Idira Endpoint Privilege Manager vs Zscaler Zero Trust Exchange Platform comparison

Idira Endpoint Privilege Manager vs. Zscaler Zero Trust Exchange Platform

June 2026

Download the complete report

Helped 904,836 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

ROI

Sentiment score

7.2

Idira Endpoint Privilege Manager enhances security, reduces costs, streamlines management, and significantly decreases vulnerability to attacks, validating investment.

Sentiment score

7.3

Zscaler Zero Trust Exchange enhances ROI through cost savings, improved security, productivity, and reduced operational expenses and support issues.

Deploying CyberArk Endpoint Privilege Manager has secured the infrastructure, which saves money, time, and resources.

For more quotes and insights, download the Idira Endpoint Privilege Manager report

Lead Consultant at a tech vendor with 501-1,000 employees

I consider CyberArk Endpoint Privilege Manager's return on investment to be good since it effectively accomplishes the goals expected from privilege access management solutions.

Diego Rivera

Commercial and Technical Professional Manager at Evolution Technologies Group

When I see that I am trying to cut costs, for example, even when replacing Prisma, we have managed to save about over half a million dollars a year.

Cybersecurity Senior Program Manager at Dayforce

In terms of time savings, since users no longer manually connect to the VPN, access became seamless, improving user productivity, especially for remote users.

For more quotes and insights, download the Zscaler Zero Trust Exchange Platform report

Technical Team Lead - Content Security at Valuepoint Systems

We don't have to purchase many components such as load balancers and proxy servers that were necessary in traditional setups.

TarunKumar5

Lead Engineer at FIS Global

Customer Service

Sentiment score

6.2

Idira Endpoint Privilege Manager support is generally good but varies in response time and expertise, with certification aiding resolution.

Sentiment score

4.9

Zscaler's support is praised for knowledge and responsiveness but varies in resolution time and regional quality.

They respond immediately to our inquiries, resolve issues promptly, and provide valuable guidance, especially in critical situations.

Security Delivery Analyst at Accenture

We engage them when needed and receive prompt responses that typically resolve our issues.

Global Security Systems Consultant at a insurance company with 10,001+ employees

Earlier, we received support for normal tickets within a day, but now it takes one or two days to resolve issues.

For more quotes and insights, download the Idira Endpoint Privilege Manager report

Lead Consultant at a tech vendor with 501-1,000 employees

The support engineers are technically knowledgeable, particularly for Zscaler Private Access related issues, providing clear guidance and documentation for troubleshooting.

Technical Team Lead - Content Security at Valuepoint Systems

Sometimes, support takes time since the solution has some bugs that need fixing.

Sumit Bhanwala

architect at Tata Consultancy

They have provided the numbers and contact supports, and it is almost immediate.

For more quotes and insights, download the Zscaler Zero Trust Exchange Platform report

Cybersecurity Senior Program Manager at Dayforce

Scalability Issues

Sentiment score

7.7

Idira Endpoint Privilege Manager is scalable but requires effort and may face challenges with application and database integration.

Sentiment score

7.6

Zscaler Zero Trust Exchange is scalable and cloud-native, facilitating easy, hardware-free user expansion with high performance and adaptability.

We can set permissions per team or department, allowing some teams to elevate specific applications while others have different permissions.

Global Security Systems Consultant at a insurance company with 10,001+ employees

CyberArk Endpoint Privilege Manager is quite scalable.

For more quotes and insights, download the Idira Endpoint Privilege Manager report

Security Delivery Analyst at Accenture

The available reports and other security tools assist in scaling it according to my organization's needs.

Gani Habib

Cybersecurity Manager at a consultancy with 10,001+ employees

The only limitation I was mentioning is that it was unable to identify the sources of vulnerability, which they are going to embed by the mid of this year.

Cybersecurity Senior Program Manager at Dayforce

Zscaler Zero Trust Exchange Platform is highly scalable, primarily because it is built on a cloud-native, globally distributed architecture.

For more quotes and insights, download the Zscaler Zero Trust Exchange Platform report

Technical Team Lead - Content Security at Valuepoint Systems

Stability Issues

Sentiment score

8.2

Idira Endpoint Privilege Manager is stable and reliable, with rare downtime, strong Windows support, and occasional latency issues.

Sentiment score

7.8

Zscaler’s platform is highly reliable and stable, with minor connectivity issues and occasional slight latency during data transfers.

It is a robust solution that has effectively supported our environment without major issues.

Security Delivery Analyst at Accenture

Since implementing it, we have not experienced any outages or stability issues.

Global Security Systems Consultant at a insurance company with 10,001+ employees

CyberArk Endpoint Privilege Manager offers multiple options for creating and stopping policies.

For more quotes and insights, download the Idira Endpoint Privilege Manager report

Lead Consultant at a tech vendor with 501-1,000 employees

Zscaler Zero Trust Exchange Platform is very stable, especially in enterprise environments.

Technical Team Lead - Content Security at Valuepoint Systems

Zscaler Zero Trust Exchange Platform is very stable.

For more quotes and insights, download the Zscaler Zero Trust Exchange Platform report

Cybersecurity Senior Program Manager at Dayforce

Room For Improvement

Idira Endpoint Privilege Manager needs interface simplification, improved integration, and enhanced automation for better accessibility and performance.

Zscaler's platform needs latency and usability improvements, better multi-tenancy and support, clearer pricing, and enhanced SIEM integration.

CyberArk Endpoint Privilege Manager could be improved by simplifying the administration process, specifically when setting up policies and applications.

Global Security Systems Consultant at a insurance company with 10,001+ employees

Currently, no user-based policy option is available inside the EPM console.

For more quotes and insights, download the Idira Endpoint Privilege Manager report

Lead Consultant at a tech vendor with 501-1,000 employees

Some features provided in the self-hosted version of EPM are not supported in the software as a service version, like connection to some analysis applied by Palo Alto.

Marek Neumann

Solution Architect at a consultancy with 10,001+ employees

It would be beneficial to have more granular centralized visibility, allowing for quick end-to-end tracing of a user request from authentication to application access without switching between multiple views.

Technical Team Lead - Content Security at Valuepoint Systems

Zscaler Zero Trust Exchange Platform probably needs to be more efficient because scanning takes a lot of time.

For more quotes and insights, download the Zscaler Zero Trust Exchange Platform report

Cybersecurity Senior Program Manager at Dayforce

They might be able to identify if something is missing with Zscaler.

Sumit Bhanwala

architect at Tata Consultancy

Setup Cost

Idira Endpoint Privilege Manager pricing varies by device and usage, with cloud options costlier than on-premise solutions.

Zscaler Zero Trust Exchange Platform has high subscription costs but offers ROI by reducing infrastructure needs and enhancing security.

CyberArk Endpoint Privilege Manager is slightly expensive, but costs can be negotiated to become more competitive.

Gani Habib

Cybersecurity Manager at a consultancy with 10,001+ employees

CyberArk Endpoint Privilege Manager is costly compared to other solutions.

For more quotes and insights, download the Idira Endpoint Privilege Manager report

Lead Consultant at a tech vendor with 501-1,000 employees

I've received feedback that the pricing is high, however, for me, the value it brings is worth the cost.

Padmanabha Hegde

Manager at a computer software company with 1,001-5,000 employees

There is minimal setup cost since it is a cloud-delivered platform, eliminating the need to invest in additional hardware such as VPN gateways or maintain infrastructure.

Technical Team Lead - Content Security at Valuepoint Systems

Zscaler Zero Trust Exchange Platform is much, much cheaper when comparing price.

For more quotes and insights, download the Zscaler Zero Trust Exchange Platform report

Cybersecurity Senior Program Manager at Dayforce

Valuable Features

Idira Endpoint Privilege Manager enhances security and compliance by controlling access, monitoring activities, and integrating seamlessly with systems.

Zscaler Zero Trust Exchange offers scalable security with zero trust access, app segmentation, and flexible identity-based control for organizations.

CyberArk Endpoint Privilege Manager effectively reduces malicious content in applications by allowing us to identify and block dangerous applications.

For more quotes and insights, download the Idira Endpoint Privilege Manager report

Security Delivery Analyst at Accenture

It allows them to granularly manage controls to prevent some malicious activities on the endpoint machine.

reviewer1247523

Head of Sales Services Department at a comms service provider with 51-200 employees

CyberArk Endpoint Privilege Manager enhances computer security by providing minimal access, effectively preventing ransomware attacks.

Gani Habib

Cybersecurity Manager at a consultancy with 10,001+ employees

The solution is cloud-based with the latest inspection engines, which I find to be amazing.

Sumit Bhanwala

architect at Tata Consultancy

We have excellent account management, smooth marketplace engagement, and processing in how my team or organization uses Zscaler Zero Trust Exchange Platform.

reviewer2783763

Manager, Software Development at a outsourcing company with 201-500 employees

Since we started using Zscaler Zero Trust Exchange Platform, it has auto-configuration, and wherever we have deployed the auto-configuration, we have not encountered any problem.

For more quotes and insights, download the Zscaler Zero Trust Exchange Platform report

Cybersecurity Senior Program Manager at Dayforce

Categories and Ranking

Idira Endpoint Privilege Ma...

Ranking in Application Control

5th

Average Rating

8.2

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Endpoint Compliance (4th), Privileged Access Management (PAM) (6th), Anti-Malware Tools (10th), Ransomware Protection (6th)

Zscaler Zero Trust Exchange...

Ranking in Application Control

4th

Average Rating

8.4

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Data Loss Prevention (DLP) (6th), Cloud Access Security Brokers (CASB) (9th), ZTNA as a Service (1st), Secure Access Service Edge (SASE) (2nd), Remote Browser Isolation (RBI) (1st)

Mindshare comparison

As of July 2026, in the Application Control category, the mindshare of Idira Endpoint Privilege Manager is 9.6%, up from 4.4% compared to the previous year. The mindshare of Zscaler Zero Trust Exchange Platform is 12.1%, up from 8.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Application Control Mindshare Distribution
Product	Mindshare (%)
Zscaler Zero Trust Exchange Platform	12.1%
Idira Endpoint Privilege Manager	9.6%
Other	78.3%

Application Control

Featured Reviews

Helps secure the infrastructure and control users with admin rights

Lead Consultant at a tech vendor with 501-1,000 employees

There are many features that are currently missing. A customization option is required for certain policies. For instance, if we need to stop PowerShell scripting, we have to create a different policy for that. Being able to create a sub-level policy within a top-level policy would be good. Currently, no user-based policy option is available inside the EPM console. We can only create computer-based policies. The database is available, but there is a drawback in not being able to create local groups on the EPM console. We only have to depend on Active Directory. This limits infrastructure security as we depend on the Active Directory team to manage user groups. If they remove any users, we lose control. If we could create groups locally and block them or set specific policies, we would have more control. Local endpoint management is missing from the EPM site. Moreover, there is an issue with policies not running as expected when we make enhancements. We have to find multiple ways to whitelist applications or enhance policies.

Read full review

Zero trust access has transformed remote connectivity and now simplifies secure app usage

Technical Team Lead - Content Security at Valuepoint Systems

Zscaler Zero Trust Exchange Platform, especially Zscaler Private Access, is very strong, though there are a few areas where improvements can be made. One challenge observed is around initial troubleshooting and visibility. While Zscaler Private Access provides logs, it can sometimes take time to pinpoint the exact cause of access issues, especially in complex environments with multiple policies and identity integration. Another area is the dependency on identity and connector health. Since Zscaler Private Access is heavily reliant on app connectors and identity providers, any issues with these components can impact user access, making proper monitoring critical. During the initial setup, policy configuration and application onboarding require careful planning, especially for larger environments with many applications. These challenges are manageable with proper design and monitoring. Overall, the platform delivers strong security and user experience. I would recommend a few improvements, especially around user interface, reporting, and troubleshooting experience. From a user interface perspective, while the platform is powerful, the policy configuration and navigation can feel complex, especially for new users. A more simplified and intuitive layout for policy mapping and application access would help reduce the learning curve. In terms of reporting, Zscaler Private Access provides logs, but having more built-in customizable dashboards and analytics would be very helpful. Better visibility into user access patterns, application performance, and real-time troubleshooting insights would improve operational efficiency. From a support and troubleshooting standpoint, it would be beneficial to have more granular centralized visibility, allowing for quick end-to-end tracing of a user request from authentication to application access without switching between multiple views. These improvements would make the platform even more efficient, especially for large-scale enterprise environments.

Read full review

See which vendors are best for you

Use our free recommendation engine to learn which Application Control solutions are best for your needs.

See recommendations

904,836 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

14%

Manufacturing Company

11%

Construction Company

Computer Software Company

Financial Services Firm

12%

Manufacturing Company

10%

Computer Software Company

Outsourcing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	18
Midsize Enterprise	9
Large Enterprise	19

By reviewers
Company Size	Count
Small Business	16
Midsize Enterprise	12
Large Enterprise	46

Questions from the Community

Looking for recommendations and a pros/cons template for software to detect insider threats

This is an inside-out --- outside-in --- inside-in question, as an insider can be an outsider as well. There is no short answer other than a blend of a PAM tool with Behavioral Analytics and Endpo...

What is your experience regarding pricing and costs for CyberArk Endpoint Privilege Manager?

I believe it's quite a reasonably priced solution. It's not very common to use CyberArk because it's a niche solution, but customers who are willing to control administrative accounts are willing t...

What needs improvement with CyberArk Endpoint Privilege Manager?

While CyberArk Endpoint Privilege Manager is a great tool, I believe the functionality could be wider. If it could work not only with permissions but also involve pure EDR tasks or User and Entity ...

What is the better solution - Prisma Access or Zscaler Private Access?

We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure access service edge (SASE) designed to deliver network security in a cloud-deliver...

How to minimize false positives for PII and PCI around different data systems across the globe?

Personal information always should be under high protection from manipulations which is why it is the responsibility of those collecting the data to keep the integrity of these data and check and u...

What is your experience regarding pricing and costs for Zscaler Cloud Protection?

This is an area where I have candid feedback from our organization regarding pricing, setup cost, and licensing for Zscaler Zero Trust Exchange Platform. Overall, I would assess the pricing as a si...

BeyondTrust Endpoint Privilege Management vs Idira Endpoint Privilege Manager

Comparisons

Compared 6% of the time

Idira Privileged Access Manager vs Idira Endpoint Privilege Manager

Compared 5% of the time

Microsoft Defender for Endpoint vs Idira Endpoint Privilege Manager

Compared 4% of the time

Ivanti Endpoint Security for Endpoint Manager vs Idira Endpoint Privilege Manager

Compared 4% of the time

More Idira Endpoint Privilege Manager Competitors

Cato SASE Cloud Platform vs Zscaler Zero Trust Exchange Platform

Compared 5% of the time

Check Point Harmony SASE (formerly Perimeter 81) vs Zscaler Zero Trust Exchange Platform

Compared 4% of the time

FortiSASE vs Zscaler Zero Trust Exchange Platform

Compared 4% of the time

Prisma Access by Palo Alto Networks vs Zscaler Zero Trust Exchange Platform

Compared 4% of the time

Cloudflare One vs Zscaler Zero Trust Exchange Platform

Compared 3% of the time

More Zscaler Zero Trust Exchange Platform Competitors

Product Reports

Idira Endpoint Privilege Manager

July 2026

Download Idira Endpoint Privilege Manager product report

Zscaler Zero Trust Exchange Platform

June 2026

Zscaler Zero Trust Exchange Platform report

Download Zscaler Zero Trust Exchange Platform product report

Also Known As

Viewfinity

Zscaler SASE, Zscaler DLP, Zscaler CASB, Zscaler CSPM, Zscaler Browser Isolation, Zscaler Posture Control

Overview

CyberArk Endpoint Privilege Manager enhances security by controlling access, removing admin rights, and managing privileges. It supports diverse environments with simple integration, focusing on credential detection, threat protection, and compliance.

CyberArk Endpoint Privilege Manager secures enterprise passwords, monitors session connections, and enhances cybersecurity by controlling privileged access. It blocks unauthorized applications, monitors user activities, and secures credentials across platforms. Key areas include Just-In-Time Access, privilege separation, and local administrator password rotation. While robust, challenges exist with performance, complexity, and setup. Integration with Linux and Unix needs improvement, requiring advanced reporting tools and easier policy management. Pricing concerns and maintenance issues with Windows servers persist, as well as database issues in the on-prem version.

What are the key features of CyberArk Endpoint Privilege Manager?

Admin Rights Removal: Eliminates unnecessary permissions to enhance security.
Privilege Management: Offers detailed control over user access rights.
Password Rotation: Automatically updates passwords to protect sensitive data.
Threat Protection: Blocks malicious applications and threats proactively.
Audit Capabilities: Provides comprehensive security and compliance tracking.
Application Control: Confines access to authorized applications only.
Automatic Updates: Ensures security protocols and software remain current.

What benefits should organizations expect from CyberArk Endpoint Privilege Manager?

Enhanced Security: Reduces risks by controlling credential and application access.
Compliance Assurance: Meets industry standards through thorough tracking and reporting.
Scalable Integration: Adapts to different environments smoothly.
Reduced Management Efforts: Automates credential and policy management.

Organizations deploying CyberArk Endpoint Privilege Manager in industries such as finance, healthcare, and technology benefit from secure credential management across Unix, AWS, and GCP. By implementing privilege separation and monitoring user activities, they achieve effective risk mitigation and compliance across multiple platforms.

Idira by Palo Alto Networks

Zscaler Zero Trust Exchange enhances security with seamless cloud-based connectivity and VPN-less operation, offering integration with multiple identity providers and advanced security features, suitable for remote work environments.

Zscaler Zero Trust Exchange provides secure, adaptive connectivity without traditional VPNs, allowing organizations to replace legacy systems and bolster remote work security. The platform offers cloud-based protection, single sign-on, dynamic URL categorization, and scalable solutions. While advanced security features like DLP and threat protection enhance data protection, users may face issues with speed, connectivity, and some customization options. Integration challenges, latency due to multi-tenant hosting, reporting delays, and licensing costs require consideration. It supports secure internet access and private application security, ensuring traffic control and data compliance.

What are the key features of Zscaler Zero Trust Exchange?

VPN-less Connectivity: Enables secure remote access without traditional VPNs.
Cloud-based Security: Offers scalable protection utilizing cloud infrastructure.
Single Sign-On: Integrates with multiple identity providers for streamlined access.
Dynamic URL Categorization: Provides real-time URL filtering to enhance security.
Advanced Threat Protection: Detects and mitigates sophisticated threats effectively.
Customizable Policies: Allows tailored security protocols to fit unique requirements.
Comprehensive DLP: Protects sensitive data through robust data loss prevention.
Integration Capabilities: Connects seamlessly with cloud services and applications.

What are the benefits of using Zscaler Zero Trust Exchange?

Enhanced Security: Delivers consistent protection regardless of user location.
Improved Compliance: Ensures adherence to data protection regulations.
Streamlined Access: Simplifies connectivity to private and cloud applications.
Scalability: Supports expanding organizational demands with cloud scalability.
Real-time Visibility: Provides instant insights into security incidents and network traffic.

Zscaler Zero Trust Exchange is deployed across industries to secure remote access and enforce zero trust principles. Organizations in finance, healthcare, and technology sectors utilize it for secure internet access and visibility into cloud applications, enhancing performance and compliance in dynamic environments.

Zscaler

Sample Customers

Information Not Available

Siemens, AutoNation, GE, NOV