CyberArk Identity Reviews

CyberArk offers multiple products, including PAN, LRO for vendor remote access, and Identity. Some clients in the entertainment and tourism industry prefer using CyberArk Identity on the cloud as a Software as a Service (SaaS) solution. Their teams are typically small and prefer not to manage the infrastructure. They opt for this approach because they want to avoid investing significant time and money in larger products like SailPoint. However, it's important to note that such clients are relatively rare, with perhaps just one or two out of every hundred.

Regarding identity management, it's worth noting that onboarding users from various sources is a straightforward process with CyberArk SaaS. The user identification is simplified, and managing user privileges, whether adding or revoking them, is also quite straightforward when utilizing CyberArk SaaS.

On the PAM side, one of their notable strengths lies in safeguarding the keys and users for privileged accounts. They've implemented a robust security approach that is superior to many other solutions in terms of protecting privileged users and their keys.

In terms of a governance platform, it's worth noting that CyberArk doesn't offer a particularly strong one. They struggle with identifying risk scores efficiently because their risk scoring relies on the manual entry of access data. In contrast, SailPoint excels in this aspect and can detect and provide superior governance scores more effectively.

To be equitable, one notable aspect is that CyberArk is gradually moving away from on-premises components and migrating them to the cloud. However, from my perspective, they should consider retaining some on-premises components instead of entirely removing them. I understand that this decision might be related to cost and future prospects. Nonetheless, considering the global trend of securing and controlling data, offering everything solely in the cloud could become problematic for many organizations.

I have been working with it for more than two and a half years.

In terms of stability, I would rate it an eight. It's important to consider that a comprehensive solution requires a minimum of nine servers, which can pose challenges in terms of management and overall stability due to the substantial number of components involved.

When it comes to scalability, there are two distinct aspects to consider with CyberArk. License scalability is notably straightforward and perhaps the easiest compared to other solutions. However, architectural scalability can be quite complex and challenging.

I would rate it a nine out of ten.

To be completely frank, among my ten clients, a minimum of six express concerns or confusion regarding CyberArk. I'm not certain whether it's linked to the clients' skill levels or understanding, but I suspect that the support ecosystem is not adequately developed.

It's a straightforward process if you have skilled resources on hand. However, if your resources lack the necessary expertise, they might face challenges.

If we're looking at a comparison once more, it's important to acknowledge the crowded nature of the market. With so many players, including Arcon, BeyondTrust, WarLX, and others, the field is diverse. However, when focusing on the top products, I'd highlight BeyondTrust, CyberArk, Delinea, and Arcon. In terms of pricing, BeyondTrust and CyberArk tend to be more expensive, with CyberArk receiving an eight out of ten, in this regard.

In the realm of identity management, SailPoint is the leader due to its extensive features and customization capabilities, making a direct comparison with CyberArk somewhat unfair as SailPoint tends to excel. However, among CyberArk's competitors, Ping Identity stands as a strong contender. Ping Identity has been involved in the identity space for a longer period than CyberArk. Furthermore, there have been mergers in this space, such as FosRoc and BeyondTrust. This has reshaped the landscape, and the competition should now primarily be between Arcon, Ping Identity, and SailPoint, as other products tend to be smaller, like Micro Focus. Comparing them with Micro Focus wouldn't be suitable.

Enterprises generally have the resources to handle the compute and storage requirements and can allocate additional resources for CyberArk management without significant issues. However, medium-sized companies need to exercise caution as they might need to hire dedicated resources for solution management, which can increase maintenance costs. Small organizations, on the other hand, are likely to face numerous challenges during upgrades, migrations, and maintenance due to their limited resources. CyberArk is best suited for larger enterprises.

Overall I would rate it an eight out of ten.

My company uses CyberArk Identity for password vault, password management, and session management.

CyberArk Identity is the best PAM solution in town. Even though there are a lot of competitors of CyberArk Identity in the market, most of them do not have the market domination like CyberArk Identity.

CyberArk Identity's GUI is an area with certain shortcomings that need improvement.

I have been using CyberArk Identity for two years. I use the solution's latest version.

It is a very stable solution. Stability-wise, I rate the solution an eight out of ten.

It is a scalable solution. Scalability-wise, I rate the solution a nine out of ten. If you scale it up too much, then the solution lags performance-wise, causing it to slow down.

My company deals with its clients, and based on my current workplace, I have seen 300 users of the solution.

There are no plans to increase the number of users.

CyberArk Identity's technical support needs to know its own product well enough before telling others how it works. The support team should be more knowledgeable.

The initial setup of CyberArk Identity was straightforward.

The solution is deployed on the cloud.

The solution could be deployed in a week.

For the deployment process, we need to get your networking right and make sure you download the correct version of the solution, after which you can deploy the solution after ensuring that you have all the required infrastructure.

A manager and a senior engineer are required for the deployment and maintenance.

You can do the installation with the help of an integrator or consultant. The installation can be done in-house with the help of the product's documentation.

CyberArk Identity is a good investment. Once you deploy, I would say that you can use it for a long time.

Speaking about the price, I can only say that the solution is used by all the top-tier companies worldwide. There could be some additional costs apart from the licensing costs of the solution when you want to develop connectors in CyberArk Identity.

I recommend the solution to those planning to use it.

I recommend the solution to those planning to use it. The solution's potential users should ensure that you scale it properly and don't scale it beyond what is required because its performance lags.

I rate the overall solution an eight out of ten.

We use CyberArk Identity to handle the identity of an Active Directory, to handle Linux and other systems, and for API configurations that can handle even database accesses and third-party IDB accesses.

CyberArk Identity is a mature product.

The solution's difficulty in gaining skill sets should be improved because it's a vertical product. We would expect a better and easier operational service from CyberArk Identity.

CyberArk Identity is a stable solution.

Approximately, 55 customers are using CyberArk Identity.

Usually, the solution's technical support team responds, but the skill set of the first engineer is not ideal. You need to keep pressing in order to have the appropriate person to help you with the support.

The solution's initial setup is quite complex because it has its individual way of doing things.

CyberArk Identity is an expensive solution.

We recommend CyberArk Identity to our customers.

Overall, I rate CyberArk Identity a six or six and a half out of ten.

The integration capabilities, and ability to integrate CyberArk into the overall IBB strategy of our current clients.

In terms of general user feedback, the more security you put in front of a user, the more they complain. So usability and the user experience are always a challenge. So there's always room for improvement.

I have been using CyberArk Identity for ten years. 

I would I'd rate it probably seven and a half to eight.

The technical support is good. 

Positive

Their pricing is obviously a lot higher than many vendors in the marketplace but their service is also unmatched. 

I think maturity and overall coverage, CyberArk, obviously, has a lot more experience than many other vendors in this field. And, therefore, they have more wider range of tools and capabilities. But sometimes that's also a disadvantage that the newer vendors in the space often are more agile and more adaptable, especially to cloud environments and to, sort of, technologies that are more sort of, you know, cloud enabled. But overall, I would say CyberArk still has more maturity and more coverage in less than this.

I rate the overall solution a seven out of ten. 

I am using CyberArk Identity for privileged identity management or access management.

The most valuable features of CyberArk Identity are its ability to control access to administrative staff.

CyberArk Identity could improve by having the ability to better manage the network, such as Cisco. There seem to be some issues in this area.

I have been using CyberArk Identity for two years.

I rate the stability of CyberArk Identity a five out of five.

The scalability of CyberArk Identity is very good.

I rate the scalability of CyberArk Identity a four out of five.

We have 100 people using this solution in my organization. IT staff are the ones mostly using this solution.

We are using other solutions similar to CyberArk Identity, such as Azure Privileged Identity Management. 

Azure Privileged Identity Management is more mature than CyberArk Identity. However, they operate in slightly different spaces. They do not overlap each other. Additionally, Azure Privileged Identity Management cannot work on-premise.

The implementation took approximately three months.

We used a third party for the implementation of the solution.

I would rate the price of CyberArk Identity a four out of five.

There is an initial license and then there is a subscription needed.

I would advise others that they should plan the network hardware integration well in order to bring it onto CyberArk Identity. They should also do adequate change management with administrators and users because CyberArk Identity does add a layer of extra complexity.

I rate CyberArk Identity an eight out of ten.

We integrate the CyberArk components with the UiPath Orchestrator tool to manage all the passwords for our bots. We put all our automations on a VM, which runs the script. That's what we call a "bot," but we need service accounts to manage all these. We have customers with hundreds or thousands of bots, and it's challenging for us to manage the credentials for those service accounts. We use CyberArk to rotate the passwords 30 to 60 days, depending on the customer requirement.

CyberArk gives us that functionality. We have a credential vault where all the passwords are stored, and we can rotate them by connecting UiPath to CyberArk. We store the credentials for those bots in the vault, and CyberArk rotates the password, communicates with the orchestrator, and gives back the username and password. UiPath Orchestrator is the central control tower, if you will. It accesses those VMs using those passwords and runs the automation.

The two most valuable features of CyberArk Identity for us are password rotation and the ease of integration with UiPath Orchestrator. 

I don't have any feedback for ways Identity could improve — at least not for this use case.

I've been using CyberArk Identity for about a year and a half.

CyberArk Identity is very stable. We haven't had any issues at all.

Identity is more scalable than some other products I've tried. Others have some limitations in terms of environments, layers, and segregating different service accounts. The majority of my customers use it for their entire company, so that's a lot of users. However, I couldn't estimate the user base on average.  

I work on the integration side, so I haven't dealt with CyberArk's tech support much. We only called them one time when the CyberArk component was offline, and they helped troubleshoot it to get the services back up and running. It was just all done within one call. We haven't really had any other issues. And I think the support was pretty good.

CyberArk Identity is kind of expensive.

I rate CyberArk Identity 10 out of 10.  Identity is the tool that offers the most seamless integration with UiPath Orchestrator and the most utility from an automation perspective.

The tool helps with authentication. It acts as an MFA for any kind of privileged access that occurs in our organization.

The tool has issues with the third-party SMS gateway. The solution has its own SMS gateway. Integration support is a challenge when we don’t use their SMS gateway. The tool also needs to improve its scalability.

I have been working with the solution for two years. I use the tool’s latest version.

The solution is stable. You can expect one ticket every three months.

I would rate the tool’s scalability a seven out of ten.

The tool’s support is neither good nor bad. You need to wait a long time to get to the support.

Neutral

I would rate the tool’s setup a seven out of ten. The solution’s setup is easy if you have the right person for it. A person who is inexperienced with the deployment process should go through a lot of documentation to install the solution.

The deployment will take around three to four weeks to complete if the servers are configured properly. Our deployment took about two weeks to complete. You need only one person to deploy the product.

I would rate the tool’s pricing a seven out of ten. The product’s pricing is expensive and is on a yearly basis. You will need to pay around 10,000 GBP for 500 users.

I would rate the solution a seven out of ten. We have enterprise-based customers for the solution. I think Okta is a good solution compared to CyberArk.

The solution could be easier to use and I found it to be very complex involving many steps.

I have used the solution for approximately three years. 

I found the solution to be stable.

The solution has good technical support.

The solution's initial setup was straightforward. 

We used a vendor team to implement the solution. 

I rate CyberArk Identity an eight out of ten.