BeyondTrust Endpoint Privilege Management vs Symantec Privileged Access Manager comparison

BeyondTrust Endpoint Privilege Management vs. Symantec Privileged Access Manager

Download the complete report

Helped 910,454 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

BeyondTrust Endpoint Privil...

Ranking in Privileged Access Management (PAM)

10th

Average Rating

8.0

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Anti-Malware Tools (22nd)

Symantec Privileged Access ...

Ranking in Privileged Access Management (PAM)

15th

Average Rating

7.8

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of August 2026, in the Privileged Access Management (PAM) category, the mindshare of BeyondTrust Endpoint Privilege Management is 3.1%, down from 3.9% compared to the previous year. The mindshare of Symantec Privileged Access Manager is 1.8%, up from 1.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Privileged Access Management (PAM) Mindshare Distribution
Product	Mindshare (%)
BeyondTrust Endpoint Privilege Management	3.1%
Symantec Privileged Access Manager	1.8%
Other	95.1%

Privileged Access Management (PAM)

Featured Reviews

NasirAkbar

Presales Engineer at SAUDI PARAMOUNT COMPUTER SYSTEMS

Improved security measures with some support response delays

For BeyondTrust Endpoint Privilege Management, the best features are the security measures we have, such as not sharing any credentials with employees in the bank sector. For security purposes in BeyondTrust Endpoint Privilege Management, when employees are working in the system, we can make a recording of the video, showing the modifications and configurations they made, allowing us to see everything. The recording option is available. BeyondTrust Endpoint Privilege Management positively impacts the organization by providing more security and benefits, such as ensuring that if modifications are made, we can see where mistakes occurred in the recording video. The recording video in BeyondTrust Endpoint Privilege Management allows us to see modifications and mistakes, which is an advantage.

Read full review

Muzi Lubisi

Senior technical Consultant at CA Africa

Secure management of sensitive servers and seamless applications with direct linking

The credential injection feature is highly valued, particularly for RDP sessions. A majority of customers use it for RDP, and a couple for Linux servers. The broader capabilities, including access to multiple systems, web-based applications, and clustering, have never posed an issue. The threat analytics aspect is also a robust feature that analyzes all pertinent information.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I find the solution’s features like section management, password management, and analytics valuable."

"The solution is definitely stable, and within the last eight years we have been able to satisfy the most demanding customers in the world, whether they have 10 users, 10,000 users, or even 100,000 users, because it is scalable."

"The asset discovery feature is the solution's most valuable aspect, as it's very easy to pull assets into the database of the solution manager."

"PowerBroker allows elevation of required actions or application and eliminates the need of user having full administrative access."

"Overall, I would rate this solution a nine out of ten."

"The most valuable feature is the asset discovery, which makes it very easy to locate and identify assets and pull them into the manager."

"I'm a BeyondTrust partner and I have multiple deployments, four or five banks right now. The features that give us quite an edge compared to what our competitors are offering - like IBM or Thycotic - are the Session Management, that is quite a big one; also the recording of keystrokes. In addition, there is the password vaulting and state-of-the-art Password Management, which I haven't seen in other products."

"For a Windows/Linux/Unix mixed environment, it is a good product to management privilege account passwords to prevent security breaches."

More BeyondTrust Endpoint Privilege Management pros

"The CA PAM’s ability to seamlessly integrate and provide a demarcation between users and systems is the most attractive aspect."

"One of the most valuable items is the load balancing feature."

"I think it's a good solution for anybody who is looking for a single sign-on implementation for administration of the servers."

"The exposure of sensitive usernames and passwords has been limited in a massive way."

"Comprehensive coverage of the required features for the PAM solution."

"The possibility to control the remote activity and establish different policies, because it depends on the position of workers, how much access they needed, and in what platforms they connect, and the possibility to separate this in an easy way is very useful."

"The interface is very friendly, colorful, and bold."

"One of the valuable features is the randomly generated password."

More Symantec Privileged Access Manager pros

Cons

"It's not a 10 because the scalability and licensing have impacted us a lot."

"There is room for improvement in having the solution align more with standards. We're always shoehorning the product into the standards. It's not that it doesn't work for standards, it does. But Quick Start Policies are pretty close to what we need. The vendor needs to keep looking at GDPR, 27001, and 27701. That's why our clients buy the product."

"The deployment process should be clarified or made simpler. It would be helpful if the solution had in-app tutorials for users to look at as they progress through the system. Sometimes we get lost and need to go back to check what exactly the function was. There should be small hints around major key functions. It would go a long way in speeding up the deployment process."

"Improvements could focus on adding more AI features to automate processes that are currently manual or challenging for end users."

"There are been cases that we are handling that have been going on for a year now. Even though they are an industry leader, they haven't been able to solve a small problem."

"What's bothering me, which is true of all of them, is that sometimes, the error codes that come up don't necessarily get reflected in the searches within their support sites or they're out of date. I would rather search by an error code than type in the text and search for it by text because the error code means that it is programmatic, and it is known. It might not be desired, but it at least is not unexpected. If you don't have an error code, you just get an anomalous error, and if it is lengthy, it can be difficult to search and find the specific instance you're looking for. This is something I would like all of them to improve. BeyondTrust, CyberArk, Centrify, and Thycotic could do some improvements in staying up to date and actually allowing you to search based on the product version. They are assuming that everybody is on their way to release. They put out a new release, but it is not reflected on the support site, which makes no sense to me, especially when they revamp all the error codes. They all have been guilty of this in some way."

"There are some features in CyberArk that are better, cheaper, or easier to implement."

"Reporting analytics is one of the areas that can be improved. It is a new cloud-based solution. So, many more specific reports can come out natively. Currently, we get all the events, and we put them in plug-ins. From there, we generate our own design of reports. If there is a much more solid or robust reporting analytics framework within the product itself, it would be helpful."

More BeyondTrust Endpoint Privilege Management cons

"I believe continued expansion of integration to multiple systems including SSO and SAML technologies will provide a more-expansive, enterprise view of access orchestration, which will in turn strengthen the security of the environment."

"I would like it to support more types of integration."

"Updates get difficult for the client. It needs to improve."

"We have to do a lot of manual work to automate features."

"The rule management portion and reporting is very weak on its own."

"Reporting. It's difficult to locate the reports, there are limits on what reports can be run from the GUI, and the report formats are lacking."

"I don't really know much on the pricing side."

"Technical support is average. They took a long time to provide good answers, only recommended to upgrade SW version which in some environments is not an option and they don’t even know if that will fix the problem."

More Symantec Privileged Access Manager cons

Pricing and Cost Advice

"This solution is expensive compared to its competitors."

"Its pricing and licensing are okay. We were in the perpetual model when it was on-prem, and now, with the SaaS service, we have a subscription model. As a customer, I would always like to see a lower price, but it seems to be priced at the right model currently, and we are trying to get the maximum benefits out of it."

"The solution's pricing is high."

"PowerBroker for a Mac client is three times the price of the Windows version."

"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a seven out of ten."

"I'm sure everyone should have the cluster environment, which means more expensive, anyway, cheaper than the other solutions."

"It was very expensive."

"What BeyondTrust was providing was user-based licensing which was a great benefit from the client point of view. Recently, I don't know why, the licensing model has been changed, and that is the reason that they have lost a bit of their edge when it comes to the PAM, against our competition. The asset-based licensing, from the user's point of view, is not beneficial. The licensing should be based on the users. The greater the number of users, the greater will be the load and the greater the scalability problems. I presume that is why the licensing model has changed."

More BeyondTrust Endpoint Privilege Management pricing and cost advice

"I would prefer better licensing options for the 20-100 users we have at a given time."

"The prices are not low, but one can ask for a discount. It’s not the cheapest PAM solution."

"Appliances are relatively cheap, don’t skimp. Make sure you have redundancy, high availability, and enough appliances to manage the concurrent workload."

"Cost-wise, CA was better compared to others in the market. "

"They offer per-device, per-user, or monthly and yearly licensing models."

"The licensing is simple and scalable."

"It is more expensive than other solutions on the market."

"The version we are using is affordable compared to BeyondTrust, which is maybe three to four times as expensive, but it depends on the features."

More Symantec Privileged Access Manager pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.

See recommendations

910,454 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

14%

Manufacturing Company

Comms Service Provider

Government

Outsourcing Company

18%

Construction Company

13%

Financial Services Firm

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	15
Midsize Enterprise	3
Large Enterprise	15

By reviewers
Company Size	Count
Small Business	14
Midsize Enterprise	6
Large Enterprise	30

Questions from the Community

Looking for recommendations and a pros/cons template for software to detect insider threats

This is an inside-out --- outside-in --- inside-in question, as an insider can be an outsider as well. There is no short answer other than a blend of a PAM tool with Behavioral Analytics and Endpo...

What is your experience regarding pricing and costs for BeyondTrust Endpoint Privilege Management?

BeyondTrust's pricing is premium but negotiable for Bangladesh. Expect 20-30% extra costs from currency/import factors. Start with modular licensing (EPM first), demand emerging market discounts, a...

What needs improvement with BeyondTrust Endpoint Privilege Management?

In future updates of BeyondTrust Endpoint Privilege Management, I would prefer to see features for Password Safe and VPN access, as we have applications for that. Technical support for BeyondTrust ...

What is your experience regarding pricing and costs for Symantec Privileged Access Manager?

Due to the nature of the solution, it is hard to gauge, but compared to competitors, the pricing is very good. I would rate it as an eight and a half out of ten.

What needs improvement with Symantec Privileged Access Manager?

Recent releases need improvement in webpage management. For instance, navigating through a webpage that acts like a wizard, where I proceed to the next page and enter more information, is not handl...

What is your primary use case for Symantec Privileged Access Manager?

With the customers that I have so far, I help them broker RDP sessions to sensitive servers, particularly those that manage aspects like physical access. I have also done it for backend databases, ...

Idira Privileged Access Manager vs BeyondTrust Endpoint Privilege Management

Comparisons

Compared 9% of the time

Idira Endpoint Privilege Manager vs BeyondTrust Endpoint Privilege Management

Compared 7% of the time

WALLIX Bastion vs BeyondTrust Endpoint Privilege Management

Compared 6% of the time

Symantec Identity Governance and Administration vs BeyondTrust Endpoint Privilege Management

Compared 5% of the time

Omada Identity vs BeyondTrust Endpoint Privilege Management

Compared 5% of the time

More BeyondTrust Endpoint Privilege Management Competitors

Idira Privileged Access Manager vs Symantec Privileged Access Manager

Compared 26% of the time

ARCON Privileged Access Management vs Symantec Privileged Access Manager

Compared 14% of the time

Safeguard by One Identity vs Symantec Privileged Access Manager

Compared 10% of the time

Cisco Identity Services Engine (ISE) vs Symantec Privileged Access Manager

Compared 7% of the time

Delinea Secret Server vs Symantec Privileged Access Manager

Compared 5% of the time

More Symantec Privileged Access Manager Competitors

Product Reports

BeyondTrust Endpoint Privilege Management

Download BeyondTrust Endpoint Privilege Management product report

BeyondTrust Endpoint Privilege Management report

Symantec Privileged Access Manager

Download Symantec Privileged Access Manager product report

Symantec Privileged Access Manager report

Also Known As

BeyondTrust PowerBroker, BeyondTrust Endpoint Privilege Management for Windows, BeyondTrust Endpoint Privilege Management for Mac, BeyondTrust Endpoint Privilege Management for Linux, BeyondTrust Endpoint Privilege Management for Unix, Avecto Defendpoint

CA PAM, Xceedium Xsuite, CA Privileged Access Manager

Overview

BeyondTrust Endpoint Privilege Management offers enhanced security through asset discovery and privilege elevation without administrative rights, supporting seamless operations in complex environments.

BeyondTrust Endpoint Privilege Management combines advanced threat detection with powerful tools like application control and session management. It is designed to secure IT infrastructures by removing local admin privileges and facilitating remote application publishing. With integration capabilities and robust compliance support, it is suitable for sectors needing stringent security measures. However, improvements in update frequency, Mac integration, and pricing, along with enhanced reporting and console access, are needed to broaden market reach. Organizations value its scalability and flexibility, despite needing better support and development maturity.

What Features Define BeyondTrust Endpoint Privilege Management?

Asset Discovery: Identifies and catalogs IT assets for comprehensive visibility.
Privilege Management: Manages user privileges to minimize risks.
Session Management: Monitors and controls sessions for secure access.
Password Management: Secures credentials to prevent unauthorized access.
Application Control: Enables whitelisting and blacklisting for security.
Analytics: Offers insights into security trends and threats.

What Benefits Should Organizations Expect from Using BeyondTrust Endpoint Privilege Management?

Enhanced Security: Reduces vulnerabilities by managing permissions effectively.
Scalable Deployment: Adapts to growing organizational requirements.
Compliance Support: Assists in meeting regulatory standards.
Improved Integration: Facilitates connections with other platforms like Active Directory.

BeyondTrust Endpoint Privilege Management is widely adopted in the finance and healthcare industries for privileged access management and compliance. It is instrumental in secure server access and remote management, aligning with zero-trust approaches and integrating smoothly with enterprise platforms.

BeyondTrust

Symantec Privileged Access Manager provides enterprises with advanced capabilities in managing access and security compliance, emphasizing seamless integration and scalability. Organizations leverage it for simplified access control and proactive security management to enhance data privacy.

It's designed for managing privileged access across diverse IT environments, featuring easy deployment and configuration along with robust integration capabilities. Users benefit from its scalable architecture, transparent login procedures, and comprehensive password management. Despite its strengths, some challenges persist with the interface, policy management, and upgrade processes. Session recording limitations and documentation gaps are noted, impacting overall user satisfaction. Integration with specific systems, especially mainframes, and a restrictive pricing model present challenges. Nonetheless, its role in managing admin access and reducing security threats in Linux and Windows environments remains critical. Enhanced security is further achieved through integration with CA strong authentication.

What features does Symantec Privileged Access Manager offer?

Easy Deployment and Configuration: Quick setup process with intuitive functionality.
Password Management: Automated rotation of random, strong passwords.
Integration with Active Directory: Direct and seamless connectivity for user management.
Session Recording: Comprehensive logging of user activity for audit purposes.
Credential Injection: Secured access without revealing passwords to users.

What benefits should organizations look for?

Scalability: Supports growth and complex enterprise environments.
Security Compliance: Enhances data protection and regulatory adherence.
Transparency: Simplified login and access management for users.
Cost Efficiency: Potential reduction in security incidents and associated costs.

Organizations in the financial sector appreciate its effective management of privileged accounts across IT infrastructures, including servers and applications. It's valued for its role in RDP and SSH session facilitation and focus on enterprise-level security, crucial for identity governance and protecting high-stakes data.

Broadcom

Sample Customers

Aera Energy LLC, Care New England, James Madison University

NEOVERA, Telesis, eSoft

BeyondTrust Endpoint Privilege Management vs. Symantec Privileged Access Manager