BeyondTrust Privileged Remote Access vs One Identity Safeguard comparison

BeyondTrust Privileged Remote Access vs. One Identity Safeguard

Download the complete report

Helped 793,295 peers since 2012

Categories and Ranking

BeyondTrust Privileged Remo...

Ranking in Privileged Access Management (PAM)

3rd

Average Rating

8.6

Number of Reviews

Ranking in other categories

Remote Access (7th)

One Identity Safeguard

Ranking in Privileged Access Management (PAM)

4th

Average Rating

8.2

Number of Reviews

Ranking in other categories

User Entity Behavior Analytics (UEBA) (6th)

Mindshare comparison

As of July 2024, in the Privileged Access Management (PAM) category, the mindshare of BeyondTrust Privileged Remote Access is 6.1%, up from 5.9% compared to the previous year. The mindshare of One Identity Safeguard is 4.8%, down from 5.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Privileged Access Management (PAM)

Unique Categories:

Remote Access

4.2%

User Entity Behavior Analytics (UEBA)

2.2%

Q&A Highlights

Avinash Gopu

Associate VP & Cyber Security Specialist at Union Bank of California

Aug 14, 2023

Which PAM tool do you prefer: CyberArk Privileged Access Manager, One Identity Safeguard, Delinea Secret Server, or BeyondTrust Privileged Remote A

Based on your extensive list of requirements, CyberArk Privileged Access Manager appears to align well with your needs due to its comprehensive feature set, strong security controls, integration capabilities, and advanced analytics for privileged access. However, it's important to conduct in-depth evaluations, demos, and discussions with each vendor to ensure that the chosen tool meets all your specific needs and integrates seamlessly into your existing infrastructure. However, I recommend visiting the official website of Broadcom (the company that acquired Symantec's enterprise security business) or contacting their sales representatives to get the most up-to-date information about their PAM solutions, including any rebranding or changes that may have occurred. When evaluating any PAM solution, it's essential to consider factors such as security, integration capabilities, ease of use, vendor support, scalability, and alignment with your organization's specific needs and compliance requirements. It's also a good practice to request demonstrations, proofs of concept, and references from vendors to ensure that the solution meets your expectations. Remember to involve key stakeholders, such as IT, security, compliance, and management teams, in the decision-making process to ensure alignment with organizational goals and requirements.

Improved our network external access, which has been beneficial for our network security

Featured Reviews

Clement

Security Analyst at Secland

Aug 17, 2022

The solution's Vault is a nice feature. It helps to securely share a security password in teams, but it is not at the level of a password management solution. So, it is just really a vault. We were expecting to have more features to better manage passwords, but that is something that you can work around if you also have a password safe solution. I would like them to have features like password rotation or password auditing, e.g., old passwords. I would like to improve access to the web application, simplifying the web jumps. I would also like them to improve the Vault, which should have features closer to a light password management solution.

Read full review

Shashank Rawat

Consultant at a manufacturing company with 11-50 employees

Jul 12, 2023

Bulk import with templates is helpful, but some competitors' products are better

The initial setup for Safeguard is straightforward. Because it was deployed a long time ago in our organization, before my tenure, my expertise is based on adding to clusters. If we are going to add clients within a cluster, it depends on the speed, meaning how the network connectivity is between the cluster and the target device. In terms of the effect of deployment on users, they are provisioned, with the help of group membership, into Safeguard. Once they are assigned to a particular group, they can follow the previous sites. Based on the previous site, they can log in and check out the password of their privileged account. As for the amount of training needed, it depends on the solution. If the solution is only for privileged passwords, about three weeks' training is required to understand the solution. And if the server for privileges is also integrated with the solution, it will take a month or as much as 45 days. We have an implementation team and an operations team. Between them, there are a total of five or six people required for this solution to deploy and maintain it.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It is a real fortress. Its security is very strong. Multi-factor came as a feature out-of-the-box, which was big for us. That helps us meet another compliance requirement. It enforces encryption. Nobody can see what we are doing in our remote system if they happen to be listening for unencrypted traffic. That is its biggest strength."

"When it comes to the Privileged Remote Access (PRA) solution, instead of depending on a VPN client, from Cisco or any other vendor, we can directly use this product from the internet. It is very easy to do the implementation, and it is easy for every user to access the server from outside of their organization. They can open the URL and put their name and password, and it'll do the multi-factor authentication. They can easily access the server. Prior to this solution, the users had to log into the VPN, which is not required with BeyondTrust. Now, they can use their computer over the internet."

"Its initial setup process is straightforward."

"Based on the feedback from my colleagues who have never complained about the technical support, I would say that the product's support team is good."

"The visibility of the solution's Vault works as it is supposed to: out-of-the-box for domain accounts, endpoints, and local accounts associated with discovery jobs."

"The scalability is excellent."

"PRA stands on its own as a full solution. This is important because it reduces the need to maintain a lot of different services. Also, the integration between those services are sometimes not easy to maintain. So, having a solution like BeyondTrust Privileged Remote Access reducing our workload gives us enough time to work on our other issues. The system just runs and does what it is supposed to do."

"One of the features that I really like about it is the ability to set a start date, time, and end date for the access. For example, you can set the access for a person from tomorrow, Monday, or Tuesday and ending on a specific period of the day or a specific date. That's really quite helpful."

More BeyondTrust Privileged Remote Access pros

"The transparent mode for privileged sessions is a very good solution."

"It's one of the best products we've seen. When you start looking at the functionality and use cases and usability of the product, it's straightforward. They designed this product with the end-user in mind, and they also had the sysadmin who is supporting the product in mind. They really did a nice job. Overall, it's a nice product to work with."

"The system is easy to manage, as it is not a system that you will change everything all of a sudden. It evolves most of the time with customer requests."

"I like Safeguard's snapshot feature that enables us to review the last time an application was opened and by whom. If there are any issues, we can look behind the scenes to see what has been done. We can suspend a user's access or close off a server."

"The monitoring system is very good."

"Being able to use a proxy server is an advantage."

"We don't need to use VPN for remote access."

"I like the discovery functionality and the change password feature through the check-in. I also like the bulk import with the help of templates that come with it out of the box. With the help of these few features, my tasks are made easier."

More One Identity Safeguard pros

Cons

"It would be very nice if it has an enterprise vault. Currently, it can interact with Password Safe, which is a separate solution and equivalent to Thycotic Secret Server. Instead of having Password Safe as a separate entity, they should combine it with BeyondTrust Privileged Remote Access. They have done it in some way, but it is not an enterprise tech solution."

"At the moment, I don't see any major problems with it. If anything, they can just change the look and feel of the login screen because it looks too simple to me. It does not have so much information. When you get to the login screen of the solution, you should have more information. We also have BeyondTrust Remote Support, and the login page looks similar to BeyondTrust Privilege Remote Access. I would love to see more rich information on the login screen or landing page so that rather than having a regular sign-in screen or page where you just provide a username and password and get into the solution, you should have more insight into what the solution does. I've mentioned this to them every time I have had an opportunity."

"The price is pretty expensive."

"One of our gaps or pain points is having multi-factor authentication at the endpoint and using the PRA password injection from BeyondTrust, which does not work in our environment. We can only have MFA at the login of BeyondTrust to check out the password. Therefore, we can't meet our security requirements of having it on the endpoint."

"Some of the capabilities in the solution were not as available or not as outstanding as CyberArk. We had to manage whatever little was available for us, especially its recording capabilities, logs, and a number of things."

"Its management is through two different portals, and you can't get from one portal to the other. I have to literally open up another website and go into it a different way. There are no inner links between the two. They should interlink the actual virtual server and the appliance. In general, there should be one interface for management for admins."

"When doing protocol panel jumps, the tool does not restrict what is recorded on the user's computer."

"The solution is very flexible, which is a plus, but I would say the implementation requires someone with knowledge and experience, as it can be easy to get lost in all the details. The implementation process could be streamlined and simplified. Though the complexity of the solution provides greater flexibility, it requires a lot of time to understand it fully."

More BeyondTrust Privileged Remote Access cons

"The automated change of the passwords, which is now integrated, could be improved to be more flexible regarding different systems."

"One Identity Safeguard can improve by having more integration with multiple devices."

"Something for One Identity to look at is having integration guidelines for how to logically group accounts."

"The deployment affects our privileged users because it takes a long time for them to request privileges, which impacts the SLA."

"The interface is better now, but it still could be improved a lot. It needs more organization, menus, automatic refresh of information, and Web 2.0."

"We would like to be able to generate certificate signing requests (CSRs) from the interface for certificates."

"The SPS could be a lot easier to administrate and the parts should be unified, from a design perspective, so that I can recognize the systems as being part of the same package. They feel like they have been forced together."

"On a scale of one to ten, the stability is an eight."

More One Identity Safeguard cons

Pricing and Cost Advice

"The price is pretty expensive, but you get what you pay for and this is a great product."

"Don't get into a situation where you are licensing per desktop or per person until you fully understand the licensing."

"I wasn't directly involved in the licensing and pricing, but I can say that PRA is licensed per endpoint added to the Vault. I would advise users to take frequent exports of their license usage package; it's a simple feature that provides a spreadsheet of every machine in the Vault. This helps to cut down on duplicate licenses, which can happen by adding the same endpoint using an IP address and a fully qualified domain name, for instance. The implementation is an additional cost, and they offer several tiers, so the price varies. There are also some optional add-ons, so I would advise people to research the product well and find out precisely what they need regarding features. The Advanced Web Access add-on provides some required functionality when interfacing with websites; that's one to consider."

"Its price is pretty good for the features and services that it provides. It is not outrageous. I'm not aware of any additional charges or anything like that."

"PRA was one of the cheapest solutions that we evaluated."

"I rate the product's pricing a four on a scale of one to ten, where one is high, and ten is low. It is an expensive product."

"Though the solution was a bit expensive, the overall pricing was average."

"I wish it was a little bit cheaper, but when a product is as solid as this, I understand what the cost does. It helps them to make sure it stays that way. If you want a reliable, solid product, you're going to pay more."

More BeyondTrust Privileged Remote Access pricing and cost advice

"The license is very expensive for us, partly due to inflation and partly because of the exchange rate between the Dollar and the Iranian Rial. We purchased a perpetual license that we've been using up until now, but I believe that we are not going to update it in the future. Instead, we plan to find another third-party to support us with the license, in the sense that we would have access to their license as a shared agreement."

"They offer a fair price for a robust solution."

"Its subscription cost is too much, and sometimes, it is very difficult to pitch the solution to the management for cost approval. If the cost is reduced a little bit, it would be easier. If its cost was less, many other organizations that currently cannot afford it would be able to use this technology. I'm sure many organizations around the globe are having issues with identity management, and it is a very difficult task for IT to manage privileged accounts."

"Safeguard is cheaper than CyberArk."

"The pricing is about $80,000 per 100 servers. There are few elective costs."

"Setup cost, pricing and licensing are all very expensive."

"They have comparable pricing. All identity products are essentially priced in a similar way. It's a per-user base."

"It was definitely cheaper than the other two products that we evaluated."

More One Identity Safeguard pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.

See recommendations

793,295 professionals have used our research since 2012.

Answers from the Community

Avinash Gopu

Associate VP & Cyber Security Specialist at Union Bank of California

Aug 14, 2023

Which PAM tool do you prefer: CyberArk Privileged Access Manager, One Identity Safeguard, Delinea Secret Server, or BeyondTrust Privileged Remote A

See 2 answers

Nurlan Temirbulatov

Sales Engineer at Remediant

Dec 7, 2022

Hello Avinash, it all depends on the timeline and urgency of the project. If you need to deploy a PAM tool that focuses on standing privileges, stopping lateral movement, and incorporating Zero Standing Privileges as part of Zero Trust, then please consider looking at Remediant. I've worked for BeyondTrust and have gone up against the other big players such as Delinea, Centrify, CyberArk, and HashiCorp. They more or less all offer similar solutions, but looking at your current requirements, Remediant really excels in delivering a simple, yet very effective tool in a matter of days and weeks, not months and years.

Read full answer

Deepak Nagarkoti

IT Manager at CAS Trading House

Aug 14, 2023

Read full answer

Top Industries

By visitors reading reviews

Computer Software Company

19%

Financial Services Firm

11%

Manufacturing Company

Government

Computer Software Company

22%

Financial Services Firm

13%

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about BeyondTrust Privileged Remote Access?

The product has improved remote support capabilities since it works fine.

What needs improvement with BeyondTrust Privileged Remote Access?

The issue I found with the product revolves around the fact that RDP and SSH sessions take too much time, making it an area of concern where improvements are required. The product should be able to...

What is your primary use case for BeyondTrust Privileged Remote Access?

I use the tool in my lab. I am involved in the product's testing phase in my lab, where I am trying to check out the solution.

What do you like most about One Identity Safeguard?

The identity discovery is good, and the performance is pretty good value.

What is your experience regarding pricing and costs for One Identity Safeguard?

They have comparable pricing. All identity products are essentially priced in a similar way. It's a per-user base. Usually, they start at one price, and when you start pricing the competition, you ...

What needs improvement with One Identity Safeguard?

We sometimes face issues with configuration and things like that, but we manage to solve them. In general, it is a pretty good solution for the PSM features. There can be an improvement in terms of...

CyberArk Privileged Access Manager vs BeyondTrust Privileged Remote Access

Comparisons

Compared 15% of the time

Citrix DaaS (formerly Citrix Virtual Apps and Desktops service) vs BeyondTrust Privileged Remote Access

Compared 12% of the time

WALLIX Bastion vs BeyondTrust Privileged Remote Access

Compared 11% of the time

Apache Guacamole vs BeyondTrust Privileged Remote Access

Compared 11% of the time

Microsoft Remote Desktop Services vs BeyondTrust Privileged Remote Access

Compared 5% of the time

More BeyondTrust Privileged Remote Access Competitors

CyberArk Privileged Access Manager vs One Identity Safeguard

Compared 39% of the time

WALLIX Bastion vs One Identity Safeguard

Compared 12% of the time

Delinea Secret Server vs One Identity Safeguard

Compared 12% of the time

Fudo PAM vs One Identity Safeguard

Compared 5% of the time

SailPoint Identity Security Cloud vs One Identity Safeguard

Compared 4% of the time

More One Identity Safeguard Competitors

Product Reports

BeyondTrust Privileged Remote Access

Download BeyondTrust Privileged Remote Access product report

BeyondTrust Privileged Remote Access report

One Identity Safeguard

Download One Identity Safeguard product report

Also Known As

Bomgar Privileged Access

No data available

Learn More

BeyondTrust

One Identity

Overview

BeyondTrust Privileged Remote Access (formerly Bomgar Privileged Access) lets you secure, manage, and audit vendor and internal remote privileged access without a VPN.

Privileged Remote Access provides visibility and control over third-party vendor access, as well as internal remote access, enabling your organization to extend access to important assets, but without compromising security.

Features include:

- Privileged Access Control: Enforce least privilege by giving users the right level of access.

- Monitor Sessions: Control and monitor sessions using standard protocols for RDP, VNC, HTTP/S, and SSH connections.

- Reduce the Attack Surface: Reduce attacks by consolidating the tracking, approval, and auditing of privileged accounts in one place and by creating a single access pathway.

- Integrate with Password Management: Inject credentials directly into servers and systems with just one click, so users never need to know or see plain text credentials.

- Mobile & Web Consoles: Use mobile apps or web-based consoles anytime, anywhere.

- Audit & Compliance: Create audit trails, session forensics, and other reporting features by capturing detailed session data in real-time or post- session review, and provide attestation reports to prove compliance.

One Identity Safeguard manages and monitors privileged access, enhancing security with features like automatic session recording, real-time monitoring, and credential rotation. It integrates seamlessly, supports compliance with audit trails, and improves operational efficiency across organizations. This robust platform significantly bolsters security protocols while controlling sensitive operations.

Sample Customers

Horizon Beverage, Air Liquide, Gateway Bank of Florida

Cavium

BeyondTrust Privileged Remote Access vs. One Identity Safeguard