CyberArk Endpoint Privilege Manager vs One Identity Safeguard comparison

CyberArk Endpoint Privilege Manager vs. One Identity Safeguard

June 2025

Download the complete report

Helped 856,873 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

ROI

Sentiment score

7.0

CyberArk Endpoint Privilege Manager boosts security, saves resources, and enhances confidence, offering a perceived positive ROI despite quantification challenges.

Sentiment score

7.0

One Identity Safeguard enhances security and compliance, ensuring PCI-DSS compliance, reducing risks, and improving operational efficiency with substantial ROI.

Deploying CyberArk Endpoint Privilege Manager has secured the infrastructure, which saves money, time, and resources.

For more quotes and insights, download the CyberArk Endpoint Privilege Manager report

Lead Consultant at Aujas Networks Pvt Ltd

I consider CyberArk Endpoint Privilege Manager's return on investment to be good since it effectively accomplishes the goals expected from privilege access management solutions.

Diego Rivera

Commercial and Technical Professional Manager at Evolution Technologies Group

Any PAM solution, when I deploy it well and customers use it, leads to a return on investment.

For more quotes and insights, download the One Identity Safeguard report

Consultant at a tech vendor with 11-50 employees

Customer Service

Sentiment score

6.6

CyberArk Endpoint Privilege Manager support is generally rated high, with quick resolutions but concerns about response times and accessibility.

Sentiment score

6.5

One Identity Safeguard’s customer service is praised for responsiveness and efficiency, but standard support faces mixed reviews.

They respond immediately to our inquiries, resolve issues promptly, and provide valuable guidance, especially in critical situations.

Security Delivery Analyst at Accenture

We engage them when needed and receive prompt responses that typically resolve our issues.

Global Security Systems Consultant at a insurance company with 10,001+ employees

Earlier, we received support for normal tickets within a day, but now it takes one or two days to resolve issues.

For more quotes and insights, download the CyberArk Endpoint Privilege Manager report

Lead Consultant at Aujas Networks Pvt Ltd

I sometimes need escalations to reach expertise.

Consultant at a tech vendor with 11-50 employees

Sometimes, I get a very helpful response and they address issues on a call.

Systems Administrator at a university with 10,001+ employees

When I have day-to-day incidents and problems, the response is good enough in terms of time and quality.

For more quotes and insights, download the One Identity Safeguard report

Team Lead / Consultant at a computer software company with 5,001-10,000 employees

Scalability Issues

Sentiment score

7.7

CyberArk Endpoint Privilege Manager efficiently scales for varied environments, supporting small to large enterprises with a distributed cloud-based architecture.

Sentiment score

7.1

One Identity Safeguard is praised for scalability and ease of resource deployment but may affect performance and high availability.

We can set permissions per team or department, allowing some teams to elevate specific applications while others have different permissions.

Global Security Systems Consultant at a insurance company with 10,001+ employees

CyberArk Endpoint Privilege Manager is quite scalable.

For more quotes and insights, download the CyberArk Endpoint Privilege Manager report

Security Delivery Analyst at Accenture

The available reports and other security tools assist in scaling it according to my organization's needs.

Gani Habib

Cybersecurity Manager at Tata Consultancy

The scalability of One Identity Safeguard is perfect, scoring ten out of ten.

reviewer2687787

Business Line Manager - IGA & PAM at a tech services company with 201-500 employees

We have a cluster of SPPs and a cluster of SPSs, and we can add a node to that cluster without much fuss.

Systems Administrator at a university with 10,001+ employees

I would rate it a nine out of ten for scalability.

For more quotes and insights, download the One Identity Safeguard report

Team Lead / Consultant at a computer software company with 5,001-10,000 employees

Stability Issues

Sentiment score

8.2

CyberArk Endpoint Privilege Manager is stable and reliable, maintaining 99.99% uptime with rare issues and smooth offline adaptation.

Sentiment score

7.5

One Identity Safeguard is highly stable and reliable, with minor issues promptly addressed through regular updates.

It is a robust solution that has effectively supported our environment without major issues.

Security Delivery Analyst at Accenture

Since implementing it, we have not experienced any outages or stability issues.

Global Security Systems Consultant at a insurance company with 10,001+ employees

CyberArk Endpoint Privilege Manager offers multiple options for creating and stopping policies.

For more quotes and insights, download the CyberArk Endpoint Privilege Manager report

Lead Consultant at Aujas Networks Pvt Ltd

I would rate it a nine out of ten for stability.

Team Lead / Consultant at a computer software company with 5,001-10,000 employees

In terms of stability, I rate One Identity Safeguard nine to ten out of ten.

reviewer2687787

Business Line Manager - IGA & PAM at a tech services company with 201-500 employees

I encounter problems primarily with the failover procedure.

For more quotes and insights, download the One Identity Safeguard report

Consultant at a tech vendor with 11-50 employees

Room For Improvement

CyberArk Endpoint Privilege Manager requires improvements in UI, integration, performance, support, threat detection, customization, pricing flexibility, and automation.

One Identity Safeguard needs improvements in integration, management, documentation, interface, support, monitoring, threat detection, and pricing.

CyberArk Endpoint Privilege Manager could be improved by simplifying the administration process, specifically when setting up policies and applications.

Global Security Systems Consultant at a insurance company with 10,001+ employees

Currently, no user-based policy option is available inside the EPM console.

For more quotes and insights, download the CyberArk Endpoint Privilege Manager report

Lead Consultant at Aujas Networks Pvt Ltd

Some features provided in the self-hosted version of EPM are not supported in the software as a service version, like connection to some analysis applied by Palo Alto.

Marek Neumann

Solution Architect at PwC

For some configurations on the SPS side, if I need to make changes, such as for DNS servers, I must redeploy the machine.

Consultant at a tech vendor with 11-50 employees

There are many steps. We are still in the onboarding phase, and it seems very manual.

Systems Administrator at a university with 10,001+ employees

Another area for improvement could be the threat detection capabilities, like those seen in other PAM vendors.

For more quotes and insights, download the One Identity Safeguard report

Team Lead / Consultant at a computer software company with 5,001-10,000 employees

Setup Cost

CyberArk Endpoint Privilege Manager is costly but considered reasonable for its features, with significant discounts for large enterprises.

One Identity Safeguard is costly but valued for flexibility and robust security, with straightforward licensing and worthwhile investment.

CyberArk Endpoint Privilege Manager is slightly expensive, but costs can be negotiated to become more competitive.

Gani Habib

Cybersecurity Manager at Tata Consultancy

CyberArk Endpoint Privilege Manager is costly compared to other solutions.

For more quotes and insights, download the CyberArk Endpoint Privilege Manager report

Lead Consultant at Aujas Networks Pvt Ltd

I've received feedback that the pricing is high, however, for me, the value it brings is worth the cost.

Padmanabha Hegde

Manager at a computer software company with 1,001-5,000 employees

It is one of those where the more you buy, the cheaper it is.

Systems Administrator at a university with 10,001+ employees

It is cheaper than CyberArk.

For more quotes and insights, download the One Identity Safeguard report

Team Lead / Consultant at a computer software company with 5,001-10,000 employees

It is more expensive than Secret Server but way less expensive than CyberArk.

reviewer2686314

IAM Specialist

Valuable Features

CyberArk Endpoint Privilege Manager enhances security by managing privileges, reducing admin needs, and improving operational efficiency and data protection.

One Identity Safeguard enhances security with seamless user experience, extensive features, centralized access, and robust monitoring for on-prem and cloud management.

CyberArk Endpoint Privilege Manager effectively reduces malicious content in applications by allowing us to identify and block dangerous applications.

For more quotes and insights, download the CyberArk Endpoint Privilege Manager report

Security Delivery Analyst at Accenture

It allows them to granularly manage controls to prevent some malicious activities on the endpoint machine.

reviewer1247523

Head of Sales Services Department at a comms service provider with 51-200 employees

CyberArk Endpoint Privilege Manager enhances computer security by providing minimal access, effectively preventing ransomware attacks.

Gani Habib

Cybersecurity Manager at Tata Consultancy

The auditing and approval mechanisms are features we did not have before and are greatly appreciated.

Systems Administrator at a university with 10,001+ employees

I think One Identity should improve its documentation because it is vast and not clear, and clear documentation on implementing the solution would be advantageous for consultants.

Consultant at a tech vendor with 11-50 employees

Compared to other PAM solutions, it is easy to implement and use from an administrator's point of view.

For more quotes and insights, download the One Identity Safeguard report

Team Lead / Consultant at a computer software company with 5,001-10,000 employees

Categories and Ranking

CyberArk Endpoint Privilege...

Ranking in Privileged Access Management (PAM)

4th

Average Rating

8.2

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Endpoint Compliance (5th), Anti-Malware Tools (5th), Application Control (5th), Ransomware Protection (6th)

One Identity Safeguard

Ranking in Privileged Access Management (PAM)

3rd

Average Rating

8.0

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

User Entity Behavior Analytics (UEBA) (6th), Non-Human Identity Management (NHIM) (4th)

Mindshare comparison

As of June 2025, in the Privileged Access Management (PAM) category, the mindshare of CyberArk Endpoint Privilege Manager is 3.4%, down from 3.8% compared to the previous year. The mindshare of One Identity Safeguard is 3.9%, down from 4.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Privileged Access Management (PAM)

Featured Reviews

Helps secure the infrastructure and control users with admin rights

Lead Consultant at Aujas Networks Pvt Ltd

There are many features that are currently missing. A customization option is required for certain policies. For instance, if we need to stop PowerShell scripting, we have to create a different policy for that. Being able to create a sub-level policy within a top-level policy would be good. Currently, no user-based policy option is available inside the EPM console. We can only create computer-based policies. The database is available, but there is a drawback in not being able to create local groups on the EPM console. We only have to depend on Active Directory. This limits infrastructure security as we depend on the Active Directory team to manage user groups. If they remove any users, we lose control. If we could create groups locally and block them or set specific policies, we would have more control. Local endpoint management is missing from the EPM site. Moreover, there is an issue with policies not running as expected when we make enhancements. We have to find multiple ways to whitelist applications or enhance policies.

Read full review

Martin Ajayiobe

Senior Vice President (Infrastructure Systems/Information Security) at MAXUT

Th password vault feature has proven to be most effective for managing privileged access

One Identity Safeguard now prevents unauthorized access to servers by eliminating privileged passwords and requiring all connections to go through a PAM-authorized process. This means no one, including hackers, can access servers without explicit approval, significantly enhancing overall security. One Identity Safeguard is easy to use with a good partner to support you, and it can be up and running within a few days. We have successfully integrated One Identity Safeguard with cloud targets, and the process was straightforward. One Identity Safeguard has improved our incident response time by 300 percent.

Read full review

See which vendors are best for you

Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.

See recommendations

856,873 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

15%

Computer Software Company

15%

Manufacturing Company

11%

Government

Computer Software Company

25%

Financial Services Firm

11%

Comms Service Provider

Energy/Utilities Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Looking for recommendations and a pros/cons template for software to detect insider threats

This is an inside-out --- outside-in --- inside-in question, as an insider can be an outsider as well. There is no short answer other than a blend of a PAM tool with Behavioral Analytics and Endpo...

What do you like most about CyberArk Endpoint Privilege Manager?

The most valuable feature of the solution is its performance.

What is your experience regarding pricing and costs for CyberArk Endpoint Privilege Manager?

I've received feedback that the pricing is high, however, for me, the value it brings is worth the cost. It's really one of the best solutions.

What do you like most about One Identity Safeguard?

The identity discovery is good, and the performance is pretty good value.

What is your experience regarding pricing and costs for One Identity Safeguard?

The pricing of One Identity Safeguard is fairly priced and cheaper than other solutions of the same enterprise level. It provides a good cost-benefit ratio.

What needs improvement with One Identity Safeguard?

There is room for improvement in integration between modules. The native integration between SPP and SPS, which is currently based on a plugin, could be enhanced. Customization for lookup passwords...

CrowdStrike Falcon vs CyberArk Endpoint Privilege Manager

Comparisons

Compared 24% of the time

BeyondTrust Endpoint Privilege Management vs CyberArk Endpoint Privilege Manager

Compared 14% of the time

Microsoft Defender for Endpoint vs CyberArk Endpoint Privilege Manager

Compared 14% of the time

CyberArk Privileged Access Manager vs CyberArk Endpoint Privilege Manager

Compared 9% of the time

Tanium vs CyberArk Endpoint Privilege Manager

Compared 5% of the time

More CyberArk Endpoint Privilege Manager Competitors

CyberArk Privileged Access Manager vs One Identity Safeguard

Compared 33% of the time

WALLIX Bastion vs One Identity Safeguard

Compared 18% of the time

SailPoint Identity Security Cloud vs One Identity Safeguard

Compared 9% of the time

Delinea Secret Server vs One Identity Safeguard

Compared 9% of the time

Fudo PAM vs One Identity Safeguard

Compared 7% of the time

More One Identity Safeguard Competitors

Product Reports

CyberArk Endpoint Privilege Manager

June 2025

CyberArk Endpoint Privilege Manager report

Download CyberArk Endpoint Privilege Manager product report

Download One Identity Safeguard product report

One Identity Safeguard

May 2025

Also Known As

Viewfinity

No data available

Overview

CyberArk Endpoint Privilege Manager, a critical and foundational endpoint control addresses the underlying weaknesses of endpoint defenses against a privileged attacker and helps enterprises defend against these attacks through removing local admin rights, enforcing least privilege, and implementing foundational endpoint security controls across all Windows, macOS and Linux endpoints from hybrid to cloud environments.

Click here for a free 30 day trial: CyberArk Endpoint Privilege Manager free trial

CyberArk

One Identity Safeguard manages and monitors privileged access, enhancing security with features like automatic session recording, real-time monitoring, and credential rotation. It integrates seamlessly, supports compliance with audit trails, and improves operational efficiency across organizations. This robust platform significantly bolsters security protocols while controlling sensitive operations.

One Identity

Sample Customers

Information Not Available

Cavium