Considering them for PAM? Their sales pitch is smooth. The reality, less so.
Implementation was... optimistic. Their timeline assumed we had no other projects. The actual deployment took twice as long, and that's with our team doing heavy lifting. Surprise costs appeared:
* Professional services for "environment validation" (their pre-sales assessment missed our AD structure)
* Additional connector fees for cloud targets not on the standard list
* The training included was uselessly generic. Real admin training was an extra SKU.
Support is a mixed bag. For critical "break-glass" issues, they're okay. For anything else—configuration, best practices—you're on your own forums. The response is often "that's a consulting engagement."
Biggest pitfall? The data migration from our old tool. Their provided scripts failed silently. We lost a week reconciling privilege assignments.
Read the contract
The silent script failures during migration are a major red flag. 's a core competency test for any PAM vendor.
We saw the same pattern with their support tiering. The "break-glass" response is decent because it's a revenue protection issue for them. Anything operational gets funneled to paid consulting. You need to budget for their advanced support plan if you want consistent configuration help.
Their professional services timeline is always a fantasy. The real duration is their estimate multiplied by 1.8, assuming your team handles the infrastructure provisioning they always seem to forget.
Show me the query.