BeyondTrust Password Safe vs. BeyondTrust Privileged Identity (Legacy)

BeyondTrust works really well while looking to manage the privileged accounts distributed on various assets utilized in the organization. It is really good at scanning and fetching the asset details, which provides the descriptive details of all possible threat vectors and allowing the administrators to manage and mitigate the risks. Moreover, BeyondTrust's dependency on Flash is a major demerit which awfully affects the functionality and user experience for BeyondInsight.

It is very well suited to manage local passwords on machines. It fails at managing accounts located in the directory. It treats a directory as a "system" as a result of your settings for the "system" ends up being global. It makes for a very complicated rights structure. Rights have to be assigned on a per accounts basis.

Incentivized

• Privileged Account Management.
• Vulnerability Management.
• Session Management.
• Handling API requests.
• Identifying and Managing various assets throughout the organization.

• Manage local accounts of workstations and servers.
• The web interface is easy for users of RED to use.
• The shared password list is a very nice feature that allows users to store credentials that have to remain static.

Incentivized

• Dependency on Flash.
• Securing Files.
• Managing Service Accounts.
• Stability of updates.

• Not as slick as CyberArk
• Training is free, but could use a lot of improvement
• Documentation needs refinement

BeyondTrust Support is available with maximum priority. The user is not required to provide an explanation and is not charged for the case raised. If required, BeyondTrust support is available for every possible requirement, which may differ from a requirement of some document or a hotfix availability. Also, BeyondTrust support takes every request with max priority.

CyberArk is following the bottom-up approach for the development of the Privileged Access Management solution, which provides a stable and more featured security solution. But everything for CyberArk comes with a cost. Meanwhile, everything for BeyondTrust is included in a single product, and Password safe comes up with vast options under a single utility with cost-effective implementation.

CyberArk and ERPM are direct competitors. Great thing about ERPM is the ability to integrate with Sailpoint out of the box. Add to that the lower overall cost of the product.

• Positive: Easier User Interface.
• Positive: Descriptive management of access policies.
• Negative: Issues in functionality due to random bugs in functioning.

• Lower cost than competitors
• Ease of usr means easy to get staff up to speed on the product
• Very painless rollout, meaning less time troubleshooting issues