We performed a comparison between BeyondTrust Password Safe and CyberArk Enterprise Password Vault based on real PeerSpot user reviews.
Find out in this report how the two Enterprise Password Managers solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."Session recording, password rotation, and password vaulting are the most valuable features."
"BeyondTrust Password Safe is a good PAM tool."
"The ability to manage privileged account passwords is the most valuable feature."
"The performance is good."
"Its number one feature is discovery. The discovery engine in BeyondTrust is off the charts. When they perform a discovery, you know everything there is about a server, including what software is installed. For example, if you want to group all of your database servers together, you can do that by using discovery and Smart Rules. If a server has Microsoft SQL installed, it gets put into a group based on a Smart Rule. It makes it very easy to determine what is what in your environment. As organizations grow or acquire other companies and merge, they lose track of what they have. BeyondTrust can help you throw a rope around it very rapidly."
"BeyondTrust Password Safe has good reporting and Smart Rules which makes it convenient. Though Smart Rules are convenient, those who do not have much experience with such things may find it difficult to understand how these things work. Otherwise, I find Smart Rules very convenient to work with."
"It simplifies your compliance and tracking to benchmark other credentials and analytics."
"One of the most valuable features is that this is a product designed with enterprises in mind."
"The most valuable feature is the ability to delegate access to admins when they need it."
"The most valuable feature of the solution stems from the fact that it's the best in the market. I haven't seen any other PAM solutions better than CyberArk Enterprise Password Vault."
"The password protection itself is the most important feature. It's something we didn't have before."
"CPM helps keep the password policy up to date."
"CyberArk's GUI is user friendly."
"CyberArk has a lot of modules."
"The privileged support manager is the most valuable feature of CyberArk Enterprise Password Vault."
"If properly set up, CyberArk Enterprise Password Vault has good stability, and is a very solid tool. It can run by itself. Its most valuable features are auto password recycling and PSM."
"We face screensaver timeout issues and problems with the server. I would like the product to include a server visibility feature."
"It has crashed on us in the past."
"We don't have much control over the appliance. When anything happens in the backend, we have to depend on the support team. We need to raise a case so that they can update the appliance. If we have control over it, we would be able to troubleshoot easily."
"There is a limited capacity on the appliance, which I wasn't informed about when I purchased the product. I can have a maximum of 150 rules per appliance; any more than that and rule processing becomes very complex, especially regarding password revision. Hitting a capacity limit you don't know about can be problematic. Ideally, we would not have a limited capacity, allowing us to be in a completely managed state with password rotation for every service account, not just the highly privileged ones."
"Documentation is the primary area of improvement."
"I think that BeyondTrust Password Safe could be improved with more testing. In the beginning, they were practically using customers as beta testers. Maybe the product has evolved since I last used it, but if you look at PAM, privileged access management, whatever's out there has already been done. I don't see there being any other enhancements that are being made regarding PAM, except to support more cloud-based applications."
"If there was one thing, it would be having the documentation standardized. They should keep the documentation consistent. For example, when BeyondTrust updated one of their admin guides, they left out the information on the discovery account requirements, and then over a period of time, we ended up having to search multiple different documents to put together a string of information for a specific topic, which was problematic. It was minor, but it was problematic. Standardized documentation would be the one thing I would suggest."
"Named accounts don't work well in this solution. If you use named accounts for your administrative access, the way Smart Rules work is that it takes your SAM account name and matches it to the account name of your privileged ID, which creates limitations on size and how big those names can be because the directory has a 20-character limit."
"The stability depends on the infrastructure it is installed on, which is important because CyberArk does not have the hardware appliance."
"I would prefer that this is a fully-managed service, rather than have to manage the software ourselves and keep it up to date."
"The tool's UI has bugs and lags. It needs to be improved. The deployment process can be complex due to multiple components for various functionalities, each requiring separate infrastructure management. To simplify this process, consolidating all these components into a single platform could be beneficial. The product's pricing could be cheaper."
"The architecture needs to be improved."
"I think they can improve account onboarding. For instance, you have to use the Password Vault utility, whereas in Thycotic I think there is a feature in the user interface that allows you to upload your account with an Excel file. So I'd like to have a similar thing in CyberArk."
"CyberArk Enterprise Password Vault must incorporate connectors for password and session managers in the marketplace."
"The initial setup can get complex."
"CyberArk's license is too expensive. I rate it seven out of 10 for affordability."
More CyberArk Enterprise Password Vault Pricing and Cost Advice →
BeyondTrust Password Safe is ranked 5th in Enterprise Password Managers with 19 reviews while CyberArk Enterprise Password Vault is ranked 4th in Enterprise Password Managers with 48 reviews. BeyondTrust Password Safe is rated 7.6, while CyberArk Enterprise Password Vault is rated 8.4. The top reviewer of BeyondTrust Password Safe writes "Allows us to automatically rotate passwords, set the complexity, and enforce password policies on privileged accounts". On the other hand, the top reviewer of CyberArk Enterprise Password Vault writes "Helps to store system accounts ". BeyondTrust Password Safe is most compared with HashiCorp Vault, Azure Key Vault, LastPass, BeyondTrust Privileged Remote Access and Delinea Secret Server, whereas CyberArk Enterprise Password Vault is most compared with Azure Key Vault, HashiCorp Vault, AWS Secrets Manager, Delinea Secret Server and LastPass. See our BeyondTrust Password Safe vs. CyberArk Enterprise Password Vault report.
See our list of best Enterprise Password Managers vendors.
We monitor all Enterprise Password Managers reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.