Quote-only · verified June 2026

CyberArk Pricing 2026

CyberArk Identity Security Platform is enterprise PAM with quote-only pricing. Recognised as a Leader in the Gartner Privileged Access Management Magic Quadrant. We do not infer rates.

Direct Answer

What does CyberArk cost per admin in 2026?

Pricing is not publicly disclosed by CyberArk. CyberArk operates a sales-led pricing model with multi-year enterprise contracts bundling Privileged Access Manager, Endpoint Privilege Manager, Secrets Hub, Conjur and Dynamic Privileged Access. We do not publish inferred rates. Contact CyberArk sales.

CyberArk pricing at a glance

CyberArk Identity Security Platform

Quote Only

Cheapest published rate

Quote only - contact CyberArk sales

Pricing model

quote only

Deployment

SaaS (CyberArk Identity Security Platform) or self-hosted

Free tier

Best for

Large regulated enterprises needing market-leading PAM coverage and compliance recognition

Per-admin-per-year anchor

Not published

CyberArk does not publish per-user or per-admin pricing. CyberArk is the long-standing market leader in legacy enterprise PAM (Privileged Access Manager, formerly Privileged Account Security Solution). Pricing is enterprise sales-led, multi-year, and bundled into a per-vertical commercial. Recognised as a Leader by Gartner in the Privileged Access Management Magic Quadrant.

Vendor contact page ->Run on calculator

Verified 2026-06-17

Why CyberArk is quote-only

CyberArk is the long-standing leader in legacy enterprise PAM (the product was formerly Privileged Account Security Solution before the rebrand to Privileged Access Manager). The buyer is a Fortune 500 bank, federal agency, critical-infrastructure operator or large healthcare system signing a 3-5 year contract that bundles vault, session, endpoint privilege management, secrets and analytics modules. Publishing per-admin rates would anchor that contract negotiation and reveal vertical-specific volume discounts.

What CyberArk is good at

Deepest legacy-PAM coverage. Windows, Unix, mainframe, network devices, all under one credential vault model.
Identity Security Platform consolidation. PAM, EPM, Secrets Management and Cloud Privilege Security in one platform.
Gartner Magic Quadrant Leader. Recognised positioning for procurement teams that require analyst-validated shortlist.
Wide compliance certification footprint. SOC 2, FedRAMP, ISO 27001 with strong reference customers in regulated verticals.

Hidden costs to watch in CyberArk procurement

Multi-year commit is the default. 3-5 year contracts are typical, with annual escalators 3-7%.
Implementation services 6-12 months. Enterprise rollouts scope a separate vendor or partner statement of work on top of the licence; the dollar figure is set in that SOW for your specific scope.
Add-on modules (Secrets Hub, Endpoint Privilege Manager, Conjur Secrets, Dynamic Privileged Access) each carry separate quote lines.
Self-hosted PAS Vault requires hardware appliance lifecycle and maintenance on top of the licence.

What to expect in CyberArk procurement

Demo and discovery call before any commercial conversation.
RFI and capability questionnaire typical for enterprise deals.
Quote-under-NDA the norm; internal sharing requires legal review.
Professional services scoped separately from licence.

Published-pricing alternatives

If you need a working cost model in an afternoon rather than a 6-month procurement cycle, these published-pricing vendors cover similar functional territory at smaller scale:

ManageEngine PAM360: published list, on-premise, $7,995/year Standard for 10 admins.
Okta Privileged Access: $17/user/month Essentials Suite, identity-suite integration.
Keeper Business: $3.75/user/month password vault (KeeperPAM bundle quote-only on top).

Source

Status verified at https://www.cyberark.com/products/ on 2026-06-17. Full source list at /sources.

Last verified June 2026 · Next refresh September 2026