No more typing reviews! Try our Samantha, our new voice AI agent.

HashiCorp Boundary vs Idira Endpoint Privilege Manager comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 2, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

HashiCorp Boundary
Ranking in Privileged Access Management (PAM)
23rd
Average Rating
7.0
Reviews Sentiment
2.2
Number of Reviews
1
Ranking in other categories
No ranking in other categories
Idira Endpoint Privilege Ma...
Ranking in Privileged Access Management (PAM)
7th
Average Rating
8.2
Reviews Sentiment
6.8
Number of Reviews
38
Ranking in other categories
Endpoint Compliance (4th), Anti-Malware Tools (11th), Application Control (6th), Ransomware Protection (5th)
 

Mindshare comparison

As of August 2026, in the Privileged Access Management (PAM) category, the mindshare of HashiCorp Boundary is 1.4%, up from 1.0% compared to the previous year. The mindshare of Idira Endpoint Privilege Manager is 2.4%, down from 3.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Privileged Access Management (PAM) Mindshare Distribution
ProductMindshare (%)
Idira Endpoint Privilege Manager2.4%
HashiCorp Boundary1.4%
Other96.2%
Privileged Access Management (PAM)
 

Featured Reviews

David Gidony - PeerSpot reviewer
Solution architect security and AI specialist at Terasky
Remote access to private lab hosts has become smoother while session control still needs refinement
HashiCorp Boundary can be improved in a few ways. The RDP session connection was recently introduced, which was a long-time feature that everyone was waiting for. Improving the desktop client and making it more elegant, fast, and optimized would be beneficial. I saw that there are new features allowing credential injection to RDP sessions and other useful functionalities that were among the top features I was looking for. I haven't had the chance to try them yet, but I saw demos that they already exist. The role-based access and permission granting is a bit complex and not intuitive. I work by myself and don't have many users to manage, but when it comes to scale, there might be a better way to manage access. The desktop app can be improved since it is slower than I would prefer, and session timeouts are a bit opaque. You don't really know how it's handling the session; sometimes the session ends and sometimes it's still alive. I find myself reactivating a session or needing to reconnect often. It could be more organized in that sense. A feature to close all active connections would help because currently, you have to go one by one and use the mouse to click on disconnect. If you have multiple sessions open, it might take some time because once you press cancel, you have to wait for a few seconds.
Sumit Chavan - PeerSpot reviewer
Lead Consultant at a tech vendor with 501-1,000 employees
Helps secure the infrastructure and control users with admin rights
There are many features that are currently missing. A customization option is required for certain policies. For instance, if we need to stop PowerShell scripting, we have to create a different policy for that. Being able to create a sub-level policy within a top-level policy would be good. Currently, no user-based policy option is available inside the EPM console. We can only create computer-based policies. The database is available, but there is a drawback in not being able to create local groups on the EPM console. We only have to depend on Active Directory. This limits infrastructure security as we depend on the Active Directory team to manage user groups. If they remove any users, we lose control. If we could create groups locally and block them or set specific policies, we would have more control. Local endpoint management is missing from the EPM site. Moreover, there is an issue with policies not running as expected when we make enhancements. We have to find multiple ways to whitelist applications or enhance policies.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Using HashiCorp Boundary has saved me time and made my workflow more efficient in the specific way that I can gain access to these private instances from anywhere."
"I have always found that CyberArk is a very tight, foolproof product compared to most other products available."
"The product is very flexible"
"There are many valuable aspects of the product, but the most common feature is working with the privileges. The controls of CyberArk Endpoint Privilege Manager influence the visibility into endpoints for my customers. It allows them to granularly manage controls to prevent some malicious activities on the endpoint machine."
"CyberArk Endpoint Privilege Manager (EPM) 's most valuable feature is its ability to manage user application privileges and protect against ransomware attacks by controlling access to specific files and applications."
"CyberArk Endpoint Privilege Manager has significantly improved our security posture by preventing virus incidents and restricting users from downloading unwanted applications."
"The product is stable."
"All of the features are valuable."
"The tool is an endpoint management system. It monitors everything a standard user does and helps elevate privileges when necessary for advanced users. It keeps an auditable trail of all activities. Practically, it stops and blocks potentially hazardous user behavior, whether intentional or unintentional. Certain companies must use endpoint management software because of national or international rules or ISO norms."
 

Cons

"The desktop app can be improved since it is slower than I would prefer, and session timeouts are a bit opaque."
"The solution's pricing could be better."
"CyberArk Endpoint Privilege Manager is not suitable for the current situation because when you compare it to OTP, OTP is the strongest password solution. You can use it as a one-time password, but you have to log into the password manager itself and if you don't change your password, it will be the weakest link in the security. In OTP, you don't have that weakest link."
"The CyberArk team is working on a feature to identify devices without the Endpoint Privilege Manager running, which is currently missing."
"The product's threat protection and defense capabilities need enhancement."
"Despite newer versions and functionalities, CyberArk Endpoint Privilege Manager lacks sufficient knowledgeable support staff, resulting in longer wait times for assistance."
"What I would really like to see improved is the AIM (Application Identity Manager). I think that it could be simpler to use, and much more straight forward."
"A customization option is required for certain policies. For instance, if we need to stop PowerShell scripting, we have to create a different policy for that. Being able to create a sub-level policy within a top-level policy would be good."
"The price of the product is an area of concern where improvements are required. The product's price should be made more flexible."
 

Pricing and Cost Advice

Information not available
"The price of CyberArk Endpoint Privilege Manager is expensive."
"I rate the solution's pricing an eight out of ten since the price can be too high for smaller businesses."
"The tool is a bit pricey compared to its competitors. My company does work with competitors, but I don't have hands-on experience with other software. I've just done some comparisons."
"We pay about $17 per user."
"Pricing depends on how many devices you use. Right now, on-premise, it costs us a little, but it's worth it. It seems like the cloud solution is much more expensive. We got this solution one year ago, and it's like we bought the solution, and now they are not going to support it on-premise anymore. We are in the implementation phase, and we missed this, and we already paid for the licenses. This is wasted time from my perspective, and CyberArk should be more customer-friendly."
"The tool's pricing is reasonable for customers."
"It is an expensive solution."
"I believe it's quite a reasonably priced solution. It's not very common to use CyberArk because it's a niche solution, but customers who are willing to control administrative accounts are willing to pay this money."
report
Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.
910,350 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
15%
Outsourcing Company
14%
Construction Company
11%
Healthcare Company
9%
Financial Services Firm
13%
Manufacturing Company
10%
Outsourcing Company
8%
Construction Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business18
Midsize Enterprise9
Large Enterprise19
 

Questions from the Community

What needs improvement with HashiCorp Boundary?
HashiCorp Boundary can be improved in a few ways. The RDP session connection was recently introduced, which was a long-time feature that everyone was waiting for. Improving the desktop client and m...
What is your primary use case for HashiCorp Boundary?
My main use case for HashiCorp Boundary is gaining access using a reverse proxy tunnel to all kinds of hosts and instances that I don't have a direct public connection to, mostly hosts and servers ...
What advice do you have for others considering HashiCorp Boundary?
The advice I would give to others looking into using HashiCorp Boundary is that if you're a developer or a technical person or use mostly Linux machines and terminals, HashiCorp Boundary can be a g...
Looking for recommendations and a pros/cons template for software to detect insider threats
This is an inside-out --- outside-in --- inside-in question, as an insider can be an outsider as well. There is no short answer other than a blend of a PAM tool with Behavioral Analytics and Endpo...
What is your experience regarding pricing and costs for CyberArk Endpoint Privilege Manager?
I believe it's quite a reasonably priced solution. It's not very common to use CyberArk because it's a niche solution, but customers who are willing to control administrative accounts are willing t...
What needs improvement with CyberArk Endpoint Privilege Manager?
While CyberArk Endpoint Privilege Manager is a great tool, I believe the functionality could be wider. If it could work not only with permissions but also involve pure EDR tasks or User and Entity ...
 

Also Known As

No data available
Viewfinity
 

Overview

Find out what your peers are saying about Idira by Palo Alto Networks, One Identity, Okta and others in Privileged Access Management (PAM). Updated: July 2026.
910,350 professionals have used our research since 2012.