No more typing reviews! Try our Samantha, our new voice AI agent.

Idira Privileged Access Manager vs NetWitness Platform comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Idira Privileged Access Man...
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
231
Ranking in other categories
User Activity Monitoring (2nd), Enterprise Password Managers (3rd), Privileged Access Management (PAM) (1st), Mainframe Security (2nd), Operational Technology (OT) Security (4th)
NetWitness Platform
Average Rating
7.4
Reviews Sentiment
7.4
Number of Reviews
36
Ranking in other categories
Log Management (36th), Security Information and Event Management (SIEM) (34th)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Idira Privileged Access Manager is designed for Privileged Access Management (PAM) and holds a mindshare of 8.5%, down 14.7% compared to last year.
NetWitness Platform, on the other hand, focuses on Log Management, holds 1.2% mindshare, up 0.4% since last year.
Privileged Access Management (PAM) Mindshare Distribution
ProductMindshare (%)
Idira Privileged Access Manager8.5%
Safeguard by One Identity4.4%
Teleport3.6%
Other83.5%
Privileged Access Management (PAM)
Log Management Mindshare Distribution
ProductMindshare (%)
NetWitness Platform1.2%
Splunk Enterprise Security7.3%
IBM Security QRadar4.6%
Other86.9%
Log Management
 

Featured Reviews

Mahmudul Hoque Khan - PeerSpot reviewer
Lead Engineer at intelQong Technology
Centralized access has improved privileged control and visibility yet still needs better integrations
While the access control capabilities are useful, streamlining some configuration and policy management workflows could enhance the user experience for administrators. A simpler interface for creating access policies and quickly identifying unusual activities would make day-to-day administration more efficient. Stronger integration with existing identity data and secret management could be a significant improvement for Idira Privileged Access Manager. Deeper integration with cloud solutions would make it easier to correlate privileged access activity with other security events. I would also appreciate more flexible reporting and dashboards so administrators can swiftly see access patterns and unusual privileged access from a single view.
reviewer1130436 - PeerSpot reviewer
Information Technology Security and Infrastructure Expert at a government with 201-500 employees
Helps to deal with potential attacks and is available at a reasonable price
My company has had many benefits from the use of the product in the last eight years. The tool has streamlined our company's incident response process since it serves as a log repository, which allows us to correlate events and access different technology stacks. In our company, we were able to actually find some potential attacks, so it has been very helpful. The tool's integration capability isn't so great. In my company, we managed to integrate it with our Microsoft Azure Subscription, after which we managed to integrate it with other tools. You will face a lot of difficulties if you want to integrate it with your database monitoring tool, PAM solutions, or IAM products. The product has done well overall for my company's teams to deal with their workflow efficiency. I would not recommend the product to others. I rate the tool a seven out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Increased our insight into how privileged accounts are being used and distributed within our footprint."
"The credentials management capability is key to ensuring that the credentials are kept secure and that access to them is done on a temporary and event-driven basis."
"The integrations are the most valuable aspect of CyberArk Privileged Access Manager. The software offers pre-built integrations, and our team can also create custom connectors. This flexibility allows us to integrate with systems that we previously didn't consider integrating with, making it a significant advantage for us."
"I have used other privileged account management tools in the past; this, by far, outranks them as far as features and usability."
"Creating policies and the password rotation feature have been valuable. We don't have to memorize our password for the ADM account."
"I would rate CyberArk Privileged Access Manager nine out of ten."
"The users have the ability to rotate passwords on a daily basis with a Reconcile Account. Or, if they want to do one-time password checkouts, we can manage those, check in, check out. I like the flexibility of the changing of the password, specifically."
"One additional thought is that Idira Privileged Access Manager has become a crucial part of our daily Linux administration and security work."
"It gives the capability for the incident response team to correlate logs to identify any kind of problem like malware and incidents in a general sense, both for logs and packets."
"Over time, NetWitness Logs and Packets has matured from a boxed solution with multiple parts to the current, more streamlined version for which we only need the software license to put it up on our own cloud and deliver it to multiple clients."
"Packet Solution: Allows analyst proactive hunting and alerting on daily sophisticated APTs."
"Integration is exceedingly minimal, since its project development is much easier than that of LogRythm or IBM."
"The detection of ransomware in the internal network has benefited my organization."
"Setting up NetWitness is straightforward. There are multiple connectors, including standard and specialized connectors. One purpose of the connectors is the enhanced capability integrate the custom applications. NetWitness comes with E6 appliances and application images that we use for the initial configurations and for the OS stack information. From there, you can consider the correlation rules, integrate the different log sources, and easily create correlation rules and backlog reports."
"The most valuable features are the packet decoder, log decoder, and concentrator."
"Technical support is very good; they try to resolve issues with the proper SLAs which are defined by them and they understand the client's requirements as well as the client's infrastructure in a better manner."
 

Cons

"Technical support is average. They are not so great, because the first level support partner or distributor has to provide the support and customers cannot contact CyberArk support directly."
"For least privilege management, we need a different level of certification from privileged management."
"While the access control capabilities are useful, streamlining some configuration and policy management workflows could enhance the user experience for administrators."
"Our DevOps team is looking in the direction of cloud, because we are not in it today. We are hoping to build it with Conjur from the ground up."
"CyberArk's license is too expensive. I rate it seven out of 10 for affordability."
"Additionally, I think the user experience needs to improve."
"I would like to see improvement in the custom connector for integration with different devices."
"Cost efficiency is the number one thing that can be improved in my mind."
"The implementation needs assistance."
"It should have a monitoring feature. It would help us analyze the current state of attacks faster from a single platform."
"The solution is pretty complex to set up. Comparatively, I have worked on IBM QRadar and Splunk; they are much easier to set up."
"The initial setup was complex because it takes a lot of time to complete the implementation."
"The system architecture is complex and sometimes it’s hard to troubleshoot potential problems."
"If we have the ability to run a dynamic analysis through malware in the same suite, it would be great to have a sandbox solution to analyze malware through dynamic analysis."
"The product's licensing models are complex to understand. This particular area needs improvement."
"Its technical support could be better."
 

Pricing and Cost Advice

"I focus more on the technical side, but I hear customers say that if CyberArk was more affordable, they might have acquired more licenses. Some clients consider alternative solutions due to pricing concerns."
"Previously, the pricing was very meager. They started publicizing and advertising the solution, growing CyberArk, as an organization. They also changed their pricing with that growth, e.g., the pricier the product, the more people who will purchase it."
"CyberArk Enterprise Password Vault is a very expensive product."
"The price of the solution is reasonable."
"Our risk is definitely significantly lower. Also, our resources are low."
"This product is very expensive."
"The pricing for CyberArk is on the higher side compared to other Privileged Access Management products. Something should be done regarding enterprise licensing for long-standing customers."
"Generally, I don't get involved in the licensing or the purchasing side of it, but I do know that the licenses are expensive."
"We have yearly licensing costs. The license fee can be based on the volume of EPS. Some organizations may have, as a gentlemanly gesture, 10,000 EPS and get a 3,000 EPS license but actually use 5,000 EPS."
"Our license is for one year."
"The product price was reasonable for my region and the market."
"The licenses are good but the cost is very expensive."
"In comparison to other SIEM solutions such as Splunk, NetWitness is less costly."
"The product is expensive."
"Many clients are not able to purchase the packet capability because there is a huge amount of data, and the cost depends on the number of EPS (Events per second), as well as the number of gigabytes of data per day."
"RSA NetWitness Logs and Packets do not have a subscription model, it's a one-time purchase. There is only a perpetual license."
report
Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Outsourcing Company
12%
Financial Services Firm
11%
Manufacturing Company
11%
Comms Service Provider
7%
Construction Company
12%
Financial Services Firm
11%
Comms Service Provider
11%
Outsourcing Company
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business59
Midsize Enterprise43
Large Enterprise175
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise7
Large Enterprise20
 

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
The pricing is reasonable compared to other software options we evaluated, and it is straightforward. However, overall costs depend on deployment size and licensing requirements.
What needs improvement with CyberArk Privileged Access Manager?
While the access control capabilities are useful, streamlining some configuration and policy management workflows could enhance the user experience for administrators. A simpler interface for creat...
What is your experience regarding pricing and costs for NetWitness Platform?
The pricing is comparable to others, and I consider the cost to be intermediate. Specific cost details are unknown to me.
What needs improvement with NetWitness Platform?
There is currently no need for improvement in the SIEM ( /categories/security-information-and-event-management-siem ), though there could be potential enhancements by integrating with AI.
What is your primary use case for NetWitness Platform?
I use NetWitness Platform ( /products/netwitness-platform-reviews ) in the financial industry as a good product with excellent capabilities and integration with various devices.
 

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
RSA Security Analytics
 

Overview

 

Sample Customers

Rockwell Automation
Los Angeles World Airports, Reply
Find out what your peers are saying about Idira by Palo Alto Networks, One Identity, Okta and others in Privileged Access Management (PAM). Updated: October 2026.
920,769 professionals have used our research since 2012.