

Safeguard by One Identity and Delinea Runtime Authorization are both prominent players in the Privileged Access Management (PAM) solution market. Delinea Runtime Authorization has an edge with its flexible cloud integration and multifactor authentication capabilities, making it particularly suited for dynamic environments.
Features: Safeguard by One Identity offers session auditing, four-eye authentication, and real-time monitoring, focusing on comprehensive privileged session management. It excels in password vaulting, integrating well with on-premise and cloud resources. Delinea Runtime Authorization provides centralized access management optimized for cloud environments and offers robust multifactor authentication, ensuring secure and flexible access control.
Room for Improvement: Safeguard by One Identity could benefit from a unified management console and improvements in supporting concurrent sessions and cloud environment integration. Delinea Runtime Authorization needs enhancements in its transparent mode and non-Windows system discovery. Both solutions should work on improving reporting and onboarding processes, although Safeguard faces more challenges in distributed environment management.
Ease of Deployment and Customer Service: Safeguard by One Identity supports complex on-premise deployments suited for larger infrastructures, providing responsive but sometimes delayed customer service for complex issues. It offers detailed documentation and knowledgeable support. Delinea Runtime Authorization emphasizes hybrid and cloud deployments with flexible options. It is praised for its prompt and expert customer service, particularly appreciated in cloud settings, complemented by proactive support ensuring seamless integration.
Pricing and ROI: Safeguard by One Identity commands higher licensing costs for its robust enterprise-level capabilities, providing significant ROI through automation but necessitating careful investment planning. Delinea Runtime Authorization offers a competitive price with solid ROI, especially for environments requiring quick scalability and efficient access control, though some users may find costs rising for extensive enterprise needs compared to Safeguard.
I can definitely say that it saved us time, and a lot of it. Probably months worth of time in engineering and IT support.
The onboarding of temporary privileged access accelerated significantly, allowing us to release consultants much faster than before, saving considerable money.
We need fewer employees now because StrongDM saves our time by eliminating manual work.
It has also reduced the time spent on password management, saving our team time in managing privileged accounts, and is helping with automation that reduces manual efforts.
Instead of manually reconstructing activity, everything is already logged and searchable, which has improved response time during internal reviews.
After implementing One Identity Safeguard, we saw a significant drop in manual tasks including password handling, privileged access approvals, and incident troubleshooting.
They responded quickly to issues and were readily available for calls rather than waiting for email confirmations.
The technical support is responsive and knowledgeable.
They also have very good documentation, where they often ask us to refer to a particular document but can provide excellent on-call support.
Documentation and knowledge base resources are also useful for resolving common issues and understanding product features, making customer support reliable and meeting enterprise expectations.
The customer team is knowledgeable and technically strong, especially when dealing with configuration issues, session monitoring, or password-related queries.
I rate support from 1 to 10 overall as 9 because compared to other customer PAM solutions that we have like iRage PAM and Commvault PAM, this is superior and offers a more advanced procedure.
If a larger organization such as Microsoft or Dell adopted it, there would be more privileged accounts, showing the product's potential to grow if issues in maintenance and crashing are resolved.
StrongDM's scalability is impressive; it is highly available, and we never perceived any latency issues.
StrongDM has very large and good scalability, capable of providing a million data in a second, showcasing its great scalability.
The scalability of One Identity Safeguard is perfect, scoring ten out of ten.
The system can distribute tasks across nodes, improving performance as demand grows.
The platform is designed to support horizontal scaling, so adding capacity is relatively straightforward without redesigning the entire architecture.
The gateway sometimes crashes, and you are unable to retrieve passwords.
StrongDM is very stable; I cannot recall experiencing a glitch.
I rate the stability of the product five out of ten because crashes sometimes happen when we are working on it.
With proper sizing and high availability configuration, the system handles multiple concurrent sessions efficiently, making it a dependable and stable platform suitable for enterprise environments.
It has been reliable for managing privileged accounts and controlling access to critical systems.
I would rate it a nine out of ten for stability.
StrongDM has limited MFA and passwordless options, relying heavily on time-based one-time passwords (OTP) or Duo, lacking support for true passwordless setups like biometrics or hardware YubiKeys, and it does not support per-session MFA.
It would be beneficial to have better control and alignment between frequent updates and improved communication regarding possible negative effects on existing customer bases.
It is difficult to find documentation or materials to review how it works, and there is less product material available in the market.
Better real-time monitoring, clearer authentication error reporting, and simpler troubleshooting tools in One Identity Safeguard would be helpful, especially when working in large and complex environments.
From a governance and security perspective, One Identity Safeguard is very strong; it helps enforce privileged access control, secure credential management, session monitoring, and detailed auditing, which are all important for reducing security risks.
More proactive insights around privileged access, users, and security trends would help security teams identify potential risks faster and improve overall visibility across the environment.
The setup cost was free, with technical staff aiding our onboarding, requiring us only to cover the license fee.
It was mentioned that while the product is rapidly gaining features, it might become cost-prohibitive for wider usage.
My thoughts on the pricing of StrongDM is that it is expensive.
It is one of those where the more you buy, the cheaper it is.
It is cheaper than CyberArk.
Regarding pricing, it may appear slightly on the higher side initially compared to some alternatives, but when we evaluate it against the security benefits, compliance support, and risk reduction, it proves to be cost-effective in the long run.
One of the most powerful tools in StrongDM is audit logging.
Just-in-Time Access is the primary feature that works well and makes life easier for us here at LivePerson.
The best features for us are the centralized access control and the detailed audit logging, which allow us to provide temporary privileged access without managing VPNs ourselves.
The auditing and approval mechanisms are features we did not have before and are greatly appreciated.
Automatic credential rotation helps our team by removing the need for manual changes to privileged passwords, reducing the risk of stale or shared credentials and ensuring that every access is controlled and compliant.
The password vault has been a game changer because it provides a secure and controlled way to store, manage, and rotate sensitive credentials without exposing them to users.
| Product | Mindshare (%) |
|---|---|
| Safeguard by One Identity | 4.4% |
| StrongDM | 2.2% |
| Other | 93.4% |


| Company Size | Count |
|---|---|
| Small Business | 5 |
| Midsize Enterprise | 3 |
| Large Enterprise | 9 |
| Company Size | Count |
|---|---|
| Small Business | 93 |
| Midsize Enterprise | 27 |
| Large Enterprise | 40 |
Delinea Runtime Authorization offers advanced privileged access management with features like session logging and centralized access management, ensuring secure and efficient operations.
Designed for environments requiring secure privileged access, Delinea Runtime Authorization centralizes session logging and audit trails, integrates with SSO and MFA, and supports just-in-time access without credential exposure. It enhances security and compliance with seamless deployment across cloud environments, inheriting role-based controls and self-service options. Despite potential improvements needed in reporting, setup complexity, and integrations, it remains integral for managing secure access to servers, databases, and Kubernetes clusters.
What are the key features of Delinea Runtime Authorization?Used extensively in industries like finance, healthcare, and technology, Delinea Runtime Authorization helps manage privileged access by eliminating shared credentials and ensuring secure access across infrastructures. It supports compliance needs and enhances security for remote access management, particularly for environments requiring stringent security measures and efficient operational processes.
One Identity Safeguard manages and monitors privileged access, enhancing security with features like automatic session recording, real-time monitoring, and credential rotation. It integrates seamlessly, supports compliance with audit trails, and improves operational efficiency across organizations. This robust platform significantly bolsters security protocols while controlling sensitive operations.
We monitor all Privileged Access Management (PAM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.