No more typing reviews! Try our Samantha, our new voice AI agent.

LogRhythm UEBA [EOL] vs Safeguard by One Identity comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jul 20, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

LogRhythm UEBA [EOL]
Average Rating
7.0
Reviews Sentiment
6.5
Number of Reviews
11
Ranking in other categories
No ranking in other categories
Safeguard by One Identity
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
91
Ranking in other categories
User Entity Behavior Analytics (UEBA) (1st), Privileged Access Management (PAM) (2nd), Non-Human Identity Management (NHIM) (2nd)
 

Featured Reviews

Venda E - PeerSpot reviewer
Cloud Option Engineer at a tech vendor with 10,001+ employees
Behavior analytics has improved insider threat detection and reduces false positives for our team
The best features LogRhythm UEBA [EOL] offers are its behavioral balancing, baselining, risk scoring, and correlation with SIEM events, and what stands out most is risk scoring, which gives clear visibility into which user behaviors are genuinely risky and helps our team to focus on the highest priority threats without drowning in noise. Risk scoring helps us to quickly identify which users' activity needs immediate attention by clearly ranking threats based on impact and likelihood; it changes our day-to-day operations by reducing time spent on low-risk alerts and allowing the team to prioritize investigations and response actions more effectively and consistently. LogRhythm UEBA [EOL] has positively impacted our organization by improving our ability to detect insider threats and compromised accounts earlier, resulting in better security visibility, reduced false positives, and faster investigations and response times, which helped the team operate more effectively with greater confidence. I observed a noticeable reduction in false positive alert volume, which shortened the investigation time per incident, improving the mean time to detect and respond, and helping identify high-risk user activities earlier, which prevented potential security incidents from escalating.
Mahesh Malve - PeerSpot reviewer
Senior Business Development Associate at DigitalTrack Solutions ind pvt ltd
Centralized control has strengthened privileged security and simplified audit investigations
While One Identity Safeguard is a strong and reliable PAM solution, there are a few areas where it can be further improved to enhance user experience and scalability. Regarding the user interface and experience, the UI, while functional, can be a bit complex for new users. A more intuitive and modern dashboard with simplified navigation would improve adoption, especially for non-technical stakeholders. Regarding integration flexibility, although it supports major integrations, expanding out-of-the-box connectors for more cloud-native apps, DevOps tools, and SaaS platforms would be beneficial. Faster and simpler API-based integrations could reduce deployment efforts. Regarding scalability and performance in large enterprise environments, performance tuning and scaling can require additional efforts. Enhancing seamless scalability and high availability configuration would improve enterprise readiness.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The capability of pinpointing specific cyber incidents is a valuable feature for us."
"The most valuable features are file activity monitoring and registry activity monitoring."
"Overall, this is a really good product and I recommend it."
"The solution's most valuable features are the graphical user interface and the reporting."
"I definitely think that it's good at finding things automatically, versus trying to define it."
"It has a lot of features. It has file integration monitoring."
"The solution is useful for privilege accounts and super admin accounts. It is beneficial from a security perspective. The tool uses machine learning rather than threshold-based alerts. For instance, it can detect unusual user logins, such as a user logging in from a new browser or location."
"What I like most about LogRhythm UEBA is that it allows you to identify and analyze end-user behaviors and suspicious activities within the systems."
"We have saved approximately thirty to forty percent of our time, and our team is spending more time on critical issues rather than managing passwords."
"My advice for others looking into using One Identity Safeguard is that it is a great solution for simple tasks, with a good price and good functionality."
"Safeguard can define and update processes and procedures into the security framework of a company, including mobile. It allows us to change the policies and configurations on a mass scale in regards to security."
"Regarding the usability and functionality, the UI is quite intuitive and simple to handle for new users."
"One Identity Safeguard is a game changer for us, especially for rapid business expansion and building trust with our clients."
"In terms of the user experience, it is a pretty useful product. It works in a good way."
"Safeguard by One Identity has positively impacted my organization as it automated the solution, making the process smoother, cheaper, and reliable."
"I achieved a good ROI with One Identity Safeguard through approximately thirty to forty percent reduction in manual user management effort, fewer password and local account issues, faster access management, and improved audit and compliance efficiency, which saved administrative time and improved security operations."
 

Cons

"The product could be user-friendly for someone who doesn’t have any prior experience working with it."
"What needs improvement in LogRhythm UEBA is the pricing. Here in Asia, for example, in Sri Lanka, pricing is the primary concern, and this is the only area for improvement I see in the product."
"In general, if something needs to be improved in the algorithm, it would be the dashboards."
"The solution is very expensive. There are also costs beyond the standard licensing fee."
"It should have better mitigation with other solutions and be tightly integrated with other solutions. It has to be improved."
"LogRhythm UEBA [EOL] could be improved with more flexible tuning options and clearer model transparency to better understand why certain behaviors are flagged; enhanced integrations with additional data sources and more intuitive dashboards would also help improve usability and investigation efficiency."
"We're now exploring the cloud version but unfortunately we've found that they are lagging in that space."
"The on-premises LogRhythm is not very scalable. When considering packets per second or the MPS needed for additional logs such as web application logs, scalability is usually found in cloud products."
"One Identity Safeguard could be improved with a more user-friendly interface and simpler initial setup, as the learning curve can be somewhat steep."
"Transparent mode was too cumbersome, so I don't foresee us being able to use it. On paper when we were initially talking about it, it was definitely going to be the preferred method until we realized the burden it would be on our network guys. Then, we had to step back and reevaluate what we wanted to do. That's when we changed our approach to use the RD Gateway feature."
"Support for One Identity Safeguard could be improved because sometimes the support team doesn't have an answer or solution for some bugs. A feature I found in a competitor would make One Identity Safeguard better, and that is the ability to load balance the traffic in the target."
"The SPS could be a lot easier to administrate and the parts should be unified, from a design perspective, so that I can recognize the systems as being part of the same package. They feel like they have been forced together."
"Monitoring of the platform should be easier and more functional so that you can have a clear picture of the running service."
"The main point regarding the user experience is that Safeguard has two separate management consoles."
"For some users, the physical appliance has been a bit buggy."
"Something for One Identity to look at is having integration guidelines for how to logically group accounts."
 

Pricing and Cost Advice

"It is quite a budget-friendly product."
"As LogRhythm UEBA is pretty expensive, I'd give its pricing a seven out of ten."
"The pricing is nice when compared to other products in the industry."
"I rate the product's pricing a three out of ten. However, the cloud version is expensive. You need to hire professional services for deployment and migrations, which can be expensive."
"Licensing is on a yearly basis. It's not expensive compared to its competitors."
"The pricing is about $80,000 per 100 servers. There are few elective costs."
"It is cheaper than CyberArk. Its price is fair."
"Its subscription cost is too much, and sometimes, it is very difficult to pitch the solution to the management for cost approval. If the cost is reduced a little bit, it would be easier. If its cost was less, many other organizations that currently cannot afford it would be able to use this technology. I'm sure many organizations around the globe are having issues with identity management, and it is a very difficult task for IT to manage privileged accounts."
"The license is around $3,000 per month."
"Safeguard is cheaper than CyberArk."
"One Identity Safeguard is expensive and the cost goes up as we scale."
"We bought their other products, so it was not that expensive. It is one of those where the more you buy, the cheaper it is."
"It is a bit on the pricey side, but you get what you pay for. You don't want to get anything too cheap because then you get cheap stuff and cheap support. That really never helps anybody."
report
Use our free recommendation engine to learn which User Entity Behavior Analytics (UEBA) solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
12%
Retailer
11%
Outsourcing Company
10%
Construction Company
10%
Outsourcing Company
14%
Retailer
10%
Financial Services Firm
8%
University
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise4
Large Enterprise4
By reviewers
Company SizeCount
Small Business93
Midsize Enterprise27
Large Enterprise40
 

Questions from the Community

What needs improvement with LogRhythm UserXDR?
In general, if something needs to be improved in the algorithm, it would be the dashboards. The dashboards with solutions such as Splunk are very neat and clean. I would also like to improve the us...
What is your primary use case for LogRhythm UserXDR?
I typically use the product for reducing cyber risk, and I can investigate attacks more quickly using machine learning tools.
What advice do you have for others considering LogRhythm UserXDR?
I would not necessarily recommend LogRhythm due to its complexity and lack of modularity. I would always recommend Splunk to users since it is a powerful solution. Combining it with other solutions...
What is your experience regarding pricing and costs for One Identity Safeguard?
My experience with the pricing, setup cost, and licensing of Safeguard by One Identity is moderate.
What needs improvement with One Identity Safeguard?
Safeguard by One Identity could be improved by making the interface even easier to use, expanding reporting and analytics, and providing more customization options for access policies. It would be ...
What is your primary use case for One Identity Safeguard?
My main use case for Safeguard by One Identity is securing and managing user identities and access across the application with a focus on improving authentication, enforcing access control, and red...
 

Also Known As

LogRhythm UserXDR, LogRhythm Enterprise UEBA
No data available
 

Overview

 

Sample Customers

Information Not Available
Cavium
Find out what your peers are saying about One Identity, IBM, Exabeam and others in User Entity Behavior Analytics (UEBA). Updated: October 2026.
920,769 professionals have used our research since 2012.