Try our new research platform with insights from 80,000+ expert users

CyberArk Privileged Access Manager vs WALLIX Bastion comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 6, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CyberArk Privileged Access ...
Ranking in Privileged Access Management (PAM)
1st
Average Rating
8.6
Reviews Sentiment
6.9
Number of Reviews
217
Ranking in other categories
User Activity Monitoring (1st), Enterprise Password Managers (2nd), Mainframe Security (2nd), Operational Technology (OT) Security (3rd)
WALLIX Bastion
Ranking in Privileged Access Management (PAM)
9th
Average Rating
7.6
Reviews Sentiment
7.3
Number of Reviews
10
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of March 2025, in the Privileged Access Management (PAM) category, the mindshare of CyberArk Privileged Access Manager is 19.4%, down from 23.3% compared to the previous year. The mindshare of WALLIX Bastion is 8.7%, up from 8.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Privileged Access Management (PAM)
 

Featured Reviews

Lasantha Wijesinghe - PeerSpot reviewer
We have visibility and control through real-time user behavior analytics
It took us some time to realize its benefits because there was a learning curve for us. It took us about a year to get our heads around this product and start effectively using it. It is a journey. It takes at least five years for any company to make this product very useful and reach maturity. It is not only the product's fault. The company needs to have a vision, and the company culture needs to go with it. Senior leadership needs to support the vision. You need to have lots of ingredients for success. If everything is in place, you will see success after one year. In the first year, it is a struggle for everybody. My company was bought by a bigger company, and they were very new to privileged access management. Everybody was struggling. The advice I would give is to have a good vision for privileged access management. You need dedicated teams, senior management support, and proper company policies and standards before implementing the solution. Start building knowledge slowly and avoid jumping into the deep end without preparation. I would rate CyberArk Privileged Access Manager a nine out of ten.
Herve Choupot - PeerSpot reviewer
Enhancing administration security with critical feature improvements needed
My primary use case is to make a training about Active Directory security. In my experience, I work with Bastion. I emphasize the importance of having a good knowledge of Bastion to avoid vulnerabilities It helps by providing some security features for administration, although it's crucial to be…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"CyberArk is a good and adaptive solution. It is easy to adopt and install. It is easy for every use case."
"Password rotation, session recording & isolation and on-demand privileges."
"We are able to rotate credentials and have privileged account access."
"On the customer accounts side, our account managers are responsive. If you ask them, they will get you whomever you need."
"It supports lots of requirements in the privileged access management area."
"CyberArk is a pioneer for PAM; they've always been the leader in terms of research and development and bringing new capabilities to the PAM."
"We have accomplished our security goals. We have two-factor authenticated and vaulted our important accounts, so people can't just steal stuff from us."
"All of the features of CyberArk Privileged Access Manager are valuable."
"We use WALLIX Bastion to provide access and to monitor sessions."
"Bastion provides a kind of isolation between the administration laptop and the server you want to administer."
"The support is great. They offer 24/7 support, but the specific level of support depends on your subscription. There's a weekday-only option, and a 24/7 option that covers all days of the week. They also have offices in different regions, including West Africa, so people there can easily get support. There's no need to worry about getting assistance."
"The interface is very simple. It doesn't need any plug-ins, just browsers that are installed at the beginning."
"The solution's technical support team is helpful."
"Its video recording capabilities have definitely been key for us."
"I like that it's Linux-based, and you don't need to have separate implementations, extra database licenses, or enterprise licenses. I think because it's Linux-based, it's more seamless than Windows. I also like the access manager, which I think is a super tool. Everything is browser-based, and you don't need a VPN. So, that's a great thing."
"Bastion provides a kind of isolation between the administration laptop and the server you want to administer."
 

Cons

"It should be easy to use for non-technical people. Its interface can be a bit difficult. Some parts of its interface are not very intuitive. Some of the controls are hidden, and instead of having a screen with all the controls for that account on it, you have to use menus and other similar things."
"CyberArk PAM could greatly benefit from an under-the-hood update; integrating machine learning algorithms could provide predictive insights."
"The product is complex and requires extensive configuration."
"It is easily customized, and that customization makes it very easy to start trying to shoehorn the solution into roles it was never intended to fill."
"In the beginning, CyberArk Privileged Access Manager didn't have a multifactor authentication feature, so that was an area for improvement, but now it's part of the solution. Having just one console for two CyberArk products would be good, particularly for the CyberArk Privileged Access Manager and the CyberArk Endpoint Privilege Manager, with the latter being a product for endpoint management that supports the workstations and allows you to manage workstations. In the next update of CyberArk Privileged Access Manager, it would be good to have a local agent where you can manage all users and processes, and have an agent on the servers such as Linux and Windows."
"Sometimes the infrastructure team is hesitant to provide more resources."
"The PTA could be improved. Currently, companies often have multiple domains and sometimes it's difficult to implement CyberArk in this kind of infrastructure. For example, you can add CPM (Central Policy Manager) and PSM (Privileged Session Manager and PVWA (Password Vault Web Access) for access, but if you want to add PTA (Privileged Threat Analysis) to scan Vault logs, it is difficult because this component may be adding multiple domain environments."
"I would love them to improve their UI customizing features."
"There should be more effort to increase the level of security."
"It would be better if I could manage multiple accounts in one place, like CyberArk. With WALLIX, you can only manage one account, and you are given a separate category. You have to click on each connection to do anything. For example, CyberArk might give three options for one connection if you want to have an interactive user-level experience. But with WALLIX, you have to click three times to get that access. Also, the biggest disadvantage of WALLIX is the reporting. I feel like it's very weak in reporting when compared to the other solutions. As a solution, they're good and stable. But they need to make their reports neater and better. Right now, we're going to the console and then pressing buttons every single time."
"The product doesn't have behavior analytics. They promised to develop this, but only for the cloud, not for on-premise versions."
"The password management needs improvement. Management of Access Manager should be improved as well."
"Based on my experience as a sales tech person, one area of improvement could be a more unified licensing model."
"There could be more automation features for the solution."
"The main problem of Bastion, CyberArk, and WALLIX is that they have the same interface for both administration and users, which is not a good idea from a security perspective."
"The performance of WALLIX Bastion's password manager is very low."
 

Pricing and Cost Advice

"CyberArk DNA is free if you purchase the CyberArk solution. There is no additional charge for CyberArk DNA, which is great."
"Quite expensive"
"Previously, the pricing was very meager. They started publicizing and advertising the solution, growing CyberArk, as an organization. They also changed their pricing with that growth, e.g., the pricier the product, the more people who will purchase it."
"The product's licensing is yearly. I would rate the solution's pricing a six out of ten."
"CyberArk Enterprise Password Vault's pricing is reasonable."
"If you want a Ferrari, it will cost you. The solution is really nice, so it costs the client, but in the long run, it is very good. If you buy a solution that costs a lot to maintain because it is not stable, and you are frequently asking for consultant support, it costs more."
"This product is very expensive."
"CyberArk is good at what they do, and the price reflects that. You have to pay the price for the same."
"The solution's pricing is comparable to that of other products."
"Some extra price needs to be paid for license."
"The solution's price is mid-ranged."
report
Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.
842,296 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
34%
Financial Services Firm
12%
Computer Software Company
11%
Manufacturing Company
6%
Computer Software Company
20%
Financial Services Firm
10%
Government
9%
Comms Service Provider
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
What do you like most about CyberArk Privileged Access Manager?
The most valuable features of the solution are control and analytics.
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
I focus more on the technical side, but I hear customers say that if CyberArk was more affordable, they might have acquired more licenses. Some clients consider alternative solutions due to pricing...
What do you like most about WALLIX Bastion?
The support is great. They offer 24/7 support, but the specific level of support depends on your subscription. There's a weekday-only option, and a 24/7 option that covers all days of the week. The...
What is your experience regarding pricing and costs for WALLIX Bastion?
I do not know the pricing, setup cost, or licensing. It's difficult to compare without an identical infrastructure.
What needs improvement with WALLIX Bastion?
The main problem of Bastion, CyberArk, and WALLIX is that they have the same interface for both administration and users, which is not a good idea from a security perspective. Also, there should be...
 

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
Bastion
 

Overview

 

Sample Customers

Rockwell Automation
RTBF, Pharmagest, Michelin Group, Niort Hospital
Find out what your peers are saying about CyberArk Privileged Access Manager vs. WALLIX Bastion and other solutions. Updated: March 2025.
842,296 professionals have used our research since 2012.