Try our new research platform with insights from 80,000+ expert users

CyberArk Privileged Access Manager vs ManageEngine ADSelfService Plus comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 16, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CyberArk Privileged Access ...
Ranking in Enterprise Password Managers
2nd
Average Rating
8.6
Reviews Sentiment
6.9
Number of Reviews
223
Ranking in other categories
User Activity Monitoring (1st), Privileged Access Management (PAM) (1st), Mainframe Security (2nd), Operational Technology (OT) Security (3rd)
ManageEngine ADSelfService ...
Ranking in Enterprise Password Managers
15th
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
9
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of June 2025, in the Enterprise Password Managers category, the mindshare of CyberArk Privileged Access Manager is 8.0%, down from 9.0% compared to the previous year. The mindshare of ManageEngine ADSelfService Plus is 0.3%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Enterprise Password Managers
 

Featured Reviews

Abdul Durrani - PeerSpot reviewer
Enables granular and secure access with just-in-time access and Zero Trust model
CyberArk provides a good amount of control over access types. However, as a future enhancement, having additional features for cross-platform integration would be beneficial. It would be good to have integrations with other tools and firewalls, such as Zscaler and CrowdStrike. Although I am not fully aware of recent updates, more cross-platform integration would be valuable. A SOC analyst would like to have centralized access in terms of information flowing in even for privileged access management. They would like to have control over everything instead of opening four to five tabs for different sorts of information. Cross-platform integration would help with that. Customers also want CyberArk's pricing to be better so that they can implement it further and have more licenses. Implementing a privileged access management solution can be challenging. It would be great if CyberArk could provide recommendations based on the compliance standards of an organization. It would help system admins ensure that all the required ports are closed and the systems are being managed properly. If any system is not being used anymore, any ports opened for that system need to be closed. Having such recommendations would be helpful.
Hussein Taha - PeerSpot reviewer
Provides wide options for multifactor authentication with very simple implementation
We struggled with the end users because most don't have the required IT background. They needed password resets for emails and accounts in the active directory. This created an issue for the help desk, and the system and ManageEngine ADSelfService Plus gave us a QR solution for the end users. Once an account is set up, you scan the QR code through Google authentication, Microsoft authentication or any program that can authenticate with the QR. You'll automatically generate a code that gives the port to reset or unlock your account very easily.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Technical support has been very responsive in navigating challenges. It is very easy to open a ticket."
"It is very simple to use."
"The Password Upload Utility tool makes it easier when setting up a Safe that contains multiple accounts and has cut down the amount of time that it takes to complete the task."
"I found it valuable that CyberArk Privileged Access Manager can be integrated with PTA (privileged threat analytics), and this means that it will tell you if there's a risk to the logins and signs of risk and if risky behavior is observed. It's a good feature. Another good feature is the CPM (central password manager) because it helps you rotate the passwords automatically without involving the admins. It can go and update the scheduled tasks and the services. At the same time, if there's an application where it cannot do all of these, CPM will trigger an automatic email to the application owners, telling them that they should go ahead and change the password. This allows you to manage the account password that CyberArk cannot manage, which helps mitigate the risk of old passwords, where the password gets compromised, and also allows you to manage the security of the domain."
"We are able to rotate privileged user passwords to eliminate fraudulent use."
"CyberArk Privileged Access Manager’s ability to safeguard credentials is very important."
"We are able to centrally manage credentials, touch applications, and rotate passwords."
"The most valuable feature is that it is flexible. It has many connectors. that have done well, the EPV and SSH sessions are all being recorded and everything works fine."
"The solution enables agents to reset their passwords."
"Due to ransomware and novel threats, we can no longer allow people to gain domain admin access to our servers with only a username and password. With MFA, they must supply a one-time password sent to them via some authenticator, like Microsoft or Google Authenticator. It could be a text message."
"Having multifactor authentication in Windows machines."
"One of the most valuable features is the self-service capability. I"
"The solution provides wide options for multifactor authentication."
"The most valuable feature is the ability for remote users to change their login credentials using their mobile devices."
"Monitoring is one of the most valuable features for us."
"It's very simple to manage and implement. Its functions are straightforward. You get all the basic features, such as you get the option to unlock the user account if it is locked. You can enforce password policies, and you also have the option to allow them to reset their passwords if they forget it. These were the basic requirements of my company that we could achieve through this product."
 

Cons

"CyberArk Privileged Access Manager could improve the integration docking, it should have more layers. For example, integration with OpenShift."
"There are upwards of six components you need to set it up. And you might need anywhere from two to five servers. It takes some work to set that up, especially in a larger environment."
"CyberArk Enterprise Password Vault's deployment is complex for resources with little experience. Tech support needs to be improved as well based on quality and knowledge."
"Our DevOps team is looking in the direction of cloud, because we are not in it today. We are hoping to build it with Conjur from the ground up."
"I would like to see is the policy export and import. When we expend, we do not want to just hand do a policy."
"The price is high compared to Azure Key Vault. It's the most expensive solution."
"I think they can improve account onboarding. For instance, you have to use the Password Vault utility, whereas in Thycotic I think there is a feature in the user interface that allows you to upload your account with an Excel file. So I'd like to have a similar thing in CyberArk."
"There are some options in the web portal where they can improve the user experience. For example, in remote, there is a parameter called 'access to remote machine.' When we put host names in that field, we are not able to search it. It"
"The worst part is that the solution can only be installed or updated on a device if it is physically connected to the local network."
"Could be simplified, not user-friendly."
"We need more reports for visualization."
"The registration process could be improved. It should be easier for users to register for the service."
"There is a lack of specific information provided by the analytics portion of the software."
"They could improve their security of the products to prevent vulnerabilities."
"The price must be reduced."
 

Pricing and Cost Advice

"CyberArk Privileged Access Manager is more expensive than its competitors, such as BeyondTrust, Delinea, and ManageEngine PAM360."
"Since CyberArk is at the top of the Gartner list, the cost is indeed on the higher side, but customers must discern which entities are essential to purchase. They should weigh the cost against the quality received."
"This solution is considered to be more expensive than others out there on the market today."
"Our risk is definitely significantly lower. Also, our resources are low."
"In comparison to other products on the market, CyberArk is a more costly product."
"CyberArk DNA is free if you purchase the CyberArk solution. There is no additional charge for CyberArk DNA, which is great."
"I would rate the cost of CyberArk Privileged Access Manager seven out of ten with ten being the most expensive."
"CyberArk Privileged Access Manager is on the expensive side. It is very expensive."
"Using this solution costs us about $1,200 USD per year."
"You purchase the license for one time, and you can use it for a lifetime. The only thing is that in order to get support, you need to upgrade your product to the latest solution. You need to keep a support contract with them for which you have to pay some amount. It's a very small amount for renewing their support contract. Overall, it's very cost-effective."
report
Use our free recommendation engine to learn which Enterprise Password Managers solutions are best for your needs.
856,873 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
27%
Financial Services Firm
13%
Computer Software Company
12%
Manufacturing Company
6%
Financial Services Firm
11%
Government
11%
Wholesaler/Distributor
9%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
What do you like most about CyberArk Privileged Access Manager?
The most valuable features of the solution are control and analytics.
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
The pricing for CyberArk Privileged Access Manager is quite expensive, and the pricing varies from region to region. In APAC, CyberArk Privileged Access Manager can be obtained for less than in Nor...
What needs improvement with ManageEngine ADSelfService Plus?
The price must be reduced. The cost must depend on the number of nodes.
What is your primary use case for ManageEngine ADSelfService Plus?
We use the solution to reset passwords automatically. It is useful for companies that have many employees.
What advice do you have for others considering ManageEngine ADSelfService Plus?
We can get a certification on the solution. We never had to contact support. It is a simple application. We also use a tool to decrease the number of incidents. I will recommend the tool to others....
 

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
No data available
 

Overview

 

Sample Customers

Rockwell Automation
TEL U.S. Holdings Inc, Henson Group, CAMH, HPE, HubSpot, Hitachi, IBM, Accenture, Capgemini, Apogee, Symantec
Find out what your peers are saying about CyberArk Privileged Access Manager vs. ManageEngine ADSelfService Plus and other solutions. Updated: June 2025.
856,873 professionals have used our research since 2012.