One Identity Safeguard vs Symantec Privileged Access Manager comparison

One Identity Safeguard vs. Symantec Privileged Access Manager

Download the complete report

Helped 868,759 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

One Identity Safeguard

Ranking in Privileged Access Management (PAM)

5th

Average Rating

8.0

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

User Entity Behavior Analytics (UEBA) (8th), Non-Human Identity Management (NHIM) (6th)

Symantec Privileged Access ...

Ranking in Privileged Access Management (PAM)

16th

Average Rating

7.8

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of October 2025, in the Privileged Access Management (PAM) category, the mindshare of One Identity Safeguard is 3.6%, down from 4.5% compared to the previous year. The mindshare of Symantec Privileged Access Manager is 1.4%, down from 1.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Privileged Access Management (PAM) Market Share Distribution
Product	Market Share (%)
One Identity Safeguard	3.6%
Symantec Privileged Access Manager	1.4%
Other	95.0%

Privileged Access Management (PAM)

Featured Reviews

Tor Nordhagen

Executive Director at Semaphore

Transparent mode for privileged sessions will greatly simplify our client's administrative situation

We're introducing the solution's transparent mode for privileged sessions. This is part of what the client hasn't used before. It will simplify their administrative situation greatly. So far, the rollout of this feature has been a seamless process, but we're still in the midst of rolling it out. The benefits will be on the risk side. Right now, the way accounts are managed, you don't necessarily know who is using an account. There's a shared admin account, and that's not a good thing. And those accounts are shared in wallets by several people. One of the real benefits of safeguarding here is that the client will have an absolute audit of who is using an administrative interface, whether it's server or network.

Read full review

Muzi Lubisi

Senior technical Consultant at CA Africa

Secure management of sensitive servers and seamless applications with direct linking

The credential injection feature is highly valued, particularly for RDP sessions. A majority of customers use it for RDP, and a couple for Linux servers. The broader capabilities, including access to multiple systems, web-based applications, and clustering, have never posed an issue. The threat analytics aspect is also a robust feature that analyzes all pertinent information.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"One of the most important aspects is that it is very easy to use and install. It is also agentless, so all of the operations happen more smoothly than any other product."

"In terms of the user experience, it is a pretty useful product. It works in a good way."

"There is ease of implementation."

"I have found the most useful feature of One Identity Safeguard to be Privileged Sessions."

"The technical support is tremendous."

"All the features are promising, but we love the reporting feature because we can get each and every report. That's a major compliance requirement. Its reporting is really amazing, and it has made life a lot easier."

"The first feature I like about One Identity Safeguard is the live contact point for the VPNs. This has been working very well for us, as it's both highly available and reliable."

"There are a lot of features, so it's going to sound funny, but one of the most simplistic features, the Favorites feature, is the one we like the best. You do a full run-through of configuration to check out a server and then you can save that whole configuration as a favorite. So the next time you go in, you click on the favorite that you configured and it automatically takes you to the end so you can check the server out that much faster. It saves a lot of time..."

More One Identity Safeguard pros

"Transparent login for users of privileged IDs (Linux, Windows). This prevents sharing of the password because it is never seen."

"For me, it is the robust API which is the most valuable feature. This allows for low maintenance costs and allows applications to automatically connect. This is great to automate security of the DevOps pipeline for shared secrets across environments. Also, being on Linux and a virtual appliance is great."

"We know we can scale up with what we have, and we probably will not need to buy any further appliances down the road."

"CA PAM is working well for us."

"It is simple to implement and is suitable for medium to large-scale enterprises."

"It gives you list of servers, so you can see which users have access to which servers. This is really useful, so we can make sure nobody is getting extra access than what is needed."

"You can do A2A integration. You can have your own script, which can then run outside of PA to retrieve the password and perform other tasks."

"We have received good support from the tech support team."

More Symantec Privileged Access Manager pros

Cons

"The interface is better now, but it still could be improved a lot. It needs more organization, menus, automatic refresh of information, and Web 2.0."

"From a management point of view, it would be beneficial if One Identity Safeguard Privilege Password and One Identity Safeguard Privilege Session had a more similar interface."

"The high availability function of the box requires a long time to switch over from one appliance to another."

"From a usability perspective, what we are finding out is that our privileged domain admin users, in particular, want functionality for extending a checkout session. So we are working with One Identity support to see if there's an enhancement that can be made to the product."

"We should be able to create customized connectors in a better way. For ad hoc or special use cases, I sometimes find we have limitations. Improving the way we develop new connectors for non-typical systems would be beneficial."

"It needs more marketing."

"One Identity Safeguard can improve by having more integration with multiple devices."

"For some users, the physical appliance has been a bit buggy."

More One Identity Safeguard cons

"Instead of just giving passwords to the user based on job function, from auditing perspective, turn that cycle around. That would really help from an auditing standpoint."

"Technical support was good when CA handled it. After Broadcom took over, it's not as good."

"We have to do a lot of manual work to automate features."

"I wish it could create local accounts on desktops."

"Recent releases need improvement in webpage management. For instance, navigating through a webpage that acts like a wizard, where I proceed to the next page and enter more information, is not handled well by the system."

"We experience stability issues after every patch upgrade. This is a place where CA needs to improve drastically."

"Broadcom has neglected product development since acquiring Symantec, and nothing major has been added to PAM."

"The support for other remote assistance tools would be excellent. Free included tools in Windows (Remote Assist) and Microsoft SCCM Configuration Manager (ConMgr Remote Control) allow companies to reduce the amount of RDP connections and expand the usage of the tools are frequently used by companies to provide technical support for remote assistance."

More Symantec Privileged Access Manager cons

Pricing and Cost Advice

"It is more expensive than Secret Server but way less expensive than CyberArk. As a customer, I would like the pricing to be lower, but it has a good price point."

"As compared to other products, it is reasonable, but the training sessions are too expensive."

"The full license is expensive but if you plan to use it in a big organization then it is the best option because it is more flexible."

"The pricing is about $80,000 per 100 servers. There are few elective costs."

"They have comparable pricing. All identity products are essentially priced in a similar way. It's a per-user base."

"The license is around $3,000 per month."

"It is a bit on the pricey side, but you get what you pay for. You don't want to get anything too cheap because then you get cheap stuff and cheap support. That really never helps anybody."

"Setup cost, pricing and licensing are all very expensive."

More One Identity Safeguard pricing and cost advice

"Pricing is fair compared to other top vendors."

"The licensing is simple and scalable."

"Don’t go with an agent model. Don’t go with a model that has you buying a thousand different parts. Go with PAM that gives you everything, or you’ll just be paying costs of implementing another tool that PAM would have just given you up front."

"It is more expensive than other solutions on the market."

"The version we are using is affordable compared to BeyondTrust, which is maybe three to four times as expensive, but it depends on the features."

"Cost-wise, CA was better compared to others in the market. "

"Appliances are relatively cheap, don’t skimp. Make sure you have redundancy, high availability, and enough appliances to manage the concurrent workload."

"The prices are not low, but one can ask for a discount. It’s not the cheapest PAM solution."

More Symantec Privileged Access Manager pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.

See recommendations

868,759 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

22%

Comms Service Provider

Financial Services Firm

Government

Comms Service Provider

16%

Computer Software Company

15%

Government

11%

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	18
Midsize Enterprise	12
Large Enterprise	19

By reviewers
Company Size	Count
Small Business	14
Midsize Enterprise	6
Large Enterprise	30

Questions from the Community

What do you like most about One Identity Safeguard?

The identity discovery is good, and the performance is pretty good value.

What is your experience regarding pricing and costs for One Identity Safeguard?

The pricing of One Identity Safeguard is fairly priced and cheaper than other solutions of the same enterprise level. It provides a good cost-benefit ratio.

What needs improvement with One Identity Safeguard?

There is room for improvement in integration between modules. The native integration between SPP and SPS, which is currently based on a plugin, could be enhanced. Customization for lookup passwords...

What is your experience regarding pricing and costs for Symantec Privileged Access Manager?

Due to the nature of the solution, it is hard to gauge, but compared to competitors, the pricing is very good. I would rate it as an eight and a half out of ten.

What needs improvement with Symantec Privileged Access Manager?

Recent releases need improvement in webpage management. For instance, navigating through a webpage that acts like a wizard, where I proceed to the next page and enter more information, is not handl...

What is your primary use case for Symantec Privileged Access Manager?

With the customers that I have so far, I help them broker RDP sessions to sensitive servers, particularly those that manage aspects like physical access. I have also done it for backend databases, ...

CyberArk Privileged Access Manager vs One Identity Safeguard

Comparisons

Compared 21% of the time

WALLIX Bastion vs One Identity Safeguard

Compared 12% of the time

SailPoint Identity Security Cloud vs One Identity Safeguard

Compared 10% of the time

One Identity Cloud PAM Essentials vs One Identity Safeguard

Compared 8% of the time

Delinea Secret Server vs One Identity Safeguard

Compared 7% of the time

More One Identity Safeguard Competitors

Cisco Identity Services Engine (ISE) vs Symantec Privileged Access Manager

Compared 29% of the time

CyberArk Privileged Access Manager vs Symantec Privileged Access Manager

Compared 27% of the time

ARCON Privileged Access Management vs Symantec Privileged Access Manager

Compared 17% of the time

BeyondTrust Endpoint Privilege Management vs Symantec Privileged Access Manager

Compared 14% of the time

Delinea Secret Server vs Symantec Privileged Access Manager

Compared 12% of the time

More Symantec Privileged Access Manager Competitors

Product Reports

One Identity Safeguard

Download One Identity Safeguard product report

Symantec Privileged Access Manager

Download Symantec Privileged Access Manager product report

Symantec Privileged Access Manager report

Also Known As

No data available

CA PAM, Xceedium Xsuite, CA Privileged Access Manager

Overview

One Identity Safeguard manages and monitors privileged access, enhancing security with features like automatic session recording, real-time monitoring, and credential rotation. It integrates seamlessly, supports compliance with audit trails, and improves operational efficiency across organizations. This robust platform significantly bolsters security protocols while controlling sensitive operations.

One Identity

CA Privileged Access Manager is a simple-to-deploy, automated, proven solution for privileged access management in physical, virtual and cloud environments. It enhances security by protecting sensitive administrative credentials such as root and administrator passwords, controlling privileged user access, proactively enforcing policies and monitoring and recording privileged user activity across all IT resources. It includes CA PAM Server Control (previously CA Privileged Identity Manager) for fine-grained protection of critical servers

Broadcom

Sample Customers

Cavium

NEOVERA, Telesis, eSoft

One Identity Safeguard vs. Symantec Privileged Access Manager