Try our new research platform with insights from 80,000+ expert users

CyberArk Privileged Access Manager vs Workspace ONE UEM comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
6.6
CyberArk Privileged Access Manager enhances security, automates tasks, aids SOX compliance, reduces risks, and scales security operations efficiently.
Sentiment score
6.5
Workspace ONE UEM users reported improved security, reduced IT workload, and cost savings, with varying ROI experiences and future potential.
The return on investment lies in improved security infrastructure, addressing over-privileged access, and reducing the risk of credential compromise, which is a major source of data breaches.
The end users have the authority to reconcile the password or verify it before using session isolation, which is one of the unique features that can be enabled through Privileged Session Manager, preventing any attacks from happening within the organization when connected with sessions through CyberArk Privileged Access Manager.
CyberArk Privileged Access Manager has helped customers save on costs primarily by reducing the number of engineering and information security personnel.
 

Customer Service

Sentiment score
6.5
CyberArk's support shows improvement with efficient service but needs faster responses for high-priority issues and better tier coordination.
Sentiment score
5.9
Workspace ONE UEM support varies in effectiveness, with inconsistency and delays, but escalated cases often receive excellent assistance.
CyberArk has been exceptional in coming back to us with immediate responses.
It could be forever until you talk to someone who knows what they are doing.
Based on the issue resolution and support quality, I rate the support 10 out of 10.
Support responds immediately, but I see that some engineers are new or they don't have experience collecting logs, so they take two to three days to come back.
The support side has recently become weaker compared to what it used to be with VMware.
 

Scalability Issues

Sentiment score
7.6
CyberArk Privileged Access Manager is scalable and adaptable, supporting growth and diverse infrastructures despite potential licensing complexities.
Sentiment score
7.6
Workspace ONE UEM is praised for scalability and flexibility, supporting diverse enterprises with minimal issues, especially in cloud deployments.
The CPM can reportedly handle up to 50,000 accounts independently without issue.
I would rate it a ten out of ten for scalability.
They had 40,000 passwords in this one safe, and it was saving the last ten iterations of each password object. That means they had 400,000 password objects in this safe. They exceeded the limit.
 

Stability Issues

Sentiment score
7.7
CyberArk Privileged Access Manager is stable and reliable, with minor bugs often due to configuration or infrastructure issues.
Sentiment score
7.6
Workspace ONE UEM is stable and reliable, though complex environments and updates may occasionally cause issues, especially on-premise.
Proper fine-tuning and expertise ensure the product performs well.
Overall, the stability of the solution is high.
It has a large customer base and positive feedback within my network.
 

Room For Improvement

Users find CyberArk Privileged Access Manager needing UI updates, better integration, improved documentation, customizable reporting, and enhanced automation.
Workspace ONE UEM users seek better reporting, integration, and user-friendliness, with concerns about scalability, pricing, and training resources.
They want everything to be on the cloud, but even in the SaaS version of CyberArk Privileged Access Manager, they need to deploy some servers on-premises.
We cannot generate a plug-in for web-based applications.
If they want clients to move to the cloud, they need to support them in real-time.
Another concern is that support is getting reduced by Workspace ONE; some customers are saying there are support issues on Workspace ONE right now.
The documentation is not comprehensive compared to other VMware solutions or Microsoft documentation.
 

Setup Cost

CyberArk Privileged Access Manager is costly but offers strong security, appealing to large enterprises with flexible subscription options.
Workspace ONE UEM is often pricier than competitors, with costs affected by user count, features, and additional fees.
CyberArk is expensive compared to other products I know.
CyberArk is comparatively expensive compared to other PAM solutions, such as Delinea, especially during renewal.
CyberArk's SaaS solution is particularly expensive.
 

Valuable Features

CyberArk Privileged Access Manager enhances security with policy automation, AI threat detection, and flexible, scalable privilege account management.
Workspace ONE UEM offers shared device mode, strong security, seamless integration, remote management, and scalable, stable multi-platform support.
CyberArk Privileged Access Manager helps ensure data privacy because we now know who is using which credentials and at what time.
It keeps a record of activities, allowing me to easily fetch screen recordings to detect any misuse and see who did what and what happened.
It can integrate with Splunk, SNMP, and other solutions and technologies.
In UEM, the most helpful part of Windows Management is the baseline policy and central script; using this, you can replace all the AD GPO policy.
In terms of assessing the capability of Workspace ONE UEM in maintaining compliance across all endpoints, that's a very handy feature set.
 

Categories and Ranking

CyberArk Privileged Access ...
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
229
Ranking in other categories
User Activity Monitoring (1st), Enterprise Password Managers (3rd), Privileged Access Management (PAM) (1st), Mainframe Security (2nd), Operational Technology (OT) Security (3rd)
Workspace ONE UEM
Average Rating
8.2
Reviews Sentiment
6.7
Number of Reviews
102
Ranking in other categories
Remote Access (5th), Virtual Desktop Infrastructure (VDI) (8th), Enterprise Mobility Management (EMM) (2nd), Identity and Access Management as a Service (IDaaS) (IAMaaS) (10th), Unified Endpoint Management (UEM) (2nd)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. CyberArk Privileged Access Manager is designed for Privileged Access Management (PAM) and holds a mindshare of 16.3%, down 22.0% compared to last year.
Workspace ONE UEM, on the other hand, focuses on Unified Endpoint Management (UEM), holds 14.1% mindshare, down 16.6% since last year.
Privileged Access Management (PAM) Market Share Distribution
ProductMarket Share (%)
CyberArk Privileged Access Manager16.3%
Delinea Secret Server7.5%
WALLIX Bastion7.4%
Other68.8%
Privileged Access Management (PAM)
Unified Endpoint Management (UEM) Market Share Distribution
ProductMarket Share (%)
Workspace ONE UEM14.1%
Microsoft Intune33.0%
ManageEngine Endpoint Central10.7%
Other42.2%
Unified Endpoint Management (UEM)
 

Featured Reviews

Atul-Gujar - PeerSpot reviewer
Secures critical infrastructures with essential user session audit records
A potential area for improvement is enhancing support for cluster environments and distributed Vaults. Clients in multiple countries that need central access have different challenges that require better solutions from CyberArk. For financial services, CyberArk can improve incident response by ensuring fast support for critical priority tickets to meet compliance requirements. Providing more documentation on CyberArk is recommended for new team members to enhance their troubleshooting capabilities. I understand it's up to the client, but 99% fail to change the demo key, so it's crucial for CyberArk to emphasize changing the key and documenting it as part of the installation process.
Vishal Bhatia - PeerSpot reviewer
Effective product tracking and monitoring enhances daily operations despite needing documentation improvement
The documentation part of Workspace ONE UEM can be confusing. The documentation is not comprehensive compared to other VMware solutions or Microsoft documentation. Most people struggle to connect the dots when looking at the documentation. Even the training material and PowerPoint slide decks that trainers use are sometimes too confusing or overwhelming, with too much content but not enough clarity. The support side has recently become weaker compared to what it used to be with VMware. This is another area that needs improvement. Since working with Workspace ONE UEM from when it was AirWatch, it has improved significantly over the last five years. However, there are still some gray areas and scope for improvement, especially in documentation and workflow between different aspects of the solution.
report
Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.
867,676 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
14%
Manufacturing Company
9%
Government
6%
Computer Software Company
16%
Financial Services Firm
9%
Manufacturing Company
8%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business60
Midsize Enterprise41
Large Enterprise171
By reviewers
Company SizeCount
Small Business41
Midsize Enterprise21
Large Enterprise57
 

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
What do you like most about CyberArk Privileged Access Manager?
The most valuable features of the solution are control and analytics.
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
There has been no reduced cost associated with CyberArk Privileged Access Manager, as when it is required, you must pay for their licensing and prepare the full environment. While there are costs f...
How does Microsoft Intune compare with VMware Workspace One?
Microsoft Intune is a great tool for managing a mobile device fleet while keeping access control. The solution makes it easy to control security and manage the usage of mobile apps when you have a ...
How does VMware Workspace One compare with VMware Horizon 7?
VMware Workspace One has a powerful set of helpful features. The solution offers very good documentation, the initial setup is easy, and the product is very stable and reliable. I think the fact th...
What do you like most about VMware Workspace ONE?
The platform provides a stable environment for operations and quickly creates new environments. Additionally, it offers efficient flexibility.
 

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
VMware Workspace ONE, VMware AirWatch, Workspace ONE Assist, VMware Identity Manager, Workspace ONE Access, VMware Horizon Air
 

Overview

 

Sample Customers

Rockwell Automation
Australian Sports Commission, Stockport NHS Foundation Trust, Lomond School, Merck, United Bank, Medical College of Wisconsin, Latymer Upper School, 2gether NHS Foundation Trust, Dowling Aaron Inc., Trillium Lakelands District School Board, Harrogate Grammar School, Duke University Football, Delta Air Lines, Adventist Health System, Giochi Preziosi, Cramlington Learning Village, Intermountain Healthcare, Safexpress, TAG Aviation
Find out what your peers are saying about CyberArk, Delinea, One Identity and others in Privileged Access Management (PAM). Updated: August 2025.
867,676 professionals have used our research since 2012.