CyberArk Privileged Access Manager vs Workspace ONE UEM comparison

The compared CyberArk and Omnissa solutions aren't in the same category. CyberArk is ranked #1 in PAM , with an average rating of 8.7, and holds a 18.3% mindshare in the category. Omnissa is ranked #2 in UEM , with an average rating of 7.7, and holds a 15.9% mindshare. Additionally, 94% of CyberArk users are willing to recommend the solution, compared to 83% of Omnissa users who would recommend it.

CyberArk Privileged Access ...

Read 221 CyberArk Privileged Access Manager reviews

8,372 Views
5,190 Comparison Views

94% willing to recommend

Workspace ONE UEM

Read 100 Workspace ONE UEM reviews

6,424 Views
5,219 Comparison Views

83% willing to recommend

CyberArk Privileged Access ...

Workspace ONE UEM

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between CyberArk Privileged Access Manager and Workspace ONE UEM based on real PeerSpot user reviews.

Find out what your peers are saying about CyberArk, Delinea, One Identity and others in Privileged Access Management (PAM).

To learn more, read our detailed Privileged Access Management (PAM) Report (Updated: April 2025).

Buyer's Guide

Privileged Access Management (PAM)

April 2025

Download the complete report

Helped 850,671 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

CyberArk Privileged Access ...

Average Rating

8.6

Reviews Sentiment

6.9

Number of Reviews

221

Ranking in other categories

User Activity Monitoring (1st), Enterprise Password Managers (2nd), Privileged Access Management (PAM) (1st), Mainframe Security (2nd), Operational Technology (OT) Security (3rd)

Workspace ONE UEM

Average Rating

8.2

Reviews Sentiment

6.8

Number of Reviews

100

Ranking in other categories

Remote Access (3rd), Virtual Desktop Infrastructure (VDI) (7th), Enterprise Mobility Management (EMM) (3rd), Identity and Access Management as a Service (IDaaS) (IAMaaS) (8th), Unified Endpoint Management (UEM) (2nd)

Mindshare comparison

While both are Security Software solutions, they serve different purposes. CyberArk Privileged Access Manager is designed for Privileged Access Management (PAM) and holds a mindshare of 18.3%, down 22.8% compared to last year.
Workspace ONE UEM, on the other hand, focuses on Unified Endpoint Management (UEM), holds 15.9% mindshare, down 19.0% since last year.

Privileged Access Management (PAM)

Unified Endpoint Management (UEM)

Featured Reviews

Lasantha Wijesinghe

Cybersecurity Specialist at a comms service provider with 5,001-10,000 employees

We have visibility and control through real-time user behavior analytics

It took us some time to realize its benefits because there was a learning curve for us. It took us about a year to get our heads around this product and start effectively using it. It is a journey. It takes at least five years for any company to make this product very useful and reach maturity. It is not only the product's fault. The company needs to have a vision, and the company culture needs to go with it. Senior leadership needs to support the vision. You need to have lots of ingredients for success. If everything is in place, you will see success after one year. In the first year, it is a struggle for everybody. My company was bought by a bigger company, and they were very new to privileged access management. Everybody was struggling. The advice I would give is to have a good vision for privileged access management. You need dedicated teams, senior management support, and proper company policies and standards before implementing the solution. Start building knowledge slowly and avoid jumping into the deep end without preparation. I would rate CyberArk Privileged Access Manager a nine out of ten.

Read full review

Joel Amate

Project Engineer at CTC

The solution is stable, scalable, and offers single sign-on

I give the solution a nine out of ten. I suggest if a person wants to start using Workspace ONE, they should make use of the cloud instance instead of the on-premise instance. There is an on-premise instance available, but the cloud instance is a better option now. I advise them to make use of the cloud instance. This is because management-wise, there is no need to manage a server. For example, we don't need to buy a server, and we don't need to buy network switches, which are required for the on-premise. At the same time, I can advise setting up all the functionalities or whatever functionalities are available for the trial version. We need to check if the Workspace ONE integration includes Azure AD or other identity providers. A lot of applications are using these providers for authentication, such as Ping, Okta, and others. If the Workspace ONE integration doesn't include these providers, the company might have to find a different solution. Security projects should also be considered. Specifically, if the solution can integrate with local security solutions to secure mobile devices.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"We use the solution for password vaulting, password rotation, session management, and secret management."

"We know when passwords will be expiring so we can force users to change their passwords, as well as requiring specific password requirements for length, complexity, etc."

"The central password manager is the most valuable feature because the password is constantly changing. If an outsider threat came in and gained access to one of those passwords, they would not have access for long."

"It is a single tool that isolates possible kinds of malware. You get lateral movement blocking and auditing information, e.g., you know who is doing what. You are getting protections from the service as well as a useful environment. All your admins can easily go in and out of your company while accessing your servers in a secure way, even if they are working abroad."

"Our privileged accounts are now stored in a more secure location and lateral movement within the network have been lessened."

"The Password Upload Utility tool makes it easier when setting up a Safe that contains multiple accounts and has cut down the amount of time that it takes to complete the task."

"It is a central repository. Therefore, if someone needs to access a server, then they go through CyberArk PAM. It provides a secure way to do this and CyberArk PAM records everything. For example, if you are connecting to a Linux server, then once you get into the Linux server and if it is integrated with CyberArk, it will automatically start recording everything that is being done. In most banks, seeing the recordings is very useful. If there are any gaps or something has happened which shouldn't have happened, then we can check the logs and videos. So, it gives security, in a robust manner, to the organization."

"CyberArk is a pioneer for PAM; they've always been the leader in terms of research and development and bringing new capabilities to the PAM."

More CyberArk Privileged Access Manager pros

"Among the most important improvements is the ability to set up different groups with different deployment policies."

"It has all of the features that we need to use and that we want to use."

"Workspace ONE has something like an orchestrator model that allows me to configure a set of steps to onboard new PCs, laptops, or tablets. So, it makes my work easy."

"VMware Workspace ONE has been stable so far."

"The feature with the highest rating for me is its employee management. I can also praise how versatile it is in terms of operating systems. It has good support for multiple operating systems and can easily manage them all. Not just that, but it can also support any kind of tool that can be run on all these operating systems."

"Workspace ONE adds a lot of value compared to Microsoft because Microsoft is a late entry into the market, and they're still developing their product from an end-user perspective. Workspace ONE has a slight edge because of AirWatch. VMware has developed its product over a longer period of time, so they have better integrations as a whole solution."

"The most valuable feature is the security policies."

"Sometimes, we face an issue and raise a ticket. The technical support team is fantastic and resolves the issue."

More Workspace ONE UEM pros

Cons

"The architecture needs to be improved."

"The initial setup of CyberArk is a challenge if you do not have prior experience with it."

"The authentication port is available in CyberArk Alero but not Fortinet products."

"It's hard to find competent resellers/support."

"It's expensive and you're not getting anything new. It's just a control, but in terms of risk, you are covering a big impact on the company."

"Many of the infrastructure folks who use the product dislike it because it complicates their workflow. They get a little less control, and they have to go through a specific solution. It proactively logs in for them, which obfuscates some of the issues that they may be troubleshooting."

"Based on the user experience that I see on a day-to-day basis, some changes could be made to the Privileged Session Manager tool to make it more user-friendly. The user interface of that tool could be more advanced and understandable to laymen, rather than being more of a developer tool."

"This product needs professional consulting services to onboard accounts effectively based user profiles."

More CyberArk Privileged Access Manager cons

"They do have a good integration, but there is a long way to go as far as integration is concerned. They need to integrate with the cloud solutions a little bit more. We are looking for Azure integration."

"The location service could improve and more integration with other devices, such as Android enterprise and Apple devices."

"vIDM could be improved with the multi-tenant capabilities that VMware tends to offer—features like customization branding and the integration of the app catalog based on the branding. Since the integration has been at top-level OGs, you were not able to then do rebranding if you were required to use specific user groups to highlight specific applications. At the time, I was personally opening feature requests for these things. I haven't worked with the latest release, so I don't know if these features were already deployed or not."

"VMware Workspace ONE sometimes has bugs that prevent it from working as intended or expected. Generally, these bugs can lead to unexpected results and hinder effectiveness."

"We'd like the customization to be better."

"Windows 10 management is there, but VMware only recently developed that part, and it's not fully mature. Patch management and other integrations are there as well as the application-pushing part, command line, mandatory commands, etc. Some out-of-the-box solutions should be available to better integrate a broader range of applications and handle application push. That's the roadmap we should look at."

"I would like better integration for deploying programs with binary files."

"There could be ease of integration within the environment. I didn't have any issues when using it, but the integration part was a bit difficult for the other team."

More Workspace ONE UEM cons

Pricing and Cost Advice

"Overall, its pricing is really good. The main difference from all the other vendors is that they have one package that covers all the functionality and modules of the basic PAM, except the add-on modules like adware and server protection. It also doesn't include the licenses for domain controller protection or maybe an API call-related feature. For the basic privileged access management, the bundle pricing is really good, but when it comes to an agent-based solution for advanced cyber protection or application identity managers, it is expensive. Services are also very expensive if you hire the services team from CyberArk, but these guys are really good. For a couple of large banking projects, we had an experience with them. The banks wanted to have things quickly and efficiently, so we had to hire them. If we take four weeks, these guys can do everything on a weekend. They charge quite a big sum of money, but they know the system well."

"My company always complains about the cost of CyberArk Privileged Access Manager because it's too high."

"There are no additional costs other than the standard licensing fees."

"It's per-company, license-based."

"CyberArk DNA is free if you purchase the CyberArk solution. There is no additional charge for CyberArk DNA, which is great."

"CyberArk is one of the best PAM solutions and one of the most expensive, but it works better than the others, so the pricing is fair."

"With reducing the privileged account access, there has been a huge improvement. They are now bringing more accounts on a little at a time."

"I do not have any opinions to add about the pricing of the product."

More CyberArk Privileged Access Manager pricing and cost advice

"We pay approximately thirty to thirty-five euros per device per month for the complete suite, and this is a fixed cost with one, three, or five-year licensing in advance. I would rate the pricing a four out of ten, making it affordable."

"You should take out a dedicated license agreement of your MDM fleet and invest heavily in innovating in this space."

"The solution is more expensive than Intune."

"The cost is a little bit high."

"It's definitely a bit on the expensive side. It is more for smaller organizations and not large, massive enterprises. I am not sure about any additional costs. As far as we could tell, the billing was what the billing was."

"If you purchase it for one year, it is very expensive. If you get it for three years or up to five years, then you can bargain a better price."

"Currently, the product is priced at around 50 USD."

"I rate the product price a five on a scale of one to ten, where one is cheap and ten is expensive."

More Workspace ONE UEM pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.

See recommendations

850,671 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Educational Organization

33%

Financial Services Firm

12%

Computer Software Company

11%

Manufacturing Company

Computer Software Company

17%

Financial Services Firm

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?

We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...

See all answers

What do you like most about CyberArk Privileged Access Manager?

The most valuable features of the solution are control and analytics.

See all answers

What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?

With the current model of licensing, for my use cases, sometimes it's hard to convince the management and get budget approvals for it. It's expensive and you're not getting anything new. It's just ...

See all answers

How does Microsoft Intune compare with VMware Workspace One?

Microsoft Intune is a great tool for managing a mobile device fleet while keeping access control. The solution makes it easy to control security and manage the usage of mobile apps when you have a ...

See all answers

How does VMware Workspace One compare with VMware Horizon 7?

VMware Workspace One has a powerful set of helpful features. The solution offers very good documentation, the initial setup is easy, and the product is very stable and reliable. I think the fact th...

See all answers

What do you like most about VMware Workspace ONE?

The platform provides a stable environment for operations and quickly creates new environments. Additionally, it offers efficient flexibility.

See all answers

Comparisons

Microsoft Entra ID vs CyberArk Privileged Access Manager

Compared 9% of the time

Delinea Secret Server vs CyberArk Privileged Access Manager

Compared 7% of the time

WALLIX Bastion vs CyberArk Privileged Access Manager

Compared 6% of the time

Cisco Identity Services Engine (ISE) vs CyberArk Privileged Access Manager

Compared 6% of the time

Bitwarden vs CyberArk Privileged Access Manager

Compared 4% of the time

More CyberArk Privileged Access Manager Competitors

Microsoft Intune vs Workspace ONE UEM

Compared 34% of the time

Horizon 8 vs Workspace ONE UEM

Compared 7% of the time

SOTI MobiControl vs Workspace ONE UEM

Compared 7% of the time

Jamf Pro vs Workspace ONE UEM

Compared 6% of the time

ManageEngine Endpoint Central vs Workspace ONE UEM

Compared 5% of the time

More Workspace ONE UEM Competitors

Product Reports

Buyer's Guide

CyberArk Privileged Access Manager

May 2025

CyberArk Privileged Access Manager report

Download CyberArk Privileged Access Manager product report

Buyer's Guide

Workspace ONE UEM

April 2025

Download Workspace ONE UEM product report

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault

VMware Workspace ONE, VMware AirWatch, Workspace ONE Assist, VMware Identity Manager, Workspace ONE Access, VMware Horizon Air

Overview

CyberArk Privileged Access Manager is a next-generation solution that allows users to secure both their applications and their confidential corporate information. It is extremely flexible and can be implemented across a variety of environments. This program runs with equal efficiency in a fully cloud-based, hybrid, or on-premises environment. Users can now protect their critical infrastructure and access it in any way that best meets their needs.

CyberArk Privileged Access Manager possesses a simplified and unified user interface. Users are able to manage the solution from one place. The UI allows users to view and manage all of the information and controls that administrators need to be able to easily access. Very often, management UIs do not have all of the controls and information streamlined in a single location. This platform provides a level of visibility that ensures users will be able to view all of their system’s most critical information at any time that they wish.

Benefits of CyberArk Privileged Access Manager

Some of CyberArk Privileged Access Manager’s benefits include:

The ability to manage IDs and permissions across a cloud environment. In a world where being able to work remotely is becoming increasingly important, CyberArk Privileged Access Manager is a very valuable tool. Administrators do not need to worry about infrastructure security when they are away from the office. They can assign and manage security credentials from anywhere in the world.
The ability to manage the program from a single centralized UI. CyberArk Privileged Access Manager’s UI contains all of the system controls and information. Users now have the ability to view and use all of their system’s most critical information and controls from one place.
The ability to automate user management tasks. Administrators can save valuable time by assigning certain management tasks to be fulfilled by the system itself. Users can now reserve their time for tasks that are most pressing. It can also allow for the system to simplify the management process by having the platform perform the most complex functions.

Reviews from Real Users

CyberArk Privileged Access Manager’s software stands out among its competitors for one very fundamental reason. CyberArk Privileged Access Manager is an all-in-one solution. Users are given the ability to accomplish with a single platform what might usually only be accomplished with multiple solutions.

PeerSpot users note the truly all-in-one nature of this solution. Mateusz K., IT Manager at a financial services firm, wrote, "It improves security in our company. We have more than 10,000 accounts that we manage in CyberArk. We use these accounts for SQLs, Windows Server, and Unix. Therefore, keeping these passwords up-to-date in another solution or software would be impossible. Now, we have some sort of a platform to manage passwords, distribute the inflow, and manage IT teams as well as making regular changes to it according to the internal security policies in our bank."

Hichem T.-B., CDO & Co-Founder at ELYTIK, noted that “This is a complete solution that can detect cyber attacks well. I have found the proxy features most valuable for fast password web access.”

CyberArk

VMware Workspace ONE is an intelligence-driven digital workspace platform that delivers any app on any device. It integrates access control, multi-platform endpoint management, and application management. With the VMware Workspace ONE platform, IT teams can deliver a digital workspace that includes the devices and apps of the company’s choice, but with security and control.

VMware Workspace ONE is available:

As a cloud service
On-premises
Hybrid

VMware Workspace ONE Key Features

Simple app authentication: VMware Workspace ONE allows end-users to have password-less single sign-on, giving them access to virtually any app (mobile apps, web apps, cloud apps, and Windows apps).
Unified Endpoint Management options: VMware Workspace ONE aims to support all devices, offering convenience, access, security, and management that will work for any business.
Conditional access: VMware Workspace ONE provides a powerful policy engine to help you make dynamic decisions regarding end-user access rights and to protect sensitive information.
Automated app management: With VMware Workspace ONE the application delivery process can be automated, which improves security and compliance. Software packages can be automatically installed, updated, and removed, and automated workflows can also be created.

VMware Workspace ONE Benefits

Some of the benefits of using VMware Workspace ONE include:

Less IT intervention necessary: Because VMware Workspace ONE has simple app authentication, end-users can help themselves by selecting the applications they need rather than having IT intervene.
Smoother employee onboarding: Transform employee onboarding by enabling self-service access to the apps your end-users need to complete their job duties.
Compliance: VMware Workspace ONE helps end-users reach compliance by using advanced device restrictions.
Real-time visibility: You can have real-time visibility with application, device, and console events that provide detailed information for system monitoring. You can also view logs in the console or export pre-defined reports.

Workspace ONE Components

Workspace ONE Access
Workspace ONE UEM
VMware Workspace ONE® Intelligence
VMware Unified Access Gateway
Workspace ONE Intelligent Hub

Reviews from Real Users

Below is some feedback from our PeerSpot users who are currently using the solution:

PeerSpot user Patrick B., Cybersecurity Architect at a tech services company, says, "Its UI is extremely easy to use whether you're an advanced user or a novice user. When I first opened it up and had to learn the product, I was easily a novice. By the end of the third month, I was digging into the backend of the system and using it as a highly advanced user to accomplish what I needed to accomplish, and I was able to do it through the UI mostly."

Roshan T., Partner Manager North America at a tech company, mentions how satisfied he is with the product, saying, "You can put all your applications on a mobile device, be it a phone or tablet. It is secure and easy to use. Because it is centrally managed, you don't have to do any configuration on the phone. I just got the phone and connected to the central applications. I just downloaded one thing and everything got rolled out. Email, calendar, and other things were deployed centrally. If you don't have AirWatch, you have to configure your phone manually. For example, you need to deploy and configure your email manually and then synchronize everything. It is much simpler when a mobile device is centrally managed."

Omnissa

Sample Customers

Rockwell Automation

Australian Sports Commission, Stockport NHS Foundation Trust, Lomond School, Merck, United Bank, Medical College of Wisconsin, Latymer Upper School, 2gether NHS Foundation Trust, Dowling Aaron Inc., Trillium Lakelands District School Board, Harrogate Grammar School, Duke University Football, Delta Air Lines, Adventist Health System, Giochi Preziosi, Cramlington Learning Village, Intermountain Healthcare, Safexpress, TAG Aviation

Buyer's Guide

Privileged Access Management (PAM)

April 2025

Download Free Report

Find out what your peers are saying about CyberArk, Delinea, One Identity and others in Privileged Access Management (PAM). Updated: April 2025.

DOWNLOAD NOW

850,671 professionals have used our research since 2012.

We monitor all Privileged Access Management (PAM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.