Idira Endpoint Privilege Manager vs StrongDM comparison

Idira Endpoint Privilege Ma...

Read 7 StrongDM reviews

1,820 Views
1,456 Comparison Views

100% willing to recommend

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jun 2, 2026

Idira Endpoint Privilege Manager and StrongDM compete in the domain of user privilege and access management. Idira shines in security features and privilege control, while StrongDM offers better ease of use with a focus on centralized access control.

Features: Idira Endpoint Privilege Manager is noted for its robust security features, including privilege management and elevation. It integrates deeply with existing systems and provides session recording for better oversight. StrongDM excels with its audit trail and session logging features, offering advanced SSO and MFA integrations. It also showcases centralized access control tailored to cloud and Kubernetes environments.

Room for Improvement: Idira has challenges with performance and support response times. Users note its complexity and need for better automation. StrongDM could improve its setup experience and reporting capabilities. Users find resource mapping challenging initially, and transitioning from traditional workflows takes time.

Ease of Deployment and Customer Service: Idira offers versatile deployment options including on-premises and cloud, though support receives mixed reviews. StrongDM's cloud-centric deployment is aligned with modern needs but requires improvement in onboarding support for large enterprises.

Pricing and ROI: Idira is seen as expensive, potentially limiting for smaller businesses, but provides good security outcomes enhancing ROI. StrongDM follows a per-user pricing model, viewed as cost-efficient despite its premium, offering savings through reduced offboarding time and credential misuse.

To learn more, read our detailed Idira Endpoint Privilege Manager vs. StrongDM Report (Updated: April 2026).

Idira Endpoint Privilege Manager vs. StrongDM

April 2026

Download the complete report

Helped 896,942 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Idira Endpoint Privilege Ma...

Ranking in Privileged Access Management (PAM)

5th

Average Rating

8.2

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Endpoint Compliance (5th), Anti-Malware Tools (11th), Application Control (5th), Ransomware Protection (6th)

StrongDM

Ranking in Privileged Access Management (PAM)

9th

Average Rating

7.8

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Access Management (14th)

Mindshare comparison

As of June 2026, in the Privileged Access Management (PAM) category, the mindshare of Idira Endpoint Privilege Manager is 2.3%, down from 3.4% compared to the previous year. The mindshare of StrongDM is 2.5%, up from 1.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Privileged Access Management (PAM) Mindshare Distribution
Product	Mindshare (%)
CyberArk Endpoint Privilege Manager	2.3%
StrongDM	2.5%
Other	95.2%

Privileged Access Management (PAM)

Featured Reviews

Diego Rivera

Commercial and Technical Professional Manager at Evolution Technologies Group

Strengthening financial services infrastructure by safeguarding and integrating with ecosystems

We use CyberArk Endpoint Privilege Manager to complement a privilege access management solution in order to avoid golden ticket attacks and strengthen services against attacks. It serves as a complement to our asset management solution. The architecture of CyberArk Endpoint Privilege Manager is beneficial for integrating with all customer ecosystems; it's easy to deploy, and achieving that level of integration and control is more challenging with other solutions. The ability of CyberArk Endpoint Privilege Manager to safeguard our financial services infrastructure is very important, as we need to record actions on privileges in our information systems. Regarding the granularity of the managed controls in CyberArk Endpoint Privilege Manager, we have different levels of features to define compensations and capabilities, which help us verify configurations and access, ultimately keeping the safety of rights intact. Our initial challenge with CyberArk Endpoint Privilege Manager is to comply with Colombian regulations in the financial sector, particularly identifying users and managing password changes and rotations. We needed to certify the identities and provide necessary information for government investigations, if required. CyberArk Endpoint Privilege Manager is very important for helping our organization meet compliance and regulatory requirements. We have to comply with international regulations such as SOC, but also with local regulations unique to the financial sector, which is crucial for us due to the high risks involved. CyberArk Endpoint Privilege Manager helped us reduce the time for regulatory processes to approximately two to four months, completing the solution and training. CyberArk Endpoint Privilege Manager has helped us reduce the mean time to detect within our organization. That's our main goal. Regarding MTTD, the solution provides enough information to enhance our overall detection process. We have an 85% improvement in MTTD. CyberArk Endpoint Privilege Manager helps ensure data privacy through strategies that manage information in real-time. CyberArk Endpoint Privilege Manager helps save costs by avoiding risks and future expenses associated with security incidents. It's essential to communicate the value of CyberArk Endpoint Privilege Manager to users, as its controls help improve system security. My role at the company involves service and sales activities.

Read full review

Mohit X

Dev Ops Engineer And Solution Architect at Scania

Centralized access has improved privileged control and now provides strong audit visibility

I believe StrongDM can improve its initial setup and onboarding experience for larger enterprise environments like Scania, where we have a lot of processes. Integrating different teams, access policies, and existing identity workflows requires substantial planning. Additionally, I think the dashboard customization and reporting could be more flexible for operational teams, though new teams find it manageable. Once the platform is fully integrated, it provides significant value. Apart from the onboarding experience, I would also mention that the templates for enterprise onboarding and policy setup could benefit from innovative thinking tailored to organizations managing large AWS and Kubernetes workloads. Enhanced customization in dashboards and reporting would further ease operations and provide better insights.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It has drastically reduced the attack surface for local administrative rights and the chance of escalation of privilege. We've removed, at this point, close to 98 percent of the local administrative accounts on workstations. If there were an incident, it would stop at that point and we'd be able to know."

"The product is very flexible"

"CyberArk Endpoint Privilege Manager (EPM) 's most valuable feature is its ability to manage user application privileges and protect against ransomware attacks by controlling access to specific files and applications."

"The product is stable."

"The stability of CyberArk Endpoint Privilege Manager is excellent, with an uptime of 99.99 percent."

"I like that you can remove the admin rights from the user's computer and have control over the environment."

"I like that you can remove the admin rights from the user's computer and have control over the environment. That means you can delete the local admins and grant them proper privileges with the console. So, they will get proper permissions for applications they need, but we don't have to do it. In the domain where we don't have control, the user can only do specified actions, but not all of them."

"The solution allows me to give access and privileges to each user individually"

More Idira Endpoint Privilege Manager pros

"The best features in StrongDM are that it is the easiest product in the market for this situation with easy access."

"We primarily used StrongDM for access to resources on private networks like EC2 machines, Kubernetes clusters, and various databases."

"The best features in StrongDM are the password rotation capabilities, which I think are pretty cool, and also how you can literally log in to any of the privileged servers through a single platform."

"StrongDM positively impacts our organization in many ways, mainly in cost savings from the time saved, and it has significantly improved both security and operational efficiency for us."

"I absolutely would say that the best features of StrongDM and what I appreciate about the solution is that time to onboard is absolutely minimal."

"All of the logging is handled for us, including for auditing purposes. Looking through the audit logs is not a painful experience."

"By adopting StrongDM, we have achieved benefits such as eliminating our weekend outages, streamlining ongoing on-call workflows, enabling seamless migration with POC transitions directly into production with minimal effort, allowing our engineers to use their preferred SQL clients like MySQL, PostgreSQL, and Workbench, and facilitating compliance through detailed session logs and query capture for SOC 2 and ISO audits."

"StrongDM replaced the puzzle of different solutions with one single product, which made managing resources more efficient."

Cons

"CyberArk Endpoint Privilege Manager could be improved by simplifying the administration process, specifically when setting up policies and applications."

"CyberArk Endpoint Privilege Manager is not suitable for the current situation because when you compare it to OTP, OTP is the strongest password solution. You can use it as a one-time password, but you have to log into the password manager itself and if you don't change your password, it will be the weakest link in the security. In OTP, you don't have that weakest link."

"The solution can be complex to use at times."

"The turnaround time of the support team is an area of concern where improvements are required."

"I'm not satisfied with the EPM, and I'm just looking to see if there's any other solution that we can get."

"Despite newer versions and functionalities, CyberArk Endpoint Privilege Manager lacks sufficient knowledgeable support staff, resulting in longer wait times for assistance."

"The main issues I experience are related to deployment, which requires dependency on other solutions like AD or SCCM. These tools need to be defined and synced with the client or agent and master, sometimes needing manual checks."

"It cannot be on-prem. It is only cloud-based. Sometimes, that's a restriction in terms of usage."

More Idira Endpoint Privilege Manager cons

"My thoughts on the pricing of StrongDM is that it is expensive."

"We've had a few issues with the stability of this product in the past."

"Additionally, StrongDM has limited MFA and passwordless options, relying heavily on time-based one-time passwords (OTP) or Duo, lacking support for true passwordless setups like biometrics or hardware YubiKeys, and it does not support per-session MFA."

"I rate the stability of the product five out of ten because crashes sometimes happen when we are working on it."

"It would be beneficial to have better control and alignment between frequent updates and improved communication regarding possible negative effects on existing customer bases."

"I believe StrongDM can improve its initial setup and onboarding experience for larger enterprise environments like Scania, where we have a lot of processes."

"I think the stability of StrongDM is about four to five due to the occasional crashes that I mentioned."

Pricing and Cost Advice

"It's not at the lower end of the market. I think the price is reasonable considering the quality it delivers. It is a top-notch solution at a fair price point."

"The price of CyberArk Endpoint Privilege Manager is expensive. The solution is priced based on the number of accounts onboarded and the number of concurrent sessions. Everyone else is included in the price, such as support."

"Although I do not deal directly with the pricing, CyberArk Endpoint Privilege Manager is costly compared to other solutions. However, it offers beneficial features."

"I think that it was in the range of $200,000 that had to get approved."

"The price of CyberArk Endpoint Privilege Manager is expensive."

"It is an expensive solution."

"Pricing depends on how many devices you use. Right now, on-premise, it costs us a little, but it's worth it. It seems like the cloud solution is much more expensive. We got this solution one year ago, and it's like we bought the solution, and now they are not going to support it on-premise anymore. We are in the implementation phase, and we missed this, and we already paid for the licenses. This is wasted time from my perspective, and CyberArk should be more customer-friendly."

"The professional services for one eight-hour day would be $1,800."

More Idira Endpoint Privilege Manager pricing and cost advice

"The licensing is per user per month."

See which vendors are best for you

Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.

See recommendations

896,942 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

14%

Manufacturing Company

12%

Computer Software Company

Government

Financial Services Firm

14%

Computer Software Company

13%

Manufacturing Company

10%

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	18
Midsize Enterprise	9
Large Enterprise	19

By reviewers
Company Size	Count
Small Business	2
Midsize Enterprise	2
Large Enterprise	5

Questions from the Community

Looking for recommendations and a pros/cons template for software to detect insider threats

This is an inside-out --- outside-in --- inside-in question, as an insider can be an outsider as well. There is no short answer other than a blend of a PAM tool with Behavioral Analytics and Endpo...

What is your experience regarding pricing and costs for CyberArk Endpoint Privilege Manager?

I believe it's quite a reasonably priced solution. It's not very common to use CyberArk because it's a niche solution, but customers who are willing to control administrative accounts are willing t...

What needs improvement with CyberArk Endpoint Privilege Manager?

While CyberArk Endpoint Privilege Manager is a great tool, I believe the functionality could be wider. If it could work not only with permissions but also involve pure EDR tasks or User and Entity ...

What is your experience regarding pricing and costs for StrongDM?

My thoughts on the pricing of StrongDM is that it is expensive. Coming from knowing the landscape of the market, it is not that they are not competitive. They are still very expensive. That does no...

What needs improvement with StrongDM?

In StrongDM, I think the installation was hard, and they want to be more flexible in the initial setup. I think they want to add more features like traditional PAM. It is difficult to find document...

What is your primary use case for StrongDM?

My use case involves a company I'm working in that wants to secure the connectivity between the DevOps team and the backend server in the company.

BeyondTrust Endpoint Privilege Management vs Idira Endpoint Privilege Manager

Comparisons

Compared 7% of the time

Idira Privileged Access Manager vs Idira Endpoint Privilege Manager

Compared 6% of the time

Microsoft Defender for Endpoint vs Idira Endpoint Privilege Manager

Compared 5% of the time

Ivanti Endpoint Security for Endpoint Manager vs Idira Endpoint Privilege Manager

Compared 5% of the time

CrowdStrike Falcon vs Idira Endpoint Privilege Manager

Compared 4% of the time

More Idira Endpoint Privilege Manager Competitors

Endpoint Privilege Manager vs StrongDM

Compared 19% of the time

KeeperPAM vs StrongDM

Compared 17% of the time

Idira Privileged Access Manager vs StrongDM

Compared 16% of the time

HashiCorp Boundary vs StrongDM

Compared 10% of the time

Delinea Privileged Access Service vs StrongDM

Compared 2% of the time

More StrongDM Competitors

Product Reports

Idira Endpoint Privilege Manager

May 2026

Download Idira Endpoint Privilege Manager product report

Download StrongDM product report

May 2026

Also Known As

Viewfinity

No data available

Overview

CyberArk Endpoint Privilege Manager enhances security by controlling access, removing admin rights, and managing privileges. It supports diverse environments with simple integration, focusing on credential detection, threat protection, and compliance.

CyberArk Endpoint Privilege Manager secures enterprise passwords, monitors session connections, and enhances cybersecurity by controlling privileged access. It blocks unauthorized applications, monitors user activities, and secures credentials across platforms. Key areas include Just-In-Time Access, privilege separation, and local administrator password rotation. While robust, challenges exist with performance, complexity, and setup. Integration with Linux and Unix needs improvement, requiring advanced reporting tools and easier policy management. Pricing concerns and maintenance issues with Windows servers persist, as well as database issues in the on-prem version.

What are the key features of CyberArk Endpoint Privilege Manager?

Admin Rights Removal: Eliminates unnecessary permissions to enhance security.
Privilege Management: Offers detailed control over user access rights.
Password Rotation: Automatically updates passwords to protect sensitive data.
Threat Protection: Blocks malicious applications and threats proactively.
Audit Capabilities: Provides comprehensive security and compliance tracking.
Application Control: Confines access to authorized applications only.
Automatic Updates: Ensures security protocols and software remain current.

What benefits should organizations expect from CyberArk Endpoint Privilege Manager?

Enhanced Security: Reduces risks by controlling credential and application access.
Compliance Assurance: Meets industry standards through thorough tracking and reporting.
Scalable Integration: Adapts to different environments smoothly.
Reduced Management Efforts: Automates credential and policy management.

Organizations deploying CyberArk Endpoint Privilege Manager in industries such as finance, healthcare, and technology benefit from secure credential management across Unix, AWS, and GCP. By implementing privilege separation and monitoring user activities, they achieve effective risk mitigation and compliance across multiple platforms.

Idira by Palo Alto Networks

StrongDM streamlines secure, password-less access, reducing attack surfaces with its zero trust approach. It integrates smoothly with existing systems supporting IP whitelisting and excels in managing runtime features while offering comprehensive audit logging and seamless resource access.

StrongDM provides organizations with enhanced security through features like password rotation and efficient management of access to resources such as EC2 instances, Kubernetes clusters, and databases. Its integration capabilities are complemented by cost-effectiveness compared to competitors like CyberArk. Companies utilize StrongDM for controlling access in dynamic environments, benefiting from audit logging for detailed movement tracking. While users appreciate its efficiency, they also seek improvements in update control and better accompanying documentation. Some express the need for a cloud-native option to address diverse demands, as the current setup can be challenging without comprehensive materials. Flexibility and more traditional PAM features are in demand.

What are StrongDM's key features?

Secure Password-less Access: Facilitates client connections without passwords to reduce attack vectors.
Zero Trust Architecture: Maintains stringent security protocols with a zero trust approach.
Seamless Resource Integration: Works effectively with systems like EC2 and Kubernetes clusters.
IP Whitelisting Support: Enhances third-party resource accessibility with targeted IP controls.
Audit Logging: Provides detailed tracking of user interactions within systems.
Password Rotation: Regularly updates access credentials to boost security.

Why is StrongDM beneficial in reviews?

Cost-Effectiveness: Competitive pricing offers value against alternatives.
Resource Management Efficiency: Simplifies access to complex systems.
Enhanced Security: Protective measures reduce vulnerabilities and ensure secure transactions.
Zero Trust Implementation: Adopts advanced security models right into client operations.
Operational Streamlining: Eases the access management process for multiple environments.

In industries managing sensitive data or requiring regulated access, StrongDM is crucial for securing cloud private networks and managing user access to databases and hosts. DevOps teams benefit from its ability to protect connectivity to backend servers, ensuring identity and access management remains robust and adaptable for companies dealing with frequent changes or expansions.