LogRhythm UEBA vs One Identity Safeguard comparison

LogRhythm and One Identity are both solutions in the User Entity Behavior Analytics (UEBA) category. LogRhythm is ranked #10 with an average rating of 7.0, while One Identity is ranked #6 with an average rating of 7.4. LogRhythm holds a 2.0% mindshare in UBA, compared to One Identity’s 2.4% mindshare. Additionally, 55% of LogRhythm users are willing to recommend the solution, compared to 93% of One Identity users who would recommend it.

LogRhythm UEBA

Read 11 LogRhythm UEBA reviews

215 Views
88 Comparison Views

55% willing to recommend

One Identity Safeguard

Read 45 One Identity Safeguard reviews

334 Views
53 Comparison Views

93% willing to recommend

LogRhythm UEBA

One Identity Safeguard

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Feb 4, 2025

One Identity Safeguard and LogRhythm UEBA are solutions in the enterprise security category, with One Identity Safeguard often noted for superior pricing and support. However, LogRhythm UEBA's features sometimes make it preferable due to its cost-effectiveness.

Features: One Identity Safeguard offers extensive monitoring capabilities for protocols like RDP and SSH, transparent mode for privileged sessions, and secure session recording. LogRhythm UEBA emphasizes advanced threat detection with machine learning, excelling in behavioral analysis and anomaly detection.

Room for Improvement: One Identity Safeguard could improve concurrent session handling and reporting, and enhance integration options with management consoles and language support. LogRhythm UEBA needs better dashboards and a more comprehensive use case library, and users have called for reduced cloud service costs.

Ease of Deployment and Customer Service: Both products are mostly on-premises with One Identity Safeguard offering private cloud deployment. One Identity Safeguard's support is generally positive with some inconsistencies, while LogRhythm UEBA's support is consistently well-rated.

Pricing and ROI: One Identity Safeguard is perceived as expensive yet offers great ROI through compliance and threat reduction, with a straightforward pricing model. LogRhythm UEBA, while also costly, is viewed as competitively priced with ROI attributed to decreased security incidents.

To learn more, read our detailed LogRhythm UEBA vs. One Identity Safeguard Report (Updated: June 2025).

Buyer's Guide

LogRhythm UEBA vs. One Identity Safeguard

June 2025

Download the complete report

Helped 859,129 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

LogRhythm UEBA

Ranking in User Entity Behavior Analytics (UEBA)

10th

Average Rating

7.0

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

Extended Detection and Response (XDR) (25th)

One Identity Safeguard

Ranking in User Entity Behavior Analytics (UEBA)

6th

Average Rating

8.0

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Privileged Access Management (PAM) (3rd), Non-Human Identity Management (NHIM) (4th)

Mindshare comparison

As of June 2025, in the User Entity Behavior Analytics (UEBA) category, the mindshare of LogRhythm UEBA is 2.0%, down from 3.1% compared to the previous year. The mindshare of One Identity Safeguard is 2.4%, up from 1.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

User Entity Behavior Analytics (UEBA)

Featured Reviews

Sheikh Abu Ayub Azad

CEO at Trustaira

Great at managing cyber incidents; the technical support could be improved

The initial setup is easy, partly because LogRhythm is primarily based on the Windows platform. It's good to have two engineers for deployment but it can be done with one. It's more about the knowledge. Deployment is typically done in two or three different phases. It usually takes up to three full months to get good deployment. There's the initial onboarding of all the log sources, then collecting data in the data lake, followed a couple of weeks later with some minor tuning before the final tuneup.

Read full review

Martin Ajayiobe

Senior Vice President (Infrastructure Systems/Information Security) at MAXUT

Th password vault feature has proven to be most effective for managing privileged access

One Identity Safeguard now prevents unauthorized access to servers by eliminating privileged passwords and requiring all connections to go through a PAM-authorized process. This means no one, including hackers, can access servers without explicit approval, significantly enhancing overall security. One Identity Safeguard is easy to use with a good partner to support you, and it can be up and running within a few days. We have successfully integrated One Identity Safeguard with cloud targets, and the process was straightforward. One Identity Safeguard has improved our incident response time by 300 percent.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"LogRhythm UEBA’s best feature is the dashboard. It provides several graphs, charts, and event logs."

"The solution's most valuable features are the graphical user interface and the reporting."

"I typically use the product for reducing cyber risk, and I can investigate attacks more quickly using machine learning tools."

"It has a lot of features. It has file integration monitoring."

"The most valuable features are file activity monitoring and registry activity monitoring."

"It is easy to monitor users and that is how the solution is adding value to our firm."

"Good capability pinpointing specific cyber incidents."

"What I like most about LogRhythm UEBA is that it allows you to identify and analyze end-user behaviors and suspicious activities within the systems."

More LogRhythm UEBA pros

"The transparent mode for privileged sessions is one of the best things for customers, because they don't see the system in-between."

"The most valuable feature of One Identity Safeguard is the user-friendly interface."

"It is easy to manage. There is a very logical, clear user interface. Also, the integration of scripts is thoughtfully implemented. Overall, it's a nice product to manage."

"I have found One Identity Safeguard to be stable."

"I like Safeguard's snapshot feature that enables us to review the last time an application was opened and by whom. If there are any issues, we can look behind the scenes to see what has been done. We can suspend a user's access or close off a server."

"The auditing and approval mechanisms are features we did not have before and are greatly appreciated."

"In terms of the user experience, it is a pretty useful product. It works in a good way."

"We have limited the possibilities for malicious actions and have made it safer for our users when they are using privileged accounts."

More One Identity Safeguard pros

Cons

"The product should improve its dashboards. Splunk has neat dashboards. Additionally, we would like to enhance the use cases provided by LogRhythm as its use case library is not as extensive as other tools. Its machine-learning capabilities need to improve when compared to other solutions. It lacks risk quantification in a single, transparent view for individuals such as CSOs."

"The UI could be improved a little bit."

"It should have better mitigation with other solutions and be tightly integrated with other solutions. It has to be improved."

"The product could be user-friendly for someone who doesn’t have any prior experience working with it."

"LogRhythm UEBA's data aggregation needs to be improved. Open-source users do not have much documentation available. Documentation is available only for enterprise users."

"It would be helpful if there were more guidance provided for integrating with unsupported devices."

"The on-premises LogRhythm is not very scalable. When considering packets per second or the MPS needed for additional logs such as web application logs, scalability is usually found in cloud products."

"In general, if something needs to be improved in the algorithm, it would be the dashboards."

More LogRhythm UEBA cons

"The multilanguage functionality does not support the Arabic language, even though this solution is deployed in an Arabic region."

"From a management point of view, it would be beneficial if One Identity Safeguard Privilege Password and One Identity Safeguard Privilege Session had a more similar interface."

"I just received a question from a customer in regards to a connection with Oracle OID. I tried to integrate Safeguard with the Oracle YAML as well as something else to manage the groups and users from a different system, like AD or LDAP. This one feature could be better. At this moment, the platform system can only use the integration with LDAP or AD. The software for research and development to create a connector to a YAML platform can be very complicated."

"The product uses a lot of resources in current sessions."

"The GUI has room for improvement because it is confusing and cumbersome."

"When we compare One Identity Safeguard with Cyberark, we know CyberArk has other tools or other features that are more complex and more useful for the customers. For example, I have one customer that wants to elevate the permission that is available in CyberArk."

"We can't review or audit HTTP and HTTPS. This functionality should be added so that we can review and audit HTTP and HTTPS."

"From a usability perspective, what we are finding out is that our privileged domain admin users, in particular, want functionality for extending a checkout session. So we are working with One Identity support to see if there's an enhancement that can be made to the product."

More One Identity Safeguard cons

Pricing and Cost Advice

"The pricing is nice when compared to other products in the industry."

"As LogRhythm UEBA is pretty expensive, I'd give its pricing a seven out of ten."

"I rate the product's pricing a three out of ten. However, the cloud version is expensive. You need to hire professional services for deployment and migrations, which can be expensive."

"It is quite a budget-friendly product."

"Licensing is on a yearly basis. It's not expensive compared to its competitors."

"LogRhythm UEBA's pricing is affordable for small and medium businesses."

"Our licensing costs are on a yearly basis."

"As compared to other products, it is reasonable, but the training sessions are too expensive."

"Setup cost, pricing and licensing are all very expensive."

"The pricing is about $80,000 per 100 servers. There are few elective costs."

"It is a bit on the pricey side, but you get what you pay for. You don't want to get anything too cheap because then you get cheap stuff and cheap support. That really never helps anybody."

"The license is very expensive for us, partly due to inflation and partly because of the exchange rate between the Dollar and the Iranian Rial. We purchased a perpetual license that we've been using up until now, but I believe that we are not going to update it in the future. Instead, we plan to find another third-party to support us with the license, in the sense that we would have access to their license as a shared agreement."

"It is cheaper than CyberArk. Its price is fair."

"We have a yearly license. The cost depends on how much a company wants to invest in technology. In our organization, we believe in modern digitization and automation processes so we found it affordable. One Identity was not that much less than other solutions and it is not a cheap solution. There were number of cheaper solutions. However, it's the most effective, according to our evaluation."

More One Identity Safeguard pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which User Entity Behavior Analytics (UEBA) solutions are best for your needs.

See recommendations

859,129 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

16%

Financial Services Firm

11%

Manufacturing Company

10%

Real Estate/Law Firm

Computer Software Company

24%

Financial Services Firm

11%

Comms Service Provider

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about LogRhythm UserXDR?

The solution is useful for privilege accounts and super admin accounts. It is beneficial from a security perspective. The tool uses machine learning rather than threshold-based alerts. For instance...

See all answers

What is your experience regarding pricing and costs for LogRhythm UserXDR?

I rate the product's pricing a three out of ten. However, the cloud version is expensive. You need to hire professional services for deployment and migrations, which can be expensive.

See all answers

What needs improvement with LogRhythm UserXDR?

In general, if something needs to be improved in the algorithm, it would be the dashboards. The dashboards with solutions such as Splunk are very neat and clean. I would also like to improve the us...

See all answers

What do you like most about One Identity Safeguard?

The identity discovery is good, and the performance is pretty good value.

See all answers

What is your experience regarding pricing and costs for One Identity Safeguard?

The pricing of One Identity Safeguard is fairly priced and cheaper than other solutions of the same enterprise level. It provides a good cost-benefit ratio.

See all answers

What needs improvement with One Identity Safeguard?

There is room for improvement in integration between modules. The native integration between SPP and SPS, which is currently based on a plugin, could be enhanced. Customization for lookup passwords...

See all answers

Comparisons

Wazuh vs LogRhythm UEBA

Compared 43% of the time

Darktrace vs LogRhythm UEBA

Compared 20% of the time

Cortex XDR by Palo Alto Networks vs LogRhythm UEBA

Compared 10% of the time

Microsoft Purview Insider Risk Management vs LogRhythm UEBA

Compared 9% of the time

IBM Security QRadar vs LogRhythm UEBA

Compared 6% of the time

More LogRhythm UEBA Competitors

CyberArk Privileged Access Manager vs One Identity Safeguard

Compared 33% of the time

WALLIX Bastion vs One Identity Safeguard

Compared 18% of the time

Delinea Secret Server vs One Identity Safeguard

Compared 9% of the time

SailPoint Identity Security Cloud vs One Identity Safeguard

Compared 9% of the time

Fudo PAM vs One Identity Safeguard

Compared 8% of the time

More One Identity Safeguard Competitors

Product Reports

Buyer's Guide

User Entity Behavior Analytics (UEBA)

June 2025

Download LogRhythm UEBA product report

Buyer's Guide

One Identity Safeguard

June 2025

Download One Identity Safeguard product report

Also Known As

LogRhythm UserXDR, LogRhythm Enterprise UEBA

No data available

Overview

LogRhythm UEBA enables your security team to quickly and effectively detect, respond to, and neutralize both known and unknown threats. Providing evidence-based starting points for investigation, it employs a combination of scenario analytics techniques (e.g., statistical analysis, rate analysis, trend analysis, advanced correlation), and both supervised and unsupervised machine learning (ML).

LogRhythm

One Identity Safeguard manages and monitors privileged access, enhancing security with features like automatic session recording, real-time monitoring, and credential rotation. It integrates seamlessly, supports compliance with audit trails, and improves operational efficiency across organizations. This robust platform significantly bolsters security protocols while controlling sensitive operations.

One Identity

Sample Customers

Information Not Available

Cavium

Buyer's Guide

LogRhythm UEBA vs. One Identity Safeguard

June 2025

Free Report: LogRhythm UEBA vs. One Identity Safeguard

Find out what your peers are saying about LogRhythm UEBA vs. One Identity Safeguard and other solutions. Updated: June 2025.

DOWNLOAD NOW

859,129 professionals have used our research since 2012.

See our LogRhythm UEBA vs. One Identity Safeguard report.

See our list of best User Entity Behavior Analytics (UEBA) vendors.

We monitor all User Entity Behavior Analytics (UEBA) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.