Try our new research platform with insights from 80,000+ expert users

CyberArk Privileged Access Manager vs ManageEngine ADSelfService Plus comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 16, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CyberArk Privileged Access ...
Ranking in Enterprise Password Managers
2nd
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
225
Ranking in other categories
User Activity Monitoring (1st), Privileged Access Management (PAM) (1st), Mainframe Security (2nd), Operational Technology (OT) Security (3rd)
ManageEngine ADSelfService ...
Ranking in Enterprise Password Managers
15th
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
9
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of August 2025, in the Enterprise Password Managers category, the mindshare of CyberArk Privileged Access Manager is 8.0%, down from 8.7% compared to the previous year. The mindshare of ManageEngine ADSelfService Plus is 0.4%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Enterprise Password Managers
 

Featured Reviews

Abdul Durrani - PeerSpot reviewer
Enables granular and secure access with just-in-time access and Zero Trust model
CyberArk provides a good amount of control over access types. However, as a future enhancement, having additional features for cross-platform integration would be beneficial. It would be good to have integrations with other tools and firewalls, such as Zscaler and CrowdStrike. Although I am not fully aware of recent updates, more cross-platform integration would be valuable. A SOC analyst would like to have centralized access in terms of information flowing in even for privileged access management. They would like to have control over everything instead of opening four to five tabs for different sorts of information. Cross-platform integration would help with that. Customers also want CyberArk's pricing to be better so that they can implement it further and have more licenses. Implementing a privileged access management solution can be challenging. It would be great if CyberArk could provide recommendations based on the compliance standards of an organization. It would help system admins ensure that all the required ports are closed and the systems are being managed properly. If any system is not being used anymore, any ports opened for that system need to be closed. Having such recommendations would be helpful.
Hussein Taha - PeerSpot reviewer
Provides wide options for multifactor authentication with very simple implementation
We struggled with the end users because most don't have the required IT background. They needed password resets for emails and accounts in the active directory. This created an issue for the help desk, and the system and ManageEngine ADSelfService Plus gave us a QR solution for the end users. Once an account is set up, you scan the QR code through Google authentication, Microsoft authentication or any program that can authenticate with the QR. You'll automatically generate a code that gives the port to reset or unlock your account very easily.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"CyberArk Privileged Access Management's most valuable features are primarily its password vault functionality, specifically CyberArk's Core Privileged Manager and Privileged Session Manager."
"The regulation of accounts is by far the most needed and valuable part of the application."
"We've written over a hundred custom connectors ourselves that allow us to do all types of privileged session management for various applications. On top of that, the rest of the API-based central credential providers allow us to get away from credentials that may be hard-coded in the script or some application."
"The most valuable feature of the solution stems from the fact that it's the best in the market. I haven't seen any other PAM solutions better than CyberArk Enterprise Password Vault."
"The access control feature and privilege and role-based assignment are outstanding."
"Right off the bat, the most valuable feature is the DNA scan. It gives us the ability to scan our environment and find the accounts that we're going to need to take under control."
"The automatic change of the password and Privileged Session Manager (PSM) are the most valuable features. With Privileged Session Manager, you can control the password management in a centralized way. You can activate these features in a session; the session isolation and recording. You apply the full intermediation principle. So, you must pass through CyberArk PAM to get access to the target system. You don't need to know the password, and everything that you do is registered and auditable. In this case, no one gets to touch the password directly. Also, you can implement detection and response behavior in case of a breach."
"Customer support has been very helpful and responsive."
"Having multifactor authentication in Windows machines."
"The most valuable feature is the ability for remote users to change their login credentials using their mobile devices."
"Monitoring is one of the most valuable features for us."
"One of the most valuable features is the self-service capability. I"
"It's very simple to manage and implement. Its functions are straightforward. You get all the basic features, such as you get the option to unlock the user account if it is locked. You can enforce password policies, and you also have the option to allow them to reset their passwords if they forget it. These were the basic requirements of my company that we could achieve through this product."
"The solution enables agents to reset their passwords."
"Due to ransomware and novel threats, we can no longer allow people to gain domain admin access to our servers with only a username and password. With MFA, they must supply a one-time password sent to them via some authenticator, like Microsoft or Google Authenticator. It could be a text message."
"The solution provides wide options for multifactor authentication."
 

Cons

"If we could have some kind of out-of-the box feature that you can simply say "no" so they don't have to go into a development mode, that would a really helpful feature."
"CyberArk Enterprise Password Vault's deployment is complex for resources with little experience. Tech support needs to be improved as well based on quality and knowledge."
"Maintaining the product is challenging. Upgrades require a lot of resources, as it impacts the entire organization. For example, upgrading components like the Privileged Session Manager (PSM) and the vault is time-consuming and difficult. In the long term, I would like to see these processes simplified, especially for on-premise installations."
"I'd like it to be a little more granular. I want a little bit more control over exactly what we do. I know if you do that, you add more knobs and dials to deal with, but that's just my personal approach: granular access."
"Updates have been somewhat difficult, resulting in challenges when moving from one version to another. The current version includes automatic updates."
"Overall what I would really love to see is the third-party PAS reporter tool pulled more into the overall solution, ideally as its own deployable component service installation package."
"The web access piece needs improvement. We have version 9.5 or 9.9.5, and now we have to upgrade to version 10."
"It can be made user-friendly, in the sense of the console is pretty outdated."
"The price must be reduced."
"The worst part is that the solution can only be installed or updated on a device if it is physically connected to the local network."
"Could be simplified, not user-friendly."
"The registration process could be improved. It should be easier for users to register for the service."
"There is a lack of specific information provided by the analytics portion of the software."
"They could improve their security of the products to prevent vulnerabilities."
"We need more reports for visualization."
 

Pricing and Cost Advice

"It's not a cheap application. It's very expensive."
"I would rate the tool’s pricing a six out of ten."
"CyberArk Privileged Access Manager is more expensive than its competitors, such as BeyondTrust, Delinea, and ManageEngine PAM360."
"The price of CyberArk Privileged Access Manager could be less expensive."
"Quite expensive"
"It costs us around $200 per user."
"In comparison to other products on the market, CyberArk is a more costly product."
"Payments have to be made on a yearly basis toward the licensing costs of the solution."
"Using this solution costs us about $1,200 USD per year."
"You purchase the license for one time, and you can use it for a lifetime. The only thing is that in order to get support, you need to upgrade your product to the latest solution. You need to keep a support contract with them for which you have to pay some amount. It's a very small amount for renewing their support contract. Overall, it's very cost-effective."
report
Use our free recommendation engine to learn which Enterprise Password Managers solutions are best for your needs.
864,574 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Financial Services Firm
15%
Manufacturing Company
9%
Government
6%
Government
11%
Manufacturing Company
11%
Wholesaler/Distributor
9%
Healthcare Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
What do you like most about CyberArk Privileged Access Manager?
The most valuable features of the solution are control and analytics.
What needs improvement with ManageEngine ADSelfService Plus?
The price must be reduced. The cost must depend on the number of nodes.
What is your primary use case for ManageEngine ADSelfService Plus?
We use the solution to reset passwords automatically. It is useful for companies that have many employees.
What advice do you have for others considering ManageEngine ADSelfService Plus?
We can get a certification on the solution. We never had to contact support. It is a simple application. We also use a tool to decrease the number of incidents. I will recommend the tool to others....
 

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
No data available
 

Overview

 

Sample Customers

Rockwell Automation
TEL U.S. Holdings Inc, Henson Group, CAMH, HPE, HubSpot, Hitachi, IBM, Accenture, Capgemini, Apogee, Symantec
Find out what your peers are saying about CyberArk Privileged Access Manager vs. ManageEngine ADSelfService Plus and other solutions. Updated: July 2025.
864,574 professionals have used our research since 2012.