No more typing reviews! Try our Samantha, our new voice AI agent.

BigFix vs CyberArk Endpoint Privilege Manager vs SailPoint Identity Security Cloud comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
4.7
Cortex XDR by Palo Alto Networks provides cost savings, enhanced security, and compliance with reduced administrative effort and robust threat detection.
Sentiment score
4.9
BigFix delivers quick ROI with efficient patch management, reducing manual labor and costs while improving compliance and operational efficiency.
Sentiment score
7.2
CyberArk Endpoint Privilege Manager enhances security, reduces risks and costs, saves resources, and protects sensitive information effectively.
Sentiment score
7.1
SailPoint Identity Security Cloud reduces costs, automates access, enhances productivity, and achieves ROI within 14 to 18 months.
They appreciate the rich telemetry data from the solution, as it provides in-depth threat identification.
Cyber Security Manager at Welab bank
Cortex XDR by Palo Alto Networks helps to reduce my total cost of ownership significantly.
Detection and Response Consultant at Inovasys
In Cortex XDR by Palo Alto Networks, most of the remediation is automated and the accuracy is quite good.
Network Security Engineer at Cyberwell Solution
Deploying CyberArk Endpoint Privilege Manager has secured the infrastructure, which saves money, time, and resources.
Lead Consultant at a tech vendor with 501-1,000 employees
I consider CyberArk Endpoint Privilege Manager's return on investment to be good since it effectively accomplishes the goals expected from privilege access management solutions.
Commercial and Technical Professional Manager at Evolution Technologies Group
 

Customer Service

Sentiment score
7.0
Cortex XDR support varies by plan and location; premium plans provide better experiences but others report delays.
Sentiment score
7.6
BigFix's customer service is praised for expertise and responsiveness, enhanced by community resources and recent support improvements.
Sentiment score
6.2
CyberArk Endpoint Privilege Manager support is knowledgeable but needs improvements in response times, accessibility, and first-level assistance.
Sentiment score
5.3
SailPoint Identity Security Cloud offers praised support with weekend availability, though regional and language challenges may occur.
The technical support from Palo Alto deserves a mark of ten because they reach out within an hour whenever assistance is needed.
Head of data centers at a non-profit with 10,001+ employees
There is no back and forth, and they know what we are asking for and come up with the best resolution for a solution.
Senior Process Expert at A.P. Moller - Maersk
If any of these services are missed, it becomes a problem in terms of support tickets, follow-up, or special configuration that needs to be done in the system.
Chief of IT Architecture at a financial services firm with 10,001+ employees
On a scale from one to ten, with ten being the highest quality, enterprise support provides timely responses, typically within four to eight hours.
Technical Director at SYSTEX
Technical support from HCL is satisfactory unless there are customization requirements.
Founder Director at Techsa Services
Whenever we need any kind of support, the BigFix team is present and available.
Solution Sales Specialist at TD SYNNEX
They respond immediately to our inquiries, resolve issues promptly, and provide valuable guidance, especially in critical situations.
Security Delivery Analyst at Accenture
We engage them when needed and receive prompt responses that typically resolve our issues.
Global Security Systems Consultant at a insurance company with 10,001+ employees
Earlier, we received support for normal tickets within a day, but now it takes one or two days to resolve issues.
Lead Consultant at a tech vendor with 501-1,000 employees
SailPoint's team consists of specialists who handle tickets without needing to depend on other teams.
Technical Support Analyst at CLSA
Sometimes, the support is slow, and they often suggest resorting to expert services.
Vice President Sales at a tech vendor with 1-10 employees
Technical support is very good.
Senior Manager Cybersecurity at LTI - Larsen & Toubro Infotech
 

Scalability Issues

Sentiment score
7.5
Cortex XDR offers scalable, flexible management for enterprises, supporting thousands of users with easy deployment and cloud-based maintenance.
Sentiment score
4.7
BigFix effectively manages environments of all sizes with high scalability, supporting large deployments without performance issues.
Sentiment score
7.7
CyberArk Endpoint Privilege Manager efficiently scales for large deployments, praised for growth-centered architecture despite integration complexities.
Sentiment score
7.1
SailPoint Identity Security Cloud is scalable, supporting millions of identities, though may require extra resources and faces Java memory challenges.
You can onboard 10,000 endpoints in just hours, which demonstrates the excellent scalability of this product.
Assistant Security Architect at Cloudnomics
Activating the newly purchased licenses is instantaneous, allowing installations without adjustments since it's cloud-based.
Junior Security Analyst at ITSEC Asia
Cortex XDR by Palo Alto Networks can be expanded anytime by purchasing another license without any issues related to scalability.
Head of data centers at a non-profit with 10,001+ employees
BigFix requires some minimum configuration requirements.
RPA Developer at Hexaware Technologies Limited
We can set permissions per team or department, allowing some teams to elevate specific applications while others have different permissions.
Global Security Systems Consultant at a insurance company with 10,001+ employees
CyberArk Endpoint Privilege Manager is quite scalable.
Security Delivery Analyst at Accenture
The available reports and other security tools assist in scaling it according to my organization's needs.
Cybersecurity Manager at a consultancy with 10,001+ employees
The solution scales well as long as we provide the necessary resources.
Vice President Sales at a tech vendor with 1-10 employees
The solution is scalable and can be upgraded to accommodate increased user counts.
Technical Project Manager & Senior Security Architect at Tech Mahindra Limited
SailPoint is scalable, though challenges exist in terms of workflow and user interface design.
Technical Support Analyst at CLSA
 

Stability Issues

Sentiment score
8.0
Cortex XDR is praised for its stability and performance, with manageable upgrades and frequent updates enhancing its features.
Sentiment score
6.2
BigFix is praised for its stability, efficient large-scale deployments, and autonomous operations with minimal user intervention and near-perfect ratings.
Sentiment score
8.2
CyberArk Endpoint Privilege Manager is stable, with 99.99% uptime, reliable on Windows, needing console improvements and minimal memory.
Sentiment score
7.9
SailPoint Identity Security Cloud is stable, with high reliability ratings, minor issues, and seamless integration fostering user satisfaction.
Cortex remains fast and responsive, even with increasing data and alerts.
Final Year Student at Gitam University
The thresholds we've seen on our firewall boxes at some instances reached 80% to 85%, but even at that level of utilization, we don't observe any latency or any issues reported with respect to accessing the application.
Senior Process Expert at A.P. Moller - Maersk
Cortex XDR is stable, offering high quality and reliable performance.
Cyber Security Manager at Welab bank
It is a robust solution that has effectively supported our environment without major issues.
Security Delivery Analyst at Accenture
Since implementing it, we have not experienced any outages or stability issues.
Global Security Systems Consultant at a insurance company with 10,001+ employees
CyberArk Endpoint Privilege Manager offers multiple options for creating and stopping policies.
Lead Consultant at a tech vendor with 501-1,000 employees
IdentityIQ deserves a rating of 12 out of ten for stability.
Vice President Sales at a tech vendor with 1-10 employees
The version I use now is very stable, especially compared to previous versions like eight point zero and eight point one.
Specialist Consultant at a financial services firm with 10,001+ employees
 

Room For Improvement

Cortex XDR users desire better OS integration, interface, threat detection, and pricing, while facing complexity and compatibility challenges.
BigFix users seek pricing adjustments, enhanced interface, improved documentation, better integration, scalability, and cloud and mobile management solutions.
CyberArk Endpoint Privilege Manager needs improved integration, user interface, and pricing, along with enhanced compatibility and functionality.
SailPoint Identity Security Cloud is costly, complex, and lacks user-friendliness, necessitating better automation, support, customization, and integration.
Improving reporting and dashboard customization, along with the addition of real-time and exportable reports, would help SOC teams greatly.
Final Year Student at Gitam University
The inclusion of this feature would allow the application of DLP policies alongside antivirus policies via a single agent and console, making it more competitive as other OEMs often offer DLP solutions as part of their antivirus products.
Pre Sales Architect at network techlab
If the per GB data could be provided at a certain level free of cost or at the same cost which the customer is taking for the entire bundle, that would be better.
Cyber Security Information Security Specialist at MHM Holding GmbH
Building a management console is quick and simple, taking only one to two hours for setup.
Technical Director at SYSTEX
The problem was related to the hardware configuration and hardware specifications.
RPA Developer at Hexaware Technologies Limited
In addition to reporting improvements, there should be a feature for application control to allow or disallow certain applications from being executed on endpoints.
Founder Director at Techsa Services
CyberArk Endpoint Privilege Manager could be improved by simplifying the administration process, specifically when setting up policies and applications.
Global Security Systems Consultant at a insurance company with 10,001+ employees
Currently, no user-based policy option is available inside the EPM console.
Lead Consultant at a tech vendor with 501-1,000 employees
Some features provided in the self-hosted version of EPM are not supported in the software as a service version, like connection to some analysis applied by Palo Alto.
Solution Architect at a consultancy with 10,001+ employees
SailPoint lacks some features like privileged account management and access management features found in products like Okta.
Technical Project Manager & Senior Security Architect at Tech Mahindra Limited
I find raising a ticket to be too complex, which could be improved for better user-friendliness.
Technical Support Analyst at CLSA
We have also put our enhancement request, and the SailPoint team has accepted that the feature is not available and plans to include it going forward.
Senior Manager Cybersecurity at LTI - Larsen & Toubro Infotech
 

Setup Cost

Cortex XDR is seen as costly by some, but offers scalable licensing and satisfaction varies with advanced features.
BigFix offers flexible pricing with competitive but potentially costly plans, beneficial licensing, and discount options for larger deployments.
CyberArk Endpoint Privilege Manager's high pricing is justified by its quality, features, and appeal to large enterprises in finance.
SailPoint Identity Security Cloud is costly, with varying prices and separate fees, but offers discounts for long-term plans.
The pricing on SentinelOne is far more reasonable and cheaper than Cortex XDR by Palo Alto Networks.
Consultant at a tech services company with 1,001-5,000 employees
I would say it is definitely not a cheap product, considering how mature it is and how scalable all Palo Alto products are together.
Senior Process Expert at A.P. Moller - Maersk
Cortex XDR is perceived as expensive by some customers, yet offers dynamic pricing.
Cyber Security Manager at Welab bank
The pricing is pretty good and now follows a subscription model similar to SolarWinds, making it easier for customers to subscribe and unsubscribe.
Founder Director at Techsa Services
CyberArk Endpoint Privilege Manager is slightly expensive, but costs can be negotiated to become more competitive.
Cybersecurity Manager at a consultancy with 10,001+ employees
CyberArk Endpoint Privilege Manager is costly compared to other solutions.
Lead Consultant at a tech vendor with 501-1,000 employees
I've received feedback that the pricing is high, however, for me, the value it brings is worth the cost.
Manager at a computer software company with 1,001-5,000 employees
SailPoint is cheaper than ServiceNow, which is very expensive.
Technical Support Analyst at CLSA
The pricing of SailPoint could be better.
Vice President Sales at a tech vendor with 1-10 employees
The costs are slightly higher than SailPoint IQ due to included charges for maintenance.
Technical Project Manager & Senior Security Architect at Tech Mahindra Limited
 

Valuable Features

Cortex XDR offers advanced security with robust detection, integration, and AI capabilities, praised for flexibility and user-friendly interface.
BigFix offers scalable and customizable endpoint management with robust patching, software distribution, and security compliance across multiple platforms.
CyberArk Endpoint Privilege Manager enhances security by managing privileges, integrating seamlessly, and preventing ransomware while ensuring regulatory compliance.
SailPoint Identity Security Cloud offers intuitive UI, fast deployment, extensive connectors, and strong compliance with AI-enhanced automated identity management.
It incorporates AI for normal behavior detection, distinguishing unusual operations.
Cyber Security Manager at Welab bank
The product provides automation responses in case of a threat attack, severity assessments, centralized manageability, and comprehensive compliance features, resulting in reduced costs.
Pre Sales Architect at network techlab
It includes machine learning to easily analyze data and detect complex threats across endpoints, networks, or clouds.
Final Year Student at Gitam University
The BigFix features that have proven most effective include inventory, software delivery, software distribution, software catalog, and both software and hardware management.
Technical Director at SYSTEX
I use this mainly to capture inventory for IBM products, and as BigFix was part of IBM, it gets easily integrated with IBM solutions.
RPA Developer at Hexaware Technologies Limited
BigFix supports something known as Patch Policies, which allows users to define that whenever critical patches are released, they should get evaluated against machines and automatically deploy them.
Founder Director at Techsa Services
CyberArk Endpoint Privilege Manager effectively reduces malicious content in applications by allowing us to identify and block dangerous applications.
Security Delivery Analyst at Accenture
It allows them to granularly manage controls to prevent some malicious activities on the endpoint machine.
Head of Sales Services Department at a comms service provider with 51-200 employees
CyberArk Endpoint Privilege Manager enhances computer security by providing minimal access, effectively preventing ransomware attacks.
Cybersecurity Manager at a consultancy with 10,001+ employees
The automation of provisioning and deprovisioning, managing contractors, temporary users, and the overall automation factor is fantastic.
Vice President Sales at a tech vendor with 1-10 employees
The solution can be customized to adapt the workflow to our industry, offering considerable flexibility.
Specialist Consultant at a financial services firm with 10,001+ employees
From a project management point of view, the tool supports audit success with features to segregate permanent and contractor employees, integrate with HR systems, and indicate other sources for contractors.
Senior Manager Cybersecurity at LTI - Larsen & Toubro Infotech
 

Mindshare comparison

Endpoint Protection Platform (EPP) Mindshare Distribution
ProductMindshare (%)
BigFix1.3%
Microsoft Defender for Endpoint7.2%
CrowdStrike Falcon6.3%
Other85.2%
Endpoint Protection Platform (EPP)
Privileged Access Management (PAM) Mindshare Distribution
ProductMindshare (%)
CyberArk Endpoint Privilege Manager2.4%
CyberArk Privileged Access Manager10.5%
Delinea Secret Server4.5%
Other82.6%
Privileged Access Management (PAM)
Identity Governance Administration (IGA) Mindshare Distribution
ProductMindshare (%)
SailPoint Identity Security Cloud30.9%
Saviynt Identity Cloud18.7%
Omada Identity12.1%
Other38.300000000000004%
Identity Governance Administration (IGA)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
AM
RPA Developer at Hexaware Technologies Limited
Successfully manage endpoint security and compliance while facing integration challenges
I have not come across any difficulties. I integrated it with ILMT (IBM License Metric Tool). It lets us identify all software being used in my organization with BigFix. It provides input of all types of software being used, including details and information about hardware specifications. I am more involved in software licensing and procurement, so I utilize this tool for procuring more licenses if needed for our company. After integration, we get different dashboards showcasing our IBM infrastructure, highlighting various issues in our environment that we can mitigate. I recommend BigFix to others. I rate BigFix a seven out of ten.
DR
Commercial and Technical Professional Manager at Evolution Technologies Group
Strengthening financial services infrastructure by safeguarding and integrating with ecosystems
We use CyberArk Endpoint Privilege Manager to complement a privilege access management solution in order to avoid golden ticket attacks and strengthen services against attacks. It serves as a complement to our asset management solution. The architecture of CyberArk Endpoint Privilege Manager is beneficial for integrating with all customer ecosystems; it's easy to deploy, and achieving that level of integration and control is more challenging with other solutions. The ability of CyberArk Endpoint Privilege Manager to safeguard our financial services infrastructure is very important, as we need to record actions on privileges in our information systems. Regarding the granularity of the managed controls in CyberArk Endpoint Privilege Manager, we have different levels of features to define compensations and capabilities, which help us verify configurations and access, ultimately keeping the safety of rights intact. Our initial challenge with CyberArk Endpoint Privilege Manager is to comply with Colombian regulations in the financial sector, particularly identifying users and managing password changes and rotations. We needed to certify the identities and provide necessary information for government investigations, if required. CyberArk Endpoint Privilege Manager is very important for helping our organization meet compliance and regulatory requirements. We have to comply with international regulations such as SOC, but also with local regulations unique to the financial sector, which is crucial for us due to the high risks involved. CyberArk Endpoint Privilege Manager helped us reduce the time for regulatory processes to approximately two to four months, completing the solution and training. CyberArk Endpoint Privilege Manager has helped us reduce the mean time to detect within our organization. That's our main goal. Regarding MTTD, the solution provides enough information to enhance our overall detection process. We have an 85% improvement in MTTD. CyberArk Endpoint Privilege Manager helps ensure data privacy through strategies that manage information in real-time. CyberArk Endpoint Privilege Manager helps save costs by avoiding risks and future expenses associated with security incidents. It's essential to communicate the value of CyberArk Endpoint Privilege Manager to users, as its controls help improve system security. My role at the company involves service and sales activities.
ND
Principle at a manufacturing company with 10,001+ employees
User access management excels but needs enhancements with integration capabilities
I was aware of that because I used to manage these solutions earlier on, but it was purchased by the Procurement team, so I was not involved in any of those.There are certain details I may not be able to disclose currently, but we can speak in general about a number of products and tools that are ongoing. I have not been using access management controls here, so I don't have the latest features or details or hands-on experience in that space. I cannot share all the details about the improvements in security operations since we were exploring some products, but I'm familiar with Saviynt as I was one of their partners for other solutions, and currently, I cannot disclose a lot of performance related to my current roles.
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
887,041 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
13%
Financial Services Firm
12%
Comms Service Provider
8%
Manufacturing Company
7%
Financial Services Firm
13%
Manufacturing Company
9%
Government
8%
Computer Software Company
6%
Financial Services Firm
14%
Manufacturing Company
11%
Computer Software Company
8%
Government
7%
Financial Services Firm
17%
Manufacturing Company
9%
Computer Software Company
8%
Educational Organization
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business45
Midsize Enterprise20
Large Enterprise48
By reviewers
Company SizeCount
Small Business30
Midsize Enterprise12
Large Enterprise67
By reviewers
Company SizeCount
Small Business17
Midsize Enterprise9
Large Enterprise18
By reviewers
Company SizeCount
Small Business21
Midsize Enterprise8
Large Enterprise42
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What is your experience regarding pricing and costs for BigFix?
The pricing is pretty good and now follows a subscription model similar to other major software solutions, making it ...
What needs improvement with BigFix?
I have concerns about BigFix's pricing, which I find to be slightly on the higher side. While it may not be the most ...
What is your primary use case for BigFix?
I have been working at Tech Data for the last 12 plus years.
Looking for recommendations and a pros/cons template for software to detect insider threats
This is an inside-out --- outside-in --- inside-in question, as an insider can be an outsider as well. There is no sh...
What do you like most about CyberArk Endpoint Privilege Manager?
The most valuable feature of the solution is its performance.
What is your experience regarding pricing and costs for CyberArk Endpoint Privilege Manager?
I believe it's quite a reasonably priced solution. It's not very common to use CyberArk because it's a niche solution...
How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to m...
What advice do you have for others considering SailPoint IdentityIQ?
You can use SailPoint Atlas to take identity security to the next level. In SailPoint IIQ, writing a custom connector...
What do you like most about SailPoint IdentityNow?
It significantly reduces the workload for certification processes.
 

Comparisons

 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
Tivoli Endpoint Manager
Viewfinity
IdentityIQ, IdentityNow, Cloud Infrastructure Entitlement Management, Intello
 

Interactive Demo

Demo not available
Demo not available
Demo not available
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
US Foods, Penn State, St Vincent's Health US Foods, Sabadell Bank, SunTrust, Australia Sydney, Stemac, Capgemini, WNS Global Services, Jebsen & Jessen, CenterBeam, Strauss, Christian Hospital Centre, Brit Insurance, Career Education Corporation
Information Not Available
Adobe, AXA Technology Services, Cuna Mutual Group, Equifax, ING Direct, Orrstown Bank, Rockwell Automation, SallieMae, Spirit Aerosystems, TEL
Find out what your peers are saying about CrowdStrike, Microsoft, SentinelOne and others in Endpoint Protection Platform (EPP). Updated: April 2026.
887,041 professionals have used our research since 2012.