Try our new research platform with insights from 80,000+ expert users

VMware Aria Automation vs XM Cyber comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

VMware Aria Automation
Ranking in Cloud Security Posture Management (CSPM)
17th
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
170
Ranking in other categories
Cloud Management (1st), Configuration Management (7th), Network Automation (3rd), Cloud Infrastructure Entitlement Management (CIEM) (4th)
XM Cyber
Ranking in Cloud Security Posture Management (CSPM)
26th
Average Rating
8.0
Reviews Sentiment
7.7
Number of Reviews
2
Ranking in other categories
Continuous Controls Monitoring (8th), Vulnerability Management (35th), Continuous Threat Exposure Management (CTEM) (3rd)
 

Mindshare comparison

As of June 2025, in the Cloud Security Posture Management (CSPM) category, the mindshare of VMware Aria Automation is 0.3%, up from 0.2% compared to the previous year. The mindshare of XM Cyber is 0.9%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Cloud Security Posture Management (CSPM)
 

Featured Reviews

Le Quang Long - PeerSpot reviewer
Significantly streamlined operations with good automation that helps with simplifying workflows
It helps me build a big catalog and provide it to my end users. It helps us automate the workflow of creating many VMs and the TensorFlow key method. I do not meet many people to operate it live beforehand. It operates for both of my products, but as a product, it is complicated to integrate and automate with other products.
Chee Young Tan - PeerSpot reviewer
Has a valuable feature for attack simulation; it highlights the vulnerability and offers recommendations for improvement
XM Cyber helps identify risk by creating a shadow environment mirroring the production system. While it doesn't directly mitigate risks, it simulates attacks across this replica, uncovering vulnerabilities and weak points within the system. Once a WISC is established, it highlights the vulnerability and offers recommendations for improvement. It provides reporting templates, making the process faster. I rate it an eight out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The automation of the redundant tasks and the implementation of ServiceNow are huge for us..."
"VMware Aria Automation is a very scalable solution because it integrates well with a couple of leading products in the industry. For products that are not already integrated, there are plugins or adapters that can be used with customization."
"Even with the virtualization, it would take us at least three or four days to create a VM. With vRA we have brought that down to seven minutes. The solution has helped increase infrastructure, agility, speed of provisioning, time to market, application agility. Everything got super fast."
"Among the valuable features are the ease and speed of creating the VMs. Originally, we provisioned them manually and it would take us two days to do the provisioning... but with the automation, we are able to provision a VM with the click of a button, within seconds. It cut down on the time as well as cut down on the expense and employee cost in provisioning."
"The solution has helped us to increase infrastructure agility, mostly because, in addition to it being able to do its thing on its own, it has tie-ins to other parts of our CICD pipeline. We use Jenkins for our build process which, of course, vRA has plugins for, to be able to integrate with it. We use Chef and there is the Chef build as part of our image that we standardized to deploy, and that can tie in with our section of the pipeline that it does for applications."
"VMware Aria Automation supports integration with ServiceNow, Kubernetes, and other tools. It is cloud-agnostic, making it a stronger platform than Ansible."
"The most valuable feature is vRA’s ability to integrate whether with additional VMware vRealize suites or other vendors' cloud products."
"The most valuable feature that we have is that it's able to deploy several different operating systems, it's able to deploy whatever we want. We can take a template, spin it up, revise it, save it back off, and be able to have that for other departments. We can have one for our Dev team and one for our research team which has some specific requirements. We can keep track of them and deploy things automatically."
"The platform's most valuable feature is attack simulation."
"What I personally like very much, from my experience, is that it is very reliable."
 

Cons

"I think they could probably do more if they created more actions and more use cases to automate things."
"Stability has gotten a lot better. However, the vRO aspect, when you have a multi vRA head, is a little bit finicky still. vRO still needs to stay on one appliance and be one application, because, when you have two, you can't see runs on the other one that are happening when you're not logged into that one."
"Upgrades are always a pain."
"It is difficult to set up."
"I don't think it's intuitive or user-friendly. I think it's a good tool. Any automation tool, these days, the learning curve is kind of high. You're teaching sysadmins who never developed stuff. Maybe they modified a little bit of code and now you tell them, "Hey, here's the tool, use it." But you have to know a little bit of DevOps. So you have to train them how to do the scripting."
"I would like to see more out-of-the-box blueprints and workflows for the rest of VMware's products and its portfolio."
"VMware Aria Automation could improve reporting of the policies. They are difficult to customize. We have many policies but they are not able to be modified to what we want."
"I have not found this solution to be user-friendly. It's really complicated. The demo shows that you can automate anything but they only show basic scenarios. If you want to do anything more complicated than that, it becomes very complicated to set up."
"We'd like to see a cheaper price."
"XM Cyber could identify all areas of vulnerability. They could expand the identification span for different areas."
 

Pricing and Cost Advice

"I'm very interested in the integration with Puppet. However, my organization doesn't have the funding for something like Puppet right now. If VMware would integrate that feature set (Puppet) into vRA. That would be very awesome."
"From a budget point of view, the pricing is a bit on the higher side."
"It is an open-source product."
"SaltStack is an open-source product."
"The solution has helped to increase infrastructure, agility, speed, and provisioning in the time to market."
"VMware Aria Automation is expensive."
"Customers say this solution is costlier compared to its competitors."
"There is confusion between licensing levels. There are three different licensed versions of vRealize Automation, and there are different things which can happen in each of them."
"We have to pay standard licensing fees."
report
Use our free recommendation engine to learn which Cloud Security Posture Management (CSPM) solutions are best for your needs.
858,469 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Computer Software Company
12%
Manufacturing Company
10%
Government
9%
Computer Software Company
15%
Financial Services Firm
15%
Manufacturing Company
10%
Retailer
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What's the difference between VMware vRA (automation) and vROps (operations)?
vROP is a virtualization management solution from VMWare. It is efficient and easy to manage. You can find anything you need from the software interface. It provides complete visibility over applic...
Is there any way to try VMware Aria Automation for free?
When it comes to VMware Aria Automation, you have three choices for free runs: Hands-on Lab (HOL) Advanced lab A free trial I cannot describe in detail the second and third options as my company ...
Which sectors can benefit the most from VMware Aria Automation?
I was looking at VMware Aria Automation case studies recently and I got the impression that three main kinds of companies were using it most often: Social organizations Financial institutions and ...
What do you like most about XM Cyber?
The platform's most valuable feature is attack simulation.
What is your experience regarding pricing and costs for XM Cyber?
We have to pay standard licensing fees. There are no additional costs. It is an expensive product. I rate the pricing a seven out of ten.
What needs improvement with XM Cyber?
XM Cyber could identify all areas of vulnerability. They could expand the identification span for different areas.
 

Also Known As

VMware vRealize Automation, vRA, VMware DynamicOps Cloud Suite, SaltStack
No data available
 

Overview

 

Sample Customers

Rent-a-Center, Amway, Vistra Energy, Liberty Mutual
Hamburg Port Authority, Plymouth Rock Corporation
Find out what your peers are saying about VMware Aria Automation vs. XM Cyber and other solutions. Updated: June 2025.
858,469 professionals have used our research since 2012.