No more typing reviews! Try our Samantha, our new voice AI agent.

BeyondTrust Privileged Remote Access vs One Identity Safeguard vs Symantec Privileged Access Manager comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

As of May 2026, in the Privileged Access Management (PAM) category, the mindshare of BeyondTrust Privileged Remote Access is 2.8%, down from 4.6% compared to the previous year. The mindshare of One Identity Safeguard is 4.4%, up from 4.1% compared to the previous year. The mindshare of Symantec Privileged Access Manager is 1.7%, up from 1.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Privileged Access Management (PAM) Mindshare Distribution
ProductMindshare (%)
One Identity Safeguard4.4%
BeyondTrust Privileged Remote Access2.8%
Symantec Privileged Access Manager1.7%
Other91.1%
Privileged Access Management (PAM)
 

Featured Reviews

AK
Lead Engg. Information Assurance at ACPL Systems Pvt Ltd
Strong security with room for enhancements in AI analytics
We integrate with our Active Directory regarding the role-based access controls in BeyondTrust Privileged Remote Access.I have not yet utilized the endpoint least privilege management feature in BeyondTrust Privileged Remote Access. There is a ready integration guide available for BeyondTrust Privileged Remote Access, so there are no major issues. All API integration is available to integrate with. More organizations are moving towards cloud infrastructure with BeyondTrust Privileged Remote Access. They are choosing this because they do not want to manage their on-premises and other hardware infrastructure. As we are not working with other vendors, I would rate BeyondTrust Privileged Remote Access a 10 out of 10.
Mahesh Malve - PeerSpot reviewer
Senior Business Development Executive at DigitalTrack Solutions Ind Pvt Ltd
Centralized control has strengthened privileged security and simplified audit investigations
While One Identity Safeguard is a strong and reliable PAM solution, there are a few areas where it can be further improved to enhance user experience and scalability. Regarding the user interface and experience, the UI, while functional, can be a bit complex for new users. A more intuitive and modern dashboard with simplified navigation would improve adoption, especially for non-technical stakeholders. Regarding integration flexibility, although it supports major integrations, expanding out-of-the-box connectors for more cloud-native apps, DevOps tools, and SaaS platforms would be beneficial. Faster and simpler API-based integrations could reduce deployment efforts. Regarding scalability and performance in large enterprise environments, performance tuning and scaling can require additional efforts. Enhancing seamless scalability and high availability configuration would improve enterprise readiness.
Muzi Lubisi - PeerSpot reviewer
Senior technical Consultant at CA Africa
Secure management of sensitive servers and seamless applications with direct linking
The credential injection feature is highly valued, particularly for RDP sessions. A majority of customers use it for RDP, and a couple for Linux servers. The broader capabilities, including access to multiple systems, web-based applications, and clustering, have never posed an issue. The threat analytics aspect is also a robust feature that analyzes all pertinent information.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Its security, simplicity, and ease of deployment and maintenance are the most valuable."
"Based on the feedback from my colleagues who have never complained about the technical support, I would say that the product's support team is good."
"It is a great tool, and everything has improved over here."
"The secure access must be audited live, ensuring patient data protection."
"It has put us at the forefront when it comes to security, auditing, and meeting SOX requirements."
"The features I find most effective in BeyondTrust Privileged Remote Access include the advantages of password safe for anyone using their web server designing or applications."
"The privileged remote access platform is able to track and record everything that happens within a session."
"The most valuable feature is that this solution can be implemented regardless of the operating system."
"Overall, we have likely reduced admin effort related to access management by forty percent, and from an operational efficiency standpoint, we no longer need to manage or rotate privileged credentials manually."
"One Identity Safeguard has had a very positive impact on our organization."
"It offers high availability and enables end users to deploy the solution with 99.999 percent uptime, which is crucial in an enterprise environment with a large number of endpoints."
"One Identity Safeguard has had a very positive impact on our organization, especially in terms of security, efficiency, and visibility."
"One Identity Safeguard has positively impacted my organization by helping to increase security because of password vaulting."
"Over four years of use, we have not encountered a single system crash or failure, and the product is stable."
"The initial setup of One Identity Safeguard was simple."
"It's one of the best products we've seen. When you start looking at the functionality and use cases and usability of the product, it's straightforward. They designed this product with the end-user in mind, and they also had the sysadmin who is supporting the product in mind. They really did a nice job. Overall, it's a nice product to work with."
"The password vault and access to the systems are the most valuable features."
"For me, it is the robust API which is the most valuable feature. This allows for low maintenance costs and allows applications to automatically connect. This is great to automate security of the DevOps pipeline for shared secrets across environments. Also, being on Linux and a virtual appliance is great."
"So all the different roles (such as database admin, Unix admin, network administrator), are now centralized into one system."
"It has been reliable down the line with new features and updates."
"Monitoring privileged users’ actions is valuable because of the high level of trust and wide-ranging access insiders typically enjoy."
"According to the users who have actually used CyberArk and CA PAM, they have said that CA PAM is ten times easier to use and manage."
"The DB clustering is a really good benefit of using CA PAM."
"Stability is solid as a rock."
 

Cons

"I recommend that we improve integration with other products like PasswordSafe, aiming for smoother integration."
"They could probably integrate a wizard or something like that to add a new use case. It could be something that makes it easier to add a new use case."
"Customer support used to be faster with chat options available. However, support now requires opening a ServiceNow ticket, which can be time-consuming."
"Changing your password should be simplified, and there should not be a charge for it."
"They could probably integrate a wizard or something like that to add a new use case."
"The price is pretty expensive."
"I would love to have a web console and the ability to use the smart card with the web console to provide remote support. If you are on a computer that doesn't have the Bomgar console, you should be able to use the web console to provide support. That's the only thing right now. A web console is nice when you're jumping into a computer, but if you need to elevate the privileges, you currently can't do it with the smart card. If they could figure that out, that would be money."
"The solution is very flexible, which is a plus, but I would say the implementation requires someone with knowledge and experience, as it can be easy to get lost in all the details."
"The product uses a lot of resources in current sessions."
"While One Identity Safeguard is a strong PAM solution, there are a few areas where it could be improved."
"We've had issues managing accounts and access to some data saved on the servers. Accounts are granted a new working certificate daily. We have an account to do it on APIs online and sync it with that. If the path changes at some point or someone changes the password, I don't know if it's from the Active Directory or what."
"We sometimes face issues with configuration and things like that, but we manage to solve them."
"From a management point of view, it would be beneficial if One Identity Safeguard Privilege Password and One Identity Safeguard Privilege Session had a more similar interface."
"One Identity Safeguard can improve by having more integration with multiple devices."
"One Identity Safeguard works well for us overall, but there are several areas where improvements could be made."
"I would like to see an adjustment with more enterprise architecture."
"The rule management portion and reporting is very weak on its own."
"The service account management functionality needs to be extended to application pools, SQL database, PowerShell scripts, service account discovery, etc."
"There is already a feature for that. It is not too great to use."
"The integration with AS/400 Endpoint via Transparent Login could be better and useful for some users."
"Stability is a problem that we fight every day."
"I would like to see improvements in branding customization and multi-tenancy."
"The management console could be improved."
"It'd be great if you just stuck in your PIV card and Windows popped up, asked you for your password. You typed it in, then it remembered your credentials."
 

Pricing and Cost Advice

"Don't get into a situation where you are licensing per desktop or per person until you fully understand the licensing."
"I rate the product's pricing a four on a scale of one to ten, where one is high, and ten is low. It is an expensive product."
"My client found the solution a bit expensive but considering their use case and requirements, they didn't have any other choice. As far as I know, implementation and licensing are the only costs."
"Though the solution was a bit expensive, the overall pricing was average."
"Its price is pretty good for the features and services that it provides. It is not outrageous. I'm not aware of any additional charges or anything like that."
"I wasn't directly involved in the licensing and pricing, but I can say that PRA is licensed per endpoint added to the Vault. I would advise users to take frequent exports of their license usage package; it's a simple feature that provides a spreadsheet of every machine in the Vault. This helps to cut down on duplicate licenses, which can happen by adding the same endpoint using an IP address and a fully qualified domain name, for instance. The implementation is an additional cost, and they offer several tiers, so the price varies. There are also some optional add-ons, so I would advise people to research the product well and find out precisely what they need regarding features. The Advanced Web Access add-on provides some required functionality when interfacing with websites; that's one to consider."
"PRA's pricing is competitive."
"The price is pretty expensive, but you get what you pay for and this is a great product."
"They have comparable pricing. All identity products are essentially priced in a similar way. It's a per-user base."
"It is cheaper than CyberArk. Its price is fair."
"Our licensing costs are on a yearly basis."
"The pricing is about $80,000 per 100 servers. There are few elective costs."
"The pricing depends on our perspective, our budget, and, of course, the competitors we are taking into account."
"We have a yearly license. The cost depends on how much a company wants to invest in technology. In our organization, we believe in modern digitization and automation processes so we found it affordable. One Identity was not that much less than other solutions and it is not a cheap solution. There were number of cheaper solutions. However, it's the most effective, according to our evaluation."
"The license is very expensive for us, partly due to inflation and partly because of the exchange rate between the Dollar and the Iranian Rial. We purchased a perpetual license that we've been using up until now, but I believe that we are not going to update it in the future. Instead, we plan to find another third-party to support us with the license, in the sense that we would have access to their license as a shared agreement."
"They offer a fair price for a robust solution."
"The prices are not low, but one can ask for a discount. It’s not the cheapest PAM solution."
"The licensing is simple and scalable."
"It is more expensive than other solutions on the market."
"I would prefer better licensing options for the 20-100 users we have at a given time."
"It is reasonably priced."
"The version we are using is affordable compared to BeyondTrust, which is maybe three to four times as expensive, but it depends on the features."
"They offer per-device, per-user, or monthly and yearly licensing models."
"Don’t go with an agent model. Don’t go with a model that has you buying a thousand different parts. Go with PAM that gives you everything, or you’ll just be paying costs of implementing another tool that PAM would have just given you up front."
report
Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.
892,678 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
15%
Financial Services Firm
9%
Government
8%
Computer Software Company
6%
University
10%
Computer Software Company
10%
Outsourcing Company
9%
Financial Services Firm
7%
Financial Services Firm
10%
Comms Service Provider
9%
Marketing Services Firm
9%
Construction Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business12
Midsize Enterprise4
Large Enterprise7
By reviewers
Company SizeCount
Small Business61
Midsize Enterprise26
Large Enterprise29
By reviewers
Company SizeCount
Small Business14
Midsize Enterprise6
Large Enterprise30
 

Questions from the Community

What needs improvement with BeyondTrust Privileged Remote Access?
Improving technical support for BeyondTrust Privileged Remote Access is essential. When I communicate with technical ...
What is your primary use case for BeyondTrust Privileged Remote Access?
When we are using BeyondTrust Privileged Remote Access with FortiGate or some Cisco third-party products, we collabor...
What advice do you have for others considering BeyondTrust Privileged Remote Access?
I have not utilized the endpoint least privilege management feature in BeyondTrust Privileged Remote Access as I have...
What is your experience regarding pricing and costs for One Identity Safeguard?
One Identity Safeguard is priced at a premium level, typical for enterprise-grade privilege access management solutio...
What needs improvement with One Identity Safeguard?
While One Identity Safeguard is a strong privilege access management solution, there are some areas where improvement...
What is your primary use case for One Identity Safeguard?
In my daily operations, I rely on One Identity Safeguard for administrator requests for access through One Identity S...
What is your experience regarding pricing and costs for Symantec Privileged Access Manager?
Due to the nature of the solution, it is hard to gauge, but compared to competitors, the pricing is very good. I woul...
What needs improvement with Symantec Privileged Access Manager?
Recent releases need improvement in webpage management. For instance, navigating through a webpage that acts like a w...
What is your primary use case for Symantec Privileged Access Manager?
With the customers that I have so far, I help them broker RDP sessions to sensitive servers, particularly those that ...
 

Also Known As

Bomgar Privileged Access
No data available
CA PAM, Xceedium Xsuite, CA Privileged Access Manager
 

Overview

 

Sample Customers

Horizon Beverage, Air Liquide, Gateway Bank of Florida
Cavium
NEOVERA, Telesis, eSoft
Find out what your peers are saying about CyberArk, One Identity, Okta and others in Privileged Access Management (PAM). Updated: April 2026.
892,678 professionals have used our research since 2012.