No more typing reviews! Try our Samantha, our new voice AI agent.

LogRhythm UEBA [EOL] vs Safeguard by One Identity comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jul 20, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

LogRhythm UEBA [EOL]
Average Rating
7.0
Reviews Sentiment
6.5
Number of Reviews
11
Ranking in other categories
No ranking in other categories
Safeguard by One Identity
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
90
Ranking in other categories
User Entity Behavior Analytics (UEBA) (1st), Privileged Access Management (PAM) (2nd), Non-Human Identity Management (NHIM) (2nd)
 

Featured Reviews

Venda E - PeerSpot reviewer
Cloud Option Engineer at a tech vendor with 10,001+ employees
Behavior analytics has improved insider threat detection and reduces false positives for our team
The best features LogRhythm UEBA [EOL] offers are its behavioral balancing, baselining, risk scoring, and correlation with SIEM events, and what stands out most is risk scoring, which gives clear visibility into which user behaviors are genuinely risky and helps our team to focus on the highest priority threats without drowning in noise. Risk scoring helps us to quickly identify which users' activity needs immediate attention by clearly ranking threats based on impact and likelihood; it changes our day-to-day operations by reducing time spent on low-risk alerts and allowing the team to prioritize investigations and response actions more effectively and consistently. LogRhythm UEBA [EOL] has positively impacted our organization by improving our ability to detect insider threats and compromised accounts earlier, resulting in better security visibility, reduced false positives, and faster investigations and response times, which helped the team operate more effectively with greater confidence. I observed a noticeable reduction in false positive alert volume, which shortened the investigation time per incident, improving the mean time to detect and respond, and helping identify high-risk user activities earlier, which prevented potential security incidents from escalating.
Mahesh Malve - PeerSpot reviewer
Senior Business Development Associate at DigitalTrack Solutions ind pvt ltd
Centralized control has strengthened privileged security and simplified audit investigations
While One Identity Safeguard is a strong and reliable PAM solution, there are a few areas where it can be further improved to enhance user experience and scalability. Regarding the user interface and experience, the UI, while functional, can be a bit complex for new users. A more intuitive and modern dashboard with simplified navigation would improve adoption, especially for non-technical stakeholders. Regarding integration flexibility, although it supports major integrations, expanding out-of-the-box connectors for more cloud-native apps, DevOps tools, and SaaS platforms would be beneficial. Faster and simpler API-based integrations could reduce deployment efforts. Regarding scalability and performance in large enterprise environments, performance tuning and scaling can require additional efforts. Enhancing seamless scalability and high availability configuration would improve enterprise readiness.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"What I like most about LogRhythm UEBA is that it allows you to identify and analyze end-user behaviors and suspicious activities within the systems."
"Overall, this is a really good product and I recommend it."
"The solution's most valuable features are the graphical user interface and the reporting."
"LogRhythm UEBA [EOL] has positively impacted our organization by improving our ability to detect insider threats and compromised accounts earlier, resulting in better security visibility, reduced false positives, and faster investigations and response times, which helped the team operate more effectively with greater confidence."
"The capability of pinpointing specific cyber incidents is a valuable feature for us."
"I typically use the product for reducing cyber risk, and I can investigate attacks more quickly using machine learning tools."
"LogRhythm UEBA’s best feature is the dashboard. It provides several graphs, charts, and event logs."
"I definitely think that it's good at finding things automatically, versus trying to define it."
"Overall, I have had a positive experience with Safeguard by One Identity, as the biggest benefit for us is strong control over privileged access, along with session monitoring and auditing capabilities, which has helped improve security and streamline privileged account management."
"The system is easy to manage, as it is not a system that you will change everything all of a sudden. It evolves most of the time with customer requests."
"This is an extremely stable product."
"The transparent mode for privileged sessions is one of the best things for customers, because they don't see the system in-between."
"I like the discovery functionality and the change password feature through the check-in. I also like the bulk import with the help of templates that come with it out of the box. With the help of these few features, my tasks are made easier."
"Over four years of use, we have not encountered a single system crash or failure, and the product is stable."
"One Identity Safeguard is a game changer for us, especially for rapid business expansion and building trust with our clients."
"The initial setup of One Identity Safeguard was simple."
 

Cons

"The product should improve its dashboards. Splunk has neat dashboards. Additionally, we would like to enhance the use cases provided by LogRhythm as its use case library is not as extensive as other tools. Its machine-learning capabilities need to improve when compared to other solutions. It lacks risk quantification in a single, transparent view for individuals such as CSOs."
"The product could be user-friendly for someone who doesn’t have any prior experience working with it."
"The on-premises LogRhythm is not very scalable. When considering packets per second or the MPS needed for additional logs such as web application logs, scalability is usually found in cloud products."
"The solution is very expensive. There are also costs beyond the standard licensing fee."
"Better dashboarding. At the moment, the dashboard only has an hour."
"LogRhythm UEBA [EOL] could be improved with more flexible tuning options and clearer model transparency to better understand why certain behaviors are flagged; enhanced integrations with additional data sources and more intuitive dashboards would also help improve usability and investigation efficiency."
"We're now exploring the cloud version but unfortunately we've found that they are lagging in that space."
"The search feature needs to be improved."
"For the A2A use, it is not as easy as using something like HashiCorp's password management tools."
"The main thing that needs improvement is the slowness. Apart from that, the change password check-in feature also needs improvement because it is not working perfectly accurately."
"While One Identity Safeguard is a strong and reliable PAM solution, there are a few areas where it can be further improved to enhance user experience and scalability."
"On a scale of one to ten, the stability is an eight."
"I think Safeguard by One Identity could be improved by making the user interface a little simpler and more intuitive, especially for new administrators."
"The reason it is not a perfect ten is mainly because of usability and operational friction in some scenarios."
"Transparent mode was too cumbersome, so I don't foresee us being able to use it. On paper when we were initially talking about it, it was definitely going to be the preferred method until we realized the burden it would be on our network guys. Then, we had to step back and reevaluate what we wanted to do. That's when we changed our approach to use the RD Gateway feature."
"They should provide a faster user interface, as we have noticed that the user interface acts slow when there are a large number of accounts or concurrent sessions going on."
 

Pricing and Cost Advice

"As LogRhythm UEBA is pretty expensive, I'd give its pricing a seven out of ten."
"The pricing is nice when compared to other products in the industry."
"Licensing is on a yearly basis. It's not expensive compared to its competitors."
"It is quite a budget-friendly product."
"I rate the product's pricing a three out of ten. However, the cloud version is expensive. You need to hire professional services for deployment and migrations, which can be expensive."
"We bought their other products, so it was not that expensive. It is one of those where the more you buy, the cheaper it is."
"As compared to other products, it is reasonable, but the training sessions are too expensive."
"The pricing is about $80,000 per 100 servers. There are few elective costs."
"Setup cost, pricing and licensing are all very expensive."
"Our licensing costs are on a yearly basis."
"Its subscription cost is too much, and sometimes, it is very difficult to pitch the solution to the management for cost approval. If the cost is reduced a little bit, it would be easier. If its cost was less, many other organizations that currently cannot afford it would be able to use this technology. I'm sure many organizations around the globe are having issues with identity management, and it is a very difficult task for IT to manage privileged accounts."
"The license is around $3,000 per month."
"Safeguard is cheaper than CyberArk."
report
Use our free recommendation engine to learn which User Entity Behavior Analytics (UEBA) solutions are best for your needs.
913,683 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Retailer
11%
Outsourcing Company
10%
Comms Service Provider
10%
Construction Company
10%
Outsourcing Company
14%
Retailer
10%
Financial Services Firm
8%
University
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise4
Large Enterprise4
By reviewers
Company SizeCount
Small Business93
Midsize Enterprise26
Large Enterprise40
 

Questions from the Community

What needs improvement with LogRhythm UserXDR?
In general, if something needs to be improved in the algorithm, it would be the dashboards. The dashboards with solutions such as Splunk are very neat and clean. I would also like to improve the us...
What is your primary use case for LogRhythm UserXDR?
I typically use the product for reducing cyber risk, and I can investigate attacks more quickly using machine learning tools.
What advice do you have for others considering LogRhythm UserXDR?
I would not necessarily recommend LogRhythm due to its complexity and lack of modularity. I would always recommend Splunk to users since it is a powerful solution. Combining it with other solutions...
What is your experience regarding pricing and costs for One Identity Safeguard?
Our experience with the pricing and licensing was generally positive. The initial setup costs were reasonable considering the security and access control benefits we are getting. The licensing mode...
What needs improvement with One Identity Safeguard?
I think Safeguard by One Identity could be improved by making the user interface a little simpler and more intuitive, especially for new administrators. Some configurations and advanced features ta...
What is your primary use case for One Identity Safeguard?
My main use case for Safeguard by One Identity is to manage a secure privileged account and access a critical system. It helps us to control who can access sensitive resources and monitor privilege...
 

Also Known As

LogRhythm UserXDR, LogRhythm Enterprise UEBA
No data available
 

Overview

 

Sample Customers

Information Not Available
Cavium
Find out what your peers are saying about One Identity, Exabeam, IBM and others in User Entity Behavior Analytics (UEBA). Updated: August 2026.
913,683 professionals have used our research since 2012.