CyberArk Endpoint Privilege Manager vs Microsoft Purview Privileged Access Management comparison

CyberArk Endpoint Privilege Manager vs. Microsoft Purview Privileged Access Management

Download the complete report

Helped 850,028 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

CyberArk Endpoint Privilege...

Ranking in Privileged Access Management (PAM)

3rd

Average Rating

8.2

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Endpoint Compliance (4th), Anti-Malware Tools (5th), Application Control (5th), Ransomware Protection (7th)

Microsoft Purview Privilege...

Ranking in Privileged Access Management (PAM)

14th

Average Rating

8.6

Reviews Sentiment

7.5

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of May 2025, in the Privileged Access Management (PAM) category, the mindshare of CyberArk Endpoint Privilege Manager is 3.6%, down from 3.7% compared to the previous year. The mindshare of Microsoft Purview Privileged Access Management is 2.0%, up from 1.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Privileged Access Management (PAM)

Featured Reviews

Sumit Chavan

Lead Consultant at Aujas Networks Pvt Ltd

Helps secure the infrastructure and control users with admin rights

There are many features that are currently missing. A customization option is required for certain policies. For instance, if we need to stop PowerShell scripting, we have to create a different policy for that. Being able to create a sub-level policy within a top-level policy would be good. Currently, no user-based policy option is available inside the EPM console. We can only create computer-based policies. The database is available, but there is a drawback in not being able to create local groups on the EPM console. We only have to depend on Active Directory. This limits infrastructure security as we depend on the Active Directory team to manage user groups. If they remove any users, we lose control. If we could create groups locally and block them or set specific policies, we would have more control. Local endpoint management is missing from the EPM site. Moreover, there is an issue with policies not running as expected when we make enhancements. We have to find multiple ways to whitelist applications or enhance policies.

Read full review

Mayeen Uddin

Officer at SFIL

Security features have increased satisfaction while implementation is seamless

I use Microsoft Purview Privileged Access Management primarily for Outlook, Microsoft Word, and Excel Microsoft Purview Privileged Access Management is easy to understand, particularly its menu. I am satisfied with its security features provided through Microsoft Security. However, my company…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"CyberArk Endpoint Privilege Manager has significantly improved our security posture by preventing virus incidents and restricting users from downloading unwanted applications."

"The solution's technical support is good."

"This is the number one product for privilege account security."

"It has drastically reduced the attack surface for local administrative rights and the chance of escalation of privilege. We've removed, at this point, close to 98 percent of the local administrative accounts on workstations. If there were an incident, it would stop at that point and we'd be able to know."

"The most valuable features of CyberArk Endpoint Privilege Manager are password management, session management, onboarding rules, platform customization, and safety management."

"The most valuable feature of CyberArk Endpoint Privilege Manager is its ability to reset passwords every time that it is needed or periodically."

"I like that you can remove the admin rights from the user's computer and have control over the environment. That means you can delete the local admins and grant them proper privileges with the console. So, they will get proper permissions for applications they need, but we don't have to do it. In the domain where we don't have control, the user can only do specified actions, but not all of them."

"The most valuable feature of CyberArk Endpoint Privilege Manager is its scalability."

More CyberArk Endpoint Privilege Manager pros

"Microsoft Purview Privileged Access Management is easy to understand, particularly its menu."

"The integration with Azure Identity is a significant advantage, as it allows for seamless automation and power app integration."

"Microsoft Purview Privileged Access Management is easy to understand, particularly its menu."

"The ability to provide just-in-time privileged access and set specific parameters for access duration is highly beneficial."

Cons

"Another enhancement needed is the scheduling of deployment, which I expect in future releases."

"The CyberArk team is working on a feature to identify devices without the Endpoint Privilege Manager running, which is currently missing."

"We have had some major issues with the tool, but we have worked with the R&D teams and we have worked with support. There is room for improvement, especially on response times. But they're working on it and they're doing the best they can."

"The product needs a streamlined user interface; improvements to the user interface can enhance user experience and make the solution more intuitive to navigate."

"Can be improved by allowing computers to be excluded from policies."

"It's an old product and has many areas that can be improved."

"The turnaround time of the support team is an area of concern where improvements are required."

"The product's threat protection and defense capabilities need enhancement."

More CyberArk Endpoint Privilege Manager cons

"There's room for improvement in Microsoft's documentation, as it often lacks clarity."

"Sometimes, its functions, like XLOOKUP in Microsoft Excel, do not find situations properly, especially without the use of pivot tables."

"I do not see any financial benefit after implementing Microsoft Purview Privileged Access Management, however, this question would be better answered by my manager."

"Microsoft Purview Privileged Access Management could improve integration with multiple cloud environments."

Pricing and Cost Advice

"Although I do not deal directly with the pricing, CyberArk Endpoint Privilege Manager is costly compared to other solutions. However, it offers beneficial features."

"The professional services for one eight-hour day would be $1,800."

"The price of CyberArk Endpoint Privilege Manager is expensive."

"The tool's pricing is reasonable for customers."

"The solution requires an annual license to use it. There can be some extra costs in some cases."

"The tool is priced high. I would rate its pricing an eight out of ten."

"It's not at the lower end of the market. I think the price is reasonable considering the quality it delivers. It is a top-notch solution at a fair price point."

"I feel that the price of the product is nominal. It must be around 10 to 15 USD per installation. I rate the product price an eight to nine out of ten, where one is high price, and ten is low price."

More CyberArk Endpoint Privilege Manager pricing and cost advice

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.

See recommendations

850,028 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

15%

Computer Software Company

14%

Manufacturing Company

11%

Government

Computer Software Company

16%

Financial Services Firm

13%

Manufacturing Company

10%

Healthcare Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

Looking for recommendations and a pros/cons template for software to detect insider threats

This is an inside-out --- outside-in --- inside-in question, as an insider can be an outsider as well. There is no short answer other than a blend of a PAM tool with Behavioral Analytics and Endpo...

What do you like most about CyberArk Endpoint Privilege Manager?

The most valuable feature of the solution is its performance.

What is your experience regarding pricing and costs for CyberArk Endpoint Privilege Manager?

I've received feedback that the pricing is high, however, for me, the value it brings is worth the cost. It's really one of the best solutions.

What do you like most about Microsoft Purview Privileged Access Management?

The ability to provide just-in-time privileged access and set specific parameters for access duration is highly beneficial.

What needs improvement with Microsoft Purview Privileged Access Management?

Sometimes, its functions, like XLOOKUP in Microsoft Excel, do not find situations properly, especially without the use of pivot tables. I face a little bit of trouble with its data menu.

What is your primary use case for Microsoft Purview Privileged Access Management?

I use Microsoft Purview Privileged Access Management primarily for Outlook, Microsoft Word, and Excel.

CrowdStrike Falcon vs CyberArk Endpoint Privilege Manager

Comparisons

Compared 25% of the time

Microsoft Defender for Endpoint vs CyberArk Endpoint Privilege Manager

Compared 15% of the time

BeyondTrust Endpoint Privilege Management vs CyberArk Endpoint Privilege Manager

Compared 14% of the time

CyberArk Privileged Access Manager vs CyberArk Endpoint Privilege Manager

Compared 9% of the time

Tanium vs CyberArk Endpoint Privilege Manager

Compared 5% of the time

More CyberArk Endpoint Privilege Manager Competitors

CyberArk Privileged Access Manager vs Microsoft Purview Privileged Access Management

Compared 37% of the time

Delinea Privileged Access Service vs Microsoft Purview Privileged Access Management

Compared 27% of the time

Okta Workforce Identity vs Microsoft Purview Privileged Access Management

Compared 11% of the time

ManageEngine PAM360 vs Microsoft Purview Privileged Access Management

Compared 10% of the time

BeyondTrust Endpoint Privilege Management vs Microsoft Purview Privileged Access Management

Compared 8% of the time

More Microsoft Purview Privileged Access Management Competitors

Product Reports

CyberArk Endpoint Privilege Manager

Download CyberArk Endpoint Privilege Manager product report

CyberArk Endpoint Privilege Manager report

Privileged Access Management (PAM)

Download Microsoft Purview Privileged Access Management product report

Microsoft Purview Privileged Access Management report

Also Known As

Viewfinity

Microsoft Privileged Access Management (PAM)

Overview

CyberArk Endpoint Privilege Manager, a critical and foundational endpoint control addresses the underlying weaknesses of endpoint defenses against a privileged attacker and helps enterprises defend against these attacks through removing local admin rights, enforcing least privilege, and implementing foundational endpoint security controls across all Windows, macOS and Linux endpoints from hybrid to cloud environments.

Click here for a free 30 day trial: CyberArk Endpoint Privilege Manager free trial

CyberArk

Privileged access management allows granular access control over privileged admin tasks in Office 365. It can help protect your organization from breaches that use existing privileged admin accounts with standing access to sensitive data or access to critical configuration settings. Privileged access management requires users to request just-in-time access to complete elevated and privileged tasks through a highly scoped and time-bounded approval workflow. This configuration gives users just-enough-access to perform the task at hand, without risking exposure of sensitive data or critical configuration settings. Enabling privileged access management in Microsoft 365 allows your organization to operate with zero standing privileges and provide a layer of defense against standing administrative access vulnerabilities.

Microsoft

CyberArk Endpoint Privilege Manager vs. Microsoft Purview Privileged Access Management