CyberArk Endpoint Privilege Manager vs WatchGuard Application Control comparison

CyberArk Endpoint Privilege Manager vs. WatchGuard Application Control

Download the complete report

Helped 859,957 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

CyberArk Endpoint Privilege...

Ranking in Application Control

5th

Average Rating

8.2

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Endpoint Compliance (5th), Privileged Access Management (PAM) (4th), Anti-Malware Tools (5th), Ransomware Protection (5th)

WatchGuard Application Control

Ranking in Application Control

8th

Average Rating

8.6

Reviews Sentiment

7.3

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of July 2025, in the Application Control category, the mindshare of CyberArk Endpoint Privilege Manager is 4.3%. The mindshare of WatchGuard Application Control is 3.0%, down from 4.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Application Control

Featured Reviews

Sumit Chavan

Lead Consultant at Aujas Networks Pvt Ltd

Helps secure the infrastructure and control users with admin rights

There are many features that are currently missing. A customization option is required for certain policies. For instance, if we need to stop PowerShell scripting, we have to create a different policy for that. Being able to create a sub-level policy within a top-level policy would be good. Currently, no user-based policy option is available inside the EPM console. We can only create computer-based policies. The database is available, but there is a drawback in not being able to create local groups on the EPM console. We only have to depend on Active Directory. This limits infrastructure security as we depend on the Active Directory team to manage user groups. If they remove any users, we lose control. If we could create groups locally and block them or set specific policies, we would have more control. Local endpoint management is missing from the EPM site. Moreover, there is an issue with policies not running as expected when we make enhancements. We have to find multiple ways to whitelist applications or enhance policies.

Read full review

ScottEastman

Project Consultant at SEVERN HOSPICE LIMITED

Reliable with good blocking capabilities for enhanced security

We like the blocking capabilities on offer. I like the brand, and I know the product really well, which is what keeps me using it. I have a good knowledge of the solution. It is stable and reliable. The solution can scale well. Technical support has been helpful. We have witnessed an ROI as it has helped with security measures.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"There are many valuable aspects of the product, but the most common feature is working with the privileges. The controls of CyberArk Endpoint Privilege Manager influence the visibility into endpoints for my customers. It allows them to granularly manage controls to prevent some malicious activities on the endpoint machine."

"The tool is an endpoint management system. It monitors everything a standard user does and helps elevate privileges when necessary for advanced users. It keeps an auditable trail of all activities. Practically, it stops and blocks potentially hazardous user behavior, whether intentional or unintentional. Certain companies must use endpoint management software because of national or international rules or ISO norms."

"CyberArk Endpoint Privilege Manager has significantly improved our security posture by preventing virus incidents and restricting users from downloading unwanted applications."

"It offers great performance."

"This is the number one product for privilege account security."

"CyberArk Endpoint Privilege Manager is entirely cloud-based, so no further upkeep is required."

"The solution's technical support is good."

"It has drastically reduced the attack surface for local administrative rights and the chance of escalation of privilege. We've removed, at this point, close to 98 percent of the local administrative accounts on workstations. If there were an incident, it would stop at that point and we'd be able to know."

More CyberArk Endpoint Privilege Manager pros

"The most valuable feature is the category control."

"I found several features valuable in WatchGuard Application Control such as the HTTP Proxy, DNSWatch, VPN, and HTTPS Content Inspection."

"We have witnessed an ROI as it has helped with security measures."

"Zero-trust and threat-hunting services are most valuable."

"Centralization is a crucial feature for me as it allows me to have all sites and customers accessible under a single click, not limited to just one."

"The solution is very stable. We've never had any problems with stability. Once a year we do a reboot just as a precaution. The solution never stops running otherwise."

"It does the job of what it says it does. We set it to what we want it to block and then it blocks it."

"It's user-friendly. And if you are using a WatchGuard device and you want to test that side of the software, it's quite easy to get the license to test it."

More WatchGuard Application Control pros

Cons

"CyberArk Endpoint Privilege Manager is not suitable for the current situation because when you compare it to OTP, OTP is the strongest password solution. You can use it as a one-time password, but you have to log into the password manager itself and if you don't change your password, it will be the weakest link in the security. In OTP, you don't have that weakest link."

"Can be improved by allowing computers to be excluded from policies."

"They need much better integration with Azure AD."

"Despite newer versions and functionalities, CyberArk Endpoint Privilege Manager lacks sufficient knowledgeable support staff, resulting in longer wait times for assistance."

"The solution can be complex to use at times."

"CyberArk has some performance issues. For example, servers could not handle the solution when we first took CyberArk Endpoint Privilege Manager."

"It's an old product and has many areas that can be improved."

"One area that has room for improvement is in managing the credentials for network devices."

More CyberArk Endpoint Privilege Manager cons

"What could be improved in WatchGuard Application Control is its price. It could be cheaper. You always want the best price for any solution, but for security products, pricing is usually on the higher side."

"They could expand the amount of applications that are on the list, but it's pretty intensive anyway, so it's pretty good."

"The control software is currently only available for Windows, which can be a little annoying for Linux users."

"I believe there is room for improvement in policies, with the potential to enhance the margins further."

"The licensing can be a bit expensive."

"The solution needs to improve the interface. I'm not able to easily find things using it."

"The time they take to classify an application once they find that it is unknown can be better."

"There should be more reports available on different subjects."

More WatchGuard Application Control cons

Pricing and Cost Advice

"CyberArk Endpoint Privilege Manager is slightly expensive, but costs can be negotiated to become more competitive."

"The solution's pricing is reasonable compared to other vendors' products."

"The tool's pricing is reasonable for customers."

"I believe it's quite a reasonably priced solution. It's not very common to use CyberArk because it's a niche solution, but customers who are willing to control administrative accounts are willing to pay this money."

"The price of CyberArk Endpoint Privilege Manager is expensive."

"I rate the solution's pricing an eight out of ten since the price can be too high for smaller businesses."

"The solution requires an annual license to use it. There can be some extra costs in some cases."

"It's not at the lower end of the market. I think the price is reasonable considering the quality it delivers. It is a top-notch solution at a fair price point."

More CyberArk Endpoint Privilege Manager pricing and cost advice

"Over the years, the costs have increased, especially since I cater to very small businesses."

"Its cost is okay. It is not too expensive, not too low. I would rate it a nine out of ten in terms of pricing."

"The licensing model for WatchGuard Application Control is based on the number of users. WatchGuard Application Control also has licensing models with several features."

See which vendors are best for you

Use our free recommendation engine to learn which Application Control solutions are best for your needs.

See recommendations

859,957 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

15%

Computer Software Company

14%

Manufacturing Company

11%

Government

No data available

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Looking for recommendations and a pros/cons template for software to detect insider threats

This is an inside-out --- outside-in --- inside-in question, as an insider can be an outsider as well. There is no short answer other than a blend of a PAM tool with Behavioral Analytics and Endpo...

What do you like most about CyberArk Endpoint Privilege Manager?

The most valuable feature of the solution is its performance.

What is your experience regarding pricing and costs for CyberArk Endpoint Privilege Manager?

I believe it's quite a reasonably priced solution. It's not very common to use CyberArk because it's a niche solution, but customers who are willing to control administrative accounts are willing t...

What do you like most about WatchGuard Application Control?

Centralization is a crucial feature for me as it allows me to have all sites and customers accessible under a single click, not limited to just one.

What is your experience regarding pricing and costs for WatchGuard Application Control?

Over the years, the costs have increased, especially since I cater to very small businesses. While they comprehend the necessity of investing in network protection, these features have become relat...

What needs improvement with WatchGuard Application Control?

I believe there is room for improvement in policies, with the potential to enhance the margins further.

CrowdStrike Falcon vs CyberArk Endpoint Privilege Manager

Comparisons

Compared 19% of the time

Microsoft Defender for Endpoint vs CyberArk Endpoint Privilege Manager

Compared 15% of the time

BeyondTrust Endpoint Privilege Management vs CyberArk Endpoint Privilege Manager

Compared 15% of the time

CyberArk Privileged Access Manager vs CyberArk Endpoint Privilege Manager

Compared 9% of the time

Tanium vs CyberArk Endpoint Privilege Manager

Compared 6% of the time

More CyberArk Endpoint Privilege Manager Competitors

No data available

Product Reports

CyberArk Endpoint Privilege Manager

Download CyberArk Endpoint Privilege Manager product report

CyberArk Endpoint Privilege Manager report

WatchGuard Application Control

Download WatchGuard Application Control product report

Also Known As

Viewfinity

No data available

Overview

CyberArk Endpoint Privilege Manager, a critical and foundational endpoint control addresses the underlying weaknesses of endpoint defenses against a privileged attacker and helps enterprises defend against these attacks through removing local admin rights, enforcing least privilege, and implementing foundational endpoint security controls across all Windows, macOS and Linux endpoints from hybrid to cloud environments.

Click here for a free 30 day trial: CyberArk Endpoint Privilege Manager free trial

CyberArk

Organizations of all sizes rely on various applications for daily business operations, but how do you ensure only sanctioned applications are being used on your network? With WatchGuard Application Control, you have the power to limit application usage, and keep unproductive, inappropriate, and dangerous applications off your network.

WatchGuard

Sample Customers

Information Not Available

Chester School District, Kensington Close Hotel

CyberArk Endpoint Privilege Manager vs. WatchGuard Application Control