Try our new research platform with insights from 80,000+ expert users

Amazon Cognito vs CyberArk Privileged Access Manager comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Amazon Cognito
Average Rating
7.4
Reviews Sentiment
6.9
Number of Reviews
15
Ranking in other categories
Access Management (9th)
CyberArk Privileged Access ...
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
225
Ranking in other categories
User Activity Monitoring (1st), Enterprise Password Managers (2nd), Privileged Access Management (PAM) (1st), Mainframe Security (2nd), Operational Technology (OT) Security (3rd)
 

Featured Reviews

Wojciech Doganowski - PeerSpot reviewer
International setup localization challenges drive custom development while outsourcing credential management enhances security
We are using it in an international setup where we have multiple services running in multiple countries. Cognito localizes only regarding language, but the service is localized in each country. Cognito has the possibility to render the login screen and all the customer flows related to managing the account. Still, it's useless in an international setup. They are unable to localize these screens, so we had to write our own screens and just use the Cognito API. I hope they will fix this soon because it's useful to rely on already prepared flows for all the account management. As it doesn't work with different languages, rewriting it is quite complicated. Additionally, maybe they could find another step in the price so there is not such a significant jump from the basic to extended functionality. Some flexibility would be helpful.
Abdul Durrani - PeerSpot reviewer
Enables granular and secure access with just-in-time access and Zero Trust model
CyberArk provides a good amount of control over access types. However, as a future enhancement, having additional features for cross-platform integration would be beneficial. It would be good to have integrations with other tools and firewalls, such as Zscaler and CrowdStrike. Although I am not fully aware of recent updates, more cross-platform integration would be valuable. A SOC analyst would like to have centralized access in terms of information flowing in even for privileged access management. They would like to have control over everything instead of opening four to five tabs for different sorts of information. Cross-platform integration would help with that. Customers also want CyberArk's pricing to be better so that they can implement it further and have more licenses. Implementing a privileged access management solution can be challenging. It would be great if CyberArk could provide recommendations based on the compliance standards of an organization. It would help system admins ensure that all the required ports are closed and the systems are being managed properly. If any system is not being used anymore, any ports opened for that system need to be closed. Having such recommendations would be helpful.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"This is a scalable solution. If our app or general usage increases, this solution can support it."
"The solution is proto connective and integrates well with other AWS services."
"They offer a permission tool to help us manage multi-factor authentication."
"What I find most valuable about Amazon Cognito is the single sign-on feature that provides a token for accessing protected APIs."
"What I find most valuable about Amazon Cognito is the single sign-on feature that provides a token for accessing protected APIs."
"The features most valuable to us are the ability to integrate with various IDPs and the capability to sync with multiple applications."
"The most valuable feature of the solution is its swift authentication."
"I appreciate Amazon Cognito's ability to scale with demand and its seamless user verification features."
"We could see the benefits of CyberArk Privileged Access Manager immediately after we deployed it and started using it."
"CyberArk probably has probably the best vault on the market because of the multiple layered security and each password getting its own encryption."
"CyberArk has allowed us to get the credentials and passwords out of hard-coded property files."
"It is a single tool that isolates possible kinds of malware. You get lateral movement blocking and auditing information, e.g., you know who is doing what. You are getting protections from the service as well as a useful environment. All your admins can easily go in and out of your company while accessing your servers in a secure way, even if they are working abroad."
"CyberArk makes our environment more secure and prevents possible attacks by compromised accounts."
"Performance-wise, it is excellent."
"Securely protects our TAP/NUID and privileged access accounts within the company."
"CyberArk Privileged Access Manager makes it easy for users to retrieve and manage their passwords."
 

Cons

"Cognito has the possibility to render the login screen and all the customer flows related to managing the account. Still, it's useless in an international setup. They are unable to localize these screens, so we had to write our own screens and just use the Cognito API."
"The secure authentication of Amazon Cognito has benefited our company. We were previously using legacy signup systems."
"There is room for improvement in Amazon Cognito."
"Amazon Cognito could be improved by making it easier for us to add more data to the token, allowing customization of JWT. It requires a complex program to customize the token currently, however, the UI could support this configuration better."
"I believe this product could improve by enriching user profiles."
"In a future release, we would like to have different methods to validate the characteristic of a user. For example, we would like to use biometric data to analyze the behavior of users."
"Amazon Cognito could improve by simplifying the configuration."
"The setup and configuration can be complex, especially for advanced use cases."
"In the beginning, CyberArk Privileged Access Manager didn't have a multifactor authentication feature, so that was an area for improvement, but now it's part of the solution. Having just one console for two CyberArk products would be good, particularly for the CyberArk Privileged Access Manager and the CyberArk Endpoint Privilege Manager, with the latter being a product for endpoint management that supports the workstations and allows you to manage workstations. In the next update of CyberArk Privileged Access Manager, it would be good to have a local agent where you can manage all users and processes, and have an agent on the servers such as Linux and Windows."
"The only problem involves granting access to people who are authorized to view it."
"The initial setup has room for improvement to be more straightforward."
"It is very complex and difficult to set up the solution."
"PAM could be more user-friendly and CyberArk could update the documentation to include more real-world examples. You have to learn it yourself through trial and error. In particular, the online documentation should have more information about troubleshooting."
"When they took it to the cloud, they started cutting things out."
"The authentication port is available in CyberArk Alero but not Fortinet products."
"CyberArk's license is too expensive. I rate it seven out of 10 for affordability."
 

Pricing and Cost Advice

"The product is relatively inexpensive compared to other tools."
"The price of Amazon Cognito is expensive. We are on an annual subscription."
"The pricing of this solution is good compared to other solutions on the market."
"The price of the solution depends on the number of users using it."
"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a five out of ten."
"We pay $600 monthly per user for licences and there are no other additional costs."
"The price of Amazon Cognito is low. The pricing model is based on the users."
"The pricing is bad so I rate it a two out of ten."
"I'm aware that the organization had purchased licensing for almost all of CyberArk's solutions including licensing for PTA, EPM, and the Application Identity Manager. But when it comes to PSM, this is one of the components where there's an additional charge for any extra PSMs that you want to deploy. I believe that there's some rider where the vendor has a bit of leeway to, at times, charge a premium on whatever additional services you may require above the board."
"I'm a technician so I don't handle the licensing for CyberArk Privileged Access Manager, but I know that the price for the core license is about €140 per year. There's another type of license, the external vendor license, and that's about €600 and you can manage twenty devices. From what I know, the price for one device in a subscription is about €65 per year. You can buy the CyberArk Endpoint Privilege Manager too, or you can buy some other application or application license with CyberArk Privileged Access Manager, but all other features, such as the Analytics Server is included in the basic CyberArk license. With WALLIX, you need to buy separate licenses for the features."
"Although CyberArk Privileged Access Management is expensive, its protection capabilities outweigh the cost."
"Our risk is definitely significantly lower. Also, our resources are low."
"I do not have any opinions to add about the pricing of the product."
"The pricing for CyberArk is on the higher side compared to other Privileged Access Management products. Something should be done regarding enterprise licensing for long-standing customers."
"No, I do not have any advice on the price of the product."
"If you are looking at implementing this solution, buy the training and go to it."
report
Use our free recommendation engine to learn which Access Management solutions are best for your needs.
865,140 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Comms Service Provider
10%
Manufacturing Company
6%
Healthcare Company
6%
Computer Software Company
15%
Financial Services Firm
15%
Manufacturing Company
9%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Amazon Cognito?
The most valuable feature of the solution is its swift authentication.
What is your experience regarding pricing and costs for Amazon Cognito?
The basic functionality is reasonably priced, but the extended functionalities, especially the extended security, are quite expensive. There is a significant jump from the basic to the extended fun...
What needs improvement with Amazon Cognito?
We are using it in an international setup where we have multiple services running in multiple countries. Cognito localizes only regarding language, but the service is localized in each country. Cog...
How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
What do you like most about CyberArk Privileged Access Manager?
The most valuable features of the solution are control and analytics.
 

Also Known As

No data available
CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
 

Overview

 

Sample Customers

Expedia, Intuit, Royal Dutch Shell, Brooks Brothers
Rockwell Automation
Find out what your peers are saying about Amazon Cognito vs. CyberArk Privileged Access Manager and other solutions. Updated: July 2025.
865,140 professionals have used our research since 2012.