BeyondTrust Endpoint Privilege Management vs. Netwrix SbPAM

It is an absolute must in all organizations where security is taken seriously. For organizations where there is a tendency among the users' end to abuse access privileges, this tool comes in handy. It has features that would enable the administrator to look through video logs to see what was done by a specific user. Also has the capability to terminate or lock users/ user sessions.

Incentivized

Netwrix SbPAM is perfect for any company that has multiple system administrators and multiple locations. It allows the managers to control all admin roles in a central and controlled way. Privileged accounts are critical, so that is why SbPAM is perfect to know what your admins are doing.

Incentivized

• Reporting capabilities for user activities, including complete session recordings
• Integration with SAML for SSO and secure LDAP authentication
• Jump point servers for central isolated access from outside the network

• Access to critical resources in a controlled way
• Monitor admin user activities
• Evidence of admin user actions in case of problems

Incentivized

• Better communication to customers on new release compatibility
• Crowd-sourced rule logic for specific applications would be nice (I hear underway)
• Technical support processes could be a bit improved

Incentivized

• the native rdp connection could be a little faster
• The initial connection could be easier

Incentivized

BeyondTrust Endpoint Privilege Management is really usable thanks to the Cloud platform that provide central management, analytics, updates and policy definitions. For policies, quickstart covers around 80% of the overall configuration and we just have to define home made applications and dedicated use cases. From the user perspective, messages can be customized so it's easy to understand for user and they have an endpoint application to follow workflows approval.

Incentivized

The product performed to the level of our requirements.

BeyondTrust Endpoint Privilege Management has more features than CyberArk and more detailed options for configurations. BeyondTrust Endpoint Privilege Management is more focused on setting up access-related endpoints, which requires some fine tuning and understanding for use cases where a single endpoint has to be shared with multiple vendors. CyberArk's setup is more geared to users' accounts and then endpoint management under the user accounts.

My manager tried other products, but as far as I remembered, they were super expensive and too much for this type of organization.

Incentivized

• We are able to securely monitor activity from vendors accessing our network.
• This meets our cybersecurity objectives of securing our OT networks.
• The benefits far outweigh the initial cost of the software.

• Not sure about the ROI (I am not manager), but it is perfect to protect the company assets and information against foul play by a disgruntled employee.

Incentivized