Idira Privileged Access Manager vs ManageEngine ADSelfService Plus comparison

Why PeerSpot?

Idira by Palo Alto Networks and ManageEngine are both solutions in the Enterprise Password Managers category. Idira by Palo Alto Networks is ranked #2 with an average rating of 8.6, while ManageEngine is ranked #23. Idira by Palo Alto Networks holds a 6.1% mindshare in EPM, compared to ManageEngine’s 1.0% mindshare. Additionally, 95% of Idira by Palo Alto Networks users are willing to recommend the solution, compared to 90% of ManageEngine users who would recommend it.

Idira Privileged Access Man...

Read 230 Idira Privileged Access Manager reviews

25,894 Views
6,215 Comparison Views

95% willing to recommend

ManageEngine ADSelfService ...

Read 9 ManageEngine ADSelfService Plus reviews

1,072 Views
976 Comparison Views

90% willing to recommend

Idira Privileged Access Man...

ManageEngine ADSelfService ...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jun 2, 2026

Idira Privileged Access Manager and ManageEngine ADSelfService Plus compete in the access management solutions market. ManageEngine ADSelfService Plus has the upper hand with its robust features and ease of deployment, providing a comprehensive solution justifying its higher investment.

Features: Idira Privileged Access Manager includes role-based access control, compliance management, and privileged session monitoring. ManageEngine ADSelfService Plus offers self-service password reset, multifactor authentication, and account unlock capabilities, serving a wide range of organizational needs with its feature-rich environment.

Room for Improvement: Idira Privileged Access Manager could enhance its deployment process and expand user support documentation. Improving integration capabilities and user interface design could also add value. ManageEngine ADSelfService Plus might benefit from reduced response times in customer service, expanded feature set to include detailed audit trails, and enhanced reporting capabilities for better visibility.

Ease of Deployment and Customer Service: ManageEngine ADSelfService Plus stands out with a swift, straightforward implementation process and commendable customer service, catering to businesses looking for rapid deployment. Idira Privileged Access Manager, while maintaining decent customer service, faces challenges with its complex and time-consuming deployment routine.

Pricing and ROI: Idira Privileged Access Manager offers competitive pricing with promising ROI, particularly attractive to budget-conscious organizations. ManageEngine ADSelfService Plus, though potentially more expensive, is seen as a better investment due to its extensive capabilities and feature advantages, making it appealing to stakeholders seeking long-term value.

To learn more, read our detailed Idira Privileged Access Manager vs. ManageEngine ADSelfService Plus Report (Updated: September 2026).

Buyer's Guide

Idira Privileged Access Manager vs. ManageEngine ADSelfService Plus

September 2026

Download the complete report

Helped 913,683 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Idira Privileged Access Man...

Ranking in Enterprise Password Managers

2nd

Average Rating

8.6

Reviews Sentiment

6.8

Number of Reviews

230

Ranking in other categories

User Activity Monitoring (1st), Privileged Access Management (PAM) (1st), Mainframe Security (1st), Operational Technology (OT) Security (3rd)

ManageEngine ADSelfService ...

Ranking in Enterprise Password Managers

23rd

Average Rating

8.4

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of September 2026, in the Enterprise Password Managers category, the mindshare of Idira Privileged Access Manager is 6.1%, down from 7.7% compared to the previous year. The mindshare of ManageEngine ADSelfService Plus is 1.0%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Enterprise Password Managers Mindshare Distribution
Product	Mindshare (%)
Idira Privileged Access Manager	6.1%
ManageEngine ADSelfService Plus	1.0%
Other	92.9%

Enterprise Password Managers

Featured Reviews

Singaravelu C

CyberArk Engineer at Tata Consultancy

Provides full visibility into user activity and ensures secure end-to-end access across critical systems

In CyberArk Privileged Access Manager, I see room for improvement as I am working in the on-premises networks, and now we are also having the cloud-based PAM. So there, everything is maintained by the CyberArk Privileged Access Manager team, and we are only maintaining the PSM servers. So it is already upgraded from the on-premises network to the cloud network. If you ask me what we can implement beyond that, I just need a few minutes to think about what new things, because it is already an end-to-end security on-premises itself. Now, when it comes to PCloud, Privileged Cloud, it is more secure than the on-premises networks because most of the things are handled using the cloud itself. So it is an already upgraded version; we do not need to implement something new. But if you think in that way, we can have a chance to implement our things. If anything could be improved in CyberArk Privileged Access Manager, I think we could build a small agent AI in my team, we could give access to these logs—the Vault logs, PSM logs, and CPM logs. Whenever the system is going down, the AI will automatically check. If we actually implement agent AI in CyberArk Privileged Access Manager, it will check the logs, and if any errors are coming, it automatically triggers alerts and gives the solution. That is the best improvement I can think of because these days, most things are done by agent AI. So if we also implement this agent AI in CyberArk Privileged Access Manager, we can add more features.

Read full review

Kimberly Brock

Technical Security Engineer & Data Governance at a computer software company with 51-200 employees

Efficiently keeps track and monitors

When I look at something like a server or a user who has an unsuccessful login, all they're giving me is what is from the domain controllers. When I click on the analytics portion that says give me information, it doesn't tell me what application is errored out. It doesn't tell me; it just tells me what is the same information from the domain controller. I'd like a little bit more robust information on actually giving me some useful information instead of some links that send me out to the Internet that says research here, and then I have to do additional research. It's kind of generic. And, basically, it's just a quick, I don't have to search through the domain controller logs, but once I pull those out, the logs are still very generic like you get from Microsoft. Area code four three one one. Okay. I had to go look that up. It doesn't take it any further than just a copy based on the domain controller.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It takes people out of the machine work of ensuring credentials remain up-to-date, and handles connection brokering such that human usage and credential management remain independent."

"CyberArk Privileged Access Manager's main benefit is it provides secure access to our servers. There are features to capture the user activity, it provides video recording processing. If the users are logged in to the server, we can see what activities they are performing. It's a very nice tool for Privileged Access Management. They have plenty of useful services and the solution has fulfilled our needs."

"We use the solution for password vaulting, password rotation, session management, and secret management."

"I find the threat analytics is an important feature, as CyberArk can look at the log details and analyze who is using the applications, which are their locations, and which are the IP locations from which they are accessing, enabling the solution to find the exact location the threat is emanating from, which we really value."

"CyberArk Privileged Access Manager provides granularity. You can break things down into individual safes. You have specific access to safes by individual or group. The interface is with AD, with LDAP, or with local CyberArk passwords. You also have the ability to establish policies for your individual credentials."

"It enables companies to automate password management on target systems gaining a more secure access management approach."

"The password management feature is valuable."

"Enterprise Password Vault, Privilege Session Manager, and Application Identity Management have been very useful for our client environment."

More Idira Privileged Access Manager pros

"The solution enables agents to reset their passwords."

"The most valuable feature is the ability for remote users to change their login credentials using their mobile devices."

"Helped establish basic standard processes for service ticketing and request management."

"Having multifactor authentication in Windows machines."

"Due to ransomware and novel threats, we can no longer allow people to gain domain admin access to our servers with only a username and password. With MFA, they must supply a one-time password sent to them via some authenticator, like Microsoft or Google Authenticator. It could be a text message."

"This solution has improved our security because our users can now change passwords on the fly."

"It's very simple to manage and implement. Its functions are straightforward. You get all the basic features, such as you get the option to unlock the user account if it is locked. You can enforce password policies, and you also have the option to allow them to reset their passwords if they forget it. These were the basic requirements of my company that we could achieve through this product."

"The solution provides wide options for multifactor authentication."

More ManageEngine ADSelfService Plus pros

Cons

"In complex network infrastructure environments, sporadic network disruptions could create issues accessing the various CyberArk network devices."

"We need a bit more education for our user community because they are not using it to its capabilities."

"PAM could be more user-friendly and CyberArk could update the documentation to include more real-world examples. You have to learn it yourself through trial and error. In particular, the online documentation should have more information about troubleshooting."

"The product is very vaulting-focused. I'd love to see it expanding its capabilities a bit further into areas like just-in-time elevation, and access with non-vaulted credentials."

"CyberArk PAM could greatly benefit from an under-the-hood update; integrating machine learning algorithms could provide predictive insights."

"Customers also want CyberArk's pricing to be better so that they can implement it further and have more licenses."

"This is probably a common thing, but they do ask for a lot of log files, a lot of information. They ask you to provide a lot of information to them before they're willing to give you anything at all upfront. It would be better if they were a little more give-and-take upfront: "Why don't you try these couple of things while we take your log files and stuff and go research them?" A little bit of that might be more helpful."

"They could improve CyberArk Privileged Access Manager by providing more reports. If I need to know the 10 most-used accounts for this week, that functionality can be made available in the reports."

More Idira Privileged Access Manager cons

"The registration process could be improved. It should be easier for users to register for the service."

"The worst part is that the solution can only be installed or updated on a device if it is physically connected to the local network."

"Asset management/discover and reporting."

"We need more reports for visualization."

"There is a lack of specific information provided by the analytics portion of the software."

"Could be simplified, not user-friendly."

"They could improve their security of the products to prevent vulnerabilities."

"The price must be reduced."

Pricing and Cost Advice

"It's not a cheap application. It's very expensive."

"The price of the solution is reasonable."

"This solution is expensive."

"CyberArk Privileged Access Manager is more expensive than its competitors, such as BeyondTrust, Delinea, and ManageEngine PAM360."

"With the current model of licensing, for my use cases, sometimes it's hard to convince the management and get budget approvals for it. It's expensive and you're not getting anything new. It's just a control, but in terms of risk, you are covering a big impact on the company. Improvement in the licensing prices is something I would want to have."

"CyberArk Enterprise Password Vault is a very expensive product."

"My company always complains about the cost of CyberArk Privileged Access Manager because it's too high."

"Since CyberArk is at the top of the Gartner list, the cost is indeed on the higher side, but customers must discern which entities are essential to purchase. They should weigh the cost against the quality received."

More Idira Privileged Access Manager pricing and cost advice

"You purchase the license for one time, and you can use it for a lifetime. The only thing is that in order to get support, you need to upgrade your product to the latest solution. You need to keep a support contract with them for which you have to pay some amount. It's a very small amount for renewing their support contract. Overall, it's very cost-effective."

"Using this solution costs us about $1,200 USD per year."

See which vendors are best for you

Use our free recommendation engine to learn which Enterprise Password Managers solutions are best for your needs.

See recommendations

913,683 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Outsourcing Company

12%

Financial Services Firm

11%

Manufacturing Company

Construction Company

Outsourcing Company

13%

Manufacturing Company

10%

Government

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	59
Midsize Enterprise	42
Large Enterprise	175

By reviewers
Company Size	Count
Small Business	5
Midsize Enterprise	2
Large Enterprise	2

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?

We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...

See all answers

What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?

My thoughts on the pricing of CyberArk Privileged Access Manager depend entirely on the vendors' requirements. If they want their things to be secure, they have to spend accordingly. We have four t...

See all answers

What needs improvement with CyberArk Privileged Access Manager?

I believe account discovery and rolling support need to be improved. Account discovery is important when integrating with other systems, as other PAM solutions can perform account discovery and onb...

See all answers

Ask a question

Earn 20 points

Comparisons

Safeguard by One Identity vs Idira Privileged Access Manager

Compared 4% of the time

Teleport vs Idira Privileged Access Manager

Compared 3% of the time

Keeper Enterprise Password Manager vs Idira Privileged Access Manager

Compared 3% of the time

Delinea Secret Server vs Idira Privileged Access Manager

Compared 2% of the time

NetWitness Platform vs Idira Privileged Access Manager

Compared 2% of the time

More Idira Privileged Access Manager Competitors

FastPass SSPR vs ManageEngine ADSelfService Plus

Compared 15% of the time

Specops vs ManageEngine ADSelfService Plus

Compared 11% of the time

Imprivata OneSign vs ManageEngine ADSelfService Plus

Compared 11% of the time

Delinea Secret Server vs ManageEngine ADSelfService Plus

Compared 11% of the time

ManageEngine Password Manager Pro vs ManageEngine ADSelfService Plus

Compared 8% of the time

More ManageEngine ADSelfService Plus Competitors

Product Reports

Buyer's Guide

Idira Privileged Access Manager

September 2026

Download Idira Privileged Access Manager product report

Buyer's Guide

ManageEngine ADSelfService Plus

September 2026

Download ManageEngine ADSelfService Plus product report

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault

No data available

Overview

CyberArk Privileged Access Manager safeguards privileged accounts through password management, credential rotation, and session recording. With seamless integration and real-time monitoring, it ensures robust security across platforms.

CyberArk Privileged Access Manager is recognized for its extensive capabilities in managing and securing privileged accounts. It offers vital functionalities such as automatic password rotation, real-time session monitoring, and cross-platform integration through APIs and custom connectors. Users find the flexibility in workflows and granular access controls beneficial, particularly in protecting access across cloud and on-prem infrastructures. However, improvements in its interface, installation process, plugin support, and integration with third-party tools are often suggested. Pricing is a concern for many, along with the need for better dashboard reporting, user provisioning, and enhanced documentation. Organizations leverage this tool for encrypting and monitoring critical account activities and automating password management to bolster security.

What are the key features of CyberArk Privileged Access Manager?

Enterprise Password Vault: Provides secure storage and management of enterprise credentials.
Privilege Session Manager: Offers comprehensive session recording and monitoring.
Privileged Threat Analytics: Detects and alerts on potential credential threats.
Integration Capabilities: Easily integrates with multiple systems using APIs and custom connectors.

What benefits or ROI should users expect?

Enhanced Security: Automates and centralizes password management, reducing risk of account misuse.
Compliance Support: Ensures alignment with compliance policies through automated processes.
Operational Efficiency: Streamlines security operations with real-time monitoring and integration.
Adaptability: Protects privileged access across diverse infrastructure setups including cloud and on-prem.

CyberArk Privileged Access Manager finds substantial use in industries such as finance, healthcare, and technology, where the protection of privileged accounts is critical. These sectors rely on its capabilities to manage application credentials securely and provide safe access for developers, administrators, and vendors across various infrastructures.

Idira by Palo Alto Networks

ManageEngine ADSelfService Plus provides multi-factor authentication and user self-service capabilities, enhancing security with integrations like Microsoft and Google, while allowing remote mobile access for password management.

ManageEngine ADSelfService Plus enables organizations to streamline password management by offering self-service options that reduce the need for password resets, thus minimizing IT tickets. Remote users can change credentials via mobile, ensuring synchronization between Active Directory and local passwords. Multi-factor authentication on Windows enhances security. This tool assists in efficient account management by allowing users to reset passwords, unlock accounts, and adhere to password policies. It is designed for enterprises handling a large number of user accounts.

What are the key features of ManageEngine ADSelfService Plus?

Multi-factor Authentication: Enhances security with methods like Microsoft and Google.
Self-Service Password Management: Users can manage passwords, reducing reset tickets.
Mobile Access: Allows password changes and account management on mobile devices.
Account Unlock: Users can unlock accounts without admin assistance.
Password Synchronization: Ensures AD and local password synchronization.

What are the benefits to look for in ManageEngine ADSelfService Plus reviews?

Reduced IT Tickets: Self-service reduces password reset requests.
Enhanced Security: Multi-factor authentication secures accounts.
Improved Efficiency: Users can manage accounts independently.
Convenience: Simplifies password management with mobile access.

In industries with extensive user bases, particularly tech and finance, ManageEngine ADSelfService Plus supports password management and multi-factor authentication, integrating with third-party applications for improved security practices. It serves organizations with substantial user counts, like those managing domains with multifactor authentication.

ManageEngine

Sample Customers

Rockwell Automation

TEL U.S. Holdings Inc, Henson Group, CAMH, HPE, HubSpot, Hitachi, IBM, Accenture, Capgemini, Apogee, Symantec

Buyer's Guide

Idira Privileged Access Manager vs. ManageEngine ADSelfService Plus

September 2026

Free Report: Idira Privileged Access Manager vs. ManageEngine ADSelfService Plus

Find out what your peers are saying about Idira Privileged Access Manager vs. ManageEngine ADSelfService Plus and other solutions. Updated: September 2026.

DOWNLOAD NOW

913,683 professionals have used our research since 2012.

See our Idira Privileged Access Manager vs. ManageEngine ADSelfService Plus report.

See our list of best Enterprise Password Managers vendors.

We monitor all Enterprise Password Managers reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.