One Identity Safeguard vs Symantec Privileged Access Manager comparison

One Identity and Broadcom are both solutions in the Privileged Access Management (PAM) category. One Identity is ranked #4 with an average rating of 7.2, while Broadcom is ranked #16 with an average rating of 8.3. One Identity holds a 3.6% mindshare in PAM, compared to Broadcom’s 1.5% mindshare. Additionally, 93% of One Identity users are willing to recommend the solution, compared to 85% of Broadcom users who would recommend it.

One Identity Safeguard

Read 45 One Identity Safeguard reviews

3,728 Views
2,610 Comparison Views

93% willing to recommend

Symantec Privileged Access ...

Read 53 Symantec Privileged Access Manager reviews

902 Views
658 Comparison Views

85% willing to recommend

One Identity Safeguard

Symantec Privileged Access ...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 6, 2024

Symantec Privileged Access Manager and One Identity Safeguard compete in access management solutions. Users find One Identity Safeguard more satisfying due to its comprehensive features, despite its competitive pricing, while Symantec is favored for affordability.

Features: Symantec Privileged Access Manager is valued for its integration capabilities, comprehensive access control, and strong security measures. One Identity Safeguard is recognized for its robust auditing, reporting functionalities, and adaptability to complex infrastructures.

Room for Improvement: Symantec needs enhanced reporting tools, more intuitive configuration, and simplified setup processes. One Identity Safeguard could improve support response times, interface stability during updates, and enhance its documentation further.

Ease of Deployment and Customer Service: Symantec offers straightforward deployment and responsive customer service, aiding smoother integration. One Identity Safeguard, while more complex, benefits from detailed documentation and comprehensive support resources.

Pricing and ROI: Symantec is noted for cost-effectiveness and quick ROI with competitive setup costs. One Identity Safeguard offers higher long-term value, justified by significant ROI through superior features and scalability.

To learn more, read our detailed One Identity Safeguard vs. Symantec Privileged Access Manager Report (Updated: July 2025).

Buyer's Guide

One Identity Safeguard vs. Symantec Privileged Access Manager

July 2025

Download the complete report

Helped 866,088 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

One Identity Safeguard

Ranking in Privileged Access Management (PAM)

4th

Average Rating

8.0

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

User Entity Behavior Analytics (UEBA) (7th), Non-Human Identity Management (NHIM) (6th)

Symantec Privileged Access ...

Ranking in Privileged Access Management (PAM)

16th

Average Rating

7.8

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of August 2025, in the Privileged Access Management (PAM) category, the mindshare of One Identity Safeguard is 3.6%, down from 4.6% compared to the previous year. The mindshare of Symantec Privileged Access Manager is 1.5%, down from 1.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Privileged Access Management (PAM) Market Share Distribution
Product	Market Share (%)
One Identity Safeguard	3.6%
Symantec Privileged Access Manager	1.5%
Other	94.9%

Privileged Access Management (PAM)

Featured Reviews

Tor Nordhagen

Executive Director at Semaphore

Transparent mode for privileged sessions will greatly simplify our client's administrative situation

We're introducing the solution's transparent mode for privileged sessions. This is part of what the client hasn't used before. It will simplify their administrative situation greatly. So far, the rollout of this feature has been a seamless process, but we're still in the midst of rolling it out. The benefits will be on the risk side. Right now, the way accounts are managed, you don't necessarily know who is using an account. There's a shared admin account, and that's not a good thing. And those accounts are shared in wallets by several people. One of the real benefits of safeguarding here is that the client will have an absolute audit of who is using an administrative interface, whether it's server or network.

Read full review

Muzi Lubisi

Senior technical Consultant at CA Africa

Secure management of sensitive servers and seamless applications with direct linking

The credential injection feature is highly valued, particularly for RDP sessions. A majority of customers use it for RDP, and a couple for Linux servers. The broader capabilities, including access to multiple systems, web-based applications, and clustering, have never posed an issue. The threat analytics aspect is also a robust feature that analyzes all pertinent information.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It has greatly helped improve our security posture. Safeguard has an option where it will reset passwords on service accounts, then go out to those servers where that service account is running as a service and update the password on it. That makes password changes very easy. We can regularly change passwords now and are planning on making it an annual activity, where all the people who own service accounts will go in and make sure all their passwords get changed, updated, and reset."

"There is ease of implementation. Compared to other PAM solutions, it is easy to implement and use from an administrator's point of view."

"All the features are promising, but we love the reporting feature because we can get each and every report. That's a major compliance requirement. Its reporting is really amazing, and it has made life a lot easier."

"I have found the most useful feature of One Identity Safeguard to be Privileged Sessions."

"The first feature I like about One Identity Safeguard is the live contact point for the VPNs. This has been working very well for us, as it's both highly available and reliable."

"It is easy to manage. There is a very logical, clear user interface. Also, the integration of scripts is thoughtfully implemented. Overall, it's a nice product to manage."

"The extensible framework for authentication is one of the most valuable features. We use an MFA plug-in and a lot of different factors, depending on what the business use-cases are. And of course, the auditing functionality is also valuable."

"The scalability of One Identity Safeguard is perfect, scoring ten out of ten."

More One Identity Safeguard pros

"The agent-based credential management solution allows clients to programmatically use the agent to collect passwords during runtime from Symantec Privileged Access Manager."

"The credential injection feature is highly valued, particularly for RDP sessions."

"CA PAM is working well for us."

"It is great for identity governance."

"For me, it is the robust API which is the most valuable feature. This allows for low maintenance costs and allows applications to automatically connect. This is great to automate security of the DevOps pipeline for shared secrets across environments. Also, being on Linux and a virtual appliance is great."

"The product is very scalable in terms of concurrent sessions that it can handle at a time, number of device it can support, accounts that it can manage, or number of nodes that you can deploy in a cluster."

"Transparent login for users of privileged IDs (Linux, Windows). This prevents sharing of the password because it is never seen."

"It is simple to implement and is suitable for medium to large-scale enterprises."

More Symantec Privileged Access Manager pros

Cons

"We have issues using Safeguard to connect to and record from the cloud. Currently, they don't have a mechanism to record this type of connection."

"We sometimes face issues with configuration and things like that, but we manage to solve them."

"Some of our users find the functionality a bit complex, and it could be made more user-friendly."

"We have feature requests and would like to see the turnaround times on those features to be faster."

"When we compare One Identity Safeguard with Cyberark, we know CyberArk has other tools or other features that are more complex and more useful for the customers. For example, I have one customer that wants to elevate the permission that is available in CyberArk."

"Transparent mode was too cumbersome, so I don't foresee us being able to use it. On paper when we were initially talking about it, it was definitely going to be the preferred method until we realized the burden it would be on our network guys. Then, we had to step back and reevaluate what we wanted to do. That's when we changed our approach to use the RD Gateway feature."

"From a management point of view, it would be beneficial if One Identity Safeguard Privilege Password and One Identity Safeguard Privilege Session had a more similar interface."

"We would like to have the option of importing assets by using the CSV file. It was available in the earlier versions, but it is not available now."

More One Identity Safeguard cons

"Broadcom has neglected product development since acquiring Symantec, and nothing major has been added to PAM."

"Bring more technology into the portfolio and being able to collapse those products into a much more integrated way."

"It's difficult to locate the reports, there are limits on what reports can be run from the GUI, and the report formats are lacking."

"Technical support was good when CA handled it. After Broadcom took over, it's not as good."

"What I hope happens with the new product CA PAM is to keep all the useful features that exist in PA, but what I’ve noticed with many new products is the UI gets polished but systems lags stability and performance or it adds additional complexity instead of simplifying the user experience."

"An improvement for this solution is that it should not be constantly based on user name and password. There should be a condition to edit and update your username."

"I would like this solution to be simpler. It should have a one-click access that works together with AWS."

"We experience stability issues after every patch upgrade. This is a place where CA needs to improve drastically."

More Symantec Privileged Access Manager cons

Pricing and Cost Advice

"They have comparable pricing. All identity products are essentially priced in a similar way. It's a per-user base."

"Its subscription cost is too much, and sometimes, it is very difficult to pitch the solution to the management for cost approval. If the cost is reduced a little bit, it would be easier. If its cost was less, many other organizations that currently cannot afford it would be able to use this technology. I'm sure many organizations around the globe are having issues with identity management, and it is a very difficult task for IT to manage privileged accounts."

"One Identity Safeguard is expensive and the cost goes up as we scale."

"As compared to other products, it is reasonable, but the training sessions are too expensive."

"Safeguard is cheaper than CyberArk."

"The license is very expensive for us, partly due to inflation and partly because of the exchange rate between the Dollar and the Iranian Rial. We purchased a perpetual license that we've been using up until now, but I believe that we are not going to update it in the future. Instead, we plan to find another third-party to support us with the license, in the sense that we would have access to their license as a shared agreement."

"It was definitely cheaper than the other two products that we evaluated."

"We have a yearly license. The cost depends on how much a company wants to invest in technology. In our organization, we believe in modern digitization and automation processes so we found it affordable. One Identity was not that much less than other solutions and it is not a cheap solution. There were number of cheaper solutions. However, it's the most effective, according to our evaluation."

More One Identity Safeguard pricing and cost advice

"I would prefer better licensing options for the 20-100 users we have at a given time."

"Appliances are relatively cheap, don’t skimp. Make sure you have redundancy, high availability, and enough appliances to manage the concurrent workload."

"The licensing is simple and scalable."

"It is reasonably priced."

"They offer per-device, per-user, or monthly and yearly licensing models."

"The prices are not low, but one can ask for a discount. It’s not the cheapest PAM solution."

"It is more expensive than other solutions on the market."

"Don’t go with an agent model. Don’t go with a model that has you buying a thousand different parts. Go with PAM that gives you everything, or you’ll just be paying costs of implementing another tool that PAM would have just given you up front."

More Symantec Privileged Access Manager pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.

See recommendations

866,088 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

21%

Financial Services Firm

Comms Service Provider

Government

Comms Service Provider

15%

Computer Software Company

13%

Financial Services Firm

11%

Manufacturing Company

11%

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	18
Midsize Enterprise	12
Large Enterprise	19

By reviewers
Company Size	Count
Small Business	14
Midsize Enterprise	5
Large Enterprise	30

Questions from the Community

What do you like most about One Identity Safeguard?

The identity discovery is good, and the performance is pretty good value.

See all answers

What is your experience regarding pricing and costs for One Identity Safeguard?

The pricing of One Identity Safeguard is fairly priced and cheaper than other solutions of the same enterprise level. It provides a good cost-benefit ratio.

See all answers

What needs improvement with One Identity Safeguard?

There is room for improvement in integration between modules. The native integration between SPP and SPS, which is currently based on a plugin, could be enhanced. Customization for lookup passwords...

See all answers

What do you like most about Symantec Privileged Access Manager?

We can check the activities in the server for fragile files and documents in case of any issues.

See all answers

What is your experience regarding pricing and costs for Symantec Privileged Access Manager?

Due to the nature of the solution, it is hard to gauge, but compared to competitors, the pricing is very good. I would rate it as an eight and a half out of ten.

See all answers

What needs improvement with Symantec Privileged Access Manager?

Recent releases need improvement in webpage management. For instance, navigating through a webpage that acts like a wizard, where I proceed to the next page and enter more information, is not handl...

See all answers

Comparisons

CyberArk Privileged Access Manager vs One Identity Safeguard

Compared 27% of the time

WALLIX Bastion vs One Identity Safeguard

Compared 15% of the time

SailPoint Identity Security Cloud vs One Identity Safeguard

Compared 8% of the time

One Identity Cloud PAM Essentials vs One Identity Safeguard

Compared 8% of the time

Delinea Secret Server vs One Identity Safeguard

Compared 7% of the time

More One Identity Safeguard Competitors

Cisco Identity Services Engine (ISE) vs Symantec Privileged Access Manager

Compared 30% of the time

CyberArk Privileged Access Manager vs Symantec Privileged Access Manager

Compared 26% of the time

ARCON Privileged Access Management vs Symantec Privileged Access Manager

Compared 17% of the time

BeyondTrust Endpoint Privilege Management vs Symantec Privileged Access Manager

Compared 15% of the time

Delinea Secret Server vs Symantec Privileged Access Manager

Compared 12% of the time

More Symantec Privileged Access Manager Competitors

Product Reports

Buyer's Guide

One Identity Safeguard

August 2025

Download One Identity Safeguard product report

Buyer's Guide

Symantec Privileged Access Manager

August 2025

Symantec Privileged Access Manager report

Download Symantec Privileged Access Manager product report

Also Known As

No data available

CA PAM, Xceedium Xsuite, CA Privileged Access Manager

Overview

One Identity Safeguard manages and monitors privileged access, enhancing security with features like automatic session recording, real-time monitoring, and credential rotation. It integrates seamlessly, supports compliance with audit trails, and improves operational efficiency across organizations. This robust platform significantly bolsters security protocols while controlling sensitive operations.

One Identity

CA Privileged Access Manager is a simple-to-deploy, automated, proven solution for privileged access management in physical, virtual and cloud environments. It enhances security by protecting sensitive administrative credentials such as root and administrator passwords, controlling privileged user access, proactively enforcing policies and monitoring and recording privileged user activity across all IT resources. It includes CA PAM Server Control (previously CA Privileged Identity Manager) for fine-grained protection of critical servers

Broadcom

Sample Customers

Cavium

NEOVERA, Telesis, eSoft

Buyer's Guide

One Identity Safeguard vs. Symantec Privileged Access Manager

July 2025

Free Report: One Identity Safeguard vs. Symantec Privileged Access Manager

Find out what your peers are saying about One Identity Safeguard vs. Symantec Privileged Access Manager and other solutions. Updated: July 2025.

DOWNLOAD NOW

866,088 professionals have used our research since 2012.

See our One Identity Safeguard vs. Symantec Privileged Access Manager report.

See our list of best Privileged Access Management (PAM) vendors.

We monitor all Privileged Access Management (PAM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.