BeyondTrust Privileged Identity (Legacy) vs. CyberArk Privileged Access Management

It is very well suited to manage local passwords on machines. It fails at managing accounts located in the directory. It treats a directory as a "system" as a result of your settings for the "system" ends up being global. It makes for a very complicated rights structure. Rights have to be assigned on a per accounts basis.

Incentivized

I always recommend CyberArk based on my experiences at several different jobs and industries. It does a great job of helping you create all kinds of use cases and approval flows for accessing and using privileged accounts. It also does a great job securing local admin passwords on servers. End-users of the system are able to quickly and easily start utilizing the more secure method of obtaining credentials in minimal time with minimal overhead/tax on their work time.

Incentivized

• Manage local accounts of workstations and servers.
• The web interface is easy for users of RED to use.
• The shared password list is a very nice feature that allows users to store credentials that have to remain static.

Incentivized

• storing password safely
• storing passwords in one central place
• "remembering" a password for a whole team and/or single persons
• securing access to certain passwords by groups or team

Incentivized

• Not as slick as CyberArk
• Training is free, but could use a lot of improvement
• Documentation needs refinement

• The initial product cost is a little on the higher side, which might turn off small & medium enterprises.
• As it talks about security, it has a lot of hardware/software requirements for the initial setup, which might make the rollout timeline a little lengthy.
• Product should be easy to customize based on different industry's needs.

Incentivized

I've been an engineer and architect in the Identity space for many years and CyberArk is the #1 tool I've found to help me secure accounts and credentials. I've architected CyberArk and built the implementation from the ground up twice in previous roles and found it here upon my arrival at my current job. I wouldn't want to have to live without it as it helps me sleep at night

Incentivized

CyberArk and ERPM are direct competitors. Great thing about ERPM is the ability to integrate with Sailpoint out of the box. Add to that the lower overall cost of the product.

Manage Engine's Password Management solution can accomplish the same features however, their system is cumbersome and not as user friendly to operate. It is however great for small teams. Pleasant Solutions Password Manager Pro can accomplish some of the same things, but the web browser interface is not user friendly at all

Incentivized

• Lower cost than competitors
• Ease of usr means easy to get staff up to speed on the product
• Very painless rollout, meaning less time troubleshooting issues

• A positive impact is passing SOX audits when it comes to privileged account management. Making sure we are compliant with password expiration policies and complexities.

Incentivized