SailPoint Identity Security Cloud is highly stable with minor bugs, receiving high stability ratings and praised for flexibility.
IdentityIQ deserves a rating of 12 out of ten for stability.
 

Valuable Features

Sentiment score
8.5
CyberArk Privileged Access Manager enhances security with automatic password rotation, session monitoring, and supports large-scale, compliant deployments.
Sentiment score
8.0
SailPoint Identity Cloud offers user-friendly, robust integration, exceptional scalability, and enhances governance with advanced automation and compliance features.
The automation of provisioning and deprovisioning, managing contractors, temporary users, and the overall automation factor is fantastic.
The most valuable features include its ability to integrate with AI and machine learning.
 

Categories and Ranking

CyberArk Privileged Access ...
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
193
Ranking in other categories
User Activity Monitoring (1st), Enterprise Password Managers (2nd), Privileged Access Management (PAM) (1st), Mainframe Security (3rd), Operational Technology (OT) Security (3rd)
SailPoint Identity Security...
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
67
Ranking in other categories
User Provisioning Software (1st), Identity Management (IM) (2nd), Identity and Access Management as a Service (IDaaS) (IAMaaS) (4th), SaaS Management Platforms (2nd), Cloud Infrastructure Entitlement Management (CIEM) (1st)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. CyberArk Privileged Access Manager is designed for Privileged Access Management (PAM) and holds a mindshare of 21.2%, down 24.0% compared to last year.
SailPoint Identity Security Cloud, on the other hand, focuses on User Provisioning Software, holds 30.0% mindshare, up 28.9% since last year.
Privileged Access Management (PAM)
User Provisioning Software
 

Featured Reviews

SatishIyer - PeerSpot reviewer
Lets you ensure relevant, compliant access in good time and with an audit trail, yet lacks clarity on MITRE ATT&CK
When I was a component owner for PAM's Privileged Threat Analytics (PTA) component, what I wanted was a clear mapping to the MITRE ATT&CK framework, a framework which has a comprehensive list of use cases. We reached out to the vendor and asked them how much coverage they have of the uses cases found on MITRE, which would have given us a better view of things while I was the product owner. Unfortunately they did not have the capability of mapping onto MITRE's framework at that time. PTA is essentially the monitoring interface of the broker (e.g. Privileged Access Management, the Vault, CPM, PSM, etc.), and it's where you can capture your broker bypass and perform related actions. For this reason, we thought that this kind of mapping would be required, but CyberArk informed us that they did not have the capability we had in mind with regard to MITRE ATT&CK. I am not sure what the situation is now, but it would definitely help to have that kind of alignment with one of the more well-known frameworks like MITRE. For CyberArk as a vendor, it would also help them to clearly spell out in which areas they have full functionality and in which ares they have partial or none. Of course, it also greatly benefits the customers when they're evaluating the product.
RameshBhattacharjee - PeerSpot reviewer
Great features with good certification module but the cost can be prohibitive for some
The only issue I have with the product is that there are modules that need to be bought separately, and that makes the product prohibitive for some of the customers that I've worked with, particularly in the middle-tier range. The solution itself is expensive and then when you add the cost of the modules it becomes too much. They could provide something similar to what Okta offers and I believe this would give the company a lot more traction in the mid-size range of companies. I'd like to see SailPoint support for custom-based connectors.
report
Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.
816,406 professionals have used our research since 2012.
 

Answers from the Community

NC
Dec 1, 2021
Dec 1, 2021
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the management of user identities, systems, data, and cloud services. It works great for Identity Access Management, specifically for cleaning up inactive and orphaned accounts. It has the joiner-mover-lea...
See 2 answers
Nov 17, 2021
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the management of user identities, systems, data, and cloud services. It works great for Identity Access Management, specifically for cleaning up inactive and orphaned accounts. It has the joiner-mover-leaver feature. One of the features we like is the large availability of connectors for different applications and platforms. You can also recertify an account, which is very useful. It is well suited for large companies with lots of users and applications. However, for small companies, it might be a bit of an overkill. Sailpoint has a steep learning curve, so it is not for inexperienced users. Moreover, it doesn’t offer a lot of supporting documentation. It also doesn’t integrate well with other solutions. We chose CyberArk despite the cost because it works great for password management. CyberArk helps manage privileged accounts and service accounts, for example, when users need to connect remotely into systems. It is especially useful for IT staff to access their privileged accounts without having to remember the passwords every time - individually and even as a group. What we like the most about CyberArk is the ease of use and effectiveness in managing privileged accounts. For instance, it automatically changes the passwords for privileged accounts and reconciles and verifies passwords. New users can obtain secure credentials with minimal time and effort. The initial cost is high, which can be a bit of a stretch for small organizations. It also has high requirements for the initial setup and is difficult to customize. The performance could be faster. Conclusions While Sailpoint IdentityIQ is a very good privileged account solution, CyberArk is better suited for us because of its ease of use and efficiency in password management.
DM
Dec 1, 2021
The two products are actually complimentary. Both companies have been very good about staying in their lanes and are their respective market leaders. CyberArk's PAM solution is aimed at protecting privileged accounts by providing features like vaulting, credential rotation, session monitoring and recording. They also have solutions for DevOps and Secrets management. SailPoint is an Identity Governance solution and actually manages CyberArk as an application the same way it manages accounts and privileges in SAP, AD, AAD and over 100 more applications. For CyberArk, it can add/change/delete users as well as create safes and assign users to those safes. At a user account certification time, it will show the CyberArk users and their associated privileges and allow the user's manager or other appropriate people to approve or revoke the privileged access.  SailPoint creates an Identity warehouse so that a user's accounts and entitlements are gathered, managed and reported on in a centralized manner. See Youtube for a quick explanation - SailPoint Identity Governance Integrates with CyberAek Privileged Access Security.  SailPoint does not provide the vault and session management functions that CyberArk does.
 

Top Industries

By visitors reading reviews
Educational Organization
31%
Financial Services Firm
13%
Computer Software Company
11%
Manufacturing Company
6%
Financial Services Firm
18%
Computer Software Company
14%
Manufacturing Company
11%
Insurance Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
What do you like most about CyberArk Privileged Access Manager?
The most valuable features of the solution are control and analytics.
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
CyberArk Privileged Access Manager comes at a high cost. But the solution is worth its price.
What do you like most about SailPoint IdentityIQ?
The first valuable feature of the solution is its interface. The second feature of the solution is the level of flexibility it provides.
What is your experience regarding pricing and costs for SailPoint IdentityIQ?
The product is expensive. People need to opt for a licensing plan for one year or three years.
What needs improvement with SailPoint IdentityIQ?
Regarding the scope for improvement in the solution, reporting is an area that can be a bit more UI-oriented. Apart from that, it's a very good product, and I do not have any complaints about it.
 

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
IdentityIQ, IdentityNow, Cloud Infrastructure Entitlement Management, Intello
 

Overview

 

Sample Customers

Rockwell Automation
Adobe, AXA Technology Services, Cuna Mutual Group, Equifax, ING Direct, Orrstown Bank, Rockwell Automation, SallieMae, Spirit Aerosystems, TEL
Find out what your peers are saying about CyberArk, Delinea, One Identity and others in Privileged Access Management (PAM). Updated: November 2024.
816,406 professionals have used our research since 2012.