Try our new research platform with insights from 80,000+ expert users

CyberArk Certificate Manager vs CyberArk Identity comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 11, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
3.3
Venafi reduces outages, automates certificate distribution, saves costs, and improves efficiency with faster installations and reduced manual workload.
Sentiment score
4.8
CyberArk Identity offers time and cost savings, enhancing protection and enabling strategic focus, though financial impact opinions vary.
With Venafi, it wasn't about saving time but achieving functionality that was otherwise impossible, such as distributing certificates without manual intervention.
I have seen over 30% return on investment due to the improvement in operational efficiencies through automation, which enhances productivity.
 

Customer Service

Sentiment score
5.6
CyberArk Certificate Manager support is efficient but has declined post-acquisition, with users praising services but suggesting improvements.
Sentiment score
6.6
CyberArk Identity's support is praised for expertise and quick resolution, despite some concerns about response times and product knowledge.
Inquiries are typically addressed the same day, with most issues, even complex ones, resolved within 24 hours.
Venafi's technical support is excellent, with even their first-tier support being in-house and highly competent.
Their technical support is knowledgeable and helpful, making Venafi stand out among other CyberArk products.
They resolved the problem immediately after I reported it, on the same day, within one hour.
They respond immediately when requests are raised, and they are always available for priority one tickets.
They charge reasonable money for the features they provide.
 

Scalability Issues

Sentiment score
4.9
Venafi is scalable across environments, with strong cloud performance, valued for access control and integration, despite setup challenges.
Sentiment score
7.2
CyberArk Identity offers scalable and adaptable solutions, but some users face challenges with extensive architectural scaling and performance when scaled.
This role-based access control enhances scalability and efficiency by providing a focused view of necessary information.
Horizontal scaling is a necessity rather than vertical scaling.
Scalability with Venafi is good; you can definitely use it if you have ten thousand certs, a thousand certs, a million, or a couple million.
We can use it on different phones and computers, demonstrating its scalability.
CyberArk Identity is scalable, especially for organizations that are in a cloud environment or organizations using Okta, which is a similar platform.
CyberArk Identity is definitely a scalable solution; it all depends on the money that you have, as with anything else.
 

Stability Issues

Sentiment score
5.4
CyberArk Certificate Manager is stable and dependable, with minimal issues and high user satisfaction compared to alternatives.
Sentiment score
7.8
CyberArk Identity is highly reliable, stable, with rare incidents and no downtime, boasting a 99.9% Service Level Agreement.
Venafi's stability has been consistently reliable.
Venafi is a stable product. It's definitely more stable than others.
For stability, I'd rate it around six out of ten since we experience some outages despite the investment.
We no longer have our data infiltrated by unauthorized persons, and tracking actions within the system has become very easy.
When you have it in the cloud, you have CyberArk every time you need it.
With a stable network, due to the redundant data centers across the globe, it is a lot easier to use as a SaaS solution.
 

Room For Improvement

CyberArk Certificate Manager requires interface improvements, better cloud integration, expanded automation, and enhanced documentation for user-friendly and secure management.
CyberArk Identity requires enhancements in integration, scalability, usability, and support, focusing on mobile management, interface, and multifactor authentication.
Expanding the range of out-of-the-box integrations would significantly improve the user experience.
The yearly DNS verification required by certificate authorities necessitates manual intervention, hindering full automation.
They are pushing for cloud adoption, but we prefer on-premises solutions due to regulatory concerns.
Integration or deployment is extremely difficult for CyberArk Identity.
There's a need to enhance network performance.
For CyberArk Identity, you need knowledge of their scripting language to pull different sets of reports.
 

Setup Cost

Venafi pricing is competitive but complex, with costs for public CA services, requiring a three-year commitment.
Enterprise buyers find CyberArk Identity's pricing expensive but justified by comprehensive features and unmatched service for large organizations.
Venafi offers good value for the cost.
The pricing has increased for us, impacting our organization due to its operational expenditure (OPEX).
For our budget, Venafi's cost is moderate. It's not expensive as internal certificate generation is free, and we only pay for the public CA certificate signer and for storage in Venafi.
Regarding pricing, it can be quite a lot for small companies.
The pricing is acceptable.
If I am not going fully cloud, there are additional resources I will need to purchase, such as spinning more VMs or acquiring an HSM device to encrypt the vault.
 

Valuable Features

Venafi enhances operational efficiency with certificate discovery, automation, and integration, offering ease of use, compliance, and seamless management.
CyberArk Identity enhances security and operational efficiency with SSO, MFA, and privileged access control, favored by enterprises.
The most valuable feature of Venafi is the automation that helps save time and reduce human error.
It ensures centralized certificate management, which is crucial for compliance and maintaining best practices.
What I like best about Venafi is that it's very easy to get somebody on a call and get any of my questions answered.
It impacts zero trust security strategies. It prevents lateral movements in the organization.
It is the most powerful access management system.
Being able to integrate CyberArk Identity with Microsoft Defender is valuable.
 

Categories and Ranking

CyberArk Certificate Manager
Ranking in Authentication Systems
8th
Average Rating
8.0
Reviews Sentiment
5.6
Number of Reviews
13
Ranking in other categories
No ranking in other categories
CyberArk Identity
Ranking in Authentication Systems
10th
Average Rating
8.2
Reviews Sentiment
6.7
Number of Reviews
28
Ranking in other categories
Identity Management (IM) (9th), Authorization Software (3rd), Enterprise Password Managers (8th), User Entity Behavior Analytics (UEBA) (9th), Access Management (5th), Active Directory Management (6th), Cloud Resource Access Management (3rd), Customer Identity and Access Management (CIAM) (6th)
 

Mindshare comparison

As of September 2025, in the Authentication Systems category, the mindshare of CyberArk Certificate Manager is 1.3%, up from 0.7% compared to the previous year. The mindshare of CyberArk Identity is 2.2%, up from 1.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Authentication Systems Market Share Distribution
ProductMarket Share (%)
Venafi1.3%
CyberArk Identity2.2%
Other96.5%
Authentication Systems
 

Featured Reviews

Adam Goldstein - PeerSpot reviewer
Automates certificate management across platforms and has enhanced integration support
Venafi's automation capabilities were significant, as they allowed us to automate certificate rotation and deployment effectively. We integrated it with GlobalSign and aimed to automate DNS verification, although challenges remained. Venafi's platform-agnostic nature was beneficial for handling certificates across different systems like IIS, AWS, and Azure. It ensures centralized certificate management, which is crucial for compliance and maintaining best practices. It significantly improved our operational efficiency by automating certificate workflows. This reduced the number of certificates requiring manual management, freeing internal resources from deploying trivial certificates. While some complex certificates still needed manual intervention, automating simpler ones eliminated internal bottlenecks associated with tasks like uploading certificates to Imperva. By automating these processes, we reduced errors, streamlined workflows, and eliminated the need to repeatedly remember and execute complex procedures, ultimately increasing our overall operational efficiency. The automation capabilities are good; when properly configured, it performs as expected.
Julio Montero - PeerSpot reviewer
Access management system provides strong security and effortless user authentication
The solution can be deployed on cloud or on-premises. CyberArk is more on the cloud than on local hardware. The deployment is initially quite difficult. That said, when you are doing the implementation of CyberArk, there are so many tutorials that make the learning process very easy. The only complaint could be the language barrier. It's difficult if you don't have a very good level of English. Otherwise, it is very easy. You can have it set up within three months without much difficulty. It's hard to get started, however, once you get going, it gets easier. A full deployment takes half a year or less. There is some maintenance necessary. A company is constantly hiring and letting go of employees. The access is always changing, so access must always be adjusted. Or, if we need another law of filter, we would need to add those, or even take them away. That's another aspect of maintenance.
report
Use our free recommendation engine to learn which Authentication Systems solutions are best for your needs.
867,676 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Computer Software Company
11%
Government
8%
Manufacturing Company
8%
Financial Services Firm
14%
Computer Software Company
12%
Manufacturing Company
11%
Healthcare Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business5
Large Enterprise10
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise4
Large Enterprise9
 

Questions from the Community

What do you like most about Venafi?
We use Venafi for PKI certificates.
What is your experience regarding pricing and costs for Venafi?
For our budget, Venafi's cost is moderate. It's not expensive as internal certificate generation is free, and we only pay for the public CA certificate signer and for storage in Venafi. With the to...
What needs improvement with Venafi?
As an end user, I cannot specifically point out improvements, but I believe it would be beneficial to display active certificates in a separate column on the UI, so users can easily find what they ...
What do you like most about CyberArk Identity?
The integration capabilities, ability to integrate CyberArk into the overall IBB strategy of our current clients.
What is your experience regarding pricing and costs for CyberArk Identity?
I am not certain about CyberArk Identity's exact pricing model. For comparison, Okta was around five dollars per user. CyberArk Identity offers good discounts to some clients, which influences thei...
What needs improvement with CyberArk Identity?
The reporting functionality is somewhat complicated. While I would rate CyberArk Identity and Okta on the same level, Okta's reporting is crisper and clearer. For CyberArk Identity, you need knowle...
 

Also Known As

Venafi
Idaptive
 

Overview

 

Sample Customers

Surescripts, CME Group, TD Bank Group, Aetna, MoneyGram, Zions Bancorp, Cisco
MLB, Citi, Pfizer, SulAmerica, GE Capital, Shiseido
Find out what your peers are saying about CyberArk Certificate Manager vs. CyberArk Identity and other solutions. Updated: September 2025.
867,676 professionals have used our research since 2012.