CyberArk Privileged Account Security

We have been using Centrify for quite some time and are very pleased with the product itself. Their support and team of Customer Success Managers are exceptional, always are available and have never gone without resolving an issue. I work for a property management company and to have all of our applications in one place and easily accessible is a huge time saver. Our users have only one user name and password to remember making our helpdesk queue go down by not having all those passwords reset tickets. Can't say enough about Centrify, great product, excellent support!

Only thing I would suggest is more application in the apps store. I would also suggest more reports available there is a limited amount

Major functionality and features work as expected, which provide our users with robust and secure access to applications.

1) New feature releases sometimes don't appear to have been vetted for all possible use cases.
2) Documentation is sometimes out of date.
3) Inconsistent level of product knowledge among support team members.

CyberArk can cater compliance requirements such as PCI-DSS when it comes to compliances which is major challenge to Payment Card Industry. Automatic credential rotation can be set based on organization policies to reduce the risk of brute force attacks. It support remote administration of all type of operating systems. Tool provides recording of user sessions and auditing logs which is very useful during forensic investigation. It has threat analytics capabilities and can detect suspicious activities of password theft. Multi factor authentication is supported , so increase the security of the privilege user.

CyberArk is quiet expensive and license model goes per user basis. Solution required set of VM's which don't count for total cost of ownership and deployment is quite complex. For password vault physical servers may recommend and when it comes to high availability and backup several physical servers may required. Continuous session recording required bigger storage. Patch update of password vault is bit complex which require thorough testing with professional support.

easy and flexible administration
convenient SSO experience
great support
good reporting and troubleshooting features

only smaller issues:
partially bad performance in admin portal
some missing convenience features (most of them are planned to be implemented in the future)