CyberArk Privileged Access Manager Reviews

The most valuable feature is the password Vault which gives the administrator control over privileged accounts. The other components that are valuable are Private Session Manager, OPM, Viewfinity, and AIM, which came as an add-on to the organisation's needs. The ability to start the project, install and add the passwords in just a few days brings a big advantage for CyberArk.

The client can see all the users sessions through PSM, and can protect the applications on servers using AIM. Also, the Privileged Threat Assessment helps the organisation to see all the account risks, including accounts not managed by CyberArk, and accounts/machines with unusual behavior, etc.

The DNA scan should be able to scan Unix machines for privileged accounts.

PIM tested in the last 2 years.

We didn't have any issues with the deployment.

The product is very stable.

I didn't have any issues with the stability. I usually recommend the client to increase the system requirements with 10%.

Customer service is OK in Romania.

I had direct contact with the local team and they are OK.

No.

Straightforward when you have the use cases and a SoW. Usually you follow the Installation Manual, and perform the after-installation tests, and you are sure that everything is OK. The only issue I had was with the anti-virus that was left on the server and that deleted some PSM files. You must always double-check the prerequisites, as you can have some surprises with the GPO that overrides your settings.

I was part of the implementation team with support from the vendor.

We also looked at BalaBit Shell Control Box.

It has the ability to monitor privileged sessions.

Our security has improved since implementing CyberArk.

The user interface needs to be improved. It could be done by getting the GUI to work with other programs from within internet browsers out of box.

I've used it for one year.

No issues encountered.

No issues encountered.

No issues encountered.

It's good.

It's good.

I didn't use a previous solution.

It was straightforward as the documentation was rather clear. This made the implementation simple.

I implemented myself.

I didn't evaluate any other options.

Our primary use case for this solution is it provides a security solution that includes password management. This defends against threats.

The most valuable feature to me is the recording feature. I can track all of the records, the commands, the server, any misguidance, etc.

Over the past seven years, I have seen a lot of ups and downs with the product, but now I am happy with the version that we are using now. 

I have no issues with stability. 

It is scalable. We have added new equipment, and this solution has been relevant. 

They are very helpful for us whenever we have any questions. 

No, I do not have any advice on the price of the product. It is a great product that I recommend to others. 

I did not consider any other options. 

This product is helpful for financial auditing needs, as well.

I primarily use the solution to record any actions taken on specific important targets. It allows management to look at actions and play them back to see what was done within the environment.

The technical support is good.

It's pretty good at recording actions taken within an environment.

We found a lot of errors during the initial setup. They should work to improve the implementation experience and to remove errors from the process.

The solution could be more stable. 

 It should have more specific configurations. There are lots of types of servers and devices. The product should have a more detailed, specific configuration and integration with other products.

I've been using the solution for about three months at this point.

This was my first experience in the solution's UI and UX user experience and user interface. I didn't find the solution to be very stable at all.

We do plan to continue to use the solution, however, it's unclear as to if we will scale it further.

We're pretty satisfied with technical support. They are helpful. I find them knowledgable and responsive and I've been happy with the level of service we've been given thus far.

We found the initial setup quite difficult. There were a lot of errors and we found the process to be a bit complex. I wouldn't describe the implementation as straightforward.

In total, the deployment took about one week from beginning to end.

We did not handle the entire implementation ourselves. We had assistance from an outside firm. They were helpful.

We're just users of the solution. We're customers. We aren't resellers or consultants. We don't have a business relationship with the solution.

I'm using the latest version of the solution.

I'd recommend the product to others.

Overall, we've been mostly happy with the solution. I'd rate it at an eight out of ten so far.

It provides a tamper-proof solution for privileged accounts and third-party access to corporate assets.

We have different teams that hire out consultants from various vendors. For those consultants, there was a challenge in providing access to our critical infrastructure. CyberArk PAS provides isolated and recorded sessions for third-party/outsourced admin access. 

Automatic password management based on a strong password policy. Because still, many people choose not strong enough passwords for administrative accounts.

The product should be improved in order to support more platforms. It will be awesome if google cloud API keys are being supported like AWS and Azure.

Pretty scalable in the sense of PSM and storage.

No, we didn't use any.

Yes, there was a POC which took place among BeyondTrust, Thycotic and CyberArk.

Password rotation, session recording & isolation and on-demand privileges.

For users to access a system via CyberArk Privileged Session Manager, a universal connector needs to be coded in a language called AutoIT and its support for web browsers is so-so. Other products like Centrify have browser plugins that can help automate the process when using their products.

No

No

Very good.

Basic setup is pretty straightforward, but to fully utilise the product it can get complicated as it ties in with a lot of other products. Suggest a phased installation so staff can adjust to new processes.

It can be an expensive product. I Suggest only licensing basics to begin with and as need arises, start to license extensions (AIM, etc.) during next phase of implementation.

Centrify and Lieberman ERPM.

CyberArk offers extensive training, utilise it. Also their support staff are very good and can assist with everything.

• Session recording
• Password and access management

• Increased security and visibility

Error messages are useless; better documentation of error codes would be helpful.

I have used it for two years.

I encountered stability issues.

I have not encountered any scalability issues.

Due to meaningless error messages, it is not possible to repair non-trivial errors without support. However, with support, we solved every problem.

I did not previously use a different solution.

You have to exactly follow the installation manual; otherwise, installation can crash with a non-solvable error.

Before choosing this product, I evaluated BalaBit and ObserveIT.

You have to exactly follow the installation manual.

This product helps to improve the privilege account security in the organization. Privilege accounts were involved in all the breaches.

PSM (Privilege Session Manager)

I would like to see improvement in the custom connector for integration with different devices. Currently, it needs professional services and lots of time for out-of-the-box custom connectors.

There were no issues with stability. However, there were a few times when there were stability issues because the solution was deployed on a Windows platform.

There were no issues with scalability.

Technical support is average. They are not so great, because the first level support partner or distributor has to provide the support and customers cannot contact CyberArk support directly.

We moved from version 8 to Version 9.

The initial setup is a bit complex because it has lots of prerequisites and dependencies on Windows' features.

It is not a cheap solution. It is expensive as compared with other solutions. However, it is one of the best solutions in their domain.

I worked in the CyberArk distribution company. However, I have seen that other products do not provide all the features that CyberArk can provide.

For implementation, you will need professional services or other experts.