No more typing reviews! Try our Samantha, our new voice AI agent.

Certificate Lifecycle Manager vs Ping Identity Platform comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 2, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
4.8
CyberArk Certificate Manager automates processes, reducing costs and risks, improving efficiency, and offering financial and operational benefits.
Sentiment score
3.6
Ping Identity Platform simplifies identity management, lowers IT overhead, enhances security, improves efficiency, boosts satisfaction, and offers scalability.
Earlier, we had an operations team of seven people to manage certificates manually, but now it has reduced costs by reducing the team to two people with the help of the certificate management tool.
Cybersecurity Solution Architect at Advance Auto Parts
CyberArk Certificate Manager is doing its best with multiple layers of security.
Section Head Cybersecurity at a energy/utilities company with 5,001-10,000 employees
I have seen a return on investment in terms of money saved and time saved.
Cybersecurity Manager at a financial services firm with 11-50 employees
 

Customer Service

Sentiment score
6.5
CyberArk Certificate Manager customer service is quick and knowledgeable, but faces challenges in response time and global consistency.
Sentiment score
6.1
Ping Identity Platform's support is praised for rapid P1 responses but critiqued for slow non-critical responses and portal confusion.
Inquiries are typically addressed the same day, with most issues, even complex ones, resolved within 24 hours.
Global Security Systems Consultant at a insurance company with 10,001+ employees
Venafi's technical support is excellent, with even their first-tier support being in-house and highly competent.
Systems Engineer at a insurance company with 51-200 employees
Their technical support is knowledgeable and helpful, making Venafi stand out among other CyberArk products.
Solution Engineer at a comms service provider with 10,001+ employees
I have reached out to technical support for troubleshooting SAML certificate mismatches and federated errors between Ping and enterprise apps.
Senior ServiceNow Developer at Wells Fargo
The problem with the support team is that I do not like support; the day of the threat image, they never come on the call and unless it is a priority, they never come to call to defend it and to provide any kind of solutions.
Iam Consultant at itcinfotech
I would rate the technical support for Ping Identity Platform seven out of ten because of their limited support and late availability.
Senior Analyst at Toll Holdings Limited
 

Scalability Issues

Sentiment score
5.9
CyberArk Certificate Manager efficiently scales to handle millions of certificates and users, with seamless expansion and strong cloud performance.
Sentiment score
7.3
Ping Identity Platform excels in scalability, efficiently managing large user bases and high traffic with minimal disruptions.
This role-based access control enhances scalability and efficiency by providing a focused view of necessary information.
Global Security Systems Consultant at a insurance company with 10,001+ employees
Horizontal scaling is a necessity rather than vertical scaling.
Solution Engineer at a comms service provider with 10,001+ employees
Scalability with Venafi is good; you can definitely use it if you have ten thousand certs, a thousand certs, a million, or a couple million.
Senior Security Engineer at a tech services company with 1-10 employees
 

Stability Issues

Sentiment score
6.5
CyberArk Certificate Manager is stable and reliable, with minor server-related issues, rated 8-9/10 for stability.
Sentiment score
7.9
Ping Identity Platform is reliable with minimal downtime; users value its stability despite occasional integration and security update challenges.
Venafi's stability has been consistently reliable.
Global Security Systems Consultant at a insurance company with 10,001+ employees
Venafi is a stable product. It's definitely more stable than others.
Senior Security Engineer at a tech services company with 1-10 employees
I observed that in the last year, CyberArk Certificate Manager was down two to three times without any notification.
Certified Ethical Hacker at Skillogic
Ping Identity Platform demonstrates strong stability, as it is not prone to bugs.
Founder at APSSIAM
In terms of stability for Ping Identity Platform, we haven't faced any issues till now.
Senior Analyst at Toll Holdings Limited
Overall, I see PingFederate as a stable product.
Iam Consultant at itcinfotech
 

Room For Improvement

CyberArk Certificate Manager needs improved automation, integrations, usability, support, interfaces, and customization for enhanced performance and flexibility.
Ping Identity Platform struggles with complexity, costs, limited legacy integration, and requires UI, troubleshooting, and integration improvements.
Expanding the range of out-of-the-box integrations would significantly improve the user experience.
Global Security Systems Consultant at a insurance company with 10,001+ employees
The yearly DNS verification required by certificate authorities necessitates manual intervention, hindering full automation.
Systems Engineer at a insurance company with 51-200 employees
They are pushing for cloud adoption, but we prefer on-premises solutions due to regulatory concerns.
Solution Engineer at a comms service provider with 10,001+ employees
I would like to enable ServiceNow Generative AI for auto-diagnosing PingFederate SSO failures and suggest remediation steps.
Senior ServiceNow Developer at Wells Fargo
Ping Identity Platform has multiple products for access management, identity management, a solution for API security, a solution for authorization, and a product for identity verification.
VP Engineering at Inspirit Vision
There is a very limited number of legacy support, which can pose potential difficulties in integrating with certain older or legacy systems.
Senior Analyst at Toll Holdings Limited
 

Setup Cost

CyberArk Certificate Manager offers competitive pricing that users find equitable, balancing licensing costs with enterprise solution value.
Ping Identity Platform offers cost-effective pricing appealing to large enterprises, with pricing starting at $20,000 annually.
Venafi offers good value for the cost.
Global Security Systems Consultant at a insurance company with 10,001+ employees
The pricing has increased for us, impacting our organization due to its operational expenditure (OPEX).
Solution Engineer at a comms service provider with 10,001+ employees
For our budget, Venafi's cost is moderate. It's not expensive as internal certificate generation is free, and we only pay for the public CA certificate signer and for storage in Venafi.
Software Development Engineer 2 at Expedia Group
Regarding pricing for Ping Identity Platform, I would rate it eight out of ten.
Senior Analyst at Toll Holdings Limited
 

Valuable Features

CyberArk Certificate Manager automates certificate management, enhancing security, reducing errors, and supporting DevOps and Zero Trust architectures.
Ping Identity Platform offers robust features like MFA, RBAC, and API security, boasting ease of use and extensive integration.
The most valuable feature of Venafi is the automation that helps save time and reduce human error.
Global Security Systems Consultant at a insurance company with 10,001+ employees
It ensures centralized certificate management, which is crucial for compliance and maintaining best practices.
Systems Engineer at a insurance company with 51-200 employees
What I like best about Venafi is that it's very easy to get somebody on a call and get any of my questions answered.
Senior Security Engineer at a tech services company with 1-10 employees
The platform enhances security measures by analyzing multi-factor authentication attempts, highlighting suspicious patterns, and generating compliance reports.
Senior ServiceNow Developer at Wells Fargo
Ping Identity Platform can be accessed both on-premises and in the cloud, allowing for high flexibility in creating user flows and policies tailored to client requirements.
Founder at APSSIAM
It's a converged platform which can do both identity management, access management, and recently they are bringing privilege management capability as well.
VP Engineering at Inspirit Vision
 

Categories and Ranking

Certificate Lifecycle Manager
Ranking in Authentication Systems
5th
Average Rating
8.2
Reviews Sentiment
6.0
Number of Reviews
19
Ranking in other categories
Certificate Management Software (2nd)
Ping Identity Platform
Ranking in Authentication Systems
6th
Average Rating
8.2
Reviews Sentiment
6.6
Number of Reviews
32
Ranking in other categories
Single Sign-On (SSO) (6th), Data Governance (11th), Identity and Access Management as a Service (IDaaS) (IAMaaS) (5th), Access Management (6th), Customer Identity and Access Management (CIAM) (3rd), Directory Servers (1st)
 

Mindshare comparison

As of July 2026, in the Authentication Systems category, the mindshare of Certificate Lifecycle Manager is 1.9%, up from 1.2% compared to the previous year. The mindshare of Ping Identity Platform is 2.9%, down from 4.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Authentication Systems Mindshare Distribution
ProductMindshare (%)
Certificate Lifecycle Manager1.9%
Ping Identity Platform2.9%
Other95.2%
Authentication Systems
 

Featured Reviews

Karthik Kashyap T H - PeerSpot reviewer
Lead Engineer at a retailer with 10,001+ employees
Eliminates certificate expiration outages and offers good customization and reporting capabilities
Even though it allows for email editing, until version 23.1, you had to log on to the server, and the console itself used to take a lot of time. That has changed from the last release onwards. When you're defining the flow, there are some areas that can probably cause confusion to the users. If you want to rename the default field, you cannot rename it, which caused a lot of confusion during the initial days until everyone got settled in. Allowing the renaming or updating of the default field is something Certificate Manager can improve on. Certificate Manager has both the on-prem and the cloud versions, but the on-prem version is far more mature than the cloud version, which lacks a lot of features that the on-prem version offers, at least when we did the POC and evaluated the product. The maturity of the cloud version needs improvement. Additionally, when considering the on-prem version, there is a minor glitch in the system. When an administrator makes changes, they have flexibility regarding the approval flow. When dealing with a certificate that requires approval from several different teams, there is a minor glitch in the system where the name of the approver does not appear. This is a bug that we are currently addressing. Additionally, there is room for improvement in key management. Changing the default account name is not a straightforward process; it can be quite tedious. This is an area where improvements could be made. If there is a particular workflow that we want to tweak, right now, we can achieve it only via a PowerShell script. It would be great if they could also support a small Python script or anything to expand their scripting or adaptable workflow code base. Even though we can call another script from a PowerShell script, if someone doesn't have knowledge of PowerShell, that would be challenging.
AmitRathod - PeerSpot reviewer
Senior Analyst at Toll Holdings Limited
Single sign-on has simplified access while adaptive authentication protects complex user journeys
Regarding areas for improvement in Ping Identity Platform, there is not much. In terms of licensing and implementation costs, it has premium pricing, and it has a very complex implementation. It provides greater feasibility, but it takes a very long time in terms of complete building. There is a very limited number of legacy support, which can pose potential difficulties in integrating with certain older or legacy systems. Additionally, issue troubleshooting can be difficult at times. Sometimes issues can be difficult to diagnose and require extensive technical expertise. There is also a very steep learning curve for administrative purposes and potential difficulties with offline authentication scenarios.
report
Use our free recommendation engine to learn which Authentication Systems solutions are best for your needs.
902,988 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Computer Software Company
8%
Construction Company
7%
Insurance Company
7%
Financial Services Firm
20%
Retailer
8%
Manufacturing Company
8%
Computer Software Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business8
Large Enterprise19
By reviewers
Company SizeCount
Small Business12
Midsize Enterprise2
Large Enterprise22
 

Questions from the Community

What is your experience regarding pricing and costs for Venafi?
In terms of pricing, they are a little costly, but they are the best in the market today, so I would say they are worth every penny, rating them again at seven or eight.
What needs improvement with Venafi?
CyberArk Certificate Manager can be improved, particularly in terms of integrations with other tools. I would like to see improvements in integrations with ID, Kerberos, or with other companies for...
What advice do you have for others considering Venafi?
Since using CyberArk Certificate Manager, I have seen specific outcomes such as a reduction in incidents because I can work with CyberArk Certificate Manager, where digital certificates are everywh...
What is your experience regarding pricing and costs for PingFederate?
Regarding pricing for Ping Identity Platform, I would rate it eight out of ten.
What needs improvement with PingAccess?
The areas where I think PingFederate needs room for improvement include that the most significant area I would recommend is that things such as redirects still do not have majority of the applicati...
What is your primary use case for PingAccess?
The main use case for PingFederate is that we are maintaining the centralized single sign-on with DuroSengel and Carabras as the two main instances to review. If any application is hosted outside o...
 

Also Known As

Venafi
Ping Identity (ID), PingFederate, PingAccess, PingOne, PingDataGovernance, PingDirectory, OpenDJ
 

Overview

 

Sample Customers

Surescripts, CME Group, TD Bank Group, Aetna, MoneyGram, Zions Bancorp, Cisco
Equinix, Land O'Lakes, CDPHP, Box, International SOS, Opower, VSP, Chevron, Truist, Academy of Art University, Northern Air Cargo, Repsol
Find out what your peers are saying about Certificate Lifecycle Manager vs. Ping Identity Platform and other solutions. Updated: June 2026.
902,988 professionals have used our research since 2012.