LogRhythm UEBA vs One Identity Safeguard comparison

LogRhythm and One Identity are both solutions in the User Entity Behavior Analytics (UEBA) category. LogRhythm is ranked #11 with an average rating of 7.0, while One Identity is ranked #7 with an average rating of 7.2. LogRhythm holds a 1.9% mindshare in UBA, compared to One Identity’s 2.3% mindshare. Additionally, 55% of LogRhythm users are willing to recommend the solution, compared to 93% of One Identity users who would recommend it.

LogRhythm UEBA

Read 11 LogRhythm UEBA reviews

232 Views
190 Comparison Views

55% willing to recommend

One Identity Safeguard

Read 45 One Identity Safeguard reviews

306 Views
120 Comparison Views

93% willing to recommend

LogRhythm UEBA

One Identity Safeguard

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Feb 4, 2025

One Identity Safeguard and LogRhythm UEBA are solutions in the enterprise security category, with One Identity Safeguard often noted for superior pricing and support. However, LogRhythm UEBA's features sometimes make it preferable due to its cost-effectiveness.

Features: One Identity Safeguard offers extensive monitoring capabilities for protocols like RDP and SSH, transparent mode for privileged sessions, and secure session recording. LogRhythm UEBA emphasizes advanced threat detection with machine learning, excelling in behavioral analysis and anomaly detection.

Room for Improvement: One Identity Safeguard could improve concurrent session handling and reporting, and enhance integration options with management consoles and language support. LogRhythm UEBA needs better dashboards and a more comprehensive use case library, and users have called for reduced cloud service costs.

Ease of Deployment and Customer Service: Both products are mostly on-premises with One Identity Safeguard offering private cloud deployment. One Identity Safeguard's support is generally positive with some inconsistencies, while LogRhythm UEBA's support is consistently well-rated.

Pricing and ROI: One Identity Safeguard is perceived as expensive yet offers great ROI through compliance and threat reduction, with a straightforward pricing model. LogRhythm UEBA, while also costly, is viewed as competitively priced with ROI attributed to decreased security incidents.

To learn more, read our detailed LogRhythm UEBA vs. One Identity Safeguard Report (Updated: April 2025).

Buyer's Guide

LogRhythm UEBA vs. One Identity Safeguard

April 2025

Download the complete report

Helped 850,028 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

LogRhythm UEBA

Ranking in User Entity Behavior Analytics (UEBA)

11th

Average Rating

7.0

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

Extended Detection and Response (XDR) (25th)

One Identity Safeguard

Ranking in User Entity Behavior Analytics (UEBA)

7th

Average Rating

8.0

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Privileged Access Management (PAM) (4th), Non-Human Identity Management (NHIM) (4th)

Mindshare comparison

As of May 2025, in the User Entity Behavior Analytics (UEBA) category, the mindshare of LogRhythm UEBA is 1.9%, down from 3.1% compared to the previous year. The mindshare of One Identity Safeguard is 2.3%, up from 1.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

User Entity Behavior Analytics (UEBA)

Featured Reviews

Sheikh Abu Ayub Azad

CEO at Trustaira

Great at managing cyber incidents; the technical support could be improved

The initial setup is easy, partly because LogRhythm is primarily based on the Windows platform. It's good to have two engineers for deployment but it can be done with one. It's more about the knowledge. Deployment is typically done in two or three different phases. It usually takes up to three full months to get good deployment. There's the initial onboarding of all the log sources, then collecting data in the data lake, followed a couple of weeks later with some minor tuning before the final tuneup.

Read full review

Tor Nordhagen

Executive Director at Semaphore

Transparent mode for privileged sessions will greatly simplify our client's administrative situation

We're introducing the solution's transparent mode for privileged sessions. This is part of what the client hasn't used before. It will simplify their administrative situation greatly. So far, the rollout of this feature has been a seamless process, but we're still in the midst of rolling it out. The benefits will be on the risk side. Right now, the way accounts are managed, you don't necessarily know who is using an account. There's a shared admin account, and that's not a good thing. And those accounts are shared in wallets by several people. One of the real benefits of safeguarding here is that the client will have an absolute audit of who is using an administrative interface, whether it's server or network.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The tool's most valuable feature is server threat hunting."

"The solution's most valuable features are the graphical user interface and the reporting."

"LogRhythm UEBA’s best feature is the dashboard. It provides several graphs, charts, and event logs."

"I typically use the product for reducing cyber risk, and I can investigate attacks more quickly using machine learning tools."

"The solution is useful for privilege accounts and super admin accounts. It is beneficial from a security perspective. The tool uses machine learning rather than threshold-based alerts. For instance, it can detect unusual user logins, such as a user logging in from a new browser or location."

"The most valuable features are file activity monitoring and registry activity monitoring."

"I can investigate attacks more quickly using machine learning tools."

"What I like most about LogRhythm UEBA is that it allows you to identify and analyze end-user behaviors and suspicious activities within the systems."

More LogRhythm UEBA pros

"We deployed it into our company for controlling a client's behavior in our data center. It is very useful to control their connections, such as RDP."

"I have found One Identity Safeguard to be stable."

"The technical support is tremendous."

"There are numerous valuable data protection features, including the content and information that offer us more scalable protection as needed."

"The customer service and technical support are very good."

"One Identity Safeguard is stable and provides great performance."

"It's one of the best products we've seen. When you start looking at the functionality and use cases and usability of the product, it's straightforward. They designed this product with the end-user in mind, and they also had the sysadmin who is supporting the product in mind. They really did a nice job. Overall, it's a nice product to work with."

"The first feature I like about One Identity Safeguard is the live contact point for the VPNs. This has been working very well for us, as it's both highly available and reliable."

More One Identity Safeguard pros

Cons

"What needs improvement in LogRhythm UEBA is the pricing. Here in Asia, for example, in Sri Lanka, pricing is the primary concern, and this is the only area for improvement I see in the product."

"The cloud version is lacking and not up to par."

"The search feature needs to be improved."

"In general, if something needs to be improved in the algorithm, it would be the dashboards."

"The product could be user-friendly for someone who doesn’t have any prior experience working with it."

"It should have better mitigation with other solutions and be tightly integrated with other solutions. It has to be improved."

"The on-premises LogRhythm is not very scalable. When considering packets per second or the MPS needed for additional logs such as web application logs, scalability is usually found in cloud products."

"LogRhythm UEBA's data aggregation needs to be improved. Open-source users do not have much documentation available. Documentation is available only for enterprise users."

More LogRhythm UEBA cons

"The high availability function of the box requires a long time to switch over from one appliance to another."

"Transparent mode was too cumbersome, so I don't foresee us being able to use it. On paper when we were initially talking about it, it was definitely going to be the preferred method until we realized the burden it would be on our network guys. Then, we had to step back and reevaluate what we wanted to do. That's when we changed our approach to use the RD Gateway feature."

"Even though we have two nodes, there's no way to do an upgrade without taking everything completely offline. It would be nice if they could improve that."

"We've had issues managing accounts and access to some data saved on the servers. Accounts are granted a new working certificate daily. We have an account to do it on APIs online and sync it with that. If the path changes at some point or someone changes the password, I don't know if it's from the Active Directory or what."

"The SPS could be a lot easier to administrate and the parts should be unified, from a design perspective, so that I can recognize the systems as being part of the same package. They feel like they have been forced together."

"When we compare One Identity Safeguard with Cyberark, we know CyberArk has other tools or other features that are more complex and more useful for the customers. For example, I have one customer that wants to elevate the permission that is available in CyberArk."

"Support for One Identity Safeguard could be improved because sometimes the support team doesn't have an answer or solution for some bugs. A feature I found in a competitor would make One Identity Safeguard better, and that is the ability to load balance the traffic in the target."

"The automated change of the passwords, which is now integrated, could be improved to be more flexible regarding different systems."

More One Identity Safeguard cons

Pricing and Cost Advice

"LogRhythm UEBA's pricing is affordable for small and medium businesses."

"As LogRhythm UEBA is pretty expensive, I'd give its pricing a seven out of ten."

"I rate the product's pricing a three out of ten. However, the cloud version is expensive. You need to hire professional services for deployment and migrations, which can be expensive."

"Licensing is on a yearly basis. It's not expensive compared to its competitors."

"It is quite a budget-friendly product."

"The pricing is nice when compared to other products in the industry."

"It is more expensive than Secret Server but way less expensive than CyberArk. As a customer, I would like the pricing to be lower, but it has a good price point."

"Setup cost, pricing and licensing are all very expensive."

"One Identity Safeguard is expensive and the cost goes up as we scale."

"The pricing depends on our perspective, our budget, and, of course, the competitors we are taking into account."

"We bought their other products, so it was not that expensive. It is one of those where the more you buy, the cheaper it is."

"The pricing is about $80,000 per 100 servers. There are few elective costs."

"The full license is expensive but if you plan to use it in a big organization then it is the best option because it is more flexible."

"The license is very expensive for us, partly due to inflation and partly because of the exchange rate between the Dollar and the Iranian Rial. We purchased a perpetual license that we've been using up until now, but I believe that we are not going to update it in the future. Instead, we plan to find another third-party to support us with the license, in the sense that we would have access to their license as a shared agreement."

More One Identity Safeguard pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which User Entity Behavior Analytics (UEBA) solutions are best for your needs.

See recommendations

850,028 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

18%

Financial Services Firm

11%

Manufacturing Company

Real Estate/Law Firm

Computer Software Company

26%

Financial Services Firm

11%

Government

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about LogRhythm UserXDR?

The solution is useful for privilege accounts and super admin accounts. It is beneficial from a security perspective. The tool uses machine learning rather than threshold-based alerts. For instance...

See all answers

What is your experience regarding pricing and costs for LogRhythm UserXDR?

I rate the product's pricing a three out of ten. However, the cloud version is expensive. You need to hire professional services for deployment and migrations, which can be expensive.

See all answers

What needs improvement with LogRhythm UserXDR?

In general, if something needs to be improved in the algorithm, it would be the dashboards. The dashboards with solutions such as Splunk are very neat and clean. I would also like to improve the us...

See all answers

What do you like most about One Identity Safeguard?

The identity discovery is good, and the performance is pretty good value.

See all answers

What is your experience regarding pricing and costs for One Identity Safeguard?

The pricing of One Identity Safeguard is fairly priced and cheaper than other solutions of the same enterprise level. It provides a good cost-benefit ratio.

See all answers

What needs improvement with One Identity Safeguard?

There is room for improvement in integration between modules. The native integration between SPP and SPS, which is currently based on a plugin, could be enhanced. Customization for lookup passwords...

See all answers

Comparisons

Wazuh vs LogRhythm UEBA

Compared 45% of the time

Darktrace vs LogRhythm UEBA

Compared 20% of the time

Cortex XDR by Palo Alto Networks vs LogRhythm UEBA

Compared 10% of the time

Microsoft Purview Insider Risk Management vs LogRhythm UEBA

Compared 9% of the time

CrowdStrike Falcon vs LogRhythm UEBA

Compared 6% of the time

More LogRhythm UEBA Competitors

CyberArk Privileged Access Manager vs One Identity Safeguard

Compared 34% of the time

WALLIX Bastion vs One Identity Safeguard

Compared 16% of the time

SailPoint Identity Security Cloud vs One Identity Safeguard

Compared 9% of the time

Delinea Secret Server vs One Identity Safeguard

Compared 9% of the time

Saviynt vs One Identity Safeguard

Compared 8% of the time

More One Identity Safeguard Competitors

Product Reports

Buyer's Guide

User Entity Behavior Analytics (UEBA)

April 2025

Download LogRhythm UEBA product report

Buyer's Guide

One Identity Safeguard

April 2025

Download One Identity Safeguard product report

Also Known As

LogRhythm UserXDR, LogRhythm Enterprise UEBA

No data available

Overview

LogRhythm UEBA enables your security team to quickly and effectively detect, respond to, and neutralize both known and unknown threats. Providing evidence-based starting points for investigation, it employs a combination of scenario analytics techniques (e.g., statistical analysis, rate analysis, trend analysis, advanced correlation), and both supervised and unsupervised machine learning (ML).

LogRhythm

One Identity Safeguard manages and monitors privileged access, enhancing security with features like automatic session recording, real-time monitoring, and credential rotation. It integrates seamlessly, supports compliance with audit trails, and improves operational efficiency across organizations. This robust platform significantly bolsters security protocols while controlling sensitive operations.

One Identity

Sample Customers

Information Not Available

Cavium

Buyer's Guide

LogRhythm UEBA vs. One Identity Safeguard

April 2025

Free Report: LogRhythm UEBA vs. One Identity Safeguard

Find out what your peers are saying about LogRhythm UEBA vs. One Identity Safeguard and other solutions. Updated: April 2025.

DOWNLOAD NOW

850,028 professionals have used our research since 2012.

See our LogRhythm UEBA vs. One Identity Safeguard report.

See our list of best User Entity Behavior Analytics (UEBA) vendors.

We monitor all User Entity Behavior Analytics (UEBA) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.