Idira Privileged Access Manager vs Tenable OT Security comparison

Idira by Palo Alto Networks and Tenable are both solutions in the Operational Technology (OT) Security category. Idira by Palo Alto Networks is ranked #3 with an average rating of 8.6, while Tenable is ranked #4 with an average rating of 8.5. Idira by Palo Alto Networks holds a 1.1% mindshare in OT, compared to Tenable’s 7.6% mindshare. Additionally, 95% of Idira by Palo Alto Networks users are willing to recommend the solution, compared to 100% of Tenable users who would recommend it.

Idira Privileged Access Man...

Read 230 Idira Privileged Access Manager reviews

20,873 Views
209 Comparison Views

95% willing to recommend

Tenable OT Security

Read 7 Tenable OT Security reviews

2,507 Views
2,507 Comparison Views

100% willing to recommend

Idira Privileged Access Man...

Tenable OT Security

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jun 2, 2026

Idira Privileged Access Manager and Tenable OT Security compete in the cybersecurity space, offering solutions for access management and OT security, respectively. Based on features, integration, and comprehensive security capabilities, Idira appears to have an edge, while Tenable offers more affordability.

Features: Idira Privileged Access Manager provides real-time monitoring of privileged sessions, session recording, and integration with SIEM systems. It offers automatic password management, credential rotation, and robust reporting capabilities. Tenable OT Security focuses on asset identification, vulnerability management specific to OT environments, and threat detection.

Room for Improvement: Idira could enhance third-party integration and refine its UI, especially improving its plugin connectors and multi-domain support. Improvement in technical support and SAML integration is also needed. Tenable OT Security should focus on improving its automation and expand prevention features beyond detection. Its UI could benefit from an update.

Ease of Deployment and Customer Service: Idira supports deployment in on-premises, public cloud, and hybrid environments, offering flexibility but mixed customer service experiences. Tenable focuses on on-premises and private cloud deployments. Its technical support is seen as straightforward, though responsiveness and communication could improve.

Pricing and ROI: Idira is seen as expensive but worth the investment due to its extensive features and significant ROI in security enhancement. Tenable is perceived as more affordable, offering good value for larger enterprises, though its ROI may not match Idira's comprehensive returns.

To learn more, read our detailed Idira Privileged Access Manager vs. Tenable OT Security Report (Updated: April 2026).

Buyer's Guide

Idira Privileged Access Manager vs. Tenable OT Security

April 2026

Download the complete report

Helped 896,942 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Idira Privileged Access Man...

Ranking in Operational Technology (OT) Security

3rd

Average Rating

8.6

Reviews Sentiment

6.8

Number of Reviews

230

Ranking in other categories

User Activity Monitoring (1st), Enterprise Password Managers (3rd), Privileged Access Management (PAM) (1st), Mainframe Security (1st)

Tenable OT Security

Ranking in Operational Technology (OT) Security

4th

Average Rating

8.6

Reviews Sentiment

6.6

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of June 2026, in the Operational Technology (OT) Security category, the mindshare of Idira Privileged Access Manager is 1.1%, up from 0.2% compared to the previous year. The mindshare of Tenable OT Security is 7.6%, down from 11.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Operational Technology (OT) Security Mindshare Distribution
Product	Mindshare (%)
CyberArk Privileged Access Manager	1.1%
Tenable OT Security	7.6%
Other	91.3%

Operational Technology (OT) Security

Featured Reviews

Atul-Gujar

CyberArk manager at a comms service provider with 10,001+ employees

Secures critical infrastructures with essential user session audit records

A potential area for improvement is enhancing support for cluster environments and distributed Vaults. Clients in multiple countries that need central access have different challenges that require better solutions from CyberArk. For financial services, CyberArk can improve incident response by ensuring fast support for critical priority tickets to meet compliance requirements. Providing more documentation on CyberArk is recommended for new team members to enhance their troubleshooting capabilities. I understand it's up to the client, but 99% fail to change the demo key, so it's crucial for CyberArk to emphasize changing the key and documenting it as part of the installation process.

Read full review

AbhishekPandey5

Senior Consultant at Payatu

Enables cost-effective asset and threat management while requiring improvements in support and training

The time it takes to train itself is a concern. Initially, it will not identify many assets, as it needs time to read the information before finding the assets. Some detections can go wrong, and it may not understand certain industrial protocols. While installation and deployment are easy, upgrading from one version to another can be challenging. When you assure clients they will receive minus two upgrades, sometimes upgrading through the cloud becomes difficult, requiring on-site upgrades. During upgrades, the previous configuration may be lost, creating support issues.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Every aspect of the solution is very well integrated, and that gives comfort because it is a fail-safe kind of environment."

"The product is for hardening access and making the organization more secure, therefore reducing chances of a breach."

"You can gradually implement CyberArk, starting with more easily attainable goals."

"The most important feature is managing the credentials and implementing those policies which rotate the credentials. Session Manager is also key in not letting the users have access to those credentials. Instead, CyberArk actually manages everything by itself."

"The password management feature is valuable."

"The automatic change of the password and Privileged Session Manager (PSM) are the most valuable features. With Privileged Session Manager, you can control the password management in a centralized way. You can activate these features in a session; the session isolation and recording. You apply the full intermediation principle. So, you must pass through CyberArk PAM to get access to the target system. You don't need to know the password, and everything that you do is registered and auditable. In this case, no one gets to touch the password directly. Also, you can implement detection and response behavior in case of a breach."

"The audit capabilities include video so that not only keystrokes but also mouse clicks are captured, providing safety and reassurance for anyone working in our infrastructure."

"The tool has safe vaults. We keep our passwords in the Vault. The tool’s recording feature is also valuable for us."

More Idira Privileged Access Manager pros

"The product has easy-to-manage features and components."

"I like Tenable OT Security for two main reasons. Firstly, it helps identify vulnerabilities and risks for IT and OT assets, which is crucial for our operations. Secondly, it performs external port scanning, including vulnerability scans for open ports. Compared to the Claroty Platform, the tool offers detailed asset discovery capabilities."

"The clear distinction between IT and OT that Tenable OT provides is its most valuable feature."

"The initial setup was very easy, and I would rate it a ten out of ten."

"The biggest advantage is that with good infrastructure, you can utilize asset planning when using Nessus along with Tenable OT Security."

"It's for securing the vulnerability of the OT solutions they are using. We mitigate those through patch management activities and find vulnerabilities easily with this security solution."

"The product’s price is its most valuable feature."

"The active query inventory is the most valuable feature."

Cons

"Perhaps improve the user registry integration. User registry integration is atypical in the sense that the product creates a copy of the user inside the product itself."

"Performance of PIM could be better and intended for usability as well as security."

"The admin interface of the Password Vault Web Access (PVWA) is moving from an old style (the classic interface) to a new style (the v10 interface) and unfortunately, this process is quite slow."

"I don't know if "failed authentication" is a glitch or if that was an update... However, since we are the CyberArk support within our organization, we need to know that the password is suspended and we won't know that unless we have the ITA log up. So when a user calls and says, "Hey, I'm locked out of CyberArk, I can't get into CyberArk," we have to go through all of these other troubleshooting steps because the first thing we don't think of right now is, "The account is suspended." It doesn't say that anymore."

"The major pain point that we have is the capacity of CyberArk due to the sheer volume of NPAs that we are managing. We are a large organization and we have hundreds of thousands of non-personal accounts to manage. We have already found out that there are certain capacity limitations within CyberArk that might introduce performance issues. From my perspective, something that would be valuable would be if the vault could hold more passwords and be more scalable."

"This solution is a bit complex compared to other solutions."

"The product could be easier to use. More work needs to be done on this aspect; it is not good enough yet. It also takes up a lot of server space. Sometimes we need to use up to seven servers."

"The initial setup was somewhat complex, but we received help from the product support team with the installation."

More Idira Privileged Access Manager cons

"As an IT security professional, I would like to see automation improvements in the response part of Tenable OT Security. However, I understand that implementing automation in OT environments can be quite challenging."

"Tenable.ot's integration with one of the products needs improvement."

"During upgrades, the previous configuration may be lost, creating support issues."

"The solution could detect changes in reading variables. The support of IoT devices can be improved."

"Tenable OT Security is fine, but I find it more language-based rather than structured. It feels like something is on a web page, and the dashboards and data representations are not cool. First of all, I said that the tool view should be improved. It looks pretty old. Second, the details Tenable OT Security provides regarding the metadata they work with should be more in-depth. Its main focus is vulnerability management, which is fine, but what about threat actors? What about attack vectors and OT vulnerabilities? There are major areas, baselines, etc. that need attention."

"The solution should provide more features to prevent attacks."

"Tenable OT product is good, but OT security itself is still maturing."

Pricing and Cost Advice

"I haven't seen the numbers. I know it is not cheap, but I don't know what it is. I would rate it a six out of ten in terms of pricing. It is definitely more expensive than the other product, but it also provides more functionality, and it is modular too. So, we pay for the functionality we're actually going to use, and that's nice."

"In comparison to other products on the market, CyberArk is a more costly product."

"The solution is cost-effective for the features."

"It's not a cheap application. It's very expensive."

"I'm aware that the organization had purchased licensing for almost all of CyberArk's solutions including licensing for PTA, EPM, and the Application Identity Manager. But when it comes to PSM, this is one of the components where there's an additional charge for any extra PSMs that you want to deploy. I believe that there's some rider where the vendor has a bit of leeway to, at times, charge a premium on whatever additional services you may require above the board."

"Previously, the pricing was very meager. They started publicizing and advertising the solution, growing CyberArk, as an organization. They also changed their pricing with that growth, e.g., the pricier the product, the more people who will purchase it."

"I would rate CyberArk's pricing a nine out of ten, with one being cheap and ten being expensive. It's one of the most expensive solutions in the market, but it's worth it."

"My company always complains about the cost of CyberArk Privileged Access Manager because it's too high."

More Idira Privileged Access Manager pricing and cost advice

"The product is inexpensive."

"The tool's pricing is fair enough."

See which vendors are best for you

Use our free recommendation engine to learn which Operational Technology (OT) Security solutions are best for your needs.

See recommendations

896,942 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

13%

Manufacturing Company

11%

Computer Software Company

Comms Service Provider

Manufacturing Company

15%

Energy/Utilities Company

15%

Computer Software Company

Outsourcing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	59
Midsize Enterprise	42
Large Enterprise	174

By reviewers
Company Size	Count
Small Business	4
Large Enterprise	4

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?

We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...

See all answers

What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?

My thoughts on the pricing of CyberArk Privileged Access Manager depend entirely on the vendors' requirements. If they want their things to be secure, they have to spend accordingly. We have four t...

See all answers

What needs improvement with CyberArk Privileged Access Manager?

I believe account discovery and rolling support need to be improved. Account discovery is important when integrating with other systems, as other PAM solutions can perform account discovery and onb...

See all answers

What is your experience regarding pricing and costs for Tenable OT Security?

Considering the cost and that it is affordable, I would rate it at seven.

See all answers

What needs improvement with Tenable OT Security?

See all answers

What is your primary use case for Tenable OT Security?

I am using it for Asset Discovery, vulnerability management and threat intel. Tenable OT Security is for asset management, vulnerability management as continuous threat detection for OT ICS environ...

See all answers

Comparisons

One Identity Safeguard vs Idira Privileged Access Manager

Compared 4% of the time

Teleport vs Idira Privileged Access Manager

Compared 3% of the time

Delinea Secret Server vs Idira Privileged Access Manager

Compared 3% of the time

Saviynt Identity Cloud vs Idira Privileged Access Manager

Compared 3% of the time

Keeper Enterprise Password Manager vs Idira Privileged Access Manager

Compared 3% of the time

More Idira Privileged Access Manager Competitors

Nozomi Networks vs Tenable OT Security

Compared 22% of the time

Claroty Platform vs Tenable OT Security

Compared 20% of the time

Dragos vs Tenable OT Security

Compared 13% of the time

Check Point Industrial Control Systems (ICS) Security vs Tenable OT Security

Compared 8% of the time

TXOne Security Inspection vs Tenable OT Security

Compared 6% of the time

More Tenable OT Security Competitors

Product Reports

Buyer's Guide

Idira Privileged Access Manager

May 2026

Download Idira Privileged Access Manager product report

Buyer's Guide

Operational Technology (OT) Security

May 2026

Download Tenable OT Security product report

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault

Tenable.ot

Overview

CyberArk Privileged Access Manager safeguards privileged accounts through password management, credential rotation, and session recording. With seamless integration and real-time monitoring, it ensures robust security across platforms.

CyberArk Privileged Access Manager is recognized for its extensive capabilities in managing and securing privileged accounts. It offers vital functionalities such as automatic password rotation, real-time session monitoring, and cross-platform integration through APIs and custom connectors. Users find the flexibility in workflows and granular access controls beneficial, particularly in protecting access across cloud and on-prem infrastructures. However, improvements in its interface, installation process, plugin support, and integration with third-party tools are often suggested. Pricing is a concern for many, along with the need for better dashboard reporting, user provisioning, and enhanced documentation. Organizations leverage this tool for encrypting and monitoring critical account activities and automating password management to bolster security.

What are the key features of CyberArk Privileged Access Manager?

Enterprise Password Vault: Provides secure storage and management of enterprise credentials.
Privilege Session Manager: Offers comprehensive session recording and monitoring.
Privileged Threat Analytics: Detects and alerts on potential credential threats.
Integration Capabilities: Easily integrates with multiple systems using APIs and custom connectors.

What benefits or ROI should users expect?

Enhanced Security: Automates and centralizes password management, reducing risk of account misuse.
Compliance Support: Ensures alignment with compliance policies through automated processes.
Operational Efficiency: Streamlines security operations with real-time monitoring and integration.
Adaptability: Protects privileged access across diverse infrastructure setups including cloud and on-prem.

CyberArk Privileged Access Manager finds substantial use in industries such as finance, healthcare, and technology, where the protection of privileged accounts is critical. These sectors rely on its capabilities to manage application credentials securely and provide safe access for developers, administrators, and vendors across various infrastructures.

Idira by Palo Alto Networks

Tenable OT Security combines IT and OT features to enhance asset visibility and detect vulnerabilities and threats. Ideal for mixed network infrastructures, it strengthens network segmentation and protection, particularly in industrial control settings.

Designed for IT and OT environments, Tenable OT Security identifies vulnerabilities, improves asset discovery, and continuously detects threats. Enhanced by bundled Nessus and external port scanning, it supports easy management across convergent environments. Users can explore diverse reporting formats and capitalize on cost-effective solutions compared to peers. While integration with Fortinet and IoT device support needs improvement, users benefit from detailed asset discovery alongside network protection and segmentation. Extensive training and industrial protocol understanding are areas for development, with asset identification and challenging upgrades often reported.

What are the key features?

Vulnerability Identification: Efficiently discovers and categorizes vulnerabilities.
Asset Visibility: Detailed insights into asset discovery across networks.
Threat Detection: Continuous monitoring for potential threats.
External Port Scanning: Enhances security with comprehensive port checks.
Bundled Nessus: Augments capabilities for threat assessment and management.

What benefits should users consider?

Cost-Effectiveness: Competitive pricing compared to other solutions.
Easy Management: Simplified processes for integrating with existing systems.
Diverse Reporting Formats: Flexibility in reporting tailored to business needs.
Comprehensive Threat Protection: Balanced approach to safeguarding IT and OT networks.

Tenable OT Security is widely applied in industries such as manufacturing and critical infrastructure. Its role in network protection and segmentation helps secure environments like HVAC and camera systems. In manufacturing and virtual centers, it identifies attacks and protects OT ICS setups against cyber threats. Serving industries similar to Claroty, users benefit from enhanced asset discovery and vulnerability management in complex network infrastructures.

Tenable

Sample Customers

Rockwell Automation

Nesher Cement Enterprises, City of Raleigh

Buyer's Guide

Idira Privileged Access Manager vs. Tenable OT Security

April 2026

Free Report: Idira Privileged Access Manager vs. Tenable OT Security

Find out what your peers are saying about Idira Privileged Access Manager vs. Tenable OT Security and other solutions. Updated: April 2026.

DOWNLOAD NOW

896,942 professionals have used our research since 2012.

See our Idira Privileged Access Manager vs. Tenable OT Security report.

See our list of best Operational Technology (OT) Security vendors.

We monitor all Operational Technology (OT) Security reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.