No more typing reviews! Try our Samantha, our new voice AI agent.

CyberArk Certificate Manager vs Silverfort comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 15, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CyberArk Certificate Manager
Average Rating
8.2
Reviews Sentiment
6.0
Number of Reviews
19
Ranking in other categories
Authentication Systems (8th), Certificate Management Software (2nd)
Silverfort
Average Rating
0.0
Reviews Sentiment
8.9
Number of Reviews
1
Ranking in other categories
Identity Threat Detection and Response (ITDR) (12th), Multi-Factor Authentication (MFA) (7th), Non-Human Identity Management (NHIM) (10th), Identity Security and Posture Management (ISPM) (4th)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. CyberArk Certificate Manager is designed for Authentication Systems and holds a mindshare of 1.9%, up 1.0% compared to last year.
Silverfort, on the other hand, focuses on Identity Security and Posture Management (ISPM), holds 12.9% mindshare, up 10.1% since last year.
Authentication Systems Mindshare Distribution
ProductMindshare (%)
CyberArk Certificate Manager1.9%
Microsoft Entra ID7.8%
Okta Platform5.0%
Other85.3%
Authentication Systems
Identity Security and Posture Management (ISPM) Mindshare Distribution
ProductMindshare (%)
Silverfort12.9%
Saviynt Identity Cloud25.6%
Veza23.3%
Other38.2%
Identity Security and Posture Management (ISPM)
 

Featured Reviews

Karthik Kashyap T H - PeerSpot reviewer
Lead Engineer at a retailer with 10,001+ employees
Eliminates certificate expiration outages and offers good customization and reporting capabilities
Even though it allows for email editing, until version 23.1, you had to log on to the server, and the console itself used to take a lot of time. That has changed from the last release onwards. When you're defining the flow, there are some areas that can probably cause confusion to the users. If you want to rename the default field, you cannot rename it, which caused a lot of confusion during the initial days until everyone got settled in. Allowing the renaming or updating of the default field is something Certificate Manager can improve on. Certificate Manager has both the on-prem and the cloud versions, but the on-prem version is far more mature than the cloud version, which lacks a lot of features that the on-prem version offers, at least when we did the POC and evaluated the product. The maturity of the cloud version needs improvement. Additionally, when considering the on-prem version, there is a minor glitch in the system. When an administrator makes changes, they have flexibility regarding the approval flow. When dealing with a certificate that requires approval from several different teams, there is a minor glitch in the system where the name of the approver does not appear. This is a bug that we are currently addressing. Additionally, there is room for improvement in key management. Changing the default account name is not a straightforward process; it can be quite tedious. This is an area where improvements could be made. If there is a particular workflow that we want to tweak, right now, we can achieve it only via a PowerShell script. It would be great if they could also support a small Python script or anything to expand their scripting or adaptable workflow code base. Even though we can call another script from a PowerShell script, if someone doesn't have knowledge of PowerShell, that would be challenging.
reviewer2342856 - PeerSpot reviewer
Senior Solutions Specialist at a computer software company with 5,001-10,000 employees
Positive feedback highlights lightweight design and compatibility while suggesting more AI integration
Silverfort helps identify blind spots in your identity and access management, covering areas that traditional systems don't, such as command line tools. It checks your Active Directory authentication and continues only if the check is okay, plus it works with older protocols such as NTLM, which is a significant advantage. It's complementary to other tools you may have, whether they are TAM solutions such as Delinea or Xerox. Silverfort also has a lightweight adapter for domain controllers, and it finds gaps in security. Its capabilities are expanding regularly, with new features voted on every few months. For companies with large Active Directory implementations and zero staff, Silverfort provides instant results in identifying risks and blind spots. It also includes built-in virtual features, and while I don't know the exact pricing, it's not expensively priced, making it an attractive option.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature of Venafi is the automation that helps save time and reduce human error."
"Venafi solved the issue of many misplaced internal certificates, as we know that at one place we can get all the information, and the problem of notifications about expiring certificates is resolved, improving our overall system for Expedia."
"The best feature I appreciate about Venafi is its user interface, which allows me to search for any particular certificate and immediately see the certificate details and expiry."
"Certificate Manager has reduced the certificate expiration outages to almost nil, and since 2022, we have had almost zero major incidents wherein we saw a financial impact or business disruption due to an expired certificate."
"The feature that I have found most valuable is their certificate discovery."
"Automating anything, whether on-prem or cloud, is possible."
"Venafi's technical support is impressively fast."
"CyberArk Certificate Manager is doing its best with multiple layers of security, and while they face challenges with legacy applications, they can still connect to web applications, rich applications, desktop applications, and cloud-native applications."
"Silverfort helps identify blind spots in your identity and access management, covering areas that traditional systems don't, such as command line tools."
 

Cons

"Venafi excels in automating certificate rotation and deployment but could enhance its offering by improving support for hardware security modules like Fortanix and providing more advanced, out-of-the-box integrations with public certificate authorities for DNS re-verification."
"The on-prem version is far more mature than the cloud version, which lacks a lot of features that the on-prem version offers, at least when we did the POC and evaluated the product."
"The product was really good when it was a Venafi product. However, since its acquisition by CyberArk, there has been a lack of significant innovations. They are pushing for cloud adoption, but we prefer on-premises solutions due to regulatory concerns."
"The product was really good when it was a Venafi product. However, since its acquisition by CyberArk, there has been a lack of significant innovations."
"Regarding stability, I observed that in the last year, CyberArk Certificate Manager was down two to three times without any notification."
"Venafi excels in automating certificate rotation and deployment but could enhance its offering by improving support for hardware security modules like Fortanix and providing more advanced, out-of-the-box integrations with public certificate authorities for DNS re-verification."
"There are quite a few different technical aspects of Venafi that I feel they just missed out on; I'd have to look at my notes for the specifics."
"There's definitely lots of room for improvement with Venafi. They have a website where we can suggest new features, and they need to take that a little bit more seriously."
"If Silverfort could integrate a gentle type of AI similar to Microsoft Copilot or enable workflow creation similar to Salesforce, it would further improve user navigation, even though the platform is already simple."
 

Pricing and Cost Advice

"The pricing model is complex, considering factors beyond the number of certificates. This complexity can make our payments to Venafi challenging if costs continue to rise. It is good but more expensive than the competitors."
"Venafi's pricing appears to be competitive within the market."
Information not available
report
Use our free recommendation engine to learn which Authentication Systems solutions are best for your needs.
885,667 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
9%
Insurance Company
7%
Government
7%
Financial Services Firm
15%
Computer Software Company
10%
Manufacturing Company
9%
Retailer
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business8
Large Enterprise18
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Venafi?
In terms of pricing, they are a little costly, but they are the best in the market today, so I would say they are worth every penny, rating them again at seven or eight.
What needs improvement with Venafi?
CyberArk Certificate Manager can be improved, particularly in terms of integrations with other tools. I would like to see improvements in integrations with ID, Kerberos, or with other companies for...
What advice do you have for others considering Venafi?
Since using CyberArk Certificate Manager, I have seen specific outcomes such as a reduction in incidents because I can work with CyberArk Certificate Manager, where digital certificates are everywh...
What needs improvement with Silverfort?
I think Silverfort is actually a really good product. I might suggest adding more AI to it, which I believe could enhance its functionality. If Silverfort could integrate a gentle type of AI simila...
What is your primary use case for Silverfort?
I'm calling from PeerSpot, and we're resellers in the identity space, offering products such as Savient, SailPoint, CyberArk, and Silverfort. We are resellers, and I work in presale, focusing on fi...
What advice do you have for others considering Silverfort?
I prefer to remain anonymous. Please don't use my name; just label it as anonymous. I would prefer both my name and the company name to be kept anonymous. If you could just put identity presales sp...
 

Also Known As

Venafi
No data available
 

Overview

 

Sample Customers

Surescripts, CME Group, TD Bank Group, Aetna, MoneyGram, Zions Bancorp, Cisco
Singtel, Egan, Agilisys, Reliance Worldwide Corporation, Indosat, ZOL Hospital
Find out what your peers are saying about Microsoft, Cisco, Fortinet and others in Authentication Systems. Updated: March 2026.
885,667 professionals have used our research since 2012.