No more typing reviews! Try our Samantha, our new voice AI agent.

Idira Privileged Access Manager vs Opal comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Idira Privileged Access Man...
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
231
Ranking in other categories
User Activity Monitoring (1st), Enterprise Password Managers (2nd), Privileged Access Management (PAM) (1st), Mainframe Security (1st), Operational Technology (OT) Security (3rd)
Opal
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
3
Ranking in other categories
User Provisioning Software (10th), Identity and Access Management as a Service (IDaaS) (IAMaaS) (19th), Access Management (21st)
 

Featured Reviews

Singaravelu C - PeerSpot reviewer
CyberArk Engineer at Tata Consultancy
Provides full visibility into user activity and ensures secure end-to-end access across critical systems
In CyberArk Privileged Access Manager, I see room for improvement as I am working in the on-premises networks, and now we are also having the cloud-based PAM. So there, everything is maintained by the CyberArk Privileged Access Manager team, and we are only maintaining the PSM servers. So it is already upgraded from the on-premises network to the cloud network. If you ask me what we can implement beyond that, I just need a few minutes to think about what new things, because it is already an end-to-end security on-premises itself. Now, when it comes to PCloud, Privileged Cloud, it is more secure than the on-premises networks because most of the things are handled using the cloud itself. So it is an already upgraded version; we do not need to implement something new. But if you think in that way, we can have a chance to implement our things. If anything could be improved in CyberArk Privileged Access Manager, I think we could build a small agent AI in my team, we could give access to these logs—the Vault logs, PSM logs, and CPM logs. Whenever the system is going down, the AI will automatically check. If we actually implement agent AI in CyberArk Privileged Access Manager, it will check the logs, and if any errors are coming, it automatically triggers alerts and gives the solution. That is the best improvement I can think of because these days, most things are done by agent AI. So if we also implement this agent AI in CyberArk Privileged Access Manager, we can add more features.
Mohammed Mudasser - PeerSpot reviewer
AI/ML Engineer at a educational organization with 501-1,000 employees
Automated access reviews have improved least privilege and simplified identity governance
The best features Opal offers are automated access reviews, centralized visibility, and just-in-time access. I especially appreciate the ability to enforce time-bound access and automatically revoke privileges, which makes least privilege management much more practical. The automated access reviews have made the process much more efficient by giving us a structured way to review and revoke unnecessary permissions. Instead of manually checking every entitlement, we can focus on exceptions and higher risk access, which makes the review process more manageable and consistent. I would also add that the context Opal provides during access reviews is valuable. You can see the access relationship and risk rather than simply approving or denying it blindly. This makes the decisions more informed and gives the team a much better audit trail.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The interface is very simple to use."
"The module called PTA, Privileged Threat Analytics, is very useful. When you give access to a user, it monitors and detects if the user's behavior is unusual. After giving access, it continually checks if the user is the same user."
"It's been a big win for us as we're now able to start managing service accounts with AIM."
"We have the identity provider for all the authentication processes. However, sometimes, we need access to different applications for customers or clients that are not integrated into the identity provider. For these, we need to store a password to gain access. For example, we use the CyberArk Password Vault for third-party services. This vault needs to be shared with many people in our company."
"The support is always very responsive, accurate, and complete in their solutions."
"It supports lots of requirements in the privileged access management area."
"CyberArk PAS is our go-to solution for securing against the pass the hash attack vector and auditing privileged account usage."
"The audit capabilities include video so that not only keystrokes but also mouse clicks are captured, providing safety and reassurance for anyone working in our infrastructure."
"Opal has positively impacted my organization by reducing stress and increasing effectiveness for all our employees; it works better so all our employees have more time to sleep and they can investigate more."
"Previously, my phone usage was around nine hours and fifteen minutes or more, but it has significantly reduced to around six hours and thirty minutes to seven hours, meaning two and a half to three hours has been reduced after using Opal as my primary screen time blocker."
"The clearest outcome I have seen is less manual effort during access reviews and better control over unnecessary or standing access, which improves the overall security posture."
 

Cons

"Some aspects of the administration need improvement, though they have recently made improvements to the API. However, the management with the interface and configuration are not so user-friendly. It has not changed much during all the years that CyberArk has been on the market. The management part, like platform management as well as PSM connectors definition and management, could be improved, even if it has already been done with the API."
"Tech support staff can be more proactive."
"The initial setup of CyberArk is a challenge if you do not have prior experience with it."
"I believe account discovery and rolling support need to be improved."
"Its implementation was very complex. It needs different servers."
"On the UI level, things could be better."
"It is very expensive. They charge for every single thing they offer."
"I would like to see better usability for non-technical people."
"Opal can be improved in some ways."
"The core platform is already strong, but I would appreciate more flexibility in customizing workflows and access review policies."
 

Pricing and Cost Advice

"I rate the tool's pricing an eight out of ten."
"CyberArk has been Gartner's number-one pick for the past ten years, so you can infer that their pricing is higher than everyone else. When you are the best, you will charge appropriately for it."
"Quite expensive"
"CyberArk is very expensive and there are additional fees for add-ons."
"I hope to learn how the pricing works so that I can understand it better, but I am certain it is not inexpensive."
"Generally, I don't get involved in the licensing or the purchasing side of it, but I do know that the licenses are expensive."
"The product's licensing is yearly. I would rate the solution's pricing a six out of ten."
"I would rate the cost of CyberArk Privileged Access Manager seven out of ten with ten being the most expensive."
Information not available
report
Use our free recommendation engine to learn which Access Management solutions are best for your needs.
915,341 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
13%
Financial Services Firm
11%
Manufacturing Company
11%
Comms Service Provider
7%
Outsourcing Company
13%
Educational Organization
11%
Comms Service Provider
11%
Construction Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business59
Midsize Enterprise43
Large Enterprise175
No data available
 

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
My thoughts on the pricing of CyberArk Privileged Access Manager depend entirely on the vendors' requirements. If they want their things to be secure, they have to spend accordingly. We have four t...
What needs improvement with CyberArk Privileged Access Manager?
I believe account discovery and rolling support need to be improved. Account discovery is important when integrating with other systems, as other PAM solutions can perform account discovery and onb...
What needs improvement with Opal?
Opal can be improved in some ways. In the paid version, there are multiple features, but in the freemium version, there are fewer features. The blockage of the application can be more rigorous. Rig...
What is your primary use case for Opal?
The main use case of Opal for me is to reduce my screen time during my work hours, during my wake-up time, and during my sleeping time to improve my focus and feasibility towards my work and my act...
 

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
No data available
 

Overview

 

Sample Customers

Rockwell Automation
Information Not Available
Find out what your peers are saying about Microsoft, Okta, One Identity and others in Access Management. Updated: September 2026.
915,341 professionals have used our research since 2012.