No more typing reviews! Try our Samantha, our new voice AI agent.

LogRhythm UEBA [EOL] vs Safeguard by One Identity comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jul 20, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

LogRhythm UEBA [EOL]
Average Rating
7.0
Reviews Sentiment
6.5
Number of Reviews
11
Ranking in other categories
No ranking in other categories
Safeguard by One Identity
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
91
Ranking in other categories
User Entity Behavior Analytics (UEBA) (1st), Privileged Access Management (PAM) (2nd), Non-Human Identity Management (NHIM) (2nd)
 

Featured Reviews

Venda E - PeerSpot reviewer
Cloud Option Engineer at a tech vendor with 10,001+ employees
Behavior analytics has improved insider threat detection and reduces false positives for our team
The best features LogRhythm UEBA [EOL] offers are its behavioral balancing, baselining, risk scoring, and correlation with SIEM events, and what stands out most is risk scoring, which gives clear visibility into which user behaviors are genuinely risky and helps our team to focus on the highest priority threats without drowning in noise. Risk scoring helps us to quickly identify which users' activity needs immediate attention by clearly ranking threats based on impact and likelihood; it changes our day-to-day operations by reducing time spent on low-risk alerts and allowing the team to prioritize investigations and response actions more effectively and consistently. LogRhythm UEBA [EOL] has positively impacted our organization by improving our ability to detect insider threats and compromised accounts earlier, resulting in better security visibility, reduced false positives, and faster investigations and response times, which helped the team operate more effectively with greater confidence. I observed a noticeable reduction in false positive alert volume, which shortened the investigation time per incident, improving the mean time to detect and respond, and helping identify high-risk user activities earlier, which prevented potential security incidents from escalating.
Mahesh Malve - PeerSpot reviewer
Senior Business Development Associate at DigitalTrack Solutions ind pvt ltd
Centralized control has strengthened privileged security and simplified audit investigations
While One Identity Safeguard is a strong and reliable PAM solution, there are a few areas where it can be further improved to enhance user experience and scalability. Regarding the user interface and experience, the UI, while functional, can be a bit complex for new users. A more intuitive and modern dashboard with simplified navigation would improve adoption, especially for non-technical stakeholders. Regarding integration flexibility, although it supports major integrations, expanding out-of-the-box connectors for more cloud-native apps, DevOps tools, and SaaS platforms would be beneficial. Faster and simpler API-based integrations could reduce deployment efforts. Regarding scalability and performance in large enterprise environments, performance tuning and scaling can require additional efforts. Enhancing seamless scalability and high availability configuration would improve enterprise readiness.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable features are file activity monitoring and registry activity monitoring."
"Licensing is on a yearly basis, and it's not expensive compared to its competitors."
"What I like most about LogRhythm UEBA is that it allows you to identify and analyze end-user behaviors and suspicious activities within the systems."
"LogRhythm UEBA’s best feature is the dashboard. It provides several graphs, charts, and event logs."
"The capability of pinpointing specific cyber incidents is a valuable feature for us."
"It has a lot of features. It has file integration monitoring."
"It is easy to monitor users and that is how the solution is adding value to our firm."
"The solution's most valuable features are the graphical user interface and the reporting."
"Overall, the feedback from our users regarding One Identity Safeguard's usability and functionality has been positive."
"Safeguard is a next-generation tool when it comes to privileged access management."
"The solution transparently integrates into the infrastructure and users do not notice it. I would give this feature the highest rating."
"One Identity Safeguard has positively impacted our organization by increasing visibility into privileged user activities, allowing us to track and audit all actions easily, which helps in compliance and security."
"All the features are promising, but we love the reporting feature because we can get each and every report. That's a major compliance requirement. Its reporting is really amazing, and it has made life a lot easier."
"It has greatly helped improve our security posture. Safeguard has an option where it will reset passwords on service accounts, then go out to those servers where that service account is running as a service and update the password on it. That makes password changes very easy. We can regularly change passwords now and are planning on making it an annual activity, where all the people who own service accounts will go in and make sure all their passwords get changed, updated, and reset."
"It's one of the best products we've seen. When you start looking at the functionality and use cases and usability of the product, it's straightforward. They designed this product with the end-user in mind, and they also had the sysadmin who is supporting the product in mind. They really did a nice job. Overall, it's a nice product to work with."
"One Identity Safeguard has had a very positive impact on our organization, especially in terms of security, efficiency, and visibility."
 

Cons

"The product could be user-friendly for someone who doesn’t have any prior experience working with it."
"The only problem is that the agents consume too much memory and system resources; the memory and resource consumption is high."
"LogRhythm UEBA [EOL] could be improved with more flexible tuning options and clearer model transparency to better understand why certain behaviors are flagged; enhanced integrations with additional data sources and more intuitive dashboards would also help improve usability and investigation efficiency."
"It should have better mitigation with other solutions and be tightly integrated with other solutions. It has to be improved."
"The product should improve its dashboards. Splunk has neat dashboards. Additionally, we would like to enhance the use cases provided by LogRhythm as its use case library is not as extensive as other tools. Its machine-learning capabilities need to improve when compared to other solutions. It lacks risk quantification in a single, transparent view for individuals such as CSOs."
"The on-premises LogRhythm is not very scalable. When considering packets per second or the MPS needed for additional logs such as web application logs, scalability is usually found in cloud products."
"The search feature needs to be improved."
"Better dashboarding. At the moment, the dashboard only has an hour."
"Something for One Identity to look at is having integration guidelines for how to logically group accounts."
"I chose a rating of seven because I believe the product still has improvements that need to be made in terms of supportability for new applications, such as SaaS solutions, and it does not have any native method of managing cloud-based applications, which I believe is an area to improve."
"I would like to see an adjustment with more enterprise architecture. You can buy multiple appliances but you can not fully separate different functions, so scaling might be a bit more complicated."
"One key area is performance and resource usage, especially when advanced features like session recording or OCR are enabled."
"I just received a question from a customer in regards to a connection with Oracle OID. I tried to integrate Safeguard with the Oracle YAML as well as something else to manage the groups and users from a different system, like AD or LDAP. This one feature could be better. At this moment, the platform system can only use the integration with LDAP or AD. The software for research and development to create a connector to a YAML platform can be very complicated."
"The reason it is not a perfect ten is mainly because of usability and operational friction in some scenarios."
"We would like to be able to generate certificate signing requests (CSRs) from the interface for certificates."
"One Identity Safeguard could be improved by simplifying the user interface and initial configuration process, especially for first-time users."
 

Pricing and Cost Advice

"The pricing is nice when compared to other products in the industry."
"Licensing is on a yearly basis. It's not expensive compared to its competitors."
"It is quite a budget-friendly product."
"As LogRhythm UEBA is pretty expensive, I'd give its pricing a seven out of ten."
"I rate the product's pricing a three out of ten. However, the cloud version is expensive. You need to hire professional services for deployment and migrations, which can be expensive."
"Safeguard is cheaper than CyberArk."
"We bought their other products, so it was not that expensive. It is one of those where the more you buy, the cheaper it is."
"It is cheaper than CyberArk. Its price is fair."
"Setup cost, pricing and licensing are all very expensive."
"It was definitely cheaper than the other two products that we evaluated."
"They have comparable pricing. All identity products are essentially priced in a similar way. It's a per-user base."
"The pricing is about $80,000 per 100 servers. There are few elective costs."
"Our licensing costs are on a yearly basis."
report
Use our free recommendation engine to learn which User Entity Behavior Analytics (UEBA) solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
12%
Retailer
11%
Outsourcing Company
10%
Construction Company
10%
Outsourcing Company
14%
Retailer
10%
Financial Services Firm
8%
University
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise4
Large Enterprise4
By reviewers
Company SizeCount
Small Business93
Midsize Enterprise27
Large Enterprise40
 

Questions from the Community

What needs improvement with LogRhythm UserXDR?
In general, if something needs to be improved in the algorithm, it would be the dashboards. The dashboards with solutions such as Splunk are very neat and clean. I would also like to improve the us...
What is your primary use case for LogRhythm UserXDR?
I typically use the product for reducing cyber risk, and I can investigate attacks more quickly using machine learning tools.
What advice do you have for others considering LogRhythm UserXDR?
I would not necessarily recommend LogRhythm due to its complexity and lack of modularity. I would always recommend Splunk to users since it is a powerful solution. Combining it with other solutions...
What is your experience regarding pricing and costs for One Identity Safeguard?
My experience with the pricing, setup cost, and licensing of Safeguard by One Identity is moderate.
What needs improvement with One Identity Safeguard?
Safeguard by One Identity could be improved by making the interface even easier to use, expanding reporting and analytics, and providing more customization options for access policies. It would be ...
What is your primary use case for One Identity Safeguard?
My main use case for Safeguard by One Identity is securing and managing user identities and access across the application with a focus on improving authentication, enforcing access control, and red...
 

Also Known As

LogRhythm UserXDR, LogRhythm Enterprise UEBA
No data available
 

Overview

 

Sample Customers

Information Not Available
Cavium
Find out what your peers are saying about One Identity, IBM, Exabeam and others in User Entity Behavior Analytics (UEBA). Updated: October 2026.
920,769 professionals have used our research since 2012.