Comparisec
Submit reviewFor vendors
Privileged Access ManagementCyberArk Privileged Access Manager
StrongStrongStrongStrong
4.5

VendorsPrivileged Access ManagementCyberArk Privileged Access Manager

CyberArk Privileged Access Manager logo

CyberArk Privileged Access Manager

CyberArk (now Idira/Palo Alto)

Founded 1999·IL·Private
4.5

Combined score

G2
4.4320
Gartner
4.6850

Editorial verdict

CyberArk is the category-defining PAM vendor. Seven consecutive years as the Gartner Magic Quadrant Leader with the highest Completeness of Vision reflects a product depth that no competitor has fully matched. The Central Policy Server and Digital Vault architecture, automated rotation across 100 plus platforms, and the most mature session recording and forensics capability in the market make it the default choice for regulated enterprises with complex privileged access requirements.

The price of that depth is complexity and cost. CyberArk consistently scores the lowest for deployment simplicity in the PAM category. Implementations typically run months, require significant professional services, and demand a dedicated CyberArk administrator post-deployment.

The verdict: CyberArk is right for large regulated enterprises where privileged access is a board-level risk and the investment in a mature, deeply capable platform is justified. Organisations with smaller IT teams, tighter budgets, or simpler requirements should evaluate Delinea Secret Server or StrongDM.

Last reviewed: May 2026

G2

4.4320 reviews

Gartner

4.6850 reviews

PeerSpot

8.6200 reviews
Gartner MQ: Leader (7 consecutive years)

Privileged Access Management assessment

PROTECTIONStrong
Credential vaulting
5 / 5

Industry gold standard for credential vaulting — Central Policy Server and Digital Vault architecture is the most mature in the PAM market. Supports automated rotation for 100+ platforms including mainframe, cloud, and DevOps secrets. 7 consecutive years as Gartner MQ Leader furthest for Completeness of Vision.

Sources: Gartner MQ PAM 2025, CyberArk platform documentation

Least privilege / JIT
5 / 5

Most comprehensive just-in-time access and zero standing privilege implementation in the market. CORA AI provides real-time privilege analytics and anomaly detection. Endpoint Privilege Manager covers Windows, Mac, and Linux.

Sources: CyberArk documentation, Gartner MQ PAM 2025

OPERATIONSStrong
Session monitoring
5 / 5

Full session recording with video replay, keystroke logging, command-level filtering, and policy-based blocking. Real-time session termination capability. Longest-established session monitoring in PAM market.

Sources: CyberArk platform documentation

Workflow integration
5 / 5

Native integrations with ServiceNow, JIRA, BMC Remedy, and all major ITSM platforms. Approval workflow engine is the most configurable in the category.

Sources: CyberArk integration marketplace

ANALYTICSStrong
Session forensics
5 / 5

Searchable session recordings with OCR-based text extraction from video. Full audit trail exportable for compliance. DVR-style replay with timeline markers.

Sources: CyberArk documentation

TRUST & ECOSYSTEMStrong
Compliance alignment
5 / 5

Certified and documented for PCI-DSS, HIPAA, SOX, ISO 27001, NIST, FedRAMP High, and more. Largest compliance documentation library in PAM category.

Sources: CyberArk compliance documentation, FedRAMP marketplace

Strongest: Credential vaulting

Watch out for: Compliance alignment

Strengths & limitations

Strengths

Gold standard enterprise PAM — most complete Gartner vision
95%+ customer satisfaction; 309% ROI per independent study
Strongest AI-driven session analysis via CORA AI

Watch out for

Premium pricing — highest in PAM market
Acquired by Palo Alto Networks July 2025 — integration uncertainty
UNIX/Linux PEDM requires separate products

Best for

Large enterprises in regulated industries needing the most comprehensive PAM platform.

Not suitable for: SMBs — implementation cost not justified under 100 users

Compliance coverage

Essential Eight
AU Privacy Act
SOC 2
HIPAA
NIST CSF
PCI-DSS
CMMC
GDPR
NIS2
DORA
ISO 27001
CIS Benchmarks

Switching intelligence

Switching from

Common migration paths based on review data

  • Lieberman Software
  • Manual password vaults

Also considering

Vendors typically shortlisted alongside

← Back to Privileged Access ManagementCompare with other Privileged Access Management vendors →

Quick facts

Pricing modelquote-based per user/vault
Pricing range$50,000+ annually for mid-market
Free trialNo
Min seats100
Deployment time1-3 months
Complexity5 / 5
Pricing transparency1 / 5
AU presenceYes
IRAP assessedNo
Open sourceProprietary

Deployment

ModelsSaaS, On-premises, Hybrid
OS supportWindows, macOS, Linux
CloudAWS, Azure, GCP
Support24/7 Phone, Email, Dedicated CSM, Professional Services
Data residencyUS, EU, AU, Global

Company

CyberArk (now Idira/Palo Alto)

Founded 1999 · 3,000-4,000 employees · Private

HQ: IL

$900M ARR est. pre-acquisition

Certifications

FedRAMP High, SOC 2 Type II, ISO 27001, PCI-DSS, Common Criteria

Integrations

Active DirectoryOktaAzure ADAWSSplunkServiceNowHashiCorp Vault