No more typing reviews! Try our Samantha, our new voice AI agent.

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

BeyondTrust Password Safe offers valuable features such as session recording, password rotation, and password vaulting, enhancing security and accountability.
Smart Rules is a unique feature that allows automatic onboarding of accounts based on various attributes, reducing manual scripting efforts.
The powerful discovery engine provides comprehensive insights into server details, aiding in effective resource management and tracking.
It integrates password and session management, enhancing compliance and tracking accountability for access types and usage.
BeyondTrust Password Safe supports high availability and failover through its architecture capabilities and offers excellent session monitoring for enhanced security posture.

CONS

Documentation is complicated and inconsistent, leading to users having to search multiple documents for specific information.
Technical support needs improvement as users still have to depend heavily on the support team for backend updates and troubleshooting.
Named accounts have limitations due to directory size constraints when using Smart Rules.
The deployment process is complex, requiring users to set up their own database on a SQL server, which increases deployment time.
Patching issues occur due to Password Safe not being compatible with server updates, impacting maintenance processes.
 

BeyondTrust Password Safe Pros review quotes

PawanShirose - PeerSpot reviewer
Associate Security Consultant at CyberSec Consulting
Oct 14, 2025
Automation in BeyondTrust Password Safe uses Smart Rules, which eliminate the need for manual onboarding and effectively handle multiple bulk tasks, such as onboarding and mapping.
AK
Lead Engg. Information Assurance at ACPL Systems Pvt Ltd
Jun 25, 2025
The time-saving benefits come from no longer having to remember multiple device passwords.
IshtiaqKhalil - PeerSpot reviewer
Information Security Engineer at BOK
Jun 4, 2025
I rate BeyondTrust Password Safe as an overall 10 out of 10.
Learn what your peers think about BeyondTrust Password Safe. Get advice and tips from experienced pros sharing their opinions. Updated: September 2026.
913,806 professionals have used our research since 2012.
Ali Hatamleh - PeerSpot reviewer
IT operations manager at a tech services company with 11-50 employees
Feb 10, 2025
The features I find valuable in Password Safe include password retention and management, session privilege monitoring, live monitoring and recording, and the use of PS automation scripts for creating connections.
MR
Senior Cyber Security Engineer at TechnoNext Ltd.
Nov 28, 2024
The flexibility of the licensing model is significantly better as it offers both unlimited users and unlimited devices, unlike Delinea, which is based on the number of users.
Vinay Dabas - PeerSpot reviewer
Senior Sales Engineer at ForgeRock
Oct 17, 2022
The best aspect of the product is the ability to onboard devices. You can scan the IP subnets and onboard all the devices. You can then segregate them if it's a network device or a firewall. If it's a Windows server or a UNIX, you can basically scan your IT infrastructure and onboard the efforts, which should be managed. Once they have been onboarded, then the session management and password management are easy and nicely configurable.
Gary Jolley - PeerSpot reviewer
PAM Architect at GCA
Aug 23, 2022
Its number one feature is discovery. The discovery engine in BeyondTrust is off the charts. When they perform a discovery, you know everything there is about a server, including what software is installed. For example, if you want to group all of your database servers together, you can do that by using discovery and Smart Rules. If a server has Microsoft SQL installed, it gets put into a group based on a Smart Rule. It makes it very easy to determine what is what in your environment. As organizations grow or acquire other companies and merge, they lose track of what they have. BeyondTrust can help you throw a rope around it very rapidly.
Gary Jolley - PeerSpot reviewer
PAM Architect at GCA
Aug 28, 2024
The technical support and customer services are phenomenal.
Hartmann OLLIVIER De MONTAGUERE - PeerSpot reviewer
IT Messaging Collaboration L3 Consultant at ATLANSE (missioned at BNP Paribas CIB)
Oct 23, 2022
The ability to manage privileged account passwords is the most valuable feature, giving us the capability of rotating passwords as soon as an event is triggered.
Ahmad Sallam - PeerSpot reviewer
Senior Specialist at a financial services firm with 1,001-5,000 employees
Oct 24, 2022
The CI/CD and REST API are also satisfactory; the solution has a full PAM feature set and they all work well.
 

BeyondTrust Password Safe Cons review quotes

PawanShirose - PeerSpot reviewer
Associate Security Consultant at CyberSec Consulting
Oct 14, 2025
I have faced stability issues when upgrading BeyondTrust Password Safe solution. The upgrade process can be lengthy compared to other modules.
AK
Lead Engg. Information Assurance at ACPL Systems Pvt Ltd
Jun 25, 2025
The effectiveness of BeyondTrust Password Safe's session management capabilities for SSH and RDP is pretty much robust, but it needs more improvement for other applications and web-based applications.
IshtiaqKhalil - PeerSpot reviewer
Information Security Engineer at BOK
Jun 4, 2025
From the client perspective, they usually complain that the RDP session disconnects without error notifications.
Learn what your peers think about BeyondTrust Password Safe. Get advice and tips from experienced pros sharing their opinions. Updated: September 2026.
913,806 professionals have used our research since 2012.
Ali Hatamleh - PeerSpot reviewer
IT operations manager at a tech services company with 11-50 employees
Feb 10, 2025
If they can create a single platform to create a connector, it would be better than using the RBS server.
MR
Senior Cyber Security Engineer at TechnoNext Ltd.
Nov 28, 2024
Adding user behavior analysis to the server or messaging would be beneficial.
Vinay Dabas - PeerSpot reviewer
Senior Sales Engineer at ForgeRock
Oct 17, 2022
The database instance onboarding should be simplified. The problem is that you can scan the assets and databases inside a server, but you cannot onboard them or manage them with the smart tools. It has to be done manually. I think they should try to include more custom platforms.
Gary Jolley - PeerSpot reviewer
PAM Architect at GCA
Aug 23, 2022
If there was one thing, it would be having the documentation standardized. They should keep the documentation consistent. For example, when BeyondTrust updated one of their admin guides, they left out the information on the discovery account requirements, and then over a period of time, we ended up having to search multiple different documents to put together a string of information for a specific topic, which was problematic. It was minor, but it was problematic. Standardized documentation would be the one thing I would suggest.
Gary Jolley - PeerSpot reviewer
PAM Architect at GCA
Aug 28, 2024
The initial server implementation tasks could be easier to process.
Hartmann OLLIVIER De MONTAGUERE - PeerSpot reviewer
IT Messaging Collaboration L3 Consultant at ATLANSE (missioned at BNP Paribas CIB)
Oct 23, 2022
We weren't aware that the Password Safe virtual appliance runs on a Windows server. As part of our monthly patching process, we ran into an issue. BeyondTrust Password Safe wasn't compatible with the patching we used to put on our server.
Ahmad Sallam - PeerSpot reviewer
Senior Specialist at a financial services firm with 1,001-5,000 employees
Oct 24, 2022
There is a limited capacity on the appliance, which I wasn't informed about when I purchased the product. I can have a maximum of 150 rules per appliance; any more than that and rule processing becomes very complex, especially regarding password revision. Hitting a capacity limit you don't know about can be problematic. Ideally, we would not have a limited capacity, allowing us to be in a completely managed state with password rotation for every service account, not just the highly privileged ones.