No more typing reviews! Try our Samantha, our new voice AI agent.

BMC AMI Security vs CyberArk Privileged Access Manager comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 8, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

BMC AMI Security
Ranking in Mainframe Security
7th
Average Rating
8.0
Reviews Sentiment
8.1
Number of Reviews
1
Ranking in other categories
No ranking in other categories
CyberArk Privileged Access ...
Ranking in Mainframe Security
1st
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
230
Ranking in other categories
User Activity Monitoring (1st), Enterprise Password Managers (2nd), Privileged Access Management (PAM) (1st), Operational Technology (OT) Security (3rd)
 

Mindshare comparison

As of April 2026, in the Mainframe Security category, the mindshare of BMC AMI Security is 8.3%, up from 7.1% compared to the previous year. The mindshare of CyberArk Privileged Access Manager is 3.7%, up from 1.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Mainframe Security Mindshare Distribution
ProductMindshare (%)
CyberArk Privileged Access Manager3.7%
BMC AMI Security8.3%
Other88.0%
Mainframe Security
 

Featured Reviews

Kalpesh Pawar - PeerSpot reviewer
Technical Head Cloud Services at Softcell Technologies Limited
Centralized automation has strengthened mainframe security and reduced compliance effort
The best features of BMC AMI Security are real-time threat detection and automated response. Real-time threat detection and automated risk response help my team by reducing manual monitoring effort. The faster incident response gives us lower MTTR. Automated alerts plus policy-driven actions enable immediate containment without waiting for SOC intervention, and it improves our security posture at scale. Continuous detection plus auto-remediation ensures consistent enforcement across all customer environments, minimizing drift and insider risk exposure. The feature that stands out for my team is strong policy automation plus standardization, helping ensure consistent RACF controls across all clients and reducing operational overhead. The tight fidelity SMF visibility enables precise monitoring and faster RCA at the user dataset level. Since implementing BMC AMI Security, it has positively impacted my organization by reducing MTTR and manual effort. Automated detection plus response eliminates manual log analysis and accelerates incident containment. It has also improved our compliance posture with continuous monitoring and auto-generated audit reports, ensuring consistent adherence across all customer environments. I have observed specific metrics since implementing BMC AMI Security. MTTR has been reduced by 40 to 50 percent due to real-time alerts plus automated responses. The compliance effort is reduced by 50 to 60 percent with automated reporting and continuous control validation. Additionally, manual monitoring effort has been decreased by 40 percent.
Atul-Gujar - PeerSpot reviewer
CyberArk manager at a comms service provider with 10,001+ employees
Secures critical infrastructures with essential user session audit records
A potential area for improvement is enhancing support for cluster environments and distributed Vaults. Clients in multiple countries that need central access have different challenges that require better solutions from CyberArk. For financial services, CyberArk can improve incident response by ensuring fast support for critical priority tickets to meet compliance requirements. Providing more documentation on CyberArk is recommended for new team members to enhance their troubleshooting capabilities. I understand it's up to the client, but 99% fail to change the demo key, so it's crucial for CyberArk to emphasize changing the key and documenting it as part of the installation process.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I have seen a return on investment of 120 percent over three years, reduced downtime by 50 percent with faster detection directly impacting availability and SLA compliance, and achieved operational cost reductions of up to 60 percent with lower operational overhead needed."
"I find the threat analytics is an important feature, as CyberArk can look at the log details and analyze who is using the applications, which are their locations, and which are the IP locations from which they are accessing, enabling the solution to find the exact location the threat is emanating from, which we really value."
"You can write different types of policies for custom business needs or any developer needs. If they need certain functions allocated, they can be customized easily."
"It is scalable."
"Previously, we didn't have any password rotation policy for application IDs, but once we implemented CyberArk, we created a policy and now every two weeks we are rotating the password without business impact, which gives us one place to store the keys to the kingdom so if there is any breach we know where it is and what to do."
"I find the discovery feature, which includes credential management, session management, monitoring, and remediation within a session, to be very valuable."
"PSM (Privilege Session Manager."
"We could see the benefits of CyberArk Privileged Access Manager immediately after we deployed it and started using it."
"Customer support has been very helpful and responsive."
 

Cons

"BMC AMI Security can be enhanced by improving the analytics and AI modules."
"If we actually implement agent AI in CyberArk Privileged Access Manager, it will check the logs, and if any errors are coming, it automatically triggers alerts and gives the solution."
"On the UI level, things could be better."
"​It's hard to find competent resellers/support."
"This product needs professional consulting services to onboard accounts effectively based user profiles."
"Areas the product could be improved are in some of the reporting capabilities and how the reports are configured."
"CyberArk Privileged Access Manager could improve the integration docking, it should have more layers, for example, integration with OpenShift."
"CyberArk Enterprise Password Vault's GUI has certain shortcomings that need improvement."
"This is probably a common thing, but they do ask for a lot of log files, a lot of information. They ask you to provide a lot of information to them before they're willing to give you anything at all upfront. It would be better if they were a little more give-and-take upfront: "Why don't you try these couple of things while we take your log files and stuff and go research them?" A little bit of that might be more helpful."
 

Pricing and Cost Advice

Information not available
"The SaaS version of CyberArk Enterprise Password Vault is very expensive, but the on-premises version is relative, e.g. depending on the size of the environment, it can be a bit pricey, but it's relatively okay compared to the others."
"This product is very expensive."
"Overall, its pricing is really good. The main difference from all the other vendors is that they have one package that covers all the functionality and modules of the basic PAM, except the add-on modules like adware and server protection. It also doesn't include the licenses for domain controller protection or maybe an API call-related feature. For the basic privileged access management, the bundle pricing is really good, but when it comes to an agent-based solution for advanced cyber protection or application identity managers, it is expensive. Services are also very expensive if you hire the services team from CyberArk, but these guys are really good. For a couple of large banking projects, we had an experience with them. The banks wanted to have things quickly and efficiently, so we had to hire them. If we take four weeks, these guys can do everything on a weekend. They charge quite a big sum of money, but they know the system well."
"The cost is high compared to other products."
"CyberArk is one of the best PAM solutions and one of the most expensive, but it works better than the others, so the pricing is fair."
"Generally, I don't get involved in the licensing or the purchasing side of it, but I do know that the licenses are expensive."
"I haven't seen the numbers. I know it is not cheap, but I don't know what it is. I would rate it a six out of ten in terms of pricing. It is definitely more expensive than the other product, but it also provides more functionality, and it is modular too. So, we pay for the functionality we're actually going to use, and that's nice."
"The product's licensing is yearly. I would rate the solution's pricing a six out of ten."
report
Use our free recommendation engine to learn which Mainframe Security solutions are best for your needs.
885,444 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Financial Services Firm
13%
Manufacturing Company
10%
Computer Software Company
8%
Government
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business59
Midsize Enterprise42
Large Enterprise174
 

Questions from the Community

Ask a question
Earn 20 points
How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
What do you like most about CyberArk Privileged Access Manager?
The most valuable features of the solution are control and analytics.
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
My thoughts on the pricing of CyberArk Privileged Access Manager depend entirely on the vendors' requirements. If they want their things to be secure, they have to spend accordingly. We have four t...
 

Also Known As

No data available
CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
 

Overview

 

Sample Customers

Macquarie, HCF, Telefónica Colombia, Ministério da Educaçāo
Rockwell Automation
Find out what your peers are saying about CyberArk, IBM, Broadcom and others in Mainframe Security. Updated: March 2026.
885,444 professionals have used our research since 2012.