No more typing reviews! Try our Samantha, our new voice AI agent.

Idira Privileged Access Manager vs Opal comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Idira Privileged Access Man...
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
230
Ranking in other categories
User Activity Monitoring (1st), Enterprise Password Managers (2nd), Privileged Access Management (PAM) (1st), Mainframe Security (1st), Operational Technology (OT) Security (3rd)
Opal
Average Rating
8.6
Reviews Sentiment
7.5
Number of Reviews
2
Ranking in other categories
User Provisioning Software (10th), Identity and Access Management as a Service (IDaaS) (IAMaaS) (19th), Access Management (20th)
 

Featured Reviews

Atul-Gujar - PeerSpot reviewer
CyberArk manager at a comms service provider with 10,001+ employees
Secures critical infrastructures with essential user session audit records
A potential area for improvement is enhancing support for cluster environments and distributed Vaults. Clients in multiple countries that need central access have different challenges that require better solutions from CyberArk. For financial services, CyberArk can improve incident response by ensuring fast support for critical priority tickets to meet compliance requirements. Providing more documentation on CyberArk is recommended for new team members to enhance their troubleshooting capabilities. I understand it's up to the client, but 99% fail to change the demo key, so it's crucial for CyberArk to emphasize changing the key and documenting it as part of the installation process.
Pranay Jain - PeerSpot reviewer
Senior software engineer at Simplifyvms
Focused workdays have replaced doomscrolling and now reduce my daily screen time significantly
Opal can be improved in some ways. In the paid version, there are multiple features, but in the freemium version, there are fewer features. The blockage of the application can be more rigorous. Right now, if we play two to three games, then a math game or anything, we are able to remove that lock. It should be more rigorous in some manner, and for some applications, it should be more rigorous. Application-wise rigorousness should be introduced. The different modes are good, but they should be more customizable according to the person. The end goal should meet whatever the objective is, so if the person has used more than six hours, then it should remind the person frequently that this application has used this time and this is an application you should not use. It should give us a timer or some kind of notification that the person will not use it anymore.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"There is a lot of return on investment in CyberArk."
"The product has performed very well, and we will continue to invest in this space because the CyberArk tools are working well for us."
"With reducing the privileged account access, there has been a huge improvement."
"Central Password Manager is useful for agentless automated password management through AD integration as well as endpoints for different devices."
"The implementation of the PSM proxy has reduced the specific risk of "insider attacks" on our domain controllers and SLDAP servers by eliminating direct user login by an open secure connection on the user's behalf without ever revealing the privileged credentials."
"The most valuable features of CyberArk Privileged Access Manager are its robust functionality and reliability."
"The most valuable features of CyberArk Enterprise Password Vault are password vaulting and automatic rotation of passwords after use."
"We chose CyberArk because of its great functionalities, the ability to be deployed granularly at a different scale for each function, and the ability to be deployed in a distributed infrastructure."
"Previously, my phone usage was around nine hours and fifteen minutes or more, but it has significantly reduced to around six hours and thirty minutes to seven hours, meaning two and a half to three hours has been reduced after using Opal as my primary screen time blocker."
"Opal has positively impacted my organization by reducing stress and increasing effectiveness for all our employees; it works better so all our employees have more time to sleep and they can investigate more."
 

Cons

"Additionally, I think the user experience needs to improve."
"I would prefer that this is a fully-managed service, rather than have to manage the software ourselves and keep it up to date."
"The product is complex and requires extensive configuration."
"The solution could improve by adding more connectors."
"The solution is very expensive and requires a license."
"The initial setup is pretty difficult and it takes a while to put into place."
"It can be integrated with other systems, but it is not easy to integrate. It takes too long to integrate it. Its integration should be easier and simpler."
"As a customer, I might need a plugin for a specific product, or an application, and CyberArk might have already worked with some other client on it. There has to be some platform where it is available for everybody else to go and grab it, instead of my having to reinvent the wheel."
"Opal can be improved in some ways."
 

Pricing and Cost Advice

"CyberArk DNA is free if you purchase the CyberArk solution. There is no additional charge for CyberArk DNA, which is great."
"The solution is available at a high price"
"CyberArk Enterprise Password Vault is a very expensive product."
"The product's licensing is yearly. I would rate the solution's pricing a six out of ten."
"I would rate CyberArk's pricing a nine out of ten, with one being cheap and ten being expensive. It's one of the most expensive solutions in the market, but it's worth it."
"Pricing is a problem. CyberArk is expensive compared to other products I know. It is similar to buying a German car. It comes with all the bells and whistles, but some companies may find it too expensive."
"No, I do not have any advice on the price of the product."
"Overall, its pricing is really good. The main difference from all the other vendors is that they have one package that covers all the functionality and modules of the basic PAM, except the add-on modules like adware and server protection. It also doesn't include the licenses for domain controller protection or maybe an API call-related feature. For the basic privileged access management, the bundle pricing is really good, but when it comes to an agent-based solution for advanced cyber protection or application identity managers, it is expensive. Services are also very expensive if you hire the services team from CyberArk, but these guys are really good. For a couple of large banking projects, we had an experience with them. The banks wanted to have things quickly and efficiently, so we had to hire them. If we take four weeks, these guys can do everything on a weekend. They charge quite a big sum of money, but they know the system well."
Information not available
report
Use our free recommendation engine to learn which Access Management solutions are best for your needs.
909,725 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
12%
Manufacturing Company
10%
Outsourcing Company
9%
Construction Company
7%
Outsourcing Company
11%
Financial Services Firm
11%
Construction Company
7%
Computer Software Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business59
Midsize Enterprise42
Large Enterprise175
No data available
 

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
My thoughts on the pricing of CyberArk Privileged Access Manager depend entirely on the vendors' requirements. If they want their things to be secure, they have to spend accordingly. We have four t...
What needs improvement with CyberArk Privileged Access Manager?
I believe account discovery and rolling support need to be improved. Account discovery is important when integrating with other systems, as other PAM solutions can perform account discovery and onb...
What needs improvement with Opal?
Opal can be improved in some ways. In the paid version, there are multiple features, but in the freemium version, there are fewer features. The blockage of the application can be more rigorous. Rig...
What is your primary use case for Opal?
The main use case of Opal for me is to reduce my screen time during my work hours, during my wake-up time, and during my sleeping time to improve my focus and feasibility towards my work and my act...
 

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
No data available
 

Overview

 

Sample Customers

Rockwell Automation
Information Not Available
Find out what your peers are saying about Idira Privileged Access Manager vs. Opal and other solutions. Updated: August 2026.
909,725 professionals have used our research since 2012.