Try our new research platform with insights from 80,000+ expert users

CyberArk Privileged Access Manager vs One Identity Safeguard vs Saviynt comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

As of October 2025, in the Privileged Access Management (PAM) category, the mindshare of CyberArk Privileged Access Manager is 15.8%, down from 21.4% compared to the previous year. The mindshare of One Identity Safeguard is 3.6%, down from 4.5% compared to the previous year. The mindshare of Saviynt is 3.2%, down from 3.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Privileged Access Management (PAM) Market Share Distribution
ProductMarket Share (%)
CyberArk Privileged Access Manager15.8%
One Identity Safeguard3.6%
Saviynt3.2%
Other77.4%
Privileged Access Management (PAM)
 

Featured Reviews

Atul-Gujar - PeerSpot reviewer
Secures critical infrastructures with essential user session audit records
A potential area for improvement is enhancing support for cluster environments and distributed Vaults. Clients in multiple countries that need central access have different challenges that require better solutions from CyberArk. For financial services, CyberArk can improve incident response by ensuring fast support for critical priority tickets to meet compliance requirements. Providing more documentation on CyberArk is recommended for new team members to enhance their troubleshooting capabilities. I understand it's up to the client, but 99% fail to change the demo key, so it's crucial for CyberArk to emphasize changing the key and documenting it as part of the installation process.
Tor Nordhagen - PeerSpot reviewer
Transparent mode for privileged sessions will greatly simplify our client's administrative situation
We're introducing the solution's transparent mode for privileged sessions. This is part of what the client hasn't used before. It will simplify their administrative situation greatly. So far, the rollout of this feature has been a seamless process, but we're still in the midst of rolling it out. The benefits will be on the risk side. Right now, the way accounts are managed, you don't necessarily know who is using an account. There's a shared admin account, and that's not a good thing. And those accounts are shared in wallets by several people. One of the real benefits of safeguarding here is that the client will have an absolute audit of who is using an administrative interface, whether it's server or network.
Suresh Kumar Subramaniyan - PeerSpot reviewer
Has delivered strong identity automation while support response could be faster
With either SailPoint or Saviynt, I utilize this product, as do some of my clients, with AWS as a main cloud provider. We are not using AWS; we were using only Saviynt. We never used AWS because we don't have any customers for AWS. Saviynt likely uses an AWS server for their database, though I'm not certain how they utilize AWS services. The cloud-native capabilities of Saviynt contribute to enhanced cloud security as they are operating a cloud-based solution. Saviynt's capabilities for automating user provisioning and access are excellent, and their IGA functionality is perfect. The specific details about their IGA capability show excellence in terms of automated onboarding, off-boarding process, and JML processes, making it a strong solution in this market. I rate Saviynt 8 out of 10.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The technical support is good."
"CyberArk has a lot of modules."
"CyberArk Privileged Access Manager’s ability to safeguard credentials for our organization is very important because it helps in managing the keys to the kingdom, especially the privileged access for various platforms."
"It is very simple to use."
"I would rate CyberArk Privileged Access Manager nine out of ten."
"The PSM is excellent and the ability to write your own connectors and plugins is invaluable as far as flexibility goes."
"Ensures accounts are managed according to corporate policies."
"One of the best features of CyberArk Privileged Access Manager is the capability of Privileged Session Manager (PSM) because it provides visibility into user activities, audit ability, and traceability."
"The most unique and valuable features are the upstream and downstream throughput capacities; the Safeguard platform provides agile integration. In actuality, all the features are valuable. They're good, user-friendly."
"The most valuable feature of One Identity Safeguard is the user-friendly interface."
"Safeguard can define and update processes and procedures into the security framework of a company, including mobile. It allows us to change the policies and configurations on a mass scale in regards to security."
"From my experience, the features are best for monitoring and the usage of LDAP and SSH."
"The transparent mode for privileged sessions is one of the best things for customers, because they don't see the system in-between."
"It is generally easy-to-use and install."
"The transparent mode for privileged sessions is a very good solution."
"I have found One Identity Safeguard to be stable."
"The dedicated Freshdesk platform is a user community and a step in the right direction for offering learning resources."
"It gives very good and in-depth knowledge about a particular identity. Everything is through a single click. We get to know the workflows related to a particular identity with a single click."
"It is a flexible tool because it works on JSON."
"The most valuable features of Saviynt are database utility and report generation. These two features have a major impact, particularly when you are trying to create a report because, in other systems, you need to use a third-party utility such as a BI tool or any other reporting tool to fetch the data and send out the report to a third party team. In Saviynt, it's a system within a system, so you don't have to use any third-party tool because you can directly do your query and write that code on Saviynt and then send that report to the team."
"The repository has many features where you can define primary and secondary owners."
"The product's initial setup phase is easy."
"Based on my experience working with Saviynt, they deserve a rating of nine because they are very responsive to support."
"The most valuable aspect of Saviynt is its market acceptance."
 

Cons

"The solution needs better features for end users to manage their own whitelisting for API retrieval."
"The solution is too big and complex for any businesses that are small or medium-sized. They should offer a more compact version or make a solution better suited to smaller businesses."
"The interface on version 9 looks old."
"I would love them to improve their UI customizing features."
"There is a lot of complexity if we are installing the solution on-premises."
"In CyberArk Privileged Access Manager, the UI has room for improvement, as does the dashboard reporting, which could be made better or easier to use."
"CyberArk has two disadvantages; the first is that it's insanely expensive and the other is it's very complex."
"It's a big program. To scale excessively, locally, on an on-prem application, takes a lot of servers."
"It needs more marketing."
"Something for One Identity to look at is having integration guidelines for how to logically group accounts."
"We sometimes face issues with configuration and things like that, but we manage to solve them."
"We have issues using Safeguard to connect to and record from the cloud. Currently, they don't have a mechanism to record this type of connection."
"The main thing that needs improvement is the slowness. Apart from that, the change password check-in feature also needs improvement because it is not working perfectly accurately."
"From a management point of view, it would be beneficial if One Identity Safeguard Privilege Password and One Identity Safeguard Privilege Session had a more similar interface."
"I just received a question from a customer in regards to a connection with Oracle OID. I tried to integrate Safeguard with the Oracle YAML as well as something else to manage the groups and users from a different system, like AD or LDAP. This one feature could be better. At this moment, the platform system can only use the integration with LDAP or AD. The software for research and development to create a connector to a YAML platform can be very complicated."
"The deployment affects our privileged users because it takes a long time for them to request privileges, which impacts the SLA."
"The UI doesn’t enhance the user experience."
"The product can improve the customer support offered to users since it is an area with shortcomings."
"In terms of improvement, it's really just a matter of them getting more mature. It's a relatively new solution and they probably need to streamline a few of the processes as they mature. But there are not too many problems."
"The custom application integration is a little complex, and this tool doesn't provide so many plugins or additional applications."
"An area for improvement in Saviynt is that there's a limitation on the number of logs you can get from the past twenty-four hours. For example, if the data is huge, the tool can only give you a maximum of one hundred logs. You can't get any further than that. In the next version of Saviynt, however, you can get more logs and you'll see them inside the log rotation. For example, when you're trying to search inside the log, you can select a date range, and then you can search for a particular log. We haven't used that new log rotation feature yet, but it's included in the next release of Saviynt. Another area for improvement in the tool is that it doesn't have a server monitoring feature, so if your server has a high load, it should give you a warning. You're supposed to get an alert similar to what's being done in WebLogic. In WebLogic, we had a separate facility, but in Saviynt, that feature's missing."
"The product lacks a broad user base which makes it difficult sometimes to find answers to questions about the product."
"We sometimes experience performance issues when the solution fails to process the data between two different applications."
"The tool is difficult to migrate."
 

Pricing and Cost Advice

"From a client perspective, CyberArk's pricing is fair but there is a significant increase each year. They should limit the price increase because this could potentially drive customers to other partners. Price changes should be at defined intervals. There should not be sudden jumps."
"The solution is cost-effective for the features."
"In comparison to other products on the market, CyberArk is a more costly product."
"CyberArk has been Gartner's number-one pick for the past ten years, so you can infer that their pricing is higher than everyone else. When you are the best, you will charge appropriately for it."
"CyberArk Privileged Access Manager is on the expensive side. It is very expensive."
"No, I do not have any advice on the price of the product."
"The pricing is slightly higher compared to other solutions, but it is reasonable because there are better security features."
"I hope to learn how the pricing works so that I can understand it better, but I am certain it is not inexpensive."
"The license is around $3,000 per month."
"We bought their other products, so it was not that expensive. It is one of those where the more you buy, the cheaper it is."
"It was definitely cheaper than the other two products that we evaluated."
"One Identity Safeguard is expensive and the cost goes up as we scale."
"They offer a fair price for a robust solution."
"They have comparable pricing. All identity products are essentially priced in a similar way. It's a per-user base."
"As compared to other products, it is reasonable, but the training sessions are too expensive."
"Our licensing costs are on a yearly basis."
"The pricing is comparable to Azure Entra ID. Kind of the same"
"If you are investing in securing your data and avoiding any non-compliance issues, then yes, it is certainly recommended. To put it plainly, if you're willing to pay fines and aren't concerned about the misuse of data, then there might not be a problem. However, if you intend to safeguard the data of your employees, vendors, and customers, it becomes crucial. In this context, managing data security requires preventive and detective measures, such as enforcing segregation of duties and regularly reviewing permissions. Throughout an individual's life cycle within an organization or customer life cycle, various access permissions are granted. Without taking action on these permissions, there is a risk of exposure later on. If individuals retain access after leaving the organization, it poses a serious security threat. Implementing solutions like Saviynt can address these challenges, ensuring continuous access review, generating reports, alerts, and identifying potential risks."
"We are not into the licensing part. The clients take care of the licensing part."
"Saviynt has a competitive price."
"The price of the license for this product is quite expensive."
"If you need to make any changes then there are additional fees."
"The solution has a pay-as-you-go licensing model, and you can subscribe monthly or yearly."
"The product is less expensive than one of the competitors."
report
Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.
868,654 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
14%
Manufacturing Company
9%
Government
6%
Computer Software Company
22%
Comms Service Provider
7%
Financial Services Firm
7%
Government
7%
Financial Services Firm
16%
Computer Software Company
14%
Manufacturing Company
8%
Healthcare Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business59
Midsize Enterprise41
Large Enterprise171
By reviewers
Company SizeCount
Small Business18
Midsize Enterprise12
Large Enterprise19
By reviewers
Company SizeCount
Small Business5
Midsize Enterprise5
Large Enterprise15
 

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to m...
What do you like most about CyberArk Privileged Access Manager?
The most valuable features of the solution are control and analytics.
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
Regarding costs, CyberArk Privileged Access Manager is not a cheap product; hence, many companies struggle with its h...
What do you like most about One Identity Safeguard?
The identity discovery is good, and the performance is pretty good value.
What is your experience regarding pricing and costs for One Identity Safeguard?
The pricing of One Identity Safeguard is fairly priced and cheaper than other solutions of the same enterprise level....
What needs improvement with One Identity Safeguard?
There is room for improvement in integration between modules. The native integration between SPP and SPS, which is cu...
What do you like most about Saviynt?
It is very easy to use. It addresses most of the trends in identity governance and risk management.
What is your experience regarding pricing and costs for Saviynt?
Saviynt is very affordable compared to its competitors. It is cloud-based, making it significantly cheaper than on-pr...
What needs improvement with Saviynt?
One area for improvement is Saviynt's training platform. They could enhance their training arrangements for partners ...
 

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
No data available
No data available
 

Overview

 

Sample Customers

Rockwell Automation
Cavium
Shell, McKesson, Kimberly-Clark, Ingram Micro, Intermountain Health Care, Forterra, CoreLogic
Find out what your peers are saying about CyberArk, Delinea, WALLIX and others in Privileged Access Management (PAM). Updated: September 2025.
868,654 professionals have used our research since 2012.