Idira Privileged Access Manager vs Tenable OT Security comparison

Idira Privileged Access Manager vs. Tenable OT Security

Download the complete report

Helped 914,322 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Idira Privileged Access Man...

Ranking in Operational Technology (OT) Security

3rd

Average Rating

8.6

Reviews Sentiment

6.8

Number of Reviews

231

Ranking in other categories

User Activity Monitoring (1st), Enterprise Password Managers (2nd), Privileged Access Management (PAM) (1st), Mainframe Security (1st)

Tenable OT Security

Ranking in Operational Technology (OT) Security

5th

Average Rating

8.6

Reviews Sentiment

6.6

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of September 2026, in the Operational Technology (OT) Security category, the mindshare of Idira Privileged Access Manager is 1.6%, up from 0.4% compared to the previous year. The mindshare of Tenable OT Security is 7.2%, down from 10.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Operational Technology (OT) Security Mindshare Distribution
Product	Mindshare (%)
Idira Privileged Access Manager	1.6%
Tenable OT Security	7.2%
Other	91.2%

Operational Technology (OT) Security

Featured Reviews

Singaravelu C

CyberArk Engineer at Tata Consultancy

Provides full visibility into user activity and ensures secure end-to-end access across critical systems

In CyberArk Privileged Access Manager, I see room for improvement as I am working in the on-premises networks, and now we are also having the cloud-based PAM. So there, everything is maintained by the CyberArk Privileged Access Manager team, and we are only maintaining the PSM servers. So it is already upgraded from the on-premises network to the cloud network. If you ask me what we can implement beyond that, I just need a few minutes to think about what new things, because it is already an end-to-end security on-premises itself. Now, when it comes to PCloud, Privileged Cloud, it is more secure than the on-premises networks because most of the things are handled using the cloud itself. So it is an already upgraded version; we do not need to implement something new. But if you think in that way, we can have a chance to implement our things. If anything could be improved in CyberArk Privileged Access Manager, I think we could build a small agent AI in my team, we could give access to these logs—the Vault logs, PSM logs, and CPM logs. Whenever the system is going down, the AI will automatically check. If we actually implement agent AI in CyberArk Privileged Access Manager, it will check the logs, and if any errors are coming, it automatically triggers alerts and gives the solution. That is the best improvement I can think of because these days, most things are done by agent AI. So if we also implement this agent AI in CyberArk Privileged Access Manager, we can add more features.

Read full review

AbhishekPandey5

Senior Consultant at Payatu

Enables cost-effective asset and threat management while requiring improvements in support and training

The time it takes to train itself is a concern. Initially, it will not identify many assets, as it needs time to read the information before finding the assets. Some detections can go wrong, and it may not understand certain industrial protocols. While installation and deployment are easy, upgrading from one version to another can be challenging. When you assure clients they will receive minus two upgrades, sometimes upgrading through the cloud becomes difficult, requiring on-site upgrades. During upgrades, the previous configuration may be lost, creating support issues.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Previously, we used to share passwords for service and normal admin accounts among team members. However, since we started managing it through the product, we've transitioned to individual admin accounts or implemented dual control for shared accounts. With dual control, exclusive checking and checkout options are available, and passwords are not stored in clear text anywhere in the credentials."

"This solution is quite efficient."

"CyberArk probably has probably the best vault on the market because of the multiple layered security and each password getting its own encryption."

"I found it valuable that CyberArk Privileged Access Manager can be integrated with PTA (privileged threat analytics), and this means that it will tell you if there's a risk to the logins and signs of risk and if risky behavior is observed. It's a good feature. Another good feature is the CPM (central password manager) because it helps you rotate the passwords automatically without involving the admins. It can go and update the scheduled tasks and the services. At the same time, if there's an application where it cannot do all of these, CPM will trigger an automatic email to the application owners, telling them that they should go ahead and change the password. This allows you to manage the account password that CyberArk cannot manage, which helps mitigate the risk of old passwords, where the password gets compromised, and also allows you to manage the security of the domain."

"Technical support is very well aware of this."

"Automates password management to remove the human chain weakness."

"It is an extremely scalable solution."

"It is scalable."

More Idira Privileged Access Manager pros

"The product’s price is its most valuable feature."

"The biggest advantage is that with good infrastructure, you can utilize asset planning when using Nessus along with Tenable OT Security."

"The clear distinction between IT and OT that Tenable OT provides is its most valuable feature."

"The active query inventory is the most valuable feature."

"I like Tenable OT Security for two main reasons. Firstly, it helps identify vulnerabilities and risks for IT and OT assets, which is crucial for our operations. Secondly, it performs external port scanning, including vulnerability scans for open ports. Compared to the Claroty Platform, the tool offers detailed asset discovery capabilities."

"The initial setup was very easy, and I would rate it a ten out of ten."

"The product has easy-to-manage features and components."

"It's for securing the vulnerability of the OT solutions they are using. We mitigate those through patch management activities and find vulnerabilities easily with this security solution."

Cons

"We have had some performance and stability issues. We have had instances where things weren't as they should be, however, we worked closely with the development support teams once the issues were escalated and managed to find either a resolution or a workaround to stabilize the solution."

"The solution is very expensive and requires a license."

"PAM could be more user-friendly and CyberArk could update the documentation to include more real-world examples. You have to learn it yourself through trial and error. In particular, the online documentation should have more information about troubleshooting."

"The PTA could be improved. Currently, companies often have multiple domains and sometimes it's difficult to implement CyberArk in this kind of infrastructure. For example, you can add CPM (Central Policy Manager) and PSM (Privileged Session Manager and PVWA (Password Vault Web Access) for access, but if you want to add PTA (Privileged Threat Analysis) to scan Vault logs, it is difficult because this component may be adding multiple domain environments."

"Its pricing is a big challenge here. When it started, the product came in at a very low cost. Now, they are the leaders in the market, so the cost has grown and is quite huge."

"The scalability, sometimes, is lacking. It works really well for more static environments... But for an environment where you're constantly spinning up new infrastructure or new endpoints, sometimes it has a hard time keeping up."

"On-prem CyberArk is pretty expensive."

"They can do a better job in the PSM space."

More Idira Privileged Access Manager cons

"Tenable OT product is good, but OT security itself is still maturing."

"The solution should provide more features to prevent attacks."

"The solution could detect changes in reading variables. The support of IoT devices can be improved."

"Tenable.ot's integration with one of the products needs improvement."

"As an IT security professional, I would like to see automation improvements in the response part of Tenable OT Security. However, I understand that implementing automation in OT environments can be quite challenging."

"During upgrades, the previous configuration may be lost, creating support issues."

"Tenable OT Security is fine, but I find it more language-based rather than structured. It feels like something is on a web page, and the dashboards and data representations are not cool. First of all, I said that the tool view should be improved. It looks pretty old. Second, the details Tenable OT Security provides regarding the metadata they work with should be more in-depth. Its main focus is vulnerability management, which is fine, but what about threat actors? What about attack vectors and OT vulnerabilities? There are major areas, baselines, etc. that need attention."

Pricing and Cost Advice

"Generally, I don't get involved in the licensing or the purchasing side of it, but I do know that the licenses are expensive."

"Its price is high. I have also worked with Delinea. CyberArk is comparatively expensive compared to other PAM solutions, such as Delinea, especially during renewal."

"The solution is available at a high price"

"It is not a cheap solution. It is expensive as compared with other solutions. However, it is one of the best solutions in their domain."

"I would rate the tool’s pricing a six out of ten."

"The solution is costly but we get what we pay for."

"It's not a cheap application. It's very expensive."

"The price of the solution is reasonable."

More Idira Privileged Access Manager pricing and cost advice

"The product is inexpensive."

"The tool's pricing is fair enough."

See which vendors are best for you

Use our free recommendation engine to learn which Operational Technology (OT) Security solutions are best for your needs.

See recommendations

914,322 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Outsourcing Company

13%

Financial Services Firm

11%

Manufacturing Company

10%

Comms Service Provider

Energy/Utilities Company

15%

Manufacturing Company

14%

Outsourcing Company

Computer Software Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	59
Midsize Enterprise	43
Large Enterprise	175

By reviewers
Company Size	Count
Small Business	4
Large Enterprise	4

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?

We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...

What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?

My thoughts on the pricing of CyberArk Privileged Access Manager depend entirely on the vendors' requirements. If they want their things to be secure, they have to spend accordingly. We have four t...

What needs improvement with CyberArk Privileged Access Manager?

I believe account discovery and rolling support need to be improved. Account discovery is important when integrating with other systems, as other PAM solutions can perform account discovery and onb...

What is your experience regarding pricing and costs for Tenable OT Security?

Considering the cost and that it is affordable, I would rate it at seven.

What needs improvement with Tenable OT Security?

What is your primary use case for Tenable OT Security?

I am using it for Asset Discovery, vulnerability management and threat intel. Tenable OT Security is for asset management, vulnerability management as continuous threat detection for OT ICS environ...

Safeguard by One Identity vs Idira Privileged Access Manager

Comparisons

Compared 4% of the time

Teleport vs Idira Privileged Access Manager

Compared 3% of the time

Keeper Enterprise Password Manager vs Idira Privileged Access Manager

Compared 3% of the time

Delinea Secret Server vs Idira Privileged Access Manager

Compared 2% of the time

NetWitness Platform vs Idira Privileged Access Manager

Compared 2% of the time

More Idira Privileged Access Manager Competitors

Claroty Platform vs Tenable OT Security

Compared 18% of the time

Nozomi Networks vs Tenable OT Security

Compared 17% of the time

Dragos vs Tenable OT Security

Compared 13% of the time

Check Point Industrial Control Systems (ICS) Security vs Tenable OT Security

Compared 7% of the time

TXOne Security Inspection vs Tenable OT Security

Compared 6% of the time

More Tenable OT Security Competitors

Product Reports

Idira Privileged Access Manager

Download Idira Privileged Access Manager product report

Operational Technology (OT) Security

Download Tenable OT Security product report

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault

Tenable.ot

Overview

CyberArk Privileged Access Manager safeguards privileged accounts through password management, credential rotation, and session recording. With seamless integration and real-time monitoring, it ensures robust security across platforms.

CyberArk Privileged Access Manager is recognized for its extensive capabilities in managing and securing privileged accounts. It offers vital functionalities such as automatic password rotation, real-time session monitoring, and cross-platform integration through APIs and custom connectors. Users find the flexibility in workflows and granular access controls beneficial, particularly in protecting access across cloud and on-prem infrastructures. However, improvements in its interface, installation process, plugin support, and integration with third-party tools are often suggested. Pricing is a concern for many, along with the need for better dashboard reporting, user provisioning, and enhanced documentation. Organizations leverage this tool for encrypting and monitoring critical account activities and automating password management to bolster security.

What are the key features of CyberArk Privileged Access Manager?

Enterprise Password Vault: Provides secure storage and management of enterprise credentials.
Privilege Session Manager: Offers comprehensive session recording and monitoring.
Privileged Threat Analytics: Detects and alerts on potential credential threats.
Integration Capabilities: Easily integrates with multiple systems using APIs and custom connectors.

What benefits or ROI should users expect?

Enhanced Security: Automates and centralizes password management, reducing risk of account misuse.
Compliance Support: Ensures alignment with compliance policies through automated processes.
Operational Efficiency: Streamlines security operations with real-time monitoring and integration.
Adaptability: Protects privileged access across diverse infrastructure setups including cloud and on-prem.

CyberArk Privileged Access Manager finds substantial use in industries such as finance, healthcare, and technology, where the protection of privileged accounts is critical. These sectors rely on its capabilities to manage application credentials securely and provide safe access for developers, administrators, and vendors across various infrastructures.

Idira by Palo Alto Networks

Tenable OT Security combines IT and OT features to enhance asset visibility and detect vulnerabilities and threats. Ideal for mixed network infrastructures, it strengthens network segmentation and protection, particularly in industrial control settings.

Designed for IT and OT environments, Tenable OT Security identifies vulnerabilities, improves asset discovery, and continuously detects threats. Enhanced by bundled Nessus and external port scanning, it supports easy management across convergent environments. Users can explore diverse reporting formats and capitalize on cost-effective solutions compared to peers. While integration with Fortinet and IoT device support needs improvement, users benefit from detailed asset discovery alongside network protection and segmentation. Extensive training and industrial protocol understanding are areas for development, with asset identification and challenging upgrades often reported.

What are the key features?

Vulnerability Identification: Efficiently discovers and categorizes vulnerabilities.
Asset Visibility: Detailed insights into asset discovery across networks.
Threat Detection: Continuous monitoring for potential threats.
External Port Scanning: Enhances security with comprehensive port checks.
Bundled Nessus: Augments capabilities for threat assessment and management.

What benefits should users consider?

Cost-Effectiveness: Competitive pricing compared to other solutions.
Easy Management: Simplified processes for integrating with existing systems.
Diverse Reporting Formats: Flexibility in reporting tailored to business needs.
Comprehensive Threat Protection: Balanced approach to safeguarding IT and OT networks.

Tenable OT Security is widely applied in industries such as manufacturing and critical infrastructure. Its role in network protection and segmentation helps secure environments like HVAC and camera systems. In manufacturing and virtual centers, it identifies attacks and protects OT ICS setups against cyber threats. Serving industries similar to Claroty, users benefit from enhanced asset discovery and vulnerability management in complex network infrastructures.

Tenable

Sample Customers

Rockwell Automation

Nesher Cement Enterprises, City of Raleigh

Idira Privileged Access Manager vs. Tenable OT Security