Try our new research platform with insights from 80,000+ expert users

CyberArk Privileged Access Manager vs WALLIX Bastion comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

CyberArk Privileged Access ...
Ranking in Privileged Access Management (PAM)
1st
Average Rating
8.6
Number of Reviews
193
Ranking in other categories
User Activity Monitoring (1st), Enterprise Password Managers (2nd), Mainframe Security (3rd), Operational Technology (OT) Security (3rd)
WALLIX Bastion
Ranking in Privileged Access Management (PAM)
11th
Average Rating
7.8
Number of Reviews
8
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of September 2024, in the Privileged Access Management (PAM) category, the mindshare of CyberArk Privileged Access Manager is 22.1%, down from 24.2% compared to the previous year. The mindshare of WALLIX Bastion is 9.3%, up from 8.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Privileged Access Management (PAM)
 

Featured Reviews

Salif Bereh - PeerSpot reviewer
Mar 7, 2022
Remote desktop manager can register connections, making it easy to connect to machines through the virtual IP
The PTA could be improved. Currently, companies often have multiple domains and sometimes it's difficult to implement CyberArk in this kind of infrastructure. For example, you can add CPM (Central Policy Manager) and PSM (Privileged Session Manager and PVWA (Password Vault Web Access) for access, but if you want to add PTA (Privileged Threat Analysis) to scan Vault logs, it is difficult because this component may be adding multiple domain environments. CyberArk, as a solution, can easily adapt to a lot of environments, and you can add a lot of components to different zones, and that will work with the Vault. But not all the components, such as the PTA, can do so. Also, it would be helpful if CyberArk added some features for monitoring machines when we access them. For example, they need to improve the PVWA. In general, when we don't use the PVWA, we don't have a lot of problems. For me, the PVWA is not perfect. I would like to see more features in the PVWA to administer our machines and to improve the transfer of data.
PO
Jan 8, 2024
Offers secure identity management, privilege control, access monitoring, and risk reduction through controlled access
Based on my experience as a sales tech person, one area of improvement could be a more unified licensing model. For example, if you look at BeyondTrust, their licensing is more straightforward. They only ask about the number of assets you need to protect, and there's no additional cost for external users or third-party vendors. With WALLIX Bastion, there's a separate fee for external users to access the environment. It would be great if they could unify the licensing so that customers don't have to pay separate fees for different types of users. It would make the pricing more transparent and easier to understand. Even if the total cost stays the same, a unified approach would be much simpler and more convenient for customers. It's about clarity and ease of understanding.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It is very simple to use."
"The password protection itself is the most important feature. It's something we didn't have before."
"CyberArk's GUI is user friendly."
"It has helped from an auditing perspective identify who has access to privileged accounts."
"If properly set up, CyberArk Enterprise Password Vault has good stability, and is a very solid tool. It can run by itself. Its most valuable features are auto password recycling and PSM."
"The automatic rotation of credentials is probably the most useful feature."
"The combination of CPM and PSM resolves a lot of use cases."
"The solution is stable."
"I like that it's Linux-based, and you don't need to have separate implementations, extra database licenses, or enterprise licenses. I think because it's Linux-based, it's more seamless than Windows. I also like the access manager, which I think is a super tool. Everything is browser-based, and you don't need a VPN. So, that's a great thing."
"The support is great. They offer 24/7 support, but the specific level of support depends on your subscription. There's a weekday-only option, and a 24/7 option that covers all days of the week. They also have offices in different regions, including West Africa, so people there can easily get support. There's no need to worry about getting assistance."
"The interface is very simple. It doesn't need any plug-ins, just browsers that are installed at the beginning."
"The solution's technical support team is helpful."
"Its video recording capabilities have definitely been key for us."
"We use WALLIX Bastion to provide access and to monitor sessions."
"WALLIX Bastion's most valuable feature is the Access Manager because you can use it and access the data center without any client VPN."
 

Cons

"I'd like to see a more expansive SSH tunneling situation through PSMP. Right now you have an account that exists in the vault and you say, "I want to create a tunnel using this account." I'd like to see something that is not account-based where I could say, "I want to create a tunnel to this machine over here," and then authenticate through the PSMP and then your tunnel is set up. You wouldn't need to then authenticate to a machine."
"More additional features as far as the REST is concerned, because we have something which was the predecessor to REST. A lot of the features which were in the predecessor have not necessarily been ported over to REST yet."
"What needs to be improved in CyberArk Enterprise Password Vault is their customer support, particularly in terms of responsiveness, willingness to help, and being more understanding. The initial setup and upgrade process for the solution is complex and can only be done by CyberArk, so this is another area for improvement."
"To get it to a ten it should give other possibilities to select if you could follow the keystrokes. It should have a flexibility with things where people can use it a lot faster."
"The challenge with the product is pricing since it's expensive. It also needs to improve the customization. We encountered some stability issues as well."
"The installation process should be easier and more user-friendly so that you don't need to hire a third party to deploy it."
"CyberArk Privileged Access Manager could improve the integration docking, it should have more layers. For example, integration with OpenShift."
"When I was a component owner for PAM's Privileged Threat Analytics (PTA) component, what I wanted was a clear mapping to the MITRE ATT&CK framework, a framework which has a comprehensive list of use cases. We reached out to the vendor and asked them how much coverage they have of the uses cases found on MITRE, which would have given us a better view of things while I was the product owner. Unfortunately they did not have the capability of mapping onto MITRE's framework at that time."
"The product doesn't have behavior analytics. They promised to develop this, but only for the cloud, not for on-premise versions."
"The password management needs improvement. Management of Access Manager should be improved as well."
"WALLIX Bastion is GUI-driven, but it sometimes needs some management."
"There could be more automation features for the solution."
"It would be better if I could manage multiple accounts in one place, like CyberArk. With WALLIX, you can only manage one account, and you are given a separate category. You have to click on each connection to do anything. For example, CyberArk might give three options for one connection if you want to have an interactive user-level experience. But with WALLIX, you have to click three times to get that access. Also, the biggest disadvantage of WALLIX is the reporting. I feel like it's very weak in reporting when compared to the other solutions. As a solution, they're good and stable. But they need to make their reports neater and better. Right now, we're going to the console and then pressing buttons every single time."
"For me, the main issue has to do with the system performance itself."
"Based on my experience as a sales tech person, one area of improvement could be a more unified licensing model."
"The performance of WALLIX Bastion's password manager is very low."
 

Pricing and Cost Advice

"The solution is costly but we get what we pay for."
"If you are looking at implementing this solution, buy the training and go to it."
"Overall, its pricing is really good. The main difference from all the other vendors is that they have one package that covers all the functionality and modules of the basic PAM, except the add-on modules like adware and server protection. It also doesn't include the licenses for domain controller protection or maybe an API call-related feature. For the basic privileged access management, the bundle pricing is really good, but when it comes to an agent-based solution for advanced cyber protection or application identity managers, it is expensive. Services are also very expensive if you hire the services team from CyberArk, but these guys are really good. For a couple of large banking projects, we had an experience with them. The banks wanted to have things quickly and efficiently, so we had to hire them. If we take four weeks, these guys can do everything on a weekend. They charge quite a big sum of money, but they know the system well."
"I would rate the tool’s pricing a six out of ten."
"Pricing is quite high and it could be improved."
"Our risk is definitely significantly lower. Also, our resources are low."
"This solution is considered to be more expensive than others out there on the market today."
"It is in line with its competitors, but all such solutions cost too much money."
"The solution's price is mid-ranged."
"Some extra price needs to be paid for license."
"The solution's pricing is comparable to that of other products."
report
Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.
800,905 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
28%
Financial Services Firm
13%
Computer Software Company
12%
Manufacturing Company
6%
Computer Software Company
20%
Financial Services Firm
9%
Government
9%
Comms Service Provider
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
What do you like most about CyberArk Privileged Access Manager?
The most valuable features of the solution are control and analytics.
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
CyberArk Privileged Access Manager comes at a high cost. But the solution is worth its price.
What do you like most about WALLIX Bastion?
The support is great. They offer 24/7 support, but the specific level of support depends on your subscription. There's a weekday-only option, and a 24/7 option that covers all days of the week. The...
What is your experience regarding pricing and costs for WALLIX Bastion?
The solution's pricing is comparable to that of other products.
What needs improvement with WALLIX Bastion?
WALLIX Bastion is GUI-driven, but it sometimes needs some management. The solution’s reporting and alerting could be improved.
 

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
Bastion
 

Learn More

 

Overview

 

Sample Customers

Rockwell Automation
RTBF, Pharmagest, Michelin Group, Niort Hospital
Find out what your peers are saying about CyberArk Privileged Access Manager vs. WALLIX Bastion and other solutions. Updated: July 2024.
800,905 professionals have used our research since 2012.