BeyondTrust Endpoint Privilege Management vs Symantec Privileged Access Manager comparison

BeyondTrust Endpoint Privilege Management vs. Symantec Privileged Access Manager

Download the complete report

Helped 902,988 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

BeyondTrust Endpoint Privil...

Ranking in Privileged Access Management (PAM)

11th

Average Rating

8.0

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Anti-Malware Tools (22nd)

Symantec Privileged Access ...

Ranking in Privileged Access Management (PAM)

16th

Average Rating

7.8

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of July 2026, in the Privileged Access Management (PAM) category, the mindshare of BeyondTrust Endpoint Privilege Management is 3.2%, down from 3.9% compared to the previous year. The mindshare of Symantec Privileged Access Manager is 1.8%, up from 1.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Privileged Access Management (PAM) Mindshare Distribution
Product	Mindshare (%)
BeyondTrust Endpoint Privilege Management	3.2%
Symantec Privileged Access Manager	1.8%
Other	95.0%

Privileged Access Management (PAM)

Featured Reviews

NasirAkbar

Presales Engineer at SAUDI PARAMOUNT COMPUTER SYSTEMS

Improved security measures with some support response delays

For BeyondTrust Endpoint Privilege Management, the best features are the security measures we have, such as not sharing any credentials with employees in the bank sector. For security purposes in BeyondTrust Endpoint Privilege Management, when employees are working in the system, we can make a recording of the video, showing the modifications and configurations they made, allowing us to see everything. The recording option is available. BeyondTrust Endpoint Privilege Management positively impacts the organization by providing more security and benefits, such as ensuring that if modifications are made, we can see where mistakes occurred in the recording video. The recording video in BeyondTrust Endpoint Privilege Management allows us to see modifications and mistakes, which is an advantage.

Read full review

Muzi Lubisi

Senior technical Consultant at CA Africa

Secure management of sensitive servers and seamless applications with direct linking

The credential injection feature is highly valued, particularly for RDP sessions. A majority of customers use it for RDP, and a couple for Linux servers. The broader capabilities, including access to multiple systems, web-based applications, and clustering, have never posed an issue. The threat analytics aspect is also a robust feature that analyzes all pertinent information.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"What I liked about this solution is that it can also integrate for tracking malicious use or sending analytics to a host that can process them. I don't know if CyberArk, Centrify, or Thycotic can do that. The analytics was something the client really wanted, and they already had BeyondTrust. It is very scalable. The agent on the workstation is very thin, and the processing power required on a server is nothing out of the ordinary. It is also very stable and easy to deploy."

"Scalability is good. I would rate the scalability a nine out of ten."

"What I liked about this solution is that it can also integrate for tracking malicious use or sending analytics to a host that can process them."

"The privileged access and the application control are helpful in making sure we have good, robust challenge responses. Blacklisting with trusted application protection is also beneficial for us."

"It's relatively straightforward to set up, especially if you are deploying to the cloud."

"The asset discovery feature is the solution's most valuable aspect, as it's very easy to pull assets into the database of the solution manager."

"The solution is definitely stable, and within the last eight years we have been able to satisfy the most demanding customers in the world, whether they have 10 users, 10,000 users, or even 100,000 users, because it is scalable."

"Features-wise, BeyondTrust is a lot better than ARCON."

More BeyondTrust Endpoint Privilege Management pros

"When we started analyzing different products, CA was really good."

"It will provide us with more security."

"On the access management side, our system administrators, under privileged management, don't have to use their local tools to log on to the production servers, because they log on to a web interface that makes the access more secure and keeps the sessions strictly between the production servers and the IA PAM."

"Transparent login for users of privileged IDs (Linux, Windows). This prevents sharing of the password because it is never seen."

"The password vault and access to the systems are the most valuable features."

"The best features are the comprehensive coverage of the required features for the PAM solution like a credential vault, a session recording, an endpoint agent, security analytics."

"We do not have to authenticate users due to automatic authentication, so this allows us to be much more secure."

"It is great for identity governance."

More Symantec Privileged Access Manager pros

Cons

"One issue, especially when you deploy HA actively and passively, is the synchronization."

"The product should improve its price."

"The help system should be improved to provide a quick help guide with each tab within the solution, which explains what each particular function does."

"The other area to improve is that they rely on MS SQL servers only. You cannot have any other database behind them. They have to be on MS SQL. If they can do something about these issues, this would be a better alternative for some customers."

"They are doing good for now, but they should start to consider tight integration with Mac solutions. There should be more integration with Mac. There should be Active Directory (AD) Bridging. Thycotic and Centrify have it currently because they merged and joined forces, and it was a feature available in Centrify. So, basically, they joined forces to create a kind of perfect product. If you have a hybrid or mixed environment with Windows and Mac, your Active Directory can only manage or enforce policies on Windows, but what about your Mac devices? How do you control them? So, AD Bridging will act as a bridge to bring all your Mac devices into your Active Directory. This way you have full control over your entire environment."

"The BeyondInsight appliance environment is not as flexible as it should be in some designs."

"Reporting analytics is one of the areas that can be improved. It is a new cloud-based solution. So, many more specific reports can come out natively. Currently, we get all the events, and we put them in plug-ins. From there, we generate our own design of reports. If there is a much more solid or robust reporting analytics framework within the product itself, it would be helpful."

"The deployment process should be clarified or made simpler."

More BeyondTrust Endpoint Privilege Management cons

"Some rollover credentials often do not work or you need a more complex configuration."

"When there are new patches or upgrades, they need to test the new release well so it will not break the functional parts."

"Evaluations are not just about features and functions of this specific product, but it is taking that holistic view around what else we can get out of it in the next three to five years."

"An improvement for this solution is that it should not be constantly based on user name and password. There should be a condition to edit and update your username."

"It was a challenge for our newer staff members to install."

"We had some issues with the load balancing feature when configured for clustering."

"I believe continued expansion of integration to multiple systems including SSO and SAML technologies will provide a more-expansive, enterprise view of access orchestration, which will in turn strengthen the security of the environment."

"I would like to see better integration with Security Incident Management solutions, a SIM, like a Splunk."

More Symantec Privileged Access Manager cons

Pricing and Cost Advice

"This solution is expensive compared to its competitors."

"The product’s licensing is different for Windows, Linux, and Mac. The tool’s licensing is yearly."

"Price-wise, it is very competitive. In our area, government entities and banks don't go for the monthly payment. It is a headache even for us in terms of finance and procurement to go for monthly payments. Quarterly might be more logical and reasonable, but the minimum that we go for is one year, and sometimes, we even try to compile and give one offering for three years."

"What BeyondTrust was providing was user-based licensing which was a great benefit from the client point of view. Recently, I don't know why, the licensing model has been changed, and that is the reason that they have lost a bit of their edge when it comes to the PAM, against our competition. The asset-based licensing, from the user's point of view, is not beneficial. The licensing should be based on the users. The greater the number of users, the greater will be the load and the greater the scalability problems. I presume that is why the licensing model has changed."

"The solution's pricing is high."

"It was very expensive."

"It is relatively more cost-effective compared to the competing product."

"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a seven out of ten."

More BeyondTrust Endpoint Privilege Management pricing and cost advice

"It is reasonably priced."

"The version we are using is affordable compared to BeyondTrust, which is maybe three to four times as expensive, but it depends on the features."

"Don’t go with an agent model. Don’t go with a model that has you buying a thousand different parts. Go with PAM that gives you everything, or you’ll just be paying costs of implementing another tool that PAM would have just given you up front."

"Appliances are relatively cheap, don’t skimp. Make sure you have redundancy, high availability, and enough appliances to manage the concurrent workload."

"They offer per-device, per-user, or monthly and yearly licensing models."

"Cost-wise, CA was better compared to others in the market. "

"The prices are not low, but one can ask for a discount. It’s not the cheapest PAM solution."

"Pricing is fair compared to other top vendors."

More Symantec Privileged Access Manager pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.

See recommendations

902,988 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

15%

Manufacturing Company

Comms Service Provider

Government

Construction Company

14%

Outsourcing Company

Financial Services Firm

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	15
Midsize Enterprise	3
Large Enterprise	15

By reviewers
Company Size	Count
Small Business	14
Midsize Enterprise	6
Large Enterprise	30

Questions from the Community

Looking for recommendations and a pros/cons template for software to detect insider threats

This is an inside-out --- outside-in --- inside-in question, as an insider can be an outsider as well. There is no short answer other than a blend of a PAM tool with Behavioral Analytics and Endpo...

What is your experience regarding pricing and costs for BeyondTrust Endpoint Privilege Management?

BeyondTrust's pricing is premium but negotiable for Bangladesh. Expect 20-30% extra costs from currency/import factors. Start with modular licensing (EPM first), demand emerging market discounts, a...

What needs improvement with BeyondTrust Endpoint Privilege Management?

In future updates of BeyondTrust Endpoint Privilege Management, I would prefer to see features for Password Safe and VPN access, as we have applications for that. Technical support for BeyondTrust ...

What is your experience regarding pricing and costs for Symantec Privileged Access Manager?

Due to the nature of the solution, it is hard to gauge, but compared to competitors, the pricing is very good. I would rate it as an eight and a half out of ten.

What needs improvement with Symantec Privileged Access Manager?

Recent releases need improvement in webpage management. For instance, navigating through a webpage that acts like a wizard, where I proceed to the next page and enter more information, is not handl...

What is your primary use case for Symantec Privileged Access Manager?

With the customers that I have so far, I help them broker RDP sessions to sensitive servers, particularly those that manage aspects like physical access. I have also done it for backend databases, ...

Idira Privileged Access Manager vs BeyondTrust Endpoint Privilege Management

Comparisons

Compared 9% of the time

Idira Endpoint Privilege Manager vs BeyondTrust Endpoint Privilege Management

Compared 7% of the time

Symantec Identity Governance and Administration vs BeyondTrust Endpoint Privilege Management

Compared 6% of the time

One Identity Safeguard vs BeyondTrust Endpoint Privilege Management

Compared 4% of the time

WALLIX Bastion vs BeyondTrust Endpoint Privilege Management

Compared 4% of the time

More BeyondTrust Endpoint Privilege Management Competitors

Idira Privileged Access Manager vs Symantec Privileged Access Manager

Compared 26% of the time

ARCON Privileged Access Management vs Symantec Privileged Access Manager

Compared 16% of the time

One Identity Safeguard vs Symantec Privileged Access Manager

Compared 9% of the time

Cisco Identity Services Engine (ISE) vs Symantec Privileged Access Manager

Compared 8% of the time

Delinea Secret Server vs Symantec Privileged Access Manager

Compared 7% of the time

More Symantec Privileged Access Manager Competitors

Product Reports

BeyondTrust Endpoint Privilege Management

Download BeyondTrust Endpoint Privilege Management product report

BeyondTrust Endpoint Privilege Management report

Symantec Privileged Access Manager

Download Symantec Privileged Access Manager product report

Symantec Privileged Access Manager report

Also Known As

BeyondTrust PowerBroker, BeyondTrust Endpoint Privilege Management for Windows, BeyondTrust Endpoint Privilege Management for Mac, BeyondTrust Endpoint Privilege Management for Linux, BeyondTrust Endpoint Privilege Management for Unix, Avecto Defendpoint

CA PAM, Xceedium Xsuite, CA Privileged Access Manager

Overview

BeyondTrust Endpoint Privilege Management offers enhanced security through asset discovery and privilege elevation without administrative rights, supporting seamless operations in complex environments.

BeyondTrust Endpoint Privilege Management combines advanced threat detection with powerful tools like application control and session management. It is designed to secure IT infrastructures by removing local admin privileges and facilitating remote application publishing. With integration capabilities and robust compliance support, it is suitable for sectors needing stringent security measures. However, improvements in update frequency, Mac integration, and pricing, along with enhanced reporting and console access, are needed to broaden market reach. Organizations value its scalability and flexibility, despite needing better support and development maturity.

What Features Define BeyondTrust Endpoint Privilege Management?

Asset Discovery: Identifies and catalogs IT assets for comprehensive visibility.
Privilege Management: Manages user privileges to minimize risks.
Session Management: Monitors and controls sessions for secure access.
Password Management: Secures credentials to prevent unauthorized access.
Application Control: Enables whitelisting and blacklisting for security.
Analytics: Offers insights into security trends and threats.

What Benefits Should Organizations Expect from Using BeyondTrust Endpoint Privilege Management?

Enhanced Security: Reduces vulnerabilities by managing permissions effectively.
Scalable Deployment: Adapts to growing organizational requirements.
Compliance Support: Assists in meeting regulatory standards.
Improved Integration: Facilitates connections with other platforms like Active Directory.

BeyondTrust Endpoint Privilege Management is widely adopted in the finance and healthcare industries for privileged access management and compliance. It is instrumental in secure server access and remote management, aligning with zero-trust approaches and integrating smoothly with enterprise platforms.

BeyondTrust

Symantec Privileged Access Manager provides enterprises with advanced capabilities in managing access and security compliance, emphasizing seamless integration and scalability. Organizations leverage it for simplified access control and proactive security management to enhance data privacy.

It's designed for managing privileged access across diverse IT environments, featuring easy deployment and configuration along with robust integration capabilities. Users benefit from its scalable architecture, transparent login procedures, and comprehensive password management. Despite its strengths, some challenges persist with the interface, policy management, and upgrade processes. Session recording limitations and documentation gaps are noted, impacting overall user satisfaction. Integration with specific systems, especially mainframes, and a restrictive pricing model present challenges. Nonetheless, its role in managing admin access and reducing security threats in Linux and Windows environments remains critical. Enhanced security is further achieved through integration with CA strong authentication.

What features does Symantec Privileged Access Manager offer?

Easy Deployment and Configuration: Quick setup process with intuitive functionality.
Password Management: Automated rotation of random, strong passwords.
Integration with Active Directory: Direct and seamless connectivity for user management.
Session Recording: Comprehensive logging of user activity for audit purposes.
Credential Injection: Secured access without revealing passwords to users.

What benefits should organizations look for?

Scalability: Supports growth and complex enterprise environments.
Security Compliance: Enhances data protection and regulatory adherence.
Transparency: Simplified login and access management for users.
Cost Efficiency: Potential reduction in security incidents and associated costs.

Organizations in the financial sector appreciate its effective management of privileged accounts across IT infrastructures, including servers and applications. It's valued for its role in RDP and SSH session facilitation and focus on enterprise-level security, crucial for identity governance and protecting high-stakes data.

Broadcom

Sample Customers

Aera Energy LLC, Care New England, James Madison University

NEOVERA, Telesis, eSoft

BeyondTrust Endpoint Privilege Management vs. Symantec Privileged Access Manager