

Idira Endpoint Privilege Manager and StrongDM compete in the domain of user privilege and access management. Idira shines in security features and privilege control, while StrongDM offers better ease of use with a focus on centralized access control.
Features: Idira Endpoint Privilege Manager is noted for its robust security features, including privilege management and elevation. It integrates deeply with existing systems and provides session recording for better oversight. StrongDM excels with its audit trail and session logging features, offering advanced SSO and MFA integrations. It also showcases centralized access control tailored to cloud and Kubernetes environments.
Room for Improvement: Idira has challenges with performance and support response times. Users note its complexity and need for better automation. StrongDM could improve its setup experience and reporting capabilities. Users find resource mapping challenging initially, and transitioning from traditional workflows takes time.
Ease of Deployment and Customer Service: Idira offers versatile deployment options including on-premises and cloud, though support receives mixed reviews. StrongDM's cloud-centric deployment is aligned with modern needs but requires improvement in onboarding support for large enterprises.
Pricing and ROI: Idira is seen as expensive, potentially limiting for smaller businesses, but provides good security outcomes enhancing ROI. StrongDM follows a per-user pricing model, viewed as cost-efficient despite its premium, offering savings through reduced offboarding time and credential misuse.
Deploying CyberArk Endpoint Privilege Manager has secured the infrastructure, which saves money, time, and resources.
I consider CyberArk Endpoint Privilege Manager's return on investment to be good since it effectively accomplishes the goals expected from privilege access management solutions.
I can definitely say that it saved us time, and a lot of it. Probably months worth of time in engineering and IT support.
The onboarding of temporary privileged access accelerated significantly, allowing us to release consultants much faster than before, saving considerable money.
We need fewer employees now because StrongDM saves our time by eliminating manual work.
They respond immediately to our inquiries, resolve issues promptly, and provide valuable guidance, especially in critical situations.
We engage them when needed and receive prompt responses that typically resolve our issues.
Earlier, we received support for normal tickets within a day, but now it takes one or two days to resolve issues.
They responded quickly to issues and were readily available for calls rather than waiting for email confirmations.
The technical support is responsive and knowledgeable.
They also have very good documentation, where they often ask us to refer to a particular document but can provide excellent on-call support.
We can set permissions per team or department, allowing some teams to elevate specific applications while others have different permissions.
CyberArk Endpoint Privilege Manager is quite scalable.
The available reports and other security tools assist in scaling it according to my organization's needs.
If a larger organization such as Microsoft or Dell adopted it, there would be more privileged accounts, showing the product's potential to grow if issues in maintenance and crashing are resolved.
StrongDM's scalability is impressive; it is highly available, and we never perceived any latency issues.
StrongDM has very large and good scalability, capable of providing a million data in a second, showcasing its great scalability.
It is a robust solution that has effectively supported our environment without major issues.
Since implementing it, we have not experienced any outages or stability issues.
CyberArk Endpoint Privilege Manager offers multiple options for creating and stopping policies.
The gateway sometimes crashes, and you are unable to retrieve passwords.
StrongDM is very stable; I cannot recall experiencing a glitch.
StrongDM is very stable, and we have not experienced any downtime or faced any issues with StrongDM.
CyberArk Endpoint Privilege Manager could be improved by simplifying the administration process, specifically when setting up policies and applications.
Currently, no user-based policy option is available inside the EPM console.
Some features provided in the self-hosted version of EPM are not supported in the software as a service version, like connection to some analysis applied by Palo Alto.
StrongDM has limited MFA and passwordless options, relying heavily on time-based one-time passwords (OTP) or Duo, lacking support for true passwordless setups like biometrics or hardware YubiKeys, and it does not support per-session MFA.
It would be beneficial to have better control and alignment between frequent updates and improved communication regarding possible negative effects on existing customer bases.
It is difficult to find documentation or materials to review how it works, and there is less product material available in the market.
CyberArk Endpoint Privilege Manager is slightly expensive, but costs can be negotiated to become more competitive.
CyberArk Endpoint Privilege Manager is costly compared to other solutions.
I've received feedback that the pricing is high, however, for me, the value it brings is worth the cost.
The setup cost was free, with technical staff aiding our onboarding, requiring us only to cover the license fee.
It was mentioned that while the product is rapidly gaining features, it might become cost-prohibitive for wider usage.
My thoughts on the pricing of StrongDM is that it is expensive.
CyberArk Endpoint Privilege Manager effectively reduces malicious content in applications by allowing us to identify and block dangerous applications.
It allows them to granularly manage controls to prevent some malicious activities on the endpoint machine.
CyberArk Endpoint Privilege Manager enhances computer security by providing minimal access, effectively preventing ransomware attacks.
One of the most powerful tools in StrongDM is audit logging.
Just-in-Time Access is the primary feature that works well and makes life easier for us here at LivePerson.
The best features for us are the centralized access control and the detailed audit logging, which allow us to provide temporary privileged access without managing VPNs ourselves.
| Product | Mindshare (%) |
|---|---|
| Idira Endpoint Privilege Manager | 2.4% |
| StrongDM | 2.5% |
| Other | 95.1% |

| Company Size | Count |
|---|---|
| Small Business | 18 |
| Midsize Enterprise | 9 |
| Large Enterprise | 19 |
| Company Size | Count |
|---|---|
| Small Business | 3 |
| Midsize Enterprise | 3 |
| Large Enterprise | 8 |
CyberArk Endpoint Privilege Manager enhances security by controlling access, removing admin rights, and managing privileges. It supports diverse environments with simple integration, focusing on credential detection, threat protection, and compliance.
CyberArk Endpoint Privilege Manager secures enterprise passwords, monitors session connections, and enhances cybersecurity by controlling privileged access. It blocks unauthorized applications, monitors user activities, and secures credentials across platforms. Key areas include Just-In-Time Access, privilege separation, and local administrator password rotation. While robust, challenges exist with performance, complexity, and setup. Integration with Linux and Unix needs improvement, requiring advanced reporting tools and easier policy management. Pricing concerns and maintenance issues with Windows servers persist, as well as database issues in the on-prem version.
What are the key features of CyberArk Endpoint Privilege Manager?
What benefits should organizations expect from CyberArk Endpoint Privilege Manager?
Organizations deploying CyberArk Endpoint Privilege Manager in industries such as finance, healthcare, and technology benefit from secure credential management across Unix, AWS, and GCP. By implementing privilege separation and monitoring user activities, they achieve effective risk mitigation and compliance across multiple platforms.
StrongDM streamlines secure, password-less access, reducing attack surfaces with its zero trust approach. It integrates smoothly with existing systems supporting IP whitelisting and excels in managing runtime features while offering comprehensive audit logging and seamless resource access.
StrongDM provides organizations with enhanced security through features like password rotation and efficient management of access to resources such as EC2 instances, Kubernetes clusters, and databases. Its integration capabilities are complemented by cost-effectiveness compared to competitors like CyberArk. Companies utilize StrongDM for controlling access in dynamic environments, benefiting from audit logging for detailed movement tracking. While users appreciate its efficiency, they also seek improvements in update control and better accompanying documentation. Some express the need for a cloud-native option to address diverse demands, as the current setup can be challenging without comprehensive materials. Flexibility and more traditional PAM features are in demand.
What are StrongDM's key features?In industries managing sensitive data or requiring regulated access, StrongDM is crucial for securing cloud private networks and managing user access to databases and hosts. DevOps teams benefit from its ability to protect connectivity to backend servers, ensuring identity and access management remains robust and adaptable for companies dealing with frequent changes or expansions.
We monitor all Privileged Access Management (PAM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.