Try our new research platform with insights from 80,000+ expert users

BeyondTrust Privileged Remote Access vs CyberArk Privileged Access Manager vs Delinea Privileged Access Service comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

As of September 2025, in the Privileged Access Management (PAM) category, the mindshare of BeyondTrust Privileged Remote Access is 4.4%, down from 4.6% compared to the previous year. The mindshare of CyberArk Privileged Access Manager is 16.3%, down from 22.0% compared to the previous year. The mindshare of Delinea Privileged Access Service is 3.0%, up from 2.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Privileged Access Management (PAM) Market Share Distribution
ProductMarket Share (%)
CyberArk Privileged Access Manager16.3%
Delinea Privileged Access Service3.0%
BeyondTrust Privileged Remote Access4.4%
Other76.3%
Privileged Access Management (PAM)
 

Featured Reviews

Hahn Rolf - PeerSpot reviewer
Securely manage high-privilege remote access with granular configurations
I recommend that we improve integration with other products like PasswordSafe, aiming for smoother integration. Better alignment between products would enhance manageability from a single point. Additionally, BeyondTrust should focus on automating the update process to reduce unnecessary ticket creation. Improved quality control for non-English language versions is needed to avoid translation and layout errors.
Atul-Gujar - PeerSpot reviewer
Secures critical infrastructures with essential user session audit records
A potential area for improvement is enhancing support for cluster environments and distributed Vaults. Clients in multiple countries that need central access have different challenges that require better solutions from CyberArk. For financial services, CyberArk can improve incident response by ensuring fast support for critical priority tickets to meet compliance requirements. Providing more documentation on CyberArk is recommended for new team members to enhance their troubleshooting capabilities. I understand it's up to the client, but 99% fail to change the demo key, so it's crucial for CyberArk to emphasize changing the key and documenting it as part of the installation process.
Himanshu Pandey - PeerSpot reviewer
Enhancing security and efficiency through robust secret management
With the merging of Thycotic and Centrify into Delinea, it has combined strengths of both products into a single package. Thycotic was strong in certain areas and Centrify in others, and now Delinea integrates these features. I have experience with solutions like CyberArk, BeyondTrust, and Delinea. CyberArk, Delinea, and BeyondTrust are pushing onto cloud-based solutions.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We can truly elevate our admin rights while we're in there to fully take control of a system and manage it as if it was sitting right here on our desk. Most of the organization has gone to remote work or work from home. With that being the case, this solution allows us to be able to still work with our end-users, even though they're not always sitting on our network."
"The security provided by PRA when it comes to access for remote and privileged users has been outstanding. It has met all of our objectives, everything from password rotation to securing and allowing us to clamp down access to the auditing and monitoring features."
"The features I find most effective in BeyondTrust Privileged Remote Access include the advantages of password safe for anyone using their web server designing or applications."
"The secure access must be audited live, ensuring patient data protection."
"I like the enterprise credential manager. It's a connector that sits in PRA and tests the credentials for the end user with a process that will clean the password. This is one of PRA's primary features and simplifies user onboarding. There aren't many restrictions or complications. We can add the user while only opening one port, which is more than enough to access the PRA server. Every organization requires only four critical servers out of a hundred and some 50 production servers."
"The visibility of the solution's Vault works as it is supposed to: out-of-the-box for domain accounts, endpoints, and local accounts associated with discovery jobs."
"We like the integration with Active Directory. It allows us to discover the endpoints and user accounts that need protection. It's a good way of securing our privileged access."
"The product has improved remote support capabilities since it works fine."
"All the features of CyberArk are useful for me, but the biggest one is that CyberArk has logs for all the features. That is important when there is a problem. You know where to look and you have the information. In cyber security, the most important aspect is information."
"Its' quite stable."
"I appreciate CyberArk's real-time capabilities. I can secure critical sessions, such as SSH or database sessions."
"CyberArk PAM can be easily automated."
"It takes people out of the machine work of ensuring credentials remain up-to-date, and handles connection brokering such that human usage and credential management remain independent."
"It allows users to self-provision access to the accounts that they need."
"I find value in notifications from CyberArk when passwords fail verification and have other issues."
"I find the discovery feature, which includes credential management, session management, monitoring, and remediation within a session, to be very valuable."
"Delinea Privileged Access Service's UI part was very user-friendly for secure credential storage and management."
"Delinea has very good support."
"There are benefits in the security realm. We use Delinea at an enterprise level. I imagine there are productivity gains, but moreover, it's the security. We don’t enable staff to see the passwords of boxes but it's all being tracked and logged now."
"The solution provides secure access to environments."
"This is a cloud-based application, which makes it very easy to deploy."
"Delinea has very good support, rating them an eight or nine out of ten."
"The most valuable feature is the author's discovery of assets."
"The privileged account management feature is what I like most."
 

Cons

"The integration of the solution with many platforms is a difficult area to manage and needs to be made easy."
"One of our gaps or pain points is having multi-factor authentication at the endpoint and using the PRA password injection from BeyondTrust, which does not work in our environment. We can only have MFA at the login of BeyondTrust to check out the password. Therefore, we can't meet our security requirements of having it on the endpoint."
"With the current scenario of BeyondTrust Privileged Remote Access, some analytics should come with an AI/ML base and highlight if someone is doing something risky during access."
"Some of the capabilities in the solution were not as available or not as outstanding as CyberArk. We had to manage whatever little was available for us, especially its recording capabilities, logs, and a number of things."
"When doing protocol panel jumps, the tool does not restrict what is recorded on the user's computer."
"The solution's Vault is a nice feature. It helps to securely share a security password in teams, but it is not at the level of a password management solution. So, it is just really a vault. We were expecting to have more features to better manage passwords, but that is something that you can work around if you also have a password safe solution. I would like them to have features like password rotation or password auditing, e.g., old passwords."
"The integration client, backup solution, and SSO setup and provisioning could be improved. There isn't any documented or supported user provisioning currently, which slows down the processes of onboarding and assigning permissions. I would like to see this improved soon."
"The price is pretty expensive."
"This is probably a common thing, but they do ask for a lot of log files, a lot of information. They ask you to provide a lot of information to them before they're willing to give you anything at all upfront. It would be better if they were a little more give-and-take upfront: "Why don't you try these couple of things while we take your log files and stuff and go research them?" A little bit of that might be more helpful."
"For users to access a system via CyberArk Privileged Session Manager, a universal connector needs to be coded in a language called AutoIT and its support for web browsers is so-so. Other products like Centrify have browser plugins that can help automate the process when using their products."
"CyberArk has to continue to evolve with that threat landscape to make sure that they're still protecting those credentials that are owned by those that have privileged accounts in the firms."
"There should be more models and licensing plans for this software."
"It's expensive and you're not getting anything new. It's just a control, but in terms of risk, you are covering a big impact on the company."
"The major pain point that we have is the capacity of CyberArk due to the sheer volume of NPAs that we are managing. We are a large organization and we have hundreds of thousands of non-personal accounts to manage. We have already found out that there are certain capacity limitations within CyberArk that might introduce performance issues. From my perspective, something that would be valuable would be if the vault could hold more passwords and be more scalable."
"Regarding pricing for CyberArk Privileged Access Manager, it is quite costly, with premium pricing, making it more suitable for mid-to-large enterprises rather than small businesses and startups."
"I would like to see a simplification of the product."
"I would like for there to be a suitable solution to deploy a low-spec version for desktop password management to all our staff."
"This solution needs better integration with third-party solutions because their ability to support other tools is very weak."
"The initial setup is a bit complex."
"The integration with sync could be improved."
"Although the interface is intuitive, it could be a little more user-friendly."
"The pricing and presence could be improved."
"I would have been really happy if Delinea were evolving or innovating like CyberArk. Delinea needs to innovate more to match the changing needs of the market."
"Enhancing the solution by incorporating additional features to make it comprehensive would be beneficial. It would be more convenient to have a complete package solution that consolidates all the features in one place, making it easier to manage. Currently, I am required to access two separate servers for reports, which could be avoided if all the necessary features were available in a single location. This would be highly advantageous for managing everything effectively."
 

Pricing and Cost Advice

"Its price is pretty good for the features and services that it provides. It is not outrageous. I'm not aware of any additional charges or anything like that."
"The price is pretty expensive, but you get what you pay for and this is a great product."
"I wasn't directly involved in the licensing and pricing, but I can say that PRA is licensed per endpoint added to the Vault. I would advise users to take frequent exports of their license usage package; it's a simple feature that provides a spreadsheet of every machine in the Vault. This helps to cut down on duplicate licenses, which can happen by adding the same endpoint using an IP address and a fully qualified domain name, for instance. The implementation is an additional cost, and they offer several tiers, so the price varies. There are also some optional add-ons, so I would advise people to research the product well and find out precisely what they need regarding features. The Advanced Web Access add-on provides some required functionality when interfacing with websites; that's one to consider."
"I rate the product's pricing a four on a scale of one to ten, where one is high, and ten is low. It is an expensive product."
"My client found the solution a bit expensive but considering their use case and requirements, they didn't have any other choice. As far as I know, implementation and licensing are the only costs."
"PRA's pricing is competitive."
"PRA was one of the cheapest solutions that we evaluated."
"Though the solution was a bit expensive, the overall pricing was average."
"Previously, the pricing was very meager. They started publicizing and advertising the solution, growing CyberArk, as an organization. They also changed their pricing with that growth, e.g., the pricier the product, the more people who will purchase it."
"It can be an expensive product."
"It is not a cheap solution. It is expensive as compared with other solutions. However, it is one of the best solutions in their domain."
"I'm aware that the organization had purchased licensing for almost all of CyberArk's solutions including licensing for PTA, EPM, and the Application Identity Manager. But when it comes to PSM, this is one of the components where there's an additional charge for any extra PSMs that you want to deploy. I believe that there's some rider where the vendor has a bit of leeway to, at times, charge a premium on whatever additional services you may require above the board."
"If you want a Ferrari, it will cost you. The solution is really nice, so it costs the client, but in the long run, it is very good. If you buy a solution that costs a lot to maintain because it is not stable, and you are frequently asking for consultant support, it costs more."
"The product’s pricing is feasible for enterprise customers. The pricing is expensive for smaller businesses. You need to pay additional costs for service implementation and local support."
"It's not a cheap application. It's very expensive."
"Our risk is definitely significantly lower. Also, our resources are low."
"The solution is priced too high, so I rate its pricing a nine out of ten."
"The price model is based on the number of devices and opposed to the number of users, and it is not very flexible."
"The pricing is moderate."
"The price is cheap if I compare Delinea Privileged Access Service with other products."
"The product comes at a very good price and it's quite competitive, although you need to buy add-ons for certain things."
"The price of Delinea Privileged Access Service is average compared to its competitors."
"It is sad that people with a limited budget won't be able to afford it."
"In addition to the license fees, we have to pay for the server and admin fees."
report
Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.
868,229 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
17%
Manufacturing Company
12%
Financial Services Firm
9%
Government
7%
Financial Services Firm
15%
Computer Software Company
15%
Manufacturing Company
9%
Government
6%
Computer Software Company
11%
Manufacturing Company
10%
Financial Services Firm
9%
Healthcare Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business12
Midsize Enterprise4
Large Enterprise7
By reviewers
Company SizeCount
Small Business59
Midsize Enterprise41
Large Enterprise171
By reviewers
Company SizeCount
Small Business6
Large Enterprise8
 

Questions from the Community

What do you like most about BeyondTrust Privileged Remote Access?
The product has improved remote support capabilities since it works fine.
What needs improvement with BeyondTrust Privileged Remote Access?
Improving technical support for BeyondTrust Privileged Remote Access is essential. When I communicate with technical ...
What is your primary use case for BeyondTrust Privileged Remote Access?
When we are using BeyondTrust Privileged Remote Access with FortiGate or some Cisco third-party products, we collabor...
How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to m...
What do you like most about CyberArk Privileged Access Manager?
The most valuable features of the solution are control and analytics.
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
Regarding costs, CyberArk Privileged Access Manager is not a cheap product; hence, many companies struggle with its h...
Looking for recommendations and a pros/cons template for software to detect insider threats
This is an inside-out --- outside-in --- inside-in question, as an insider can be an outsider as well. There is no sh...
What do you like most about Delinea Privileged Access Service?
The solution provides secure access to environments.
What is your experience regarding pricing and costs for Delinea Privileged Access Service?
The difference in license cost is minimal, with CyberArk being slightly costly due to its market-leading position. Th...
 

Also Known As

Bomgar Privileged Access
CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
Centrify Privileged Access Service, Centrify Zero Trust Privilege Services, Centrify Zero Trust Privilege, Centrify Infrastructure Services, Centrify Server Suite, Centrify Privilege Service
 

Overview

 

Sample Customers

Horizon Beverage, Air Liquide, Gateway Bank of Florida
Rockwell Automation
Boeing, Citi, Credit Suissw, Delta, Duke Energy, FDIC, GE Capital, Harvard University, Johnson & Johnson, Major League Baseball, Michelin, Microsoft
Find out what your peers are saying about CyberArk, Delinea, One Identity and others in Privileged Access Management (PAM). Updated: August 2025.
868,229 professionals have used our research since 2012.