Try our new research platform with insights from 80,000+ expert users

Cisco Duo vs CyberArk Privileged Access Manager comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.3
Cisco Duo enhances security with multifactor authentication, offering cost savings and ease of use despite minor productivity impacts.
Sentiment score
6.6
CyberArk Privileged Access Manager enhances security, automates tasks, aids SOX compliance, reduces risks, and scales security operations efficiently.
I think Cisco Duo offers a good return on investment for startups, newer organizations, or those utilizing cloud-based applications.
I have not seen ROI with Cisco Duo; probably the opposite, because it impedes productivity time to be able to get into the system.
From my point of view, the biggest return on investment when using Cisco Duo is the security and the ease of setting it up.
The return on investment lies in improved security infrastructure, addressing over-privileged access, and reducing the risk of credential compromise, which is a major source of data breaches.
The end users have the authority to reconcile the password or verify it before using session isolation, which is one of the unique features that can be enabled through Privileged Session Manager, preventing any attacks from happening within the organization when connected with sessions through CyberArk Privileged Access Manager.
CyberArk Privileged Access Manager has helped customers save on costs primarily by reducing the number of engineering and information security personnel.
 

Customer Service

Sentiment score
7.2
Cisco Duo's customer support garners mixed reviews, with praise for some aspects but noted variability in responsiveness and improvement needed.
Sentiment score
6.5
CyberArk's support shows improvement with efficient service but needs faster responses for high-priority issues and better tier coordination.
They got back to us quickly, were nice, and gave us what we needed.
Other support sections have failed miserably because of the lack of response time.
I would rate the technical service and customer support of Cisco Duo a ten out of ten.
CyberArk has been exceptional in coming back to us with immediate responses.
It could be forever until you talk to someone who knows what they are doing.
Based on the issue resolution and support quality, I rate the support 10 out of 10.
 

Scalability Issues

Sentiment score
8.0
Cisco Duo excels with scalable, seamless integration and adaptability, making it ideal for organizations of varying sizes and needs.
Sentiment score
7.6
CyberArk Privileged Access Manager is scalable and adaptable, supporting growth and diverse infrastructures despite potential licensing complexities.
I believe Cisco Duo is very scalable because it is cloud-based.
We started out with just the basics, getting a token, and then we changed to push, and now, we have added the offline mode.
It scales easily because it is just tied into our identity provider, and it grows along with that.
The CPM can reportedly handle up to 50,000 accounts independently without issue.
I would rate it a ten out of ten for scalability.
They had 40,000 passwords in this one safe, and it was saving the last ten iterations of each password object. That means they had 400,000 password objects in this safe. They exceeded the limit.
 

Stability Issues

Sentiment score
8.4
Cisco Duo is highly reliable, with minimal downtime and efficient issue resolution, earning consistent positive user feedback.
Sentiment score
7.7
CyberArk Privileged Access Manager is stable and reliable, with minor bugs often due to configuration or infrastructure issues.
When there is a bigger problem, we get notifications from Cisco Duo saying, 'Hey, we have a problem,' and that has helped us.
It is very reliable, easy to use, and I don't have too many issues with it.
There has been no downtime, crashes, or performance issues with Cisco Duo.
Proper fine-tuning and expertise ensure the product performs well.
Overall, the stability of the solution is high.
It has a large customer base and positive feedback within my network.
 

Room For Improvement

Cisco Duo aims to improve integration, simplify authentication, enhance compatibility, and refine pricing and user experience across platforms.
Users find CyberArk Privileged Access Manager needing UI updates, better integration, improved documentation, customizable reporting, and enhanced automation.
If you don't have internet access, you can't access your computer, only local access is available.
Cisco should allow easier integration with third-party equipment because Cisco's own equipment is expensive.
There needs to be consideration for how to launch Cisco Duo with a handheld device that is not native, where you can install the application.
They want everything to be on the cloud, but even in the SaaS version of CyberArk Privileged Access Manager, they need to deploy some servers on-premises.
We cannot generate a plug-in for web-based applications.
If they want clients to move to the cloud, they need to support them in real-time.
 

Setup Cost

Cisco Duo offers competitive pricing, flexible payment options, and cost-effective scalability with straightforward licensing and free trials available.
CyberArk Privileged Access Manager is costly but offers strong security, appealing to large enterprises with flexible subscription options.
The approximate cost is around eighty dollars per user.
Licensing is straightforward and convenient for higher education because student populations are included.
I am pleased that the prices remained stable after Cisco acquired the solution.
CyberArk is expensive compared to other products I know.
CyberArk is comparatively expensive compared to other PAM solutions, such as Delinea, especially during renewal.
CyberArk's SaaS solution is particularly expensive.
 

Valuable Features

Cisco Duo provides robust multi-factor authentication and efficient access management, ideal for secure, flexible remote and hybrid work environments.
CyberArk Privileged Access Manager enhances security with policy automation, AI threat detection, and flexible, scalable privilege account management.
From a management perspective, I appreciate that we can enroll or control devices on the back end for people who get a new phone and forget to handle Cisco Duo properly and need to add a new device.
The benefit of having a complete passwordless environment in our organization is that it's gotten people away from using the sticky note under their keyboard - which is a huge problem.
A valuable feature of the solution is its hybrid structure, which involves proxy agents running on-premises while other services are on the cloud.
CyberArk Privileged Access Manager helps ensure data privacy because we now know who is using which credentials and at what time.
It keeps a record of activities, allowing me to easily fetch screen recordings to detect any misuse and see who did what and what happened.
It can integrate with Splunk, SNMP, and other solutions and technologies.
 

Categories and Ranking

Cisco Duo
Average Rating
8.8
Reviews Sentiment
7.1
Number of Reviews
76
Ranking in other categories
Single Sign-On (SSO) (4th), Authentication Systems (2nd), Access Management (5th), ZTNA as a Service (5th), Cisco Security Portfolio (4th), Multi-Factor Authentication (MFA) (2nd)
CyberArk Privileged Access ...
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
227
Ranking in other categories
User Activity Monitoring (1st), Enterprise Password Managers (3rd), Privileged Access Management (PAM) (1st), Mainframe Security (2nd), Operational Technology (OT) Security (3rd)
 

Featured Reviews

Thomas Botts - PeerSpot reviewer
Managing security policies effectively with seamless authentication
The feature of Cisco Duo that I prefer the most is the policies, being able to control what we need to within the policies. You can get pretty granular. There isn't a lot of training that goes on in school districts. Email is an easy way where many people give out their credentials, so the level of protection is something that we definitely need in a school district. Cisco Duo's strong security authentication system has been easy when logging in, although the teachers don't appreciate it as much. We have it configured so users essentially just hit accept. If it sees any sort of built-in risk, then it steps up authentication. It's pretty easy. I appreciate it. I've encountered advantages with Cisco Duo in that it has stopped significant pushback from teachers. It has prevented credential sharing and unauthorized access. We've seen a huge decrease since we've rolled it out across the entire district.
Atul-Gujar - PeerSpot reviewer
Secures critical infrastructures with essential user session audit records
A potential area for improvement is enhancing support for cluster environments and distributed Vaults. Clients in multiple countries that need central access have different challenges that require better solutions from CyberArk. For financial services, CyberArk can improve incident response by ensuring fast support for critical priority tickets to meet compliance requirements. Providing more documentation on CyberArk is recommended for new team members to enhance their troubleshooting capabilities. I understand it's up to the client, but 99% fail to change the demo key, so it's crucial for CyberArk to emphasize changing the key and documenting it as part of the installation process.
report
Use our free recommendation engine to learn which Access Management solutions are best for your needs.
869,566 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
18%
Manufacturing Company
10%
Government
6%
Financial Services Firm
6%
Financial Services Firm
15%
Computer Software Company
14%
Manufacturing Company
10%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business27
Midsize Enterprise16
Large Enterprise36
By reviewers
Company SizeCount
Small Business59
Midsize Enterprise41
Large Enterprise171
 

Questions from the Community

How does Duo Security compare with Microsoft Authenticator?
We switched to Duo Security for identity verification. We’d been using a competitor but got the chance to evaluate Duo for 30 days, and we could not be happier. Duo Security is easy to configure a...
What do you like most about Duo Security?
They are users who, as mentioned before, utilize RDPAP and MDPAP. It includes functionalities related to finance, specifically in single sign-on.
What is your experience regarding pricing and costs for Duo Security?
My experience with the pricing, setup cost, and licensing of Cisco Duo is honestly above my pay grade. I don't know any of that.
How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
What do you like most about CyberArk Privileged Access Manager?
The most valuable features of the solution are control and analytics.
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
Regarding costs, CyberArk Privileged Access Manager is not a cheap product; hence, many companies struggle with its high licensing cost. While it's valuable, it comes with a high price tag, making ...
 

Also Known As

Duo Security
CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
 

Overview

 

Sample Customers

Information Not Available
Rockwell Automation
Find out what your peers are saying about Cisco Duo vs. CyberArk Privileged Access Manager and other solutions. Updated: September 2025.
869,566 professionals have used our research since 2012.