Try our new research platform with insights from 80,000+ expert users

VMware Aria Automation vs XM Cyber comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

VMware Aria Automation
Ranking in Cloud Security Posture Management (CSPM)
17th
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
170
Ranking in other categories
Cloud Management (1st), Configuration Management (7th), Network Automation (3rd), Cloud Infrastructure Entitlement Management (CIEM) (6th)
XM Cyber
Ranking in Cloud Security Posture Management (CSPM)
25th
Average Rating
8.0
Reviews Sentiment
7.7
Number of Reviews
2
Ranking in other categories
Continuous Controls Monitoring (7th), Vulnerability Management (30th), Continuous Threat Exposure Management (CTEM) (4th)
 

Mindshare comparison

As of May 2025, in the Cloud Security Posture Management (CSPM) category, the mindshare of VMware Aria Automation is 0.3%, up from 0.2% compared to the previous year. The mindshare of XM Cyber is 0.9%, up from 0.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Cloud Security Posture Management (CSPM)
 

Featured Reviews

Le Quang Long - PeerSpot reviewer
Significantly streamlined operations with good automation that helps with simplifying workflows
It helps me build a big catalog and provide it to my end users. It helps us automate the workflow of creating many VMs and the TensorFlow key method. I do not meet many people to operate it live beforehand. It operates for both of my products, but as a product, it is complicated to integrate and automate with other products.
HolgerHeimann - PeerSpot reviewer
Reliable with no false-positives and helpful support
There's a lot of improvement possible, however, most of it is in the details. I personally like the concept, as it's pretty straightforward and the product is not trying to overload functionality. It's a clean and straightforward approach. You know what you get. Most of the improvements are detail improvements. They're pretty open to future requests as well, so we send them a lot of suggestions. For example, at the moment, they have something called Battleground. That's a visualization of the network, and it's a visualization of the attack paths that are possible. The program uses so-called scenarios, and we say, "Okay, I'm watching traffic for maybe 24 hours," and then you get a result for that scenario, what happens in that time with what the attack paths are, et cetera. The result of the same scenario yesterday or tomorrow may be different as something might change. In that, one of the things I'm currently missing, which is on the list to be added, is some kind of diff visualization. For example, showing a two-screen split of activity. On the left side of the screen, that's how it was yesterday; on the right side, that's how it is today; and here are the differences. We'd like to see a cheaper price.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Even with the virtualization, it would take us at least three or four days to create a VM. With vRA we have brought that down to seven minutes. The solution has helped increase infrastructure, agility, speed of provisioning, time to market, application agility. Everything got super fast."
"I can make a blueprint with an Active Directory deployment. With everything prepared, people can start installing our products."
"With the advent of the automation, we've been able to give DevOps the ability to spin up environments, give them lease times, and then have it automatically reclaim the environment."
"The big benefit is it will spin up VMs quickly so it would take about 13 to 15 minutes to deploy a virtual machine. Whereas, if I were doing it based on an email from users who are requesting VMs, it might take time for me to hear back from them. This could be anywhere from an hour to a day."
"I want to build automation that is intelligent, part of the fabric of our environment, and is somewhat self-sustaining. I think SaltStack can help me do this."
"It is mostly for our tech support to test new versions, find bugs, and troubleshoot what is happening at customer sites."
"value; It has provided my development team a pure self-service portal. We deploy thousands of machines and reclaim. So, their time to business, and their time to market has been improved exponentially."
"The product's most valuable features are ease of automation."
"What I personally like very much, from my experience, is that it is very reliable."
"The platform's most valuable feature is attack simulation."
 

Cons

"SaltStack's features are minimal."
"The basic support is not there for Google Cloud and Azure. They are unable to provision nor do cost controls. Google is still left out. It is great that they have done AWS, but we are a retailer which means nothing to us because it is a competitor. Azure is good, but Google is where a lot of our development environments are."
"It has a learning curve."
"There is a little bit of pain when it comes to libraries and what is needed to run the product."
"They could extend the ability to use vRealize Orchestrator Automation for organizations with multiple tenants. It should be easier to operate and extend different capabilities from vRealize Orchestrator. Currently, it's difficult to build advanced services in Aria Automation because you need to use the vRealize Orchestrator."
"I'm not wanting any particular feature; but there should be cost reductions. VMware comes at a high cost, and that's why we are in the process of transitioning to a more affordable alternative."
"It would be nice in the next release if they added in tool tips. Whether you're putting it together, adding a blueprint, or you're making a change in the system, highlighting or selecting something and having it tell you what it does or what it will do would be nice. Because it's such a complex system, it's hard to work with unless you've been using it for years to know what everything is doing."
"Deploying and configuring the solution takes a lot of time."
"XM Cyber could identify all areas of vulnerability. They could expand the identification span for different areas."
"We'd like to see a cheaper price."
 

Pricing and Cost Advice

"SaltStack is an open-source product."
"There is confusion between licensing levels. There are three different licensed versions of vRealize Automation, and there are different things which can happen in each of them."
"The tool is expensive since it is an enterprise product."
"It is an open-source product."
"VMware Aria Automation is expensive."
"We do plan to see ROI with any new implementation of new technologies being implemented within our environment."
"A simplified version for small businesses would be good."
"It is an expensive product. After VMware's acquisition by Broadcom, there was a rise in the price of VMware Aria Automation."
"We have to pay standard licensing fees."
report
Use our free recommendation engine to learn which Cloud Security Posture Management (CSPM) solutions are best for your needs.
850,028 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Computer Software Company
13%
Government
9%
Manufacturing Company
9%
Computer Software Company
16%
Financial Services Firm
15%
Manufacturing Company
10%
Retailer
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What's the difference between VMware vRA (automation) and vROps (operations)?
vROP is a virtualization management solution from VMWare. It is efficient and easy to manage. You can find anything you need from the software interface. It provides complete visibility over applic...
Is there any way to try VMware Aria Automation for free?
When it comes to VMware Aria Automation, you have three choices for free runs: Hands-on Lab (HOL) Advanced lab A free trial I cannot describe in detail the second and third options as my company ...
Which sectors can benefit the most from VMware Aria Automation?
I was looking at VMware Aria Automation case studies recently and I got the impression that three main kinds of companies were using it most often: Social organizations Financial institutions and ...
What do you like most about XM Cyber?
The platform's most valuable feature is attack simulation.
What is your experience regarding pricing and costs for XM Cyber?
We have to pay standard licensing fees. There are no additional costs. It is an expensive product. I rate the pricing a seven out of ten.
What needs improvement with XM Cyber?
XM Cyber could identify all areas of vulnerability. They could expand the identification span for different areas.
 

Also Known As

VMware vRealize Automation, vRA, VMware DynamicOps Cloud Suite, SaltStack
No data available
 

Overview

 

Sample Customers

Rent-a-Center, Amway, Vistra Energy, Liberty Mutual
Hamburg Port Authority, Plymouth Rock Corporation
Find out what your peers are saying about VMware Aria Automation vs. XM Cyber and other solutions. Updated: April 2025.
850,028 professionals have used our research since 2012.