Try our new research platform with insights from 80,000+ expert users

CyberArk Endpoint Privilege Manager vs WatchGuard Application Control comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CyberArk Endpoint Privilege...
Ranking in Application Control
5th
Average Rating
8.2
Reviews Sentiment
6.8
Number of Reviews
36
Ranking in other categories
Endpoint Compliance (4th), Privileged Access Management (PAM) (4th), Anti-Malware Tools (4th), Ransomware Protection (6th)
WatchGuard Application Control
Ranking in Application Control
8th
Average Rating
8.6
Number of Reviews
9
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of May 2025, in the Application Control category, the mindshare of CyberArk Endpoint Privilege Manager is 3.8%. The mindshare of WatchGuard Application Control is 2.9%, down from 4.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Control
 

Featured Reviews

Sumit Chavan - PeerSpot reviewer
Helps secure the infrastructure and control users with admin rights
There are many features that are currently missing. A customization option is required for certain policies. For instance, if we need to stop PowerShell scripting, we have to create a different policy for that. Being able to create a sub-level policy within a top-level policy would be good. Currently, no user-based policy option is available inside the EPM console. We can only create computer-based policies. The database is available, but there is a drawback in not being able to create local groups on the EPM console. We only have to depend on Active Directory. This limits infrastructure security as we depend on the Active Directory team to manage user groups. If they remove any users, we lose control. If we could create groups locally and block them or set specific policies, we would have more control. Local endpoint management is missing from the EPM site. Moreover, there is an issue with policies not running as expected when we make enhancements. We have to find multiple ways to whitelist applications or enhance policies.
ScottEastman - PeerSpot reviewer
Reliable with good blocking capabilities for enhanced security
We like the blocking capabilities on offer. I like the brand, and I know the product really well, which is what keeps me using it. I have a good knowledge of the solution. It is stable and reliable. The solution can scale well. Technical support has been helpful. We have witnessed an ROI as it has helped with security measures.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature is that it does lifecycle management and that it will change to whatever the end target is."
"Our setup process is moving to the cloud, which is very good. It reduces complexity."
"The most valuable feature of CyberArk Endpoint Privilege Manager is its scalability."
"In terms of ROI, deploying CyberArk Endpoint Privilege Manager has secured the infrastructure, which saves money, time, and resources."
"The solution's technical support is good."
"The biggest benefit of CyberArk EPM for our customers is control over privileged access for endpoints. Endpoints are often the starting point for attackers to enter and move within a network. CyberArk EPM bridges the gap between security and operations teams. Operations teams are happy because work isn't stopped due to admin rights issues, while security teams are satisfied that full admin rights aren't given to all users."
"The most valuable feature of CyberArk Endpoint Privilege Manager is its high performance, it's the best identity security platform. The security is good. It's easy to showcase the feature and capabilities and compare it with other competitors. It competes well with other solutions. Additionally, it is a complete solution."
"CyberArk Endpoint Privilege Manager enhances computer security by providing minimal access, effectively preventing ransomware attacks."
"It does the job of what it says it does. We set it to what we want it to block and then it blocks it."
"The most valuable feature is the category control."
"Zero-trust and threat-hunting services are most valuable."
"I found several features valuable in WatchGuard Application Control such as the HTTP Proxy, DNSWatch, VPN, and HTTPS Content Inspection."
"Centralization is a crucial feature for me as it allows me to have all sites and customers accessible under a single click, not limited to just one."
"The solution is very stable. We've never had any problems with stability. Once a year we do a reboot just as a precaution. The solution never stops running otherwise."
"The most valuable feature of this solution is traffic management."
"It's user-friendly. And if you are using a WatchGuard device and you want to test that side of the software, it's quite easy to get the license to test it."
 

Cons

"The product's threat protection and defense capabilities need enhancement."
"CyberArk should consider whitelisting important applications like PowerShell and DLL that are currently not allowed due to some malicious content."
"CyberArk Endpoint Privilege Manager could be improved by simplifying the administration process, specifically when setting up policies and applications."
"CyberArk Endpoint Privilege Manager is a perfect solution, but CyberArk Endpoint Privilege Manager for Linux has many issues. Another area for improvement in CyberArk Endpoint Privilege Manager, specifically for Windows, is that there's no way for you to check credential theft from a text file, such as a notepad file."
"Technical support is slow to respond when we run into issues."
"For an experienced system implementer it will take approximately one day. However, for somebody who is inexperienced it may take up to five days."
"Performance could be better. We have a couple of problems with CyberArk right now. One of the problems is performance in our environment. Support also takes a long time to respond. If the user already has local admin rights, then I can't collect any events in the console from this device. There are also some options in CyberArk that are not working properly, and are not helpful in this case. I can't collect any information to create a proper policy for the device. I have to investigate everything manually, or even disable the local admin from the device. I can collect the events only after this, and it's very time consuming. In my case, it's a waste of resources."
"The management of Privilege Access is not satisfactory."
"The solution needs to improve the interface. I'm not able to easily find things using it."
"I believe there is room for improvement in policies, with the potential to enhance the margins further."
"There should be more reports available on different subjects."
"There is no message displayed for the user on the desktop informing them that access to a web page has been blocked by Application Control."
"They could expand the amount of applications that are on the list, but it's pretty intensive anyway, so it's pretty good."
"The licensing can be a bit expensive."
"The control software is currently only available for Windows, which can be a little annoying for Linux users."
"The time they take to classify an application once they find that it is unknown can be better."
 

Pricing and Cost Advice

"The product's license is easy to procure."
"The solution requires an annual license to use it. There can be some extra costs in some cases."
"The tool's pricing is reasonable for customers."
"The tool is priced high. I would rate its pricing an eight out of ten."
"Although I do not deal directly with the pricing, CyberArk Endpoint Privilege Manager is costly compared to other solutions. However, it offers beneficial features."
"The price of CyberArk Endpoint Privilege Manager is expensive. The solution is priced based on the number of accounts onboarded and the number of concurrent sessions. Everyone else is included in the price, such as support."
"The cost for CyberArk is very high."
"The solution's pricing is reasonable compared to other vendors' products."
"The licensing model for WatchGuard Application Control is based on the number of users. WatchGuard Application Control also has licensing models with several features."
"Its cost is okay. It is not too expensive, not too low. I would rate it a nine out of ten in terms of pricing."
"Over the years, the costs have increased, especially since I cater to very small businesses."
report
Use our free recommendation engine to learn which Application Control solutions are best for your needs.
851,371 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Computer Software Company
15%
Manufacturing Company
11%
Government
8%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Looking for recommendations and a pros/cons template for software to detect insider threats
This is an inside-out --- outside-in --- inside-in question, as an insider can be an outsider as well. There is no short answer other than a blend of a PAM tool with Behavioral Analytics and Endpo...
What do you like most about CyberArk Endpoint Privilege Manager?
The most valuable feature of the solution is its performance.
What is your experience regarding pricing and costs for CyberArk Endpoint Privilege Manager?
I've received feedback that the pricing is high, however, for me, the value it brings is worth the cost. It's really one of the best solutions.
What do you like most about WatchGuard Application Control?
Centralization is a crucial feature for me as it allows me to have all sites and customers accessible under a single click, not limited to just one.
What is your experience regarding pricing and costs for WatchGuard Application Control?
Over the years, the costs have increased, especially since I cater to very small businesses. While they comprehend the necessity of investing in network protection, these features have become relat...
What needs improvement with WatchGuard Application Control?
I believe there is room for improvement in policies, with the potential to enhance the margins further.
 

Also Known As

Viewfinity
No data available
 

Overview

 

Sample Customers

Information Not Available
Chester School District, Kensington Close Hotel
Find out what your peers are saying about CyberArk Endpoint Privilege Manager vs. WatchGuard Application Control and other solutions. Updated: April 2025.
851,371 professionals have used our research since 2012.