ACF2 vs Idira Privileged Access Manager comparison

Why PeerSpot?

Broadcom and Idira by Palo Alto Networks are both solutions in the Mainframe Security category. Broadcom is ranked #4, while Idira by Palo Alto Networks is ranked #1 with an average rating of 8.6. Broadcom holds a 11.9% mindshare in MS, compared to Idira by Palo Alto Networks’s 5.9% mindshare. Additionally, 100% of Broadcom users are willing to recommend the solution, compared to 95% of Idira by Palo Alto Networks users who would recommend it.

ACF2

Read 6 ACF2 reviews

1,327 Views
863 Comparison Views

100% willing to recommend

Idira Privileged Access Man...

Read 230 Idira Privileged Access Manager reviews

25,894 Views
259 Comparison Views

95% willing to recommend

ACF2

Idira Privileged Access Man...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jun 2, 2026

Idira Privileged Access Manager and ACF2 compete in security management. Based on features and customization capabilities, ACF2 appears to offer superior value for complex enterprise requirements.

Features: Idira Privileged Access Manager provides intuitive automation, seamless integration, and robust session management. ACF2 provides comprehensive control for mainframe security, detailed access policies, and effective user authentication procedures.

Room for Improvement: Idira Privileged Access Manager could enhance reporting features, expand on mainframe integration, and develop more advanced threat detection. ACF2 could benefit from improving user interface design, simplifying complex configuration processes, and reducing deployment time for non-mainframe environments.

Ease of Deployment and Customer Service: Idira Privileged Access Manager is appreciated for its straightforward deployment and responsive customer service. ACF2 may present a steeper learning curve during deployment due to its detailed mainframe focus, requiring specialized support.

Pricing and ROI: Idira Privileged Access Manager is known for competitive pricing and favorable ROI through quick performance gains. In contrast, ACF2 involves higher initial costs but promises long-term security benefits and comprehensive management returns.

To learn more, read our detailed ACF2 vs. Idira Privileged Access Manager Report (Updated: August 2026).

Buyer's Guide

ACF2 vs. Idira Privileged Access Manager

August 2026

Download the complete report

Helped 913,349 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

ACF2

Ranking in Mainframe Security

4th

Average Rating

9.0

Reviews Sentiment

7.8

Number of Reviews

Ranking in other categories

Database Security (12th)

Idira Privileged Access Man...

Ranking in Mainframe Security

1st

Average Rating

8.6

Reviews Sentiment

6.8

Number of Reviews

230

Ranking in other categories

User Activity Monitoring (1st), Enterprise Password Managers (2nd), Privileged Access Management (PAM) (1st), Operational Technology (OT) Security (3rd)

Mindshare comparison

As of September 2026, in the Mainframe Security category, the mindshare of ACF2 is 11.9%, down from 12.1% compared to the previous year. The mindshare of Idira Privileged Access Manager is 5.9%, up from 4.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Mainframe Security Mindshare Distribution
Product	Mindshare (%)
Idira Privileged Access Manager	5.9%
ACF2	11.9%
Other	82.2%

Mainframe Security

Featured Reviews

reviewer1077621

IT Examiner at a financial services firm with 10,001+ employees

A reliable, scalable product for security and auditing of our mainframe environment

It is a good product. It has been used for years. As long as it is configured correctly, it is a very stable product. It depends on how an institution or a company configures it. It depends on an institution's risk appetite. You need to make sure it is configured as per the concept of least privilege, and the logging features, detection and control mechanism, and other things like that are enabled. If you configure it to give access to the public, then there could be compromises. You should also have someone who independently checks it to make sure that it is configured keeping security in mind. If it has been configured for a while, when there are enhancements to the product or when you enhance it, you need to make sure that security is also looked at, and it is configured according to an institution's security policies. I would rate it a nine out of 10.

Read full review

Singaravelu C

CyberArk Engineer at Tata Consultancy

Provides full visibility into user activity and ensures secure end-to-end access across critical systems

In CyberArk Privileged Access Manager, I see room for improvement as I am working in the on-premises networks, and now we are also having the cloud-based PAM. So there, everything is maintained by the CyberArk Privileged Access Manager team, and we are only maintaining the PSM servers. So it is already upgraded from the on-premises network to the cloud network. If you ask me what we can implement beyond that, I just need a few minutes to think about what new things, because it is already an end-to-end security on-premises itself. Now, when it comes to PCloud, Privileged Cloud, it is more secure than the on-premises networks because most of the things are handled using the cloud itself. So it is an already upgraded version; we do not need to implement something new. But if you think in that way, we can have a chance to implement our things. If anything could be improved in CyberArk Privileged Access Manager, I think we could build a small agent AI in my team, we could give access to these logs—the Vault logs, PSM logs, and CPM logs. Whenever the system is going down, the AI will automatically check. If we actually implement agent AI in CyberArk Privileged Access Manager, it will check the logs, and if any errors are coming, it automatically triggers alerts and gives the solution. That is the best improvement I can think of because these days, most things are done by agent AI. So if we also implement this agent AI in CyberArk Privileged Access Manager, we can add more features.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Excellent real-time reporting that saves time and resources."

"Logging and monitoring are most valuable. It is for the mainframe environment, and it is at the forefront for security and resilience."

"Know that this tool is a great tool, a good tool to use, because you can quickly automate, quickly provision, and deprovision new users, which is essential when you are bringing new people onboard."

"The NOACCESS by default is another very good feature. Also, access rules are straightforward, and easy to understand."

"We use this tool to quickly assign privileges to different users as soon as they come in."

"I am deeply impressed with the quality and depth and breadth of security and functionality in CA’s ACF2 and Top Secret products."

"It is a good product."

"The most valuable feature is strict and reliable access control to CICS Resources."

More ACF2 pros

"The product has allowed us to improve both the management and access to privileged credentials, while also creating a full audit trail of all activities happening within isolated sessions of all tasks and activities taking place within the solution."

"It has helped us with our adoption with other teams, and it has also helped us to integrate it at the ground level."

"There is a lot of return on investment in CyberArk."

"Thus far I can say technical support is excellent. We haven't had any issues or difficulties."

"The product has performed very well, and we will continue to invest in this space because the CyberArk tools are working well for us."

"CyberArk Privileged Access Manager assists in meeting compliance and regulatory requirements such as HIPAA and SOX, ensuring I adhere to necessary standards in my operations."

"Automatic password management, which will automatically change passwords based on compliance requirements."

"It has helped from an auditing perspective identify who has access to privileged accounts."

More Idira Privileged Access Manager pros

Cons

"They can work on its ability to work in a distributed environment. It's a mainframe product. As many companies move to the cloud, depending on what cloud models they choose, such as a public, hybrid, or private cloud, it should be deployable. I am not sure if it can be deployed on those platforms. It has been there since the '50s or '60s, and it's still scalable. It has survived all these years, and it's scalable to many platforms, but I don't know about the cloud."

"Reporting can sometimes include false positives."

"It needs longer rules. The max rule is 32K."

"I would like my team and me to be able to use simple browsers, like Chrome, to be able to access mainframe data and provision users using the browser."

"Initial setup could be complex if you rely on contractors to help with implementation."

"The user access review could also be improved. It produces a lot of false positives."

"They can work on its ability to work in a distributed environment."

"The usual workload on the system is sometimes delayed by CyberArk, so any major work is getting delayed and may take twice the amount of time that it usually does."

"The tool's UI has bugs and lags. It needs to be improved. The deployment process can be complex due to multiple components for various functionalities, each requiring separate infrastructure management. To simplify this process, consolidating all these components into a single platform could be beneficial. The product's pricing could be cheaper."

"The solution could improve by adding more connectors."

"If you are an administrator or architect, then the solution is kind of complicated, as it is mostly focused on the end user. So, they need to also focus on the people who are implementing it."

"The reporting should be improved. There should be more customization. The report should show how we are going to mitigate the risk because we cannot show the system environment to each and every auditor."

"The initial setup could be simplified. Right now, in comparison to its nearest competitors, it's quite complex."

"There were a lot of manual steps in the initial setup which could have been automated."

"The solution is very expensive and requires a license."

More Idira Privileged Access Manager cons

Pricing and Cost Advice

Information not available

"Although CyberArk Privileged Access Management is expensive, its protection capabilities outweigh the cost."

"The solution is available at a high price"

"From a client perspective, CyberArk's pricing is fair but there is a significant increase each year. They should limit the price increase because this could potentially drive customers to other partners. Price changes should be at defined intervals. There should not be sudden jumps."

"I'm a technician so I don't handle the licensing for CyberArk Privileged Access Manager, but I know that the price for the core license is about €140 per year. There's another type of license, the external vendor license, and that's about €600 and you can manage twenty devices. From what I know, the price for one device in a subscription is about €65 per year. You can buy the CyberArk Endpoint Privilege Manager too, or you can buy some other application or application license with CyberArk Privileged Access Manager, but all other features, such as the Analytics Server is included in the basic CyberArk license. With WALLIX, you need to buy separate licenses for the features."

"The license CyberArk Privileged Access Manager is on an annual basis."

"The pricing is slightly higher compared to other solutions, but it is reasonable because there are better security features."

"This product is very expensive."

"CyberArk Privileged Access Manager is perceived to be somewhat overpriced compared to similar market products. It is a little bit overvalued. It could come down a little bit for my liking. However, the industry-leading reputation and the quality of service justify the high price point to some extent."

More Idira Privileged Access Manager pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Mainframe Security solutions are best for your needs.

See recommendations

913,349 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

17%

Outsourcing Company

12%

Educational Organization

10%

Manufacturing Company

Outsourcing Company

12%

Financial Services Firm

11%

Manufacturing Company

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	2
Midsize Enterprise	1
Large Enterprise	4

By reviewers
Company Size	Count
Small Business	59
Midsize Enterprise	42
Large Enterprise	175

Questions from the Community

Ask a question

Earn 20 points

How does Sailpoint IdentityIQ compare with CyberArk PAM?

We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...

See all answers

What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?

My thoughts on the pricing of CyberArk Privileged Access Manager depend entirely on the vendors' requirements. If they want their things to be secure, they have to spend accordingly. We have four t...

See all answers

What needs improvement with CyberArk Privileged Access Manager?

I believe account discovery and rolling support need to be improved. Account discovery is important when integrating with other systems, as other PAM solutions can perform account discovery and onb...

See all answers

Comparisons

Top Secret vs ACF2

Compared 19% of the time

IBM Security Guardium Data Protection vs ACF2

Compared 17% of the time

IBM Resource Access Control Facility vs ACF2

Compared 14% of the time

Cleanup vs ACF2

Compared 13% of the time

Imperva Data Security Fabric vs ACF2

Compared 5% of the time

More ACF2 Competitors

Safeguard by One Identity vs Idira Privileged Access Manager

Compared 4% of the time

Teleport vs Idira Privileged Access Manager

Compared 3% of the time

Keeper Enterprise Password Manager vs Idira Privileged Access Manager

Compared 3% of the time

Delinea Secret Server vs Idira Privileged Access Manager

Compared 2% of the time

Saviynt Identity Cloud vs Idira Privileged Access Manager

Compared 2% of the time

More Idira Privileged Access Manager Competitors

Product Reports

Buyer's Guide

Mainframe Security

August 2026

Download ACF2 product report

Buyer's Guide

Idira Privileged Access Manager

September 2026

Download Idira Privileged Access Manager product report

Also Known As

CA ACF2

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault

Overview

ACF2 offers robust access control and security management for mainframe environments, supporting quick rule adjustments and effective monitoring, aiding in resource allocation and system resilience.

ACF2 is designed for the mainframe, providing stringent access control for CICS resources and effective user security management. Known for its default NOACCESS setup and straightforward access rules, it enables real-time log reporting and efficient monitoring. The platform supports quick rule changes, minimizing resource allocation time, which enhances security and resilience. Despite its strengths, ACF2 can improve by enhancing its Eclipse and browser interfaces and reducing manual processes. Desired improvements include flexible rules, better support for distributed environments, longer rule capabilities, and enhanced cloud deployment options. Organizations primarily use ACF2 to secure z/OS operating systems, manage user authentication, and access profiles and resources, maintaining updated versions for optimal security and efficiency.

What are the key features of ACF2?

Strict Access Control: Securely manages access to CICS resources with default NOACCESS.
User Security Management: Provides robust control over user privileges and security.
Swift Privilege Assignment: Enables quick assignment of user privileges for efficiency.
Real-Time Event Logging: Facilitates comprehensive log reporting and monitoring.
Rule Modification: Quickly adjusts rules to meet evolving security needs.

What benefits should users expect from ACF2?

Enhanced Security: Strengthens mainframe application security through strict access management.
Operational Efficiency: Reduces resource allocation time with swift rule changes.
Comprehensive Monitoring: Supports efficient logging and event reporting for security oversight.
Resource Resilience: Contributes to system resilience by optimizing resource allocation and control.

In industries relying on mainframes, such as finance and telecommunications, ACF2 is implemented for safeguarding z/OS environments by managing access and authentication processes securely. Companies maintain the latest version to ensure stringent protocol adherence, maximizing operational efficiency.

Broadcom

CyberArk Privileged Access Manager safeguards privileged accounts through password management, credential rotation, and session recording. With seamless integration and real-time monitoring, it ensures robust security across platforms.

CyberArk Privileged Access Manager is recognized for its extensive capabilities in managing and securing privileged accounts. It offers vital functionalities such as automatic password rotation, real-time session monitoring, and cross-platform integration through APIs and custom connectors. Users find the flexibility in workflows and granular access controls beneficial, particularly in protecting access across cloud and on-prem infrastructures. However, improvements in its interface, installation process, plugin support, and integration with third-party tools are often suggested. Pricing is a concern for many, along with the need for better dashboard reporting, user provisioning, and enhanced documentation. Organizations leverage this tool for encrypting and monitoring critical account activities and automating password management to bolster security.

What are the key features of CyberArk Privileged Access Manager?

Enterprise Password Vault: Provides secure storage and management of enterprise credentials.
Privilege Session Manager: Offers comprehensive session recording and monitoring.
Privileged Threat Analytics: Detects and alerts on potential credential threats.
Integration Capabilities: Easily integrates with multiple systems using APIs and custom connectors.

What benefits or ROI should users expect?

Enhanced Security: Automates and centralizes password management, reducing risk of account misuse.
Compliance Support: Ensures alignment with compliance policies through automated processes.
Operational Efficiency: Streamlines security operations with real-time monitoring and integration.
Adaptability: Protects privileged access across diverse infrastructure setups including cloud and on-prem.

CyberArk Privileged Access Manager finds substantial use in industries such as finance, healthcare, and technology, where the protection of privileged accounts is critical. These sectors rely on its capabilities to manage application credentials securely and provide safe access for developers, administrators, and vendors across various infrastructures.

Idira by Palo Alto Networks

Sample Customers

Sky, Rogers Communications

Rockwell Automation

Buyer's Guide

ACF2 vs. Idira Privileged Access Manager

August 2026

Free Report: ACF2 vs. Idira Privileged Access Manager

Find out what your peers are saying about ACF2 vs. Idira Privileged Access Manager and other solutions. Updated: August 2026.

DOWNLOAD NOW

913,349 professionals have used our research since 2012.

See our ACF2 vs. Idira Privileged Access Manager report.

See our list of best Mainframe Security vendors.

We monitor all Mainframe Security reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.