No more typing reviews! Try our Samantha, our new voice AI agent.

BeyondTrust Password Safe vs WALLIX Bastion comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 6, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

BeyondTrust Password Safe
Ranking in Privileged Access Management (PAM)
8th
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
27
Ranking in other categories
Enterprise Password Managers (9th)
WALLIX Bastion
Ranking in Privileged Access Management (PAM)
10th
Average Rating
7.4
Reviews Sentiment
6.7
Number of Reviews
13
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of September 2026, in the Privileged Access Management (PAM) category, the mindshare of BeyondTrust Password Safe is 2.2%, down from 3.5% compared to the previous year. The mindshare of WALLIX Bastion is 3.4%, down from 7.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Privileged Access Management (PAM) Mindshare Distribution
ProductMindshare (%)
BeyondTrust Password Safe2.2%
WALLIX Bastion3.4%
Other94.4%
Privileged Access Management (PAM)
 

Featured Reviews

PawanShirose - PeerSpot reviewer
Associate Security Consultant at CyberSec Consulting
Has enabled bulk onboarding and password rotation while ensuring secure privilege management
I have faced stability issues when upgrading BeyondTrust Password Safe solution. The upgrade process can be lengthy compared to other modules. For example, upgrading the appliance and reconfiguring HA is easier in PRA. However, in BeyondTrust Password Safe, the upgrade activity can take longer, and I have occasionally experienced being stuck during appliance version upgrades, sometimes duplicating the upgrade. Regarding additional features, we have good features in BeyondTrust Password Safe compared to other modules, such as Secret Safe to secure secrets and the check-in, check-out functionality. We already have the main features, but I think it would be helpful if BeyondTrust implemented a heartbeat check feature on the privileged account level. This feature would allow PAM to check the credentials of privileged accounts, indicating if they are correct or not, showing if the heartbeat has failed if they are wrong.
René DRABO - PeerSpot reviewer
Team Lead at a tech services company with 1,001-5,000 employees
Security has improved with monitored privileged sessions but the complex interface still needs work
I do not find WALLIX Bastion easy to use and ergonomic, but I have no clue about how much it costs. When I say it is not easy to use, I mean the interface is complex, but it might not be directly linked to the product; it might be linked to the way we implemented it in our context. The way we have to connect to a third Bastion and then launch another session bothers me. We also have some limitations, but I think this is linked to our context regarding how many times the session can stay open on the Windows session, which is not aligned with my needs. I am more of a promoter of other kinds of handling privileged access management with my use case, but it might not be linked to the tool; it is just because the implementation we made is not what I expect for my needs and it is not the way I want to work on my servers. In the past, I used the leader in PAM but cannot remember the name. I was more satisfied because the connection was more straightforward: I click on a button, make my authentication, and have my servers open, and this is the way I want it. The UI was the main reason why I thought the previous tool I was using was better.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The best aspect of the product is the ability to onboard devices. You can scan the IP subnets and onboard all the devices. You can then segregate them if it's a network device or a firewall. If it's a Windows server or a UNIX, you can basically scan your IT infrastructure and onboard the efforts, which should be managed. Once they have been onboarded, then the session management and password management are easy and nicely configurable."
"Overall, I rate BeyondTrust Password Safe as nine out of ten."
"The ability to manage privileged account passwords is the most valuable feature, giving us the capability of rotating passwords as soon as an event is triggered."
"The performance is good."
"Automation in BeyondTrust Password Safe uses Smart Rules, which eliminate the need for manual onboarding and effectively handle multiple bulk tasks, such as onboarding and mapping."
"Smart Rules is a nice feature in BeyondTrust. It is a unique feature that BeyondTrust has as compared to other vendors such as CyberArk. With Smart Rules, you can do automatic onboarding of accounts. There are a lot of options and features. For example, you can do onboarding based on different AD attributes. It is a nice feature in BeyondTrust that some of the other PAM vendors don't have. With other vendors, we have to create our own scripts, whereas, with BeyondTrust, we can just use the in-built Smart Rules."
"I like the session recording feature. I also like the analytics and reports. You can pull up a report, and the UI is fantastic. The system is recording when nobody's there, so we have a record of what's happening."
"It is very easy to deploy. It's easy to use. That's the major thing I like about it."
"Technical support is very good; they have their own ticket system that is available for all customers and their system is already in different languages, for example, English, French, and, for us, Russian."
"The most valuable feature of WALLIX Bastion is its password management capability, which is central to safeguarding sensitive information."
"The interface is very simple. It doesn't need any plug-ins, just browsers that are installed at the beginning."
"I like that it's Linux-based, and you don't need to have separate implementations, extra database licenses, or enterprise licenses. I think because it's Linux-based, it's more seamless than Windows. I also like the access manager, which I think is a super tool. Everything is browser-based, and you don't need a VPN. So, that's a great thing."
"Its video recording capabilities have definitely been key for us."
"WALLIX Bastion's most valuable feature is the Access Manager because you can use it and access the data center without any client VPN."
"The setup process was simple, and the solution can be implemented within less than one day."
"The support is great. They offer 24/7 support, but the specific level of support depends on your subscription. There's a weekday-only option, and a 24/7 option that covers all days of the week. They also have offices in different regions, including West Africa, so people there can easily get support. There's no need to worry about getting assistance."
 

Cons

"We'd like to have incremental backups to ensure the solution's information is protected regularly."
"The pricing is not cheap, but it could be better."
"The only feature they could improve is the banners because they aren't informative."
"The product needs to have better integration with SAP products."
"There is a limited capacity on the appliance, which I wasn't informed about when I purchased the product. I can have a maximum of 150 rules per appliance; any more than that and rule processing becomes very complex, especially regarding password revision. Hitting a capacity limit you don't know about can be problematic. Ideally, we would not have a limited capacity, allowing us to be in a completely managed state with password rotation for every service account, not just the highly privileged ones."
"If there was one thing, it would be having the documentation standardized. They should keep the documentation consistent. For example, when BeyondTrust updated one of their admin guides, they left out the information on the discovery account requirements, and then over a period of time, we ended up having to search multiple different documents to put together a string of information for a specific topic, which was problematic. It was minor, but it was problematic. Standardized documentation would be the one thing I would suggest."
"From the client perspective, they usually complain that the RDP session disconnects without error notifications."
"Documentation is the primary area of improvement."
"The main problem of Bastion, CyberArk, and WALLIX is that they have the same interface for both administration and users, which is not a good idea from a security perspective."
"The performance of WALLIX Bastion's password manager is very low."
"There should be more effort to increase the level of security."
"Also, the biggest disadvantage of WALLIX is the reporting or behavioral analysis limited. I feel like it's very weak in reporting when compared to the other solutions."
"There could be more automation features for the solution."
"Deploying Bastion isn't as straightforward."
"The password management needs improvement. Management of Access Manager should be improved as well."
"The scalability of WALLIX Bastion is rated seven out of ten. While it meets our current needs, scaling up the solution is not as easy, and improvements could be made in this area."
 

Pricing and Cost Advice

"This solution is not cheap—it's a very expensive solution. Very, very expensive compared to the features and functions that they offer."
"It has subscription-based licensing. BeyondTrust is three times less expensive than CyberArk."
"At the time, BeyondTrust was significantly cheaper than CyberArk. Pricing-wise, if I remember correctly, it goes by assets. The pricing was negotiated for our instances based on the number of assets that we onboard into the system. It is a little different from CyberArk, where the pricing is by users. So, it depends. If you have a lot of assets, it can get very expensive."
"When you buy Password Safe and perform your initial Discovery, you have all these servers that are added to your assets in BeyondTrust, but you're not using a license until you actually start managing the systems. BeyondTrust's licensing is based on the systems when they're managed, which means when an administrator is able to connect to the server through BeyondTrust with a managed account. There would be a privileged account on the endpoint when the licensing starts. A significant advantage to that is that there are many organizations that want to evaluate their environment prior to automatic management."
"The pricing structure is better than the competitors. It's much cheaper than CyberArk. They do the licensing on the basis of assets, not on the number of users. For CyberArk, they base the licensing on the number of users, and they have an expensive model of pricing. BeyondTrust has a cheaper model."
"The pricing of BeyondTrust is very good as compared to other products. That was the main reason we decided to go with BeyondTrust at first."
"We just pay for Password Safe. Session management is included, but we don't use it. There aren't any additional costs besides the standard licensing fees. We pay for an annual license."
"I would rate the pricing a seven out of ten, where one is cheap and ten is expensive."
"Some extra price needs to be paid for license."
"The solution's price is mid-ranged."
"The solution's pricing is comparable to that of other products."
report
Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.
914,109 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
28%
Manufacturing Company
9%
Construction Company
5%
Comms Service Provider
5%
Financial Services Firm
12%
Comms Service Provider
10%
Computer Software Company
9%
Outsourcing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business13
Midsize Enterprise5
Large Enterprise10
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise1
Large Enterprise5
 

Questions from the Community

What is your experience regarding pricing and costs for BeyondTrust Password Safe?
My experience with BeyondTrust Password Safe's pricing, setup cost, and licensing has been positive, primarily due to its asset-based licensing model. This is a significant advantage for us because...
What needs improvement with BeyondTrust Password Safe?
I have faced stability issues when upgrading BeyondTrust Password Safe solution. The upgrade process can be lengthy compared to other modules. For example, upgrading the appliance and reconfiguring...
What is your primary use case for BeyondTrust Password Safe?
I am working on both BeyondTrust Password Safe and the PRA (Privileged Remote Access). I have three years plus experience working with BeyondTrust Password Safe solution, and I have hands-on, good ...
What is your experience regarding pricing and costs for WALLIX Bastion?
The price of WALLIX Bastion is rated five out of ten, positioning it in the middle. The cost is justified by the features and capabilities we receive.
What needs improvement with WALLIX Bastion?
I do not find WALLIX Bastion easy to use and ergonomic, but I have no clue about how much it costs. When I say it is not easy to use, I mean the interface is complex, but it might not be directly l...
What is your primary use case for WALLIX Bastion?
The major use cases for WALLIX Bastion are general privileged access management, such as connecting to a server or securing SSH.
 

Also Known As

BeyondTrust PowerBroker Password Safe
Bastion
 

Overview

 

Sample Customers

Aera Energy LLC, Care New England, James Madison University
RTBF, Pharmagest, Michelin Group, Niort Hospital
Find out what your peers are saying about BeyondTrust Password Safe vs. WALLIX Bastion and other solutions. Updated: September 2026.
914,109 professionals have used our research since 2012.