Try our new research platform with insights from 80,000+ expert users

CyberArk Certificate Manager vs CyberArk Identity comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 14, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
3.3
CyberArk Certificate Manager automates processes, offering efficiency and ROI, despite past misconfiguration causing a major outage.
Sentiment score
5.0
Many users find CyberArk Identity valuable for saving time, enhancing security, fostering efficiency, and yielding beneficial returns.
CyberArk Certificate Manager is doing its best with multiple layers of security.
Section Head Cybersecurity at a energy/utilities company with 5,001-10,000 employees
With Venafi, it wasn't about saving time but achieving functionality that was otherwise impossible, such as distributing certificates without manual intervention.
Systems Engineer at a insurance company with 51-200 employees
I have seen over 30% return on investment due to the improvement in operational efficiencies through automation, which enhances productivity.
Private Wealth Advisor at Arima Fund Limited
 

Customer Service

Sentiment score
5.9
CyberArk Certificate Manager support is quick and expert, though some users note delays post-acquisition; mostly positive ratings.
Sentiment score
6.4
CyberArk Identity's customer service is generally effective but faces criticism for response delays and expertise inconsistencies.
Inquiries are typically addressed the same day, with most issues, even complex ones, resolved within 24 hours.
Global Security Systems Consultant at a insurance company with 10,001+ employees
Venafi's technical support is excellent, with even their first-tier support being in-house and highly competent.
Systems Engineer at a insurance company with 51-200 employees
Their technical support is knowledgeable and helpful, making Venafi stand out among other CyberArk products.
Solution Engineer at a comms service provider with 10,001+ employees
They resolved the problem immediately after I reported it, on the same day, within one hour.
Access Management Analyst at Telefónica
They respond immediately when requests are raised, and they are always available for priority one tickets.
Lead Identity Engineer at a tech vendor with 501-1,000 employees
I received prompt responses and support, which I would rate as very good.
Cybersecurity Delivery Analyst at Accenture
 

Scalability Issues

Sentiment score
5.2
CyberArk Certificate Manager efficiently scales with strong role-based access, effective load balancing, but challenging integrations.
Sentiment score
7.4
CyberArk Identity is praised for its scalability, accommodating diverse company sizes and ease of license expansion.
This role-based access control enhances scalability and efficiency by providing a focused view of necessary information.
Global Security Systems Consultant at a insurance company with 10,001+ employees
Horizontal scaling is a necessity rather than vertical scaling.
Solution Engineer at a comms service provider with 10,001+ employees
Scalability with Venafi is good; you can definitely use it if you have ten thousand certs, a thousand certs, a million, or a couple million.
Senior Security Engineer at a tech services company with 1-10 employees
We can use it on different phones and computers, demonstrating its scalability.
Program associate at IMAGINE HER
When delving deep into the concepts, there is a lot to address and learn, especially when facing real-time scenarios.
Cybersecurity Delivery Analyst at Accenture
You can scale it out pretty easily, and you can implement it very small.
Cloud Specialist at Perini Beheer
 

Stability Issues

Sentiment score
5.6
CyberArk Certificate Manager is mostly stable, with minor issues, achieving user stability ratings of six to nine out of ten.
Sentiment score
8.0
CyberArk Identity is highly praised for its reliable stability, quick issue resolution, and effective performance, despite network connectivity challenges.
Venafi's stability has been consistently reliable.
Global Security Systems Consultant at a insurance company with 10,001+ employees
Venafi is a stable product. It's definitely more stable than others.
Senior Security Engineer at a tech services company with 1-10 employees
I observed that in the last year, CyberArk Certificate Manager was down two to three times without any notification.
Certified Ethical Hacker at Skillogic
We no longer have our data infiltrated by unauthorized persons, and tracking actions within the system has become very easy.
Private Wealth Advisor at Arima Fund Limited
When you have it in the cloud, you have CyberArk every time you need it.
Access Management Analyst at Telefónica
With a stable network, due to the redundant data centers across the globe, it is a lot easier to use as a SaaS solution.
Senior Cyber Security Specialist Architect at a tech consulting company with 11-50 employees
 

Room For Improvement

CyberArk Certificate Manager needs enhanced integration, automation, and user support, with significant user experience and feature improvements required.
CyberArk Identity requires user interface improvements, better integration, enhanced documentation, and easier deployment for improved adoption and operations.
Expanding the range of out-of-the-box integrations would significantly improve the user experience.
Global Security Systems Consultant at a insurance company with 10,001+ employees
The yearly DNS verification required by certificate authorities necessitates manual intervention, hindering full automation.
Systems Engineer at a insurance company with 51-200 employees
They are pushing for cloud adoption, but we prefer on-premises solutions due to regulatory concerns.
Solution Engineer at a comms service provider with 10,001+ employees
It would be helpful if they released a generalized document for processes such as migration.
Cybersecurity Delivery Analyst at Accenture
Integration or deployment is extremely difficult for CyberArk Identity.
Head of IT at Skutin Solutions
There's a need to enhance network performance.
Senior Technology Manager at a outsourcing company with 501-1,000 employees
 

Setup Cost

CyberArk Certificate Manager offers complex yet competitive pricing, regarded as costly but justified for its quality and performance.
CyberArk Identity pricing is high but justified for enterprises with discounts and flexible licensing to balance costs.
Venafi offers good value for the cost.
Global Security Systems Consultant at a insurance company with 10,001+ employees
The pricing has increased for us, impacting our organization due to its operational expenditure (OPEX).
Solution Engineer at a comms service provider with 10,001+ employees
For our budget, Venafi's cost is moderate. It's not expensive as internal certificate generation is free, and we only pay for the public CA certificate signer and for storage in Venafi.
Software Development Engineer 2 at Expedia Group
Regarding pricing, it can be quite a lot for small companies.
Access Management Analyst at Telefónica
The pricing is acceptable.
Program associate at IMAGINE HER
If I am not going fully cloud, there are additional resources I will need to purchase, such as spinning more VMs or acquiring an HSM device to encrypt the vault.
Head of IT at Skutin Solutions
 

Valuable Features

CyberArk Certificate Manager excels in automated certificate management, integration, error reduction, and privileged access, enhancing efficiency and usability.
CyberArk Identity enhances security and efficiency through integrations, password management, user monitoring, and comprehensive compliance and risk analysis tools.
The most valuable feature of Venafi is the automation that helps save time and reduce human error.
Global Security Systems Consultant at a insurance company with 10,001+ employees
It ensures centralized certificate management, which is crucial for compliance and maintaining best practices.
Systems Engineer at a insurance company with 51-200 employees
What I like best about Venafi is that it's very easy to get somebody on a call and get any of my questions answered.
Senior Security Engineer at a tech services company with 1-10 employees
It impacts zero trust security strategies. It prevents lateral movements in the organization.
Head of IT at Skutin Solutions
The two-factor authentication is very important, but the fact that every account is being regenerated every time we use it is the most important security feature for us.
Cloud Specialist at Perini Beheer
It is the most powerful access management system.
Access Management Analyst at Telefónica
 

Categories and Ranking

CyberArk Certificate Manager
Ranking in Authentication Systems
8th
Average Rating
8.0
Reviews Sentiment
5.7
Number of Reviews
15
Ranking in other categories
Certificate Management Software (3rd)
CyberArk Identity
Ranking in Authentication Systems
9th
Average Rating
8.2
Reviews Sentiment
6.7
Number of Reviews
29
Ranking in other categories
Identity Management (IM) (9th), Authorization Software (3rd), Enterprise Password Managers (7th), User Entity Behavior Analytics (UEBA) (9th), Access Management (7th), Active Directory Management (6th), Cloud Resource Access Management (2nd), Customer Identity and Access Management (CIAM) (6th)
 

Mindshare comparison

As of January 2026, in the Authentication Systems category, the mindshare of CyberArk Certificate Manager is 1.8%, up from 0.9% compared to the previous year. The mindshare of CyberArk Identity is 1.7%, up from 1.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Authentication Systems Market Share Distribution
ProductMarket Share (%)
CyberArk Certificate Manager1.8%
CyberArk Identity1.7%
Other96.5%
Authentication Systems
 

Featured Reviews

Karthik Kashyap T H - PeerSpot reviewer
Lead Engineer at a retailer with 10,001+ employees
Eliminates certificate expiration outages and offers good customization and reporting capabilities
Even though it allows for email editing, until version 23.1, you had to log on to the server, and the console itself used to take a lot of time. That has changed from the last release onwards. When you're defining the flow, there are some areas that can probably cause confusion to the users. If you want to rename the default field, you cannot rename it, which caused a lot of confusion during the initial days until everyone got settled in. Allowing the renaming or updating of the default field is something Certificate Manager can improve on. Certificate Manager has both the on-prem and the cloud versions, but the on-prem version is far more mature than the cloud version, which lacks a lot of features that the on-prem version offers, at least when we did the POC and evaluated the product. The maturity of the cloud version needs improvement. Additionally, when considering the on-prem version, there is a minor glitch in the system. When an administrator makes changes, they have flexibility regarding the approval flow. When dealing with a certificate that requires approval from several different teams, there is a minor glitch in the system where the name of the approver does not appear. This is a bug that we are currently addressing. Additionally, there is room for improvement in key management. Changing the default account name is not a straightforward process; it can be quite tedious. This is an area where improvements could be made. If there is a particular workflow that we want to tweak, right now, we can achieve it only via a PowerShell script. It would be great if they could also support a small Python script or anything to expand their scripting or adaptable workflow code base. Even though we can call another script from a PowerShell script, if someone doesn't have knowledge of PowerShell, that would be challenging.
Hariharan Thangasamy - PeerSpot reviewer
Cybersecurity Delivery Analyst at Accenture
Has strengthened privileged access control and improved audit visibility through session monitoring and password rotation
On the identity product side, it is awesome. However, they can improve in the documentation parts. For example, if there is a migration process, I can see the maximum customers are moving from self-hosted to on-premises or from on-premises to the cloud. It would be helpful if they released a generalized document for processes such as migration. A clear overview document would assist us in understanding more about the tool, configurations, and automations to enhance our security. Regarding the initial setup of CyberArk Identity, I faced some challenges. At some points, I could not find proper documentation for deploying, enhancing, or integrating with other components. I could not find the proper documentation in the community portal.
report
Use our free recommendation engine to learn which Authentication Systems solutions are best for your needs.
881,082 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Computer Software Company
8%
Insurance Company
8%
Manufacturing Company
8%
Financial Services Firm
14%
Computer Software Company
11%
Manufacturing Company
11%
Healthcare Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business6
Large Enterprise13
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise4
Large Enterprise10
 

Questions from the Community

What is your experience regarding pricing and costs for Venafi?
The pricing is minimal compared to other platforms. There are no problems regarding pricing.
What needs improvement with Venafi?
It would be better if they could notify each member whenever any ongoing activity is happening. I have been using it for the past four years, and I haven't received any messages about issues on Cyb...
What advice do you have for others considering Venafi?
I didn't notice any time saved on satisfying the compliance requirements. To safeguard the infrastructure from any attacks, I suggest that everyone should maintain individual certificates for their...
What do you like most about CyberArk Identity?
The integration capabilities, ability to integrate CyberArk into the overall IBB strategy of our current clients.
What is your experience regarding pricing and costs for CyberArk Identity?
I am not certain about CyberArk Identity's exact pricing model. For comparison, Okta was around five dollars per user. CyberArk Identity offers good discounts to some clients, which influences thei...
What needs improvement with CyberArk Identity?
We do not specifically use the password vaulting feature of CyberArk Identity. The centralized user dashboard of CyberArk Identity has not been that important for us. If it would be possible to sha...
 

Also Known As

Venafi
Idaptive
 

Overview

 

Sample Customers

Surescripts, CME Group, TD Bank Group, Aetna, MoneyGram, Zions Bancorp, Cisco
MLB, Citi, Pfizer, SulAmerica, GE Capital, Shiseido
Find out what your peers are saying about CyberArk Certificate Manager vs. CyberArk Identity and other solutions. Updated: December 2025.
881,082 professionals have used our research since 2012.