Try our new research platform with insights from 80,000+ expert users

CyberArk Privileged Access Manager vs ManageEngine ADSelfService Plus comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 16, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CyberArk Privileged Access ...
Ranking in Enterprise Password Managers
2nd
Average Rating
8.6
Reviews Sentiment
6.9
Number of Reviews
223
Ranking in other categories
User Activity Monitoring (1st), Privileged Access Management (PAM) (1st), Mainframe Security (2nd), Operational Technology (OT) Security (3rd)
ManageEngine ADSelfService ...
Ranking in Enterprise Password Managers
15th
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
9
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of May 2025, in the Enterprise Password Managers category, the mindshare of CyberArk Privileged Access Manager is 7.8%, down from 9.2% compared to the previous year. The mindshare of ManageEngine ADSelfService Plus is 0.2%, down from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Enterprise Password Managers
 

Featured Reviews

SatishIyer - PeerSpot reviewer
Lets you ensure relevant, compliant access in good time and with an audit trail, yet lacks clarity on MITRE ATT&CK
When I was a component owner for PAM's Privileged Threat Analytics (PTA) component, what I wanted was a clear mapping to the MITRE ATT&CK framework, a framework which has a comprehensive list of use cases. We reached out to the vendor and asked them how much coverage they have of the uses cases found on MITRE, which would have given us a better view of things while I was the product owner. Unfortunately they did not have the capability of mapping onto MITRE's framework at that time. PTA is essentially the monitoring interface of the broker (e.g. Privileged Access Management, the Vault, CPM, PSM, etc.), and it's where you can capture your broker bypass and perform related actions. For this reason, we thought that this kind of mapping would be required, but CyberArk informed us that they did not have the capability we had in mind with regard to MITRE ATT&CK. I am not sure what the situation is now, but it would definitely help to have that kind of alignment with one of the more well-known frameworks like MITRE. For CyberArk as a vendor, it would also help them to clearly spell out in which areas they have full functionality and in which ares they have partial or none. Of course, it also greatly benefits the customers when they're evaluating the product.
Hussein Taha - PeerSpot reviewer
Provides wide options for multifactor authentication with very simple implementation
We struggled with the end users because most don't have the required IT background. They needed password resets for emails and accounts in the active directory. This created an issue for the help desk, and the system and ManageEngine ADSelfService Plus gave us a QR solution for the end users. Once an account is set up, you scan the QR code through Google authentication, Microsoft authentication or any program that can authenticate with the QR. You'll automatically generate a code that gives the port to reset or unlock your account very easily.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Session recordings and timestamps are valuable features. They allow me to specifically select the time a particular command was executed, so I do not have to review the entire recording. I can click on events to determine where and when they happened."
"I found it valuable that CyberArk Privileged Access Manager can be integrated with PTA (privileged threat analytics), and this means that it will tell you if there's a risk to the logins and signs of risk and if risky behavior is observed. It's a good feature. Another good feature is the CPM (central password manager) because it helps you rotate the passwords automatically without involving the admins. It can go and update the scheduled tasks and the services. At the same time, if there's an application where it cannot do all of these, CPM will trigger an automatic email to the application owners, telling them that they should go ahead and change the password. This allows you to manage the account password that CyberArk cannot manage, which helps mitigate the risk of old passwords, where the password gets compromised, and also allows you to manage the security of the domain."
"The solution helps our developers access internal systems. It also helps us in Privilege Access Management."
"It has the ability to scale out. We have scaled out quite a bit with our product and use of it to get to multiple locations and businesses, so it has the breadth to do that."
"PSM (Privilege Session Manager."
"Overall, I would rate it a ten out of ten."
"We are able to centrally manage credentials, touch applications, and rotate passwords."
"The flexibility of integrating with other technologies is important because of a lot of applications - a lot of COTS products - are not supported when we are bringing the application IDs. The CyberArk platform provides a lot of opportunities to do customization."
"The most valuable feature is the ability for remote users to change their login credentials using their mobile devices."
"The solution provides wide options for multifactor authentication."
"It's very simple to manage and implement. Its functions are straightforward. You get all the basic features, such as you get the option to unlock the user account if it is locked. You can enforce password policies, and you also have the option to allow them to reset their passwords if they forget it. These were the basic requirements of my company that we could achieve through this product."
"Having multifactor authentication in Windows machines."
"Monitoring is one of the most valuable features for us."
"Due to ransomware and novel threats, we can no longer allow people to gain domain admin access to our servers with only a username and password. With MFA, they must supply a one-time password sent to them via some authenticator, like Microsoft or Google Authenticator. It could be a text message."
"One of the most valuable features is the self-service capability. I"
"The solution enables agents to reset their passwords."
 

Cons

"There is room for improvement in the availability of custom connectors on the marketplace for this solution. Additionally, their services for the CICD pipeline and ease of integration could be improved."
"The current user interface is a little dated. However, I hear there are changes coming in the next version."
"I would love them to improve their UI customizing features."
"The initial setup of CyberArk is a challenge if you do not have prior experience with it."
"The current interface is not very intuitive."
"The solution could improve by adding more connectors."
"CyberArk PAM could greatly benefit from an under-the-hood update; integrating machine learning algorithms could provide predictive insights."
"It is complicated to deploy for Windows servers compared to other vendors."
"The worst part is that the solution can only be installed or updated on a device if it is physically connected to the local network."
"The price must be reduced."
"Could be simplified, not user-friendly."
"There is a lack of specific information provided by the analytics portion of the software."
"We need more reports for visualization."
"The registration process could be improved. It should be easier for users to register for the service."
"They could improve their security of the products to prevent vulnerabilities."
 

Pricing and Cost Advice

"Licensing fees are paid on a yearly basis."
"From a client perspective, CyberArk's pricing is fair but there is a significant increase each year. They should limit the price increase because this could potentially drive customers to other partners. Price changes should be at defined intervals. There should not be sudden jumps."
"With the current model of licensing, for my use cases, sometimes it's hard to convince the management and get budget approvals for it. It's expensive and you're not getting anything new. It's just a control, but in terms of risk, you are covering a big impact on the company. Improvement in the licensing prices is something I would want to have."
"CyberArk DNA is free if you purchase the CyberArk solution. There is no additional charge for CyberArk DNA, which is great."
"Since CyberArk is at the top of the Gartner list, the cost is indeed on the higher side, but customers must discern which entities are essential to purchase. They should weigh the cost against the quality received."
"CyberArk Enterprise Password Vault is a very expensive product."
"The main problem for the tool is its licensing. I work for a really big company. When you try to develop this as a service, usually you work with leverage teams who are formed with dozens of members. You might dedicate one FTE, or less, for something, e.g., an antivirus administrator. You might have half an FTE's effort dedicated to administering the antivirus, but then you have a team of about 30 users who might access that ticket. The problem is that CyberArk eliminated the possibility of concurrent users years ago. This is a big problem for companies who work with leverage teams. You need to pay for everyone. 40 licenses are used by 20 or 30 people. This is a big problem because licenses are not precisely cheap."
"It is not a cheap solution. It is expensive as compared with other solutions. However, it is one of the best solutions in their domain."
"You purchase the license for one time, and you can use it for a lifetime. The only thing is that in order to get support, you need to upgrade your product to the latest solution. You need to keep a support contract with them for which you have to pay some amount. It's a very small amount for renewing their support contract. Overall, it's very cost-effective."
"Using this solution costs us about $1,200 USD per year."
report
Use our free recommendation engine to learn which Enterprise Password Managers solutions are best for your needs.
851,604 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
33%
Financial Services Firm
12%
Computer Software Company
11%
Manufacturing Company
6%
Government
11%
Financial Services Firm
9%
Wholesaler/Distributor
9%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
What do you like most about CyberArk Privileged Access Manager?
The most valuable features of the solution are control and analytics.
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
With the current model of licensing, for my use cases, sometimes it's hard to convince the management and get budget approvals for it. It's expensive and you're not getting anything new. It's just ...
What do you like most about ManageEngine ADSelfService Plus?
Monitoring is one of the most valuable features for us.
What needs improvement with ManageEngine ADSelfService Plus?
The price must be reduced. The cost must depend on the number of nodes.
What is your primary use case for ManageEngine ADSelfService Plus?
We use the solution to reset passwords automatically. It is useful for companies that have many employees.
 

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
No data available
 

Overview

 

Sample Customers

Rockwell Automation
TEL U.S. Holdings Inc, Henson Group, CAMH, HPE, HubSpot, Hitachi, IBM, Accenture, Capgemini, Apogee, Symantec
Find out what your peers are saying about CyberArk Privileged Access Manager vs. ManageEngine ADSelfService Plus and other solutions. Updated: April 2025.
851,604 professionals have used our research since 2012.