Try our new research platform with insights from 80,000+ expert users

CyberArk Privileged Access Manager vs WALLIX Bastion comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 6, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CyberArk Privileged Access ...
Ranking in Privileged Access Management (PAM)
1st
Average Rating
8.6
Reviews Sentiment
6.9
Number of Reviews
217
Ranking in other categories
User Activity Monitoring (1st), Enterprise Password Managers (2nd), Mainframe Security (2nd), Operational Technology (OT) Security (3rd)
WALLIX Bastion
Ranking in Privileged Access Management (PAM)
8th
Average Rating
7.6
Reviews Sentiment
7.4
Number of Reviews
11
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of April 2025, in the Privileged Access Management (PAM) category, the mindshare of CyberArk Privileged Access Manager is 19.0%, down from 23.1% compared to the previous year. The mindshare of WALLIX Bastion is 8.6%, up from 8.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Privileged Access Management (PAM)
 

Featured Reviews

Lasantha Wijesinghe - PeerSpot reviewer
We have visibility and control through real-time user behavior analytics
It took us some time to realize its benefits because there was a learning curve for us. It took us about a year to get our heads around this product and start effectively using it. It is a journey. It takes at least five years for any company to make this product very useful and reach maturity. It is not only the product's fault. The company needs to have a vision, and the company culture needs to go with it. Senior leadership needs to support the vision. You need to have lots of ingredients for success. If everything is in place, you will see success after one year. In the first year, it is a struggle for everybody. My company was bought by a bigger company, and they were very new to privileged access management. Everybody was struggling. The advice I would give is to have a good vision for privileged access management. You need dedicated teams, senior management support, and proper company policies and standards before implementing the solution. Start building knowledge slowly and avoid jumping into the deep end without preparation. I would rate CyberArk Privileged Access Manager a nine out of ten.
Herve Choupot - PeerSpot reviewer
Enhancing administration security with critical feature improvements needed
My primary use case is to make a training about Active Directory security. In my experience, I work with Bastion. I emphasize the importance of having a good knowledge of Bastion to avoid vulnerabilities It helps by providing some security features for administration, although it's crucial to be…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"If any intruder gets inside, they would not be able to move around nor do lateral movements. It minimize any attack problems within our network."
"Ensures accounts are managed according to corporate policies."
"CyberArk PAM can be easily automated."
"We have demoted a lot of domain admins and taken a lot of that away from people, giving it a shared account structure."
"The ability to develop and deploy applications with no stored secrets is very valuable."
"The best feature of CyberArk Privileged Access Manager is its core function: automatically managing and securing credentials."
"I would rate this solution a nine out of ten."
"When we started with RPA, there was a requirement that every credential and the bots themselves be protected through the PAM system. From the get-go, we've had CyberArk in the middle... We've got a pretty robust RPA implementation with our PAM platform. Users, bots, the credentials — everything is managed via our PAM solution."
"Bastion provides a kind of isolation between the administration laptop and the server you want to administer."
"WALLIX Bastion's most valuable feature is the Access Manager because you can use it and access the data center without any client VPN."
"We use WALLIX Bastion to provide access and to monitor sessions."
"Bastion provides a kind of isolation between the administration laptop and the server you want to administer."
"The solution's technical support team is helpful."
"The interface is very simple. It doesn't need any plug-ins, just browsers that are installed at the beginning."
"The most valuable feature of WALLIX Bastion is its password management capability, which is central to safeguarding sensitive information."
"Its video recording capabilities have definitely been key for us."
 

Cons

"CyberArk PAM could greatly benefit from an under-the-hood update; integrating machine learning algorithms could provide predictive insights."
"The PTA could be improved. Currently, companies often have multiple domains and sometimes it's difficult to implement CyberArk in this kind of infrastructure. For example, you can add CPM (Central Policy Manager) and PSM (Privileged Session Manager and PVWA (Password Vault Web Access) for access, but if you want to add PTA (Privileged Threat Analysis) to scan Vault logs, it is difficult because this component may be adding multiple domain environments."
"Transitioning from a traditional on-premises deployment to the privileged cloud has resulted in losing access to many logs and administrative tools typically available on the back end."
"The solution's architecture could be improved. It requires installation on four to five different servers. Each server has a purpose, but when you need to troubleshoot, it can be difficult because you need to access each of them. Reducing the number of servers would be helpful."
"Pricing is a concern for me because it is not very user-friendly for startups, new users, or very small organizations."
"Some of the additional features that we are looking at are in the Conjur product. I am specifically discussing key management, API Keys, and things for connecting applications in the CI/CD pipelines."
"The web access piece needs improvement. We have version 9.5 or 9.9.5, and now we have to upgrade to version 10."
"CyberArk's license is too expensive. I rate it seven out of 10 for affordability."
"The main problem of Bastion, CyberArk, and WALLIX is that they have the same interface for both administration and users, which is not a good idea from a security perspective."
"For me, the main issue has to do with the system performance itself."
"The scalability of WALLIX Bastion is rated seven out of ten. While it meets our current needs, scaling up the solution is not as easy, and improvements could be made in this area."
"The product doesn't have behavior analytics. They promised to develop this, but only for the cloud, not for on-premise versions."
"Based on my experience as a sales tech person, one area of improvement could be a more unified licensing model."
"There could be more automation features for the solution."
"The performance of WALLIX Bastion's password manager is very low."
"WALLIX Bastion is GUI-driven, but it sometimes needs some management."
 

Pricing and Cost Advice

"Overall, its pricing is really good. The main difference from all the other vendors is that they have one package that covers all the functionality and modules of the basic PAM, except the add-on modules like adware and server protection. It also doesn't include the licenses for domain controller protection or maybe an API call-related feature. For the basic privileged access management, the bundle pricing is really good, but when it comes to an agent-based solution for advanced cyber protection or application identity managers, it is expensive. Services are also very expensive if you hire the services team from CyberArk, but these guys are really good. For a couple of large banking projects, we had an experience with them. The banks wanted to have things quickly and efficiently, so we had to hire them. If we take four weeks, these guys can do everything on a weekend. They charge quite a big sum of money, but they know the system well."
"This solution is considered to be more expensive than others out there on the market today."
"CyberArk Enterprise Password Vault's pricing is reasonable."
"Before we bought it, they were licensing each function individually, which got complicated and very expensive. When we decided to buy it, it was much more straightforward and still quite expensive, but it brings a lot of value and risk reduction to the organization."
"Quite expensive"
"I focus more on the technical side, but I hear customers say that if CyberArk was more affordable, they might have acquired more licenses. Some clients consider alternative solutions due to pricing concerns."
"There are additional features added to our CyberArk Privileged Access Manager license. For example, features that allow us to integrate into various kinds of platforms."
"The main problem for the tool is its licensing. I work for a really big company. When you try to develop this as a service, usually you work with leverage teams who are formed with dozens of members. You might dedicate one FTE, or less, for something, e.g., an antivirus administrator. You might have half an FTE's effort dedicated to administering the antivirus, but then you have a team of about 30 users who might access that ticket. The problem is that CyberArk eliminated the possibility of concurrent users years ago. This is a big problem for companies who work with leverage teams. You need to pay for everyone. 40 licenses are used by 20 or 30 people. This is a big problem because licenses are not precisely cheap."
"The solution's pricing is comparable to that of other products."
"Some extra price needs to be paid for license."
"The solution's price is mid-ranged."
report
Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.
845,040 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
34%
Financial Services Firm
12%
Computer Software Company
11%
Manufacturing Company
6%
Computer Software Company
19%
Financial Services Firm
10%
Government
9%
Comms Service Provider
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
What do you like most about CyberArk Privileged Access Manager?
The most valuable features of the solution are control and analytics.
What do you like most about WALLIX Bastion?
The support is great. They offer 24/7 support, but the specific level of support depends on your subscription. There's a weekday-only option, and a 24/7 option that covers all days of the week. The...
What is your experience regarding pricing and costs for WALLIX Bastion?
I do not know the pricing, setup cost, or licensing. It's difficult to compare without an identical infrastructure.
What needs improvement with WALLIX Bastion?
The main problem of Bastion, CyberArk, and WALLIX is that they have the same interface for both administration and users, which is not a good idea from a security perspective. Also, there should be...
 

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
Bastion
 

Overview

 

Sample Customers

Rockwell Automation
RTBF, Pharmagest, Michelin Group, Niort Hospital
Find out what your peers are saying about CyberArk Privileged Access Manager vs. WALLIX Bastion and other solutions. Updated: March 2025.
845,040 professionals have used our research since 2012.