Try our new research platform with insights from 80,000+ expert users

CyberArk Privileged Access Manager vs WALLIX Bastion comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 6, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CyberArk Privileged Access ...
Ranking in Privileged Access Management (PAM)
1st
Average Rating
8.6
Reviews Sentiment
6.9
Number of Reviews
203
Ranking in other categories
User Activity Monitoring (1st), Enterprise Password Managers (3rd), Mainframe Security (2nd), Operational Technology (OT) Security (3rd)
WALLIX Bastion
Ranking in Privileged Access Management (PAM)
8th
Average Rating
7.6
Reviews Sentiment
7.3
Number of Reviews
10
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of January 2025, in the Privileged Access Management (PAM) category, the mindshare of CyberArk Privileged Access Manager is 20.5%, down from 23.6% compared to the previous year. The mindshare of WALLIX Bastion is 9.9%, up from 8.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Privileged Access Management (PAM)
 

Featured Reviews

Lasantha Wijesinghe - PeerSpot reviewer
We have visibility and control through real-time user behavior analytics
It took us some time to realize its benefits because there was a learning curve for us. It took us about a year to get our heads around this product and start effectively using it. It is a journey. It takes at least five years for any company to make this product very useful and reach maturity. It is not only the product's fault. The company needs to have a vision, and the company culture needs to go with it. Senior leadership needs to support the vision. You need to have lots of ingredients for success. If everything is in place, you will see success after one year. In the first year, it is a struggle for everybody. My company was bought by a bigger company, and they were very new to privileged access management. Everybody was struggling. The advice I would give is to have a good vision for privileged access management. You need dedicated teams, senior management support, and proper company policies and standards before implementing the solution. Start building knowledge slowly and avoid jumping into the deep end without preparation. I would rate CyberArk Privileged Access Manager a nine out of ten.
Herve Choupot - PeerSpot reviewer
Enhancing administration security with critical feature improvements needed
My primary use case is to make a training about Active Directory security. In my experience, I work with Bastion. I emphasize the importance of having a good knowledge of Bastion to avoid vulnerabilities It helps by providing some security features for administration, although it's crucial to be…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution is stable and reliable."
"Session monitoring is excellent. It may be the solution's most valuable aspect."
"Previously, we used to share passwords for service and normal admin accounts among team members. However, since we started managing it through the product, we've transitioned to individual admin accounts or implemented dual control for shared accounts. With dual control, exclusive checking and checkout options are available, and passwords are not stored in clear text anywhere in the credentials."
"We are utilizing CyberArk to secure applications, credentials, and endpoints."
"Provides improved security around having your credentials locked down and rotated regularly."
"The automatic change of the password and Privileged Session Manager (PSM) are the most valuable features. With Privileged Session Manager, you can control the password management in a centralized way. You can activate these features in a session; the session isolation and recording. You apply the full intermediation principle. So, you must pass through CyberArk PAM to get access to the target system. You don't need to know the password, and everything that you do is registered and auditable. In this case, no one gets to touch the password directly. Also, you can implement detection and response behavior in case of a breach."
"The feature that I like the most is the Privileged Session Manager."
"If any intruder gets inside, they would not be able to move around nor do lateral movements. It minimize any attack problems within our network."
"Bastion provides a kind of isolation between the administration laptop and the server you want to administer."
"Bastion provides a kind of isolation between the administration laptop and the server you want to administer."
"The interface is very simple. It doesn't need any plug-ins, just browsers that are installed at the beginning."
"The support is great. They offer 24/7 support, but the specific level of support depends on your subscription. There's a weekday-only option, and a 24/7 option that covers all days of the week. They also have offices in different regions, including West Africa, so people there can easily get support. There's no need to worry about getting assistance."
"We use WALLIX Bastion to provide access and to monitor sessions."
"Its video recording capabilities have definitely been key for us."
"The solution's technical support team is helpful."
"I like that it's Linux-based, and you don't need to have separate implementations, extra database licenses, or enterprise licenses. I think because it's Linux-based, it's more seamless than Windows. I also like the access manager, which I think is a super tool. Everything is browser-based, and you don't need a VPN. So, that's a great thing."
 

Cons

"Password Vault is much pricier than other solutions. A vendor team might struggle to explain why that price is justified. There are good alternatives that cost less."
"The interface on version 9 looks old."
"I would like to see is the policy export and import. When we expend, we do not want to just hand do a policy."
"The PTA could be improved. Currently, companies often have multiple domains and sometimes it's difficult to implement CyberArk in this kind of infrastructure. For example, you can add CPM (Central Policy Manager) and PSM (Privileged Session Manager and PVWA (Password Vault Web Access) for access, but if you want to add PTA (Privileged Threat Analysis) to scan Vault logs, it is difficult because this component may be adding multiple domain environments."
"The current interface is not very intuitive."
"CyberArk's license is too expensive. I rate it seven out of 10 for affordability."
"Some aspects of the administration need improvement, though they have recently made improvements to the API. However, the management with the interface and configuration are not so user-friendly. It has not changed much during all the years that CyberArk has been on the market. The management part, like platform management as well as PSM connectors definition and management, could be improved, even if it has already been done with the API."
"What could be improved in CyberArk Privileged Access Manager is the licensing model. It should be more flexible in terms of the users. Currently, it's based on the number of users, but many users only log in once in four months or once in five months. It would be great if the licensing model could be modified based on user needs. We even have users who have not logged in even once."
"It would be better if I could manage multiple accounts in one place, like CyberArk. With WALLIX, you can only manage one account, and you are given a separate category. You have to click on each connection to do anything. For example, CyberArk might give three options for one connection if you want to have an interactive user-level experience. But with WALLIX, you have to click three times to get that access. Also, the biggest disadvantage of WALLIX is the reporting. I feel like it's very weak in reporting when compared to the other solutions. As a solution, they're good and stable. But they need to make their reports neater and better. Right now, we're going to the console and then pressing buttons every single time."
"WALLIX Bastion is GUI-driven, but it sometimes needs some management."
"The product doesn't have behavior analytics. They promised to develop this, but only for the cloud, not for on-premise versions."
"The password management needs improvement. Management of Access Manager should be improved as well."
"There could be more automation features for the solution."
"There should be more effort to increase the level of security."
"The performance of WALLIX Bastion's password manager is very low."
"For me, the main issue has to do with the system performance itself."
 

Pricing and Cost Advice

"They have two types of licensing: purchase and subscription. You have to pay for each admin user, such as Microsoft admin, mail admin, database admin, etc."
"The main problem for the tool is its licensing. I work for a really big company. When you try to develop this as a service, usually you work with leverage teams who are formed with dozens of members. You might dedicate one FTE, or less, for something, e.g., an antivirus administrator. You might have half an FTE's effort dedicated to administering the antivirus, but then you have a team of about 30 users who might access that ticket. The problem is that CyberArk eliminated the possibility of concurrent users years ago. This is a big problem for companies who work with leverage teams. You need to pay for everyone. 40 licenses are used by 20 or 30 people. This is a big problem because licenses are not precisely cheap."
"CyberArk Enterprise Password Vault is a very expensive product."
"I do not have any opinions to add about the pricing of the product."
"I would rate the tool’s pricing a six out of ten."
"This solution is considered to be more expensive than others out there on the market today."
"It's expensive, certainly. But CyberArk is the leader in the market with regards to privileged access management. You pay a lot, but you are paying for the value that is being delivered."
"I'm aware that the organization had purchased licensing for almost all of CyberArk's solutions including licensing for PTA, EPM, and the Application Identity Manager. But when it comes to PSM, this is one of the components where there's an additional charge for any extra PSMs that you want to deploy. I believe that there's some rider where the vendor has a bit of leeway to, at times, charge a premium on whatever additional services you may require above the board."
"The solution's pricing is comparable to that of other products."
"The solution's price is mid-ranged."
"Some extra price needs to be paid for license."
report
Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.
831,265 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
33%
Financial Services Firm
12%
Computer Software Company
11%
Manufacturing Company
6%
Computer Software Company
20%
Financial Services Firm
9%
Government
9%
Comms Service Provider
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
What do you like most about CyberArk Privileged Access Manager?
The most valuable features of the solution are control and analytics.
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
CyberArk Privileged Access Manager is more expensive than its competitors, such as BeyondTrust, Delinea, and ManageEngine PAM360. While ManageEngine PAM360 offers similar flexibility and support at...
What do you like most about WALLIX Bastion?
The support is great. They offer 24/7 support, but the specific level of support depends on your subscription. There's a weekday-only option, and a 24/7 option that covers all days of the week. The...
What is your experience regarding pricing and costs for WALLIX Bastion?
I do not know the pricing, setup cost, or licensing. It's difficult to compare without an identical infrastructure.
What needs improvement with WALLIX Bastion?
The main problem of Bastion, CyberArk, and WALLIX is that they have the same interface for both administration and users, which is not a good idea from a security perspective. Also, there should be...
 

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
Bastion
 

Overview

 

Sample Customers

Rockwell Automation
RTBF, Pharmagest, Michelin Group, Niort Hospital
Find out what your peers are saying about CyberArk Privileged Access Manager vs. WALLIX Bastion and other solutions. Updated: January 2025.
831,265 professionals have used our research since 2012.