CyberArk Endpoint Privilege Manager vs Symantec Privileged Access Manager comparison

CyberArk Endpoint Privilege Manager vs. Symantec Privileged Access Manager

Download the complete report

Helped 885,311 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

CyberArk Endpoint Privilege...

Ranking in Privileged Access Management (PAM)

4th

Average Rating

8.2

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Endpoint Compliance (5th), Anti-Malware Tools (5th), Application Control (3rd), Ransomware Protection (5th)

Symantec Privileged Access ...

Ranking in Privileged Access Management (PAM)

18th

Average Rating

7.8

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of March 2026, in the Privileged Access Management (PAM) category, the mindshare of CyberArk Endpoint Privilege Manager is 2.4%, down from 3.5% compared to the previous year. The mindshare of Symantec Privileged Access Manager is 1.6%, up from 1.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Privileged Access Management (PAM) Mindshare Distribution
Product	Mindshare (%)
CyberArk Endpoint Privilege Manager	2.4%
Symantec Privileged Access Manager	1.6%
Other	96.0%

Privileged Access Management (PAM)

Featured Reviews

Padmanabha Hegde

Manager at a computer software company with 1,001-5,000 employees

MFA boosts protection and has blocking capabilities but dependency on other solutions complicates deployment

The main issues I experience are related to deployment, which requires dependency on other solutions like AD or SCCM. These tools need to be defined and synced with the client or agent and master, sometimes needing manual checks. The agent may have problems syncing, which complicates deployment, especially when users leave the organization, however, agents remain licensed since the server still maintains licenses. Additionally, compared to other endpoint managers like Thycotic, CyberArk Endpoint Privilege Manager lacks recording capabilities, which limits its functionality for critical applications. A feature that records activity, even when bypassing CyberArk Endpoint Privilege Manager, would be beneficial.

Read full review

Muzi Lubisi

Senior technical Consultant at CA Africa

Secure management of sensitive servers and seamless applications with direct linking

The credential injection feature is highly valued, particularly for RDP sessions. A majority of customers use it for RDP, and a couple for Linux servers. The broader capabilities, including access to multiple systems, web-based applications, and clustering, have never posed an issue. The threat analytics aspect is also a robust feature that analyzes all pertinent information.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable feature is that it does lifecycle management and that it will change to whatever the end target is."

"The solution is scalable."

"In terms of removing local admin credentials on the endpoint and the effect on the size of the attack surface in our organization, it has drastically reduced the attack surface for local administrative rights and the chance of escalation of privilege."

"It offers great performance."

"It allows whitelisting."

"I like that we have the power to blacklist, whitelist, and greylist applications."

"I have always found that CyberArk is a very tight, foolproof product compared to most other products available."

More CyberArk Endpoint Privilege Manager pros

"Password Management and Session Recording. The simplicity and ease that it is to be up and running out-of-the-box is very much appreciated."

"You can do A2A integration. You can have your own script, which can then run outside of PA to retrieve the password and perform other tasks."

"The password vault and access to the systems are the most valuable features."

"CA PAM is working well for us."

"The best features are the comprehensive coverage of the required features for the PAM solution like a credential vault, a session recording, an endpoint agent, security analytics."

"It is simple to implement and is suitable for medium to large-scale enterprises."

"The credential injection feature is highly valued, particularly for RDP sessions."

"It reduces the viral attacks on my website. It also allows certain users access to see what happens daily."

More Symantec Privileged Access Manager pros

Cons

"CyberArk Endpoint Privilege Manager is not suitable for the current situation because when you compare it to OTP, OTP is the strongest password solution. You can use it as a one-time password, but you have to log into the password manager itself and if you don't change your password, it will be the weakest link in the security. In OTP, you don't have that weakest link."

"The product is expensive."

"CyberArk Endpoint Privilege Manager can be better by making its UI more consistent."

"Another enhancement needed is the scheduling of deployment, which I expect in future releases."

"The tool should be more user-friendly."

"My recommendation for improvement is to add functionality for when users request access to an application. There's a pop-up UI, but it's not very customizable. I suggest creating a UI where we can write scripts or use SDKs to enhance it. This could automatically create tickets in a system like ServiceNow when users request an application. If a manager approves, we could automatically push policies to those users."

"If you do not have certification, you cannot send a ticket; this makes dealing with technical support difficult."

"CyberArk Endpoint Privilege Manager could be improved by simplifying the administration process, specifically when setting up policies and applications."

More CyberArk Endpoint Privilege Manager cons

"Updates get difficult for the client. It needs to improve."

"Technical support is average. They took a long time to provide good answers, only recommended to upgrade SW version which in some environments is not an option and they don’t even know if that will fix the problem."

"The support for other remote assistance tools would be excellent. Free included tools in Windows (Remote Assist) and Microsoft SCCM Configuration Manager (ConMgr Remote Control) allow companies to reduce the amount of RDP connections and expand the usage of the tools are frequently used by companies to provide technical support for remote assistance."

"There are currently other tools on the market which are much cheaper than PAM. They can do almost all of what PAM does, and even do it better."

"We experience stability issues after every patch upgrade."

"Now, the reporting feature on CA PAM only shows the basic information in white-black table format."

"I’m no fan of Java as an application front-end, as it tends to have issues depending on what browser one’s using."

"I would like to see better integration with Security Incident Management solutions, a SIM, like a Splunk."

More Symantec Privileged Access Manager cons

Pricing and Cost Advice

"The price of CyberArk Endpoint Privilege Manager is expensive. The solution is priced based on the number of accounts onboarded and the number of concurrent sessions. Everyone else is included in the price, such as support."

"The tool is a bit pricey compared to its competitors. My company does work with competitors, but I don't have hands-on experience with other software. I've just done some comparisons."

"licensing for this solution is based on the number of APV (privileged users), and the number of sessions that you want to record."

"I think that it was in the range of $200,000 that had to get approved."

"CyberArk Endpoint Privilege Manager has a very high price, so it's a one out of ten for me in terms of pricing."

"The price of CyberArk Endpoint Privilege Manager is expensive."

"It's not at the lower end of the market. I think the price is reasonable considering the quality it delivers. It is a top-notch solution at a fair price point."

"The cost for CyberArk is very high."

More CyberArk Endpoint Privilege Manager pricing and cost advice

"Appliances are relatively cheap, don’t skimp. Make sure you have redundancy, high availability, and enough appliances to manage the concurrent workload."

"They offer per-device, per-user, or monthly and yearly licensing models."

"The licensing is simple and scalable."

"Pricing is fair compared to other top vendors."

"It is reasonably priced."

"The version we are using is affordable compared to BeyondTrust, which is maybe three to four times as expensive, but it depends on the features."

"The prices are not low, but one can ask for a discount. It’s not the cheapest PAM solution."

"Cost-wise, CA was better compared to others in the market. "

More Symantec Privileged Access Manager pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.

See recommendations

885,311 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

12%

Manufacturing Company

11%

Computer Software Company

Government

Comms Service Provider

10%

Marketing Services Firm

10%

Computer Software Company

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	17
Midsize Enterprise	9
Large Enterprise	18

By reviewers
Company Size	Count
Small Business	14
Midsize Enterprise	6
Large Enterprise	30

Questions from the Community

Looking for recommendations and a pros/cons template for software to detect insider threats

This is an inside-out --- outside-in --- inside-in question, as an insider can be an outsider as well. There is no short answer other than a blend of a PAM tool with Behavioral Analytics and Endpo...

What do you like most about CyberArk Endpoint Privilege Manager?

The most valuable feature of the solution is its performance.

What is your experience regarding pricing and costs for CyberArk Endpoint Privilege Manager?

I believe it's quite a reasonably priced solution. It's not very common to use CyberArk because it's a niche solution, but customers who are willing to control administrative accounts are willing t...

What is your experience regarding pricing and costs for Symantec Privileged Access Manager?

Due to the nature of the solution, it is hard to gauge, but compared to competitors, the pricing is very good. I would rate it as an eight and a half out of ten.

What needs improvement with Symantec Privileged Access Manager?

Recent releases need improvement in webpage management. For instance, navigating through a webpage that acts like a wizard, where I proceed to the next page and enter more information, is not handl...

What is your primary use case for Symantec Privileged Access Manager?

With the customers that I have so far, I help them broker RDP sessions to sensitive servers, particularly those that manage aspects like physical access. I have also done it for backend databases, ...

BeyondTrust Endpoint Privilege Management vs CyberArk Endpoint Privilege Manager

Comparisons

Compared 7% of the time

CrowdStrike Falcon vs CyberArk Endpoint Privilege Manager

Compared 7% of the time

CyberArk Privileged Access Manager vs CyberArk Endpoint Privilege Manager

Compared 6% of the time

Microsoft Defender for Endpoint vs CyberArk Endpoint Privilege Manager

Compared 6% of the time

Ivanti Endpoint Security for Endpoint Manager vs CyberArk Endpoint Privilege Manager

Compared 5% of the time

More CyberArk Endpoint Privilege Manager Competitors

CyberArk Privileged Access Manager vs Symantec Privileged Access Manager

Compared 23% of the time

ARCON Privileged Access Management vs Symantec Privileged Access Manager

Compared 15% of the time

Cisco Identity Services Engine (ISE) vs Symantec Privileged Access Manager

Compared 12% of the time

BeyondTrust Endpoint Privilege Management vs Symantec Privileged Access Manager

Compared 11% of the time

Delinea Secret Server vs Symantec Privileged Access Manager

Compared 9% of the time

More Symantec Privileged Access Manager Competitors

Product Reports

CyberArk Endpoint Privilege Manager

Download CyberArk Endpoint Privilege Manager product report

CyberArk Endpoint Privilege Manager report

Symantec Privileged Access Manager

Download Symantec Privileged Access Manager product report

Symantec Privileged Access Manager report

Also Known As

Viewfinity

CA PAM, Xceedium Xsuite, CA Privileged Access Manager

Overview

CyberArk Endpoint Privilege Manager, a critical and foundational endpoint control addresses the underlying weaknesses of endpoint defenses against a privileged attacker and helps enterprises defend against these attacks through removing local admin rights, enforcing least privilege, and implementing foundational endpoint security controls across all Windows, macOS and Linux endpoints from hybrid to cloud environments.

Click here for a free 30 day trial: CyberArk Endpoint Privilege Manager free trial

CyberArk

CA Privileged Access Manager is a simple-to-deploy, automated, proven solution for privileged access management in physical, virtual and cloud environments. It enhances security by protecting sensitive administrative credentials such as root and administrator passwords, controlling privileged user access, proactively enforcing policies and monitoring and recording privileged user activity across all IT resources. It includes CA PAM Server Control (previously CA Privileged Identity Manager) for fine-grained protection of critical servers

Broadcom

Sample Customers

Information Not Available

NEOVERA, Telesis, eSoft

CyberArk Endpoint Privilege Manager vs. Symantec Privileged Access Manager