Idira Privileged Access Manager vs WALLIX Bastion comparison

Why PeerSpot?

Idira by Palo Alto Networks and WALLIX are both solutions in the Privileged Access Management (PAM) category. Idira by Palo Alto Networks is ranked #1 with an average rating of 8.6, while WALLIX is ranked #10 with an average rating of 6.8. Idira by Palo Alto Networks holds a 8.6% mindshare in PAM, compared to WALLIX’s 3.4% mindshare. Additionally, 95% of Idira by Palo Alto Networks users are willing to recommend the solution, compared to 86% of WALLIX users who would recommend it.

Idira Privileged Access Man...

Read 230 Idira Privileged Access Manager reviews

25,894 Views
10,617 Comparison Views

95% willing to recommend

WALLIX Bastion

Read 13 WALLIX Bastion reviews

3,709 Views
3,635 Comparison Views

86% willing to recommend

Idira Privileged Access Man...

WALLIX Bastion

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jun 2, 2026

Idira Privileged Access Manager and WALLIX Bastion compete in the enterprise-level privileged access management category. Idira appears to have the upper hand in areas of advanced features and customer support, while WALLIX Bastion is noted for user-friendly deployment and cost-effective pricing models.

Features: Idira is known for automatic password rotation, session recording, and enterprise-level integrations. WALLIX Bastion highlights password management capabilities, browser-based management, and streamlined user access management.

Room for Improvement: Idira could enhance user interface integration and expand its plugin connector options. WALLIX Bastion might improve its auditing capabilities, user interface, and introduce two-factor authentication.

Ease of Deployment and Customer Service: Idira supports on-premises, hybrid, and cloud deployments, with highly rated support. WALLIX Bastion offers quick on-premises deployment and may need to improve support ticket prioritization.

Pricing and ROI: Idira is seen as premium-priced, justified by robust features. WALLIX Bastion offers flexible, asset-based licensing often regarded as cost-effective. Both claim significant ROI in enhanced security and operational efficiencies.

To learn more, read our detailed Idira Privileged Access Manager vs. WALLIX Bastion Report (Updated: September 2026).

Buyer's Guide

Idira Privileged Access Manager vs. WALLIX Bastion

September 2026

Download the complete report

Helped 913,076 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Idira Privileged Access Man...

Ranking in Privileged Access Management (PAM)

1st

Average Rating

8.6

Reviews Sentiment

6.8

Number of Reviews

230

Ranking in other categories

User Activity Monitoring (1st), Enterprise Password Managers (2nd), Mainframe Security (1st), Operational Technology (OT) Security (3rd)

WALLIX Bastion

Ranking in Privileged Access Management (PAM)

10th

Average Rating

7.4

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of September 2026, in the Privileged Access Management (PAM) category, the mindshare of Idira Privileged Access Manager is 8.6%, down from 16.5% compared to the previous year. The mindshare of WALLIX Bastion is 3.4%, down from 7.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Privileged Access Management (PAM) Mindshare Distribution
Product	Mindshare (%)
Idira Privileged Access Manager	8.6%
WALLIX Bastion	3.4%
Other	88.0%

Privileged Access Management (PAM)

Featured Reviews

Singaravelu C

CyberArk Engineer at Tata Consultancy

Provides full visibility into user activity and ensures secure end-to-end access across critical systems

In CyberArk Privileged Access Manager, I see room for improvement as I am working in the on-premises networks, and now we are also having the cloud-based PAM. So there, everything is maintained by the CyberArk Privileged Access Manager team, and we are only maintaining the PSM servers. So it is already upgraded from the on-premises network to the cloud network. If you ask me what we can implement beyond that, I just need a few minutes to think about what new things, because it is already an end-to-end security on-premises itself. Now, when it comes to PCloud, Privileged Cloud, it is more secure than the on-premises networks because most of the things are handled using the cloud itself. So it is an already upgraded version; we do not need to implement something new. But if you think in that way, we can have a chance to implement our things. If anything could be improved in CyberArk Privileged Access Manager, I think we could build a small agent AI in my team, we could give access to these logs—the Vault logs, PSM logs, and CPM logs. Whenever the system is going down, the AI will automatically check. If we actually implement agent AI in CyberArk Privileged Access Manager, it will check the logs, and if any errors are coming, it automatically triggers alerts and gives the solution. That is the best improvement I can think of because these days, most things are done by agent AI. So if we also implement this agent AI in CyberArk Privileged Access Manager, we can add more features.

Read full review

René DRABO

Team Lead at a tech services company with 1,001-5,000 employees

Security has improved with monitored privileged sessions but the complex interface still needs work

I do not find WALLIX Bastion easy to use and ergonomic, but I have no clue about how much it costs. When I say it is not easy to use, I mean the interface is complex, but it might not be directly linked to the product; it might be linked to the way we implemented it in our context. The way we have to connect to a third Bastion and then launch another session bothers me. We also have some limitations, but I think this is linked to our context regarding how many times the session can stay open on the Windows session, which is not aligned with my needs. I am more of a promoter of other kinds of handling privileged access management with my use case, but it might not be linked to the tool; it is just because the implementation we made is not what I expect for my needs and it is not the way I want to work on my servers. In the past, I used the leader in PAM but cannot remember the name. I was more satisfied because the connection was more straightforward: I click on a button, make my authentication, and have my servers open, and this is the way I want it. The UI was the main reason why I thought the previous tool I was using was better.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"CyberArk Privileged Access Manager indeed helps meet compliance and regulatory requirements for customers, especially in the financial sector, by aligning with PCI DSS standards."

"The solution is stable and reliable."

"The auditing and recording functionality along with stringent password-change policies and one-time password use has made compliance with customer requirements a much clearer and easily managed process."

"The product is an important security measure against credential theft. It ensures session isolation and password rotation including pushing passwords to the endpoints."

"It improves security in our company. We have more than 10,000 accounts that we manage in CyberArk. We use these accounts for SQLs, Windows Server, and Unix. Therefore, keeping these passwords up-to-date in another solution or software would be impossible. Now, we have some sort of a platform to manage passwords, distribute the inflow, and manage IT teams as well as making regular changes to it according to the internal security policies in our bank."

"Securely protects our TAP/NUID and privileged access accounts within the company."

"CyberArk Privileged Access Manager has several valuable features; the basic feature is privileged access management with all the processes and procedures that are needed, and it does everything that is needed to provide a PAM project or program."

"The password rotation and cyber gateway have been quite useful."

More Idira Privileged Access Manager pros

"I feel WALLIX is better because it's simple, seamless, and easy to integrate."

"The most valuable feature of WALLIX Bastion is its password management capability, which is central to safeguarding sensitive information."

"I like that it's Linux-based, and you don't need to have separate implementations, extra database licenses, or enterprise licenses. I think because it's Linux-based, it's more seamless than Windows. I also like the access manager, which I think is a super tool. Everything is browser-based, and you don't need a VPN. So, that's a great thing."

"The support is great. They offer 24/7 support, but the specific level of support depends on your subscription. There's a weekday-only option, and a 24/7 option that covers all days of the week. They also have offices in different regions, including West Africa, so people there can easily get support. There's no need to worry about getting assistance."

"The solution's technical support team is helpful."

"WALLIX Bastion is a security tool that protects us, and I think we are protected with this tool."

"Technical support is very good; they have their own ticket system that is available for all customers and their system is already in different languages, for example, English, French, and, for us, Russian."

"Bastion provides a kind of isolation between the administration laptop and the server you want to administer."

More WALLIX Bastion pros

Cons

"I find it hard to mention a point of improvement because I'm happy with the platform. The only thing I would say is that they can improve their price."

"CyberArk could enhance its usability by simplifying its architecture and design."

"For least privilege management, we need a different level of certification from privileged management."

"Although it's highly configurable, the user interface could use a do-over."

"The current process for accessing RDP through the CyberArk or administrative portal involves downloading an RDP file. This is inconvenient for users and problematic due to security restrictions that prevent accessing servers via downloaded RDP files."

"CyberArk definitely needs to improve user experience and reduce complexity."

"We require IAM (identify and access management) capability at the administrator level because we need more identification."

"Their support can be better. Their SLA timings are higher than others."

More Idira Privileged Access Manager cons

"Reporting requires improvement; it is basic, allowing only CSV file extraction with no analytics features."

"There could be more automation features for the solution."

"Deploying Bastion isn't as straightforward."

"Based on my experience as a sales tech person, one area of improvement could be a more unified licensing model."

"The performance of WALLIX Bastion's password manager is very low."

"It would be better if I could manage multiple accounts in one place, like CyberArk. With WALLIX, you can only manage one account, and you are given a separate category. You have to click on each connection to do anything. For example, CyberArk might give three options for one connection if you want to have an interactive user-level experience. But with WALLIX, you have to click three times to get that access. Also, the biggest disadvantage of WALLIX is the reporting. I feel like it's very weak in reporting when compared to the other solutions. As a solution, they're good and stable. But they need to make their reports neater and better. Right now, we're going to the console and then pressing buttons every single time."

"The product doesn't have behavior analytics. They promised to develop this, but only for the cloud, not for on-premise versions."

"I do not find WALLIX Bastion easy to use and ergonomic."

More WALLIX Bastion cons

Pricing and Cost Advice

"The SaaS version of CyberArk Enterprise Password Vault is very expensive, but the on-premises version is relative, e.g. depending on the size of the environment, it can be a bit pricey, but it's relatively okay compared to the others."

"The main problem for the tool is its licensing. I work for a really big company. When you try to develop this as a service, usually you work with leverage teams who are formed with dozens of members. You might dedicate one FTE, or less, for something, e.g., an antivirus administrator. You might have half an FTE's effort dedicated to administering the antivirus, but then you have a team of about 30 users who might access that ticket. The problem is that CyberArk eliminated the possibility of concurrent users years ago. This is a big problem for companies who work with leverage teams. You need to pay for everyone. 40 licenses are used by 20 or 30 people. This is a big problem because licenses are not precisely cheap."

"Cost efficiency is the number one thing that can be improved in my mind. This would change lots of companies minds on purchasing the product."

"CyberArk Enterprise Password Vault is a very expensive product."

"The price of this solution is expensive."

"I rate the tool's pricing an eight out of ten."

"Pricing is quite high and it could be improved."

"The price of CyberArk Privileged Access Manager could be less expensive."

More Idira Privileged Access Manager pricing and cost advice

"Some extra price needs to be paid for license."

"The solution's price is mid-ranged."

"The solution's pricing is comparable to that of other products."

See which vendors are best for you

Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.

See recommendations

913,076 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Outsourcing Company

12%

Financial Services Firm

12%

Manufacturing Company

Construction Company

Financial Services Firm

12%

Comms Service Provider

10%

Computer Software Company

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	59
Midsize Enterprise	42
Large Enterprise	175

By reviewers
Company Size	Count
Small Business	10
Midsize Enterprise	1
Large Enterprise	5

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?

We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...

See all answers

What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?

My thoughts on the pricing of CyberArk Privileged Access Manager depend entirely on the vendors' requirements. If they want their things to be secure, they have to spend accordingly. We have four t...

See all answers

What needs improvement with CyberArk Privileged Access Manager?

I believe account discovery and rolling support need to be improved. Account discovery is important when integrating with other systems, as other PAM solutions can perform account discovery and onb...

See all answers

What is your experience regarding pricing and costs for WALLIX Bastion?

The price of WALLIX Bastion is rated five out of ten, positioning it in the middle. The cost is justified by the features and capabilities we receive.

See all answers

What needs improvement with WALLIX Bastion?

See all answers

What is your primary use case for WALLIX Bastion?

The major use cases for WALLIX Bastion are general privileged access management, such as connecting to a server or securing SSH.

See all answers

Comparisons

Safeguard by One Identity vs Idira Privileged Access Manager

Compared 4% of the time

Teleport vs Idira Privileged Access Manager

Compared 3% of the time

Keeper Enterprise Password Manager vs Idira Privileged Access Manager

Compared 3% of the time

NetWitness Platform vs Idira Privileged Access Manager

Compared 2% of the time

Delinea Secret Server vs Idira Privileged Access Manager

Compared 2% of the time

More Idira Privileged Access Manager Competitors

BeyondTrust Endpoint Privilege Management vs WALLIX Bastion

Compared 10% of the time

Teleport vs WALLIX Bastion

Compared 8% of the time

IBM Security Secret Server vs WALLIX Bastion

Compared 7% of the time

BeyondTrust Privileged Remote Access vs WALLIX Bastion

Compared 7% of the time

ManageEngine PAM360 vs WALLIX Bastion

Compared 5% of the time

More WALLIX Bastion Competitors

Product Reports

Buyer's Guide

Idira Privileged Access Manager

September 2026

Download Idira Privileged Access Manager product report

Buyer's Guide

WALLIX Bastion

August 2026

Download WALLIX Bastion product report

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault

Bastion

Overview

CyberArk Privileged Access Manager safeguards privileged accounts through password management, credential rotation, and session recording. With seamless integration and real-time monitoring, it ensures robust security across platforms.

CyberArk Privileged Access Manager is recognized for its extensive capabilities in managing and securing privileged accounts. It offers vital functionalities such as automatic password rotation, real-time session monitoring, and cross-platform integration through APIs and custom connectors. Users find the flexibility in workflows and granular access controls beneficial, particularly in protecting access across cloud and on-prem infrastructures. However, improvements in its interface, installation process, plugin support, and integration with third-party tools are often suggested. Pricing is a concern for many, along with the need for better dashboard reporting, user provisioning, and enhanced documentation. Organizations leverage this tool for encrypting and monitoring critical account activities and automating password management to bolster security.

What are the key features of CyberArk Privileged Access Manager?

Enterprise Password Vault: Provides secure storage and management of enterprise credentials.
Privilege Session Manager: Offers comprehensive session recording and monitoring.
Privileged Threat Analytics: Detects and alerts on potential credential threats.
Integration Capabilities: Easily integrates with multiple systems using APIs and custom connectors.

What benefits or ROI should users expect?

Enhanced Security: Automates and centralizes password management, reducing risk of account misuse.
Compliance Support: Ensures alignment with compliance policies through automated processes.
Operational Efficiency: Streamlines security operations with real-time monitoring and integration.
Adaptability: Protects privileged access across diverse infrastructure setups including cloud and on-prem.

CyberArk Privileged Access Manager finds substantial use in industries such as finance, healthcare, and technology, where the protection of privileged accounts is critical. These sectors rely on its capabilities to manage application credentials securely and provide safe access for developers, administrators, and vendors across various infrastructures.

Idira by Palo Alto Networks

WALLIX Bastion is a Linux-based solution designed for password management, access control, and session monitoring. Its browser-based access minimizes VPN needs while supporting third-party access, focusing on compliance and security.

WALLIX Bastion offers comprehensive security features like password rotation and session recording. It ensures secure connections and limits public port exposure, integrating seamlessly with other systems. Although the interface requires simplification, it provides intelligent privilege control and supports secure external vendor connections.

What are the most noteworthy features of WALLIX Bastion?

Password Management: Automatically rotates and secures access credentials.
Access Manager: Offers control and visibility over privileged accounts.
Seamless Integration: Easily aligns with existing IT infrastructure.
Session Management: Records and monitors user activity.
Browser-based Access: Eliminates the need for VPNs with secure web access.

What benefits and ROI should users consider?

Enhanced Security: Prevents unauthorized access and data breaches.
Compliance Assurance: Meets industry regulations for data protection.
Efficient Access Control: Streamlines management of multiple accounts.
Cost-Effectiveness: Reduces operational costs with optimized resource use.
User-Friendly Interface: Simplifies privileged access management.

In medical industries, WALLIX Bastion aids in maintaining HIPAA compliance by monitoring sessions, offering secure remote access management crucial for international companies auditing CLI commands. It supports Active Directory security training, benefiting enterprises managing sensitive data and application access.

WALLIX

Sample Customers

Rockwell Automation

RTBF, Pharmagest, Michelin Group, Niort Hospital

Buyer's Guide

Idira Privileged Access Manager vs. WALLIX Bastion

September 2026

Free Report: Idira Privileged Access Manager vs. WALLIX Bastion

Find out what your peers are saying about Idira Privileged Access Manager vs. WALLIX Bastion and other solutions. Updated: September 2026.

DOWNLOAD NOW

913,076 professionals have used our research since 2012.

See our Idira Privileged Access Manager vs. WALLIX Bastion report.

See our list of best Privileged Access Management (PAM) vendors.

We monitor all Privileged Access Management (PAM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.