One Identity Safeguard vs Symantec Privileged Access Manager comparison

One Identity Safeguard vs. Symantec Privileged Access Manager

Download the complete report

Helped 860,592 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

One Identity Safeguard

Ranking in Privileged Access Management (PAM)

3rd

Average Rating

8.0

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

User Entity Behavior Analytics (UEBA) (6th), Non-Human Identity Management (NHIM) (4th)

Symantec Privileged Access ...

Ranking in Privileged Access Management (PAM)

18th

Average Rating

7.8

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of July 2025, in the Privileged Access Management (PAM) category, the mindshare of One Identity Safeguard is 3.7%, down from 4.7% compared to the previous year. The mindshare of Symantec Privileged Access Manager is 1.6%, up from 1.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Privileged Access Management (PAM)

Featured Reviews

Martin Ajayiobe

Senior Vice President (Infrastructure Systems/Information Security) at MAXUT

Th password vault feature has proven to be most effective for managing privileged access

One Identity Safeguard now prevents unauthorized access to servers by eliminating privileged passwords and requiring all connections to go through a PAM-authorized process. This means no one, including hackers, can access servers without explicit approval, significantly enhancing overall security. One Identity Safeguard is easy to use with a good partner to support you, and it can be up and running within a few days. We have successfully integrated One Identity Safeguard with cloud targets, and the process was straightforward. One Identity Safeguard has improved our incident response time by 300 percent.

Read full review

Muzi Lubisi

Senior technical Consultant at CA Africa

Secure management of sensitive servers and seamless applications with direct linking

The credential injection feature is highly valued, particularly for RDP sessions. A majority of customers use it for RDP, and a couple for Linux servers. The broader capabilities, including access to multiple systems, web-based applications, and clustering, have never posed an issue. The threat analytics aspect is also a robust feature that analyzes all pertinent information.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It has greatly helped improve our security posture. Safeguard has an option where it will reset passwords on service accounts, then go out to those servers where that service account is running as a service and update the password on it. That makes password changes very easy. We can regularly change passwords now and are planning on making it an annual activity, where all the people who own service accounts will go in and make sure all their passwords get changed, updated, and reset."

"We deployed it into our company for controlling a client's behavior in our data center. It is very useful to control their connections, such as RDP."

"We are able to log and get reporting on all privileged activity that is being performed. We like the fact that we can leverage the session recording feature, which is especially valuable when we're dealing with third-party vendors that have to remote into our our boxes and servers to do any work on behalf of the bank. Now, we can record everything they are doing to ensure that they're only doing the changes that were needed. In addition, we use it to leverage knowledge transfer with our internal staff."

"The implementation time was quick. It was basically up and running within a week."

"The whole product solves the privileged access management challenge for our company. We have a secure tunnel, a secure session manager, and automatic logging of sessions, which is good for forensic purposes. We have a rich level of logs and can trace what happened on which machine and see who did what."

"The monitoring system is very good."

"Safeguard can define and update processes and procedures into the security framework of a company, including mobile. It allows us to change the policies and configurations on a mass scale in regards to security."

"The Transparent Mode is the number one advantage of the product."

More One Identity Safeguard pros

"The system is very stable."

"The key benefits are we improve our governance. We ensure we can build more trust in the way we run and operate our environment, and most of all is the accountability."

"It reduces the viral attacks on my website. It also allows certain users access to see what happens daily."

"The two factor authentication, and the single most important capability was it supported PIV and CAC as one of the two factors. That was pretty huge for us."

"Comprehensive coverage of the required features for the PAM solution."

"The product is very scalable in terms of concurrent sessions that it can handle at a time, number of device it can support, accounts that it can manage, or number of nodes that you can deploy in a cluster."

"You can do A2A integration. You can have your own script, which can then run outside of PA to retrieve the password and perform other tasks."

"We know we can scale up with what we have, and we probably will not need to buy any further appliances down the road."

More Symantec Privileged Access Manager pros

Cons

"We would like to be able to generate certificate signing requests (CSRs) from the interface for certificates."

"There is a lack of documentation and many problems with the plugins."

"I would like to see an adjustment with more enterprise architecture. You can buy multiple appliances but you can not fully separate different functions, so scaling might be a bit more complicated."

"Something for One Identity to look at is having integration guidelines for how to logically group accounts."

"I rate customer support six out of ten. It needs improvement as it can significantly impact customer access."

"The GUI has room for improvement because it is confusing and cumbersome."

"For some users, the physical appliance has been a bit buggy."

"It needs more marketing."

More One Identity Safeguard cons

"It's difficult to locate the reports, there are limits on what reports can be run from the GUI, and the report formats are lacking."

"Recent releases need improvement in webpage management. For instance, navigating through a webpage that acts like a wizard, where I proceed to the next page and enter more information, is not handled well by the system."

"The management console could be improved."

"We have to do a lot of manual work to automate features."

"We experience stability issues after every patch upgrade. This is a place where CA needs to improve drastically."

"Recent releases need improvement in webpage management."

"I would like this solution to be simpler. It should have a one-click access that works together with AWS."

"The service account management functionality needs to be extended to application pools, SQL database, PowerShell scripts, service account discovery, etc."

More Symantec Privileged Access Manager cons

Pricing and Cost Advice

"It was definitely cheaper than the other two products that we evaluated."

"The full license is expensive but if you plan to use it in a big organization then it is the best option because it is more flexible."

"They have comparable pricing. All identity products are essentially priced in a similar way. It's a per-user base."

"Our licensing costs are on a yearly basis."

"It is cheaper than CyberArk. Its price is fair."

"As compared to other products, it is reasonable, but the training sessions are too expensive."

"The license is around $3,000 per month."

"The license is very expensive for us, partly due to inflation and partly because of the exchange rate between the Dollar and the Iranian Rial. We purchased a perpetual license that we've been using up until now, but I believe that we are not going to update it in the future. Instead, we plan to find another third-party to support us with the license, in the sense that we would have access to their license as a shared agreement."

More One Identity Safeguard pricing and cost advice

"Appliances are relatively cheap, don’t skimp. Make sure you have redundancy, high availability, and enough appliances to manage the concurrent workload."

"The licensing is simple and scalable."

"They offer per-device, per-user, or monthly and yearly licensing models."

"The version we are using is affordable compared to BeyondTrust, which is maybe three to four times as expensive, but it depends on the features."

"Pricing is fair compared to other top vendors."

"Don’t go with an agent model. Don’t go with a model that has you buying a thousand different parts. Go with PAM that gives you everything, or you’ll just be paying costs of implementing another tool that PAM would have just given you up front."

"It is reasonably priced."

"I would prefer better licensing options for the 20-100 users we have at a given time."

More Symantec Privileged Access Manager pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.

See recommendations

860,592 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

24%

Financial Services Firm

11%

Comms Service Provider

Manufacturing Company

Computer Software Company

16%

Comms Service Provider

13%

Financial Services Firm

12%

Manufacturing Company

11%

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about One Identity Safeguard?

The identity discovery is good, and the performance is pretty good value.

What is your experience regarding pricing and costs for One Identity Safeguard?

The pricing of One Identity Safeguard is fairly priced and cheaper than other solutions of the same enterprise level. It provides a good cost-benefit ratio.

What needs improvement with One Identity Safeguard?

There is room for improvement in integration between modules. The native integration between SPP and SPS, which is currently based on a plugin, could be enhanced. Customization for lookup passwords...

What do you like most about Symantec Privileged Access Manager?

We can check the activities in the server for fragile files and documents in case of any issues.

What is your experience regarding pricing and costs for Symantec Privileged Access Manager?

Due to the nature of the solution, it is hard to gauge, but compared to competitors, the pricing is very good. I would rate it as an eight and a half out of ten.

What needs improvement with Symantec Privileged Access Manager?

Recent releases need improvement in webpage management. For instance, navigating through a webpage that acts like a wizard, where I proceed to the next page and enter more information, is not handl...

CyberArk Privileged Access Manager vs One Identity Safeguard

Comparisons

Compared 33% of the time

WALLIX Bastion vs One Identity Safeguard

Compared 18% of the time

Delinea Secret Server vs One Identity Safeguard

Compared 10% of the time

SailPoint Identity Security Cloud vs One Identity Safeguard

Compared 10% of the time

Fudo PAM vs One Identity Safeguard

Compared 7% of the time

More One Identity Safeguard Competitors

Cisco Identity Services Engine (ISE) vs Symantec Privileged Access Manager

Compared 30% of the time

CyberArk Privileged Access Manager vs Symantec Privileged Access Manager

Compared 28% of the time

BeyondTrust Endpoint Privilege Management vs Symantec Privileged Access Manager

Compared 15% of the time

ARCON Privileged Access Management vs Symantec Privileged Access Manager

Compared 15% of the time

Delinea Secret Server vs Symantec Privileged Access Manager

Compared 11% of the time

More Symantec Privileged Access Manager Competitors

Product Reports

One Identity Safeguard

Download One Identity Safeguard product report

Symantec Privileged Access Manager

Download Symantec Privileged Access Manager product report

Symantec Privileged Access Manager report

Also Known As

No data available

CA PAM, Xceedium Xsuite, CA Privileged Access Manager

Overview

One Identity Safeguard manages and monitors privileged access, enhancing security with features like automatic session recording, real-time monitoring, and credential rotation. It integrates seamlessly, supports compliance with audit trails, and improves operational efficiency across organizations. This robust platform significantly bolsters security protocols while controlling sensitive operations.

One Identity

CA Privileged Access Manager is a simple-to-deploy, automated, proven solution for privileged access management in physical, virtual and cloud environments. It enhances security by protecting sensitive administrative credentials such as root and administrator passwords, controlling privileged user access, proactively enforcing policies and monitoring and recording privileged user activity across all IT resources. It includes CA PAM Server Control (previously CA Privileged Identity Manager) for fine-grained protection of critical servers

Broadcom

Sample Customers

Cavium

NEOVERA, Telesis, eSoft

One Identity Safeguard vs. Symantec Privileged Access Manager