Source-of-record · re-verified June 2026
PAM Pricing Methodology
Every number on this site traces to a vendor pricing page URL fetched on the verification date below. Quote-only vendors carry no inferred rates; we publish their sales-contact URL and stop there.
Data integrity rules
These rules are non-negotiable and apply to every page on the site. They exist because cost-comparison sites that infer prices for quote-only vendors drift into fabrication.
- No numeric claim without a source URL. Every $ figure traces to either (a) the vendor pricing page URL fetched on the verification date in the table below, or (b) a named authoritative dataset (Gartner Magic Quadrant, Forrester Wave, IBM Cost of a Data Breach Report). Failing both, we remove the claim.
- No inferred rates for quote-only vendors. If a vendor hides pricing, we show a Quote Only badge, link to the vendor contact page, and write "Pricing not publicly disclosed by [Vendor]".
- No invented industry benchmarks. Acceptable: Gartner Magic Quadrant, Forrester Wave, IBM Cost of a Data Breach Report, Verizon DBIR. Unacceptable: "based on observation", "typical industry data", "industry average".
- Worked examples use clearly-fictional companies. Any company name in an example is labelled "Acme [X] Co. (illustrative example, not a real company)".
- Every page footer carries a verification date stamp. Stale dates read as abandoned; honest dates earn citation.
- This page is the citable anchor. If anything on the site is challenged, the table below is the source of record.
Source registry
One row per source, with the URL we fetched, the verification date, and a risk flag (low / medium / high).
| ID | Vendor / Source | URL | Verified | Risk |
|---|---|---|---|---|
| teleport-pricing | Teleport Community Edition free under 100 employees and under $10M annual revenue under AGPL. Enterprise pricing is per-resource and quote-only. | https://goteleport.com/pricing | 2026-06-17 | Low |
| hashicorp-boundary-pricing | HashiCorp Boundary Boundary Community Edition under MPL 2.0, self-hosted, free. HCP Boundary (managed) bills session-time hours; Boundary Enterprise quote-only. | https://www.hashicorp.com/products/boundary | 2026-06-17 | Low |
| keeper-business-pricing | Keeper Security Keeper Business $3.75/user/month annual ($45/user/year). Enterprise $5.00/user/month annual. KeeperPAM add-on bundle is quote-only. | https://www.keepersecurity.com/pricing.html | 2026-06-17 | Low |
| jumpcloud-pricing | JumpCloud Device Management $9/user/month annual. SSO $11. Platform $19. Platform Prime $24 (includes Privileged Access Manager). Free tier: 10 users + 10 devices. | https://jumpcloud.com/pricing | 2026-06-17 | Low |
| okta-pricing | Okta Workforce Identity Cloud Suites: Essentials Suite $17/user/month annual (includes Privileged Access at 0.5 RU); Premium Suite $28/user/month annual (adds Identity Governance, Identity Threat Protection). | https://www.okta.com/pricing/ | 2026-06-17 | Low |
| manageengine-pam360-pricing | ManageEngine PAM360 Standard $7,995/year (10 admins, 25 keys, English subscription). Professional approx $9,995/year. Enterprise approx $13,995/year. Add-on packs for admins/keys/languages priced separately. | https://www.manageengine.com/privileged-access-management/pricing.html | 2026-06-17 | Low |
| cyberark-pricing | CyberArk Quote-only. No public per-user or per-admin pricing. Identity Security Platform consolidates PAM, EPM, Secrets Management. Leader in Gartner PAM Magic Quadrant. | https://www.cyberark.com/products/ | 2026-06-17 | Low |
| beyondtrust-pricing | BeyondTrust Quote-only. No public per-user or per-admin pricing. Password Safe (vault), Privileged Remote Access (session), Endpoint Privilege Management commonly licensed together. Leader in Gartner PAM Magic Quadrant. | https://www.beyondtrust.com/products/password-safe | 2026-06-17 | Low |
| delinea-pricing | Delinea Quote-only. Secret Server (Cloud or self-hosted), Privileged Behavior Analytics, Server Suite. Merged Thycotic + Centrify. Leader in Gartner PAM Magic Quadrant. | https://delinea.com/products/secret-server | 2026-06-17 | Low |
| one-identity-safeguard-pricing | One Identity Quote-only. Safeguard for Privileged Passwords, Privileged Sessions, Privileged Analytics commonly licensed together. Hardened virtual/physical appliance deployment. Leader in Gartner PAM Magic Quadrant. | https://www.oneidentity.com/products/safeguard-for-privileged-passwords/ | 2026-06-17 | Low |
| wallix-bastion-pricing | Wallix Quote-only. EU-headquartered (France) PAM vendor. PAM4ALL platform: session, vault, access governance, privilege elevation. Recognised in Gartner PAM Magic Quadrant. | https://www.wallix.com/products/bastion/ | 2026-06-17 | Low |
| saviynt-pricing | Saviynt Quote-only. PAM is a module of the broader Identity Cloud (with IGA, third-party access, CIEM). Recognised in Gartner PAM Magic Quadrant. | https://saviynt.com/products/identity-cloud | 2026-06-17 | Low |
| strongdm-pricing | StrongDM Quote-only. Page lists three editions (Essentials, Platform, Platform Plus) without numeric rates. Modern zero-trust infrastructure access. | https://www.strongdm.com/pricing | 2026-06-17 | Low |
| keeperpam-pricing | KeeperPAM Quote-only. Add-on bundle (Connection Manager + Secrets Manager + Remote Browser Isolation) on top of Keeper Business or Enterprise prerequisite. | https://www.keepersecurity.com/privileged-access-management/ | 2026-06-17 | Low |
| segura-pricing | Segura Quote-only. Rebranded senhasegura platform. Vendor PAM-pricing page states pricing is calculated per customer requirements. Recognised in Gartner PAM Magic Quadrant. | https://segura.security/company/pam-pricing/ | 2026-06-17 | Low |
| gartner-pam-mq | Gartner Gartner Magic Quadrant for Privileged Access Management. Cited only for vendor positioning (Leader / Challenger / Visionary / Niche), not for pricing. Subscription required to read full report. | https://www.gartner.com/en/documents/privileged-access-management-magic-quadrant | 2026-06-17 | Low |
| forrester-pim-wave | Forrester Forrester Wave: Privileged Identity Management. Cited only for vendor positioning, not pricing. | https://www.forrester.com/report/the-forrester-wave-privileged-identity-management/ | 2026-06-17 | Low |
| ibm-2025-databreach | IBM IBM Cost of a Data Breach Report 2025: global average $4.44M per breach. Cited only for ROI framing in implementation-cost guidance. Source dataset, not vendor-pricing dataset. | https://www.ibm.com/reports/data-breach | 2026-06-17 | Low |
Calculator model
The procurement calculator on the homepage and /calculator applies the following formula per vendor.
Inputs
- privilegedAdmins: integer 0-5,000 privileged users requiring PAM coverage.
- hybridOnPremShare: fraction 0-1, informational only; affects vendor-fit guidance.
- jitWorkflowShare: fraction 0-1, informational only; affects vendor-fit guidance.
Formula
SaaS per-user vendors (Keeper, JumpCloud, Okta):
annual = admins x perUserPerMonth x 12
ManageEngine PAM360:
annual = max($7,995, admins x ~$800) // Standard tier
// Standard floor enforced for under 10 admins
Teleport:
if admins < 100 and Community-qualifying: annual = $0
else: quote-only, excluded from stack
HashiCorp Boundary:
Community Edition: annual = $0 (self-hosted)
HCP Boundary: bills session-hours, not per admin, excludedExcluded from the USD stack
- All 9 quote-only vendors (CyberArk, BeyondTrust, Delinea, One Identity, Wallix, Saviynt, StrongDM, KeeperPAM, Segura): surfaced with contact links, not inferred numbers.
- HCP Boundary (managed): bills session-time hours per HashiCorp's public pricing; we do not infer a per-admin annual conversion.
- Teleport Enterprise: per-resource quote-only above the Community Edition cap.
- KeeperPAM bundle on top of Keeper Business / Enterprise: quote-only add-on.
Refresh cadence
Vendor pricing pages are re-fetched quarterly. Next refresh: September 2026. Quote-only vendors are revisited quarterly to confirm they have not started publishing rates.
Conflict-of-interest disclosure
Digital Signet receives no compensation from any PAM vendor. There are no affiliate links on this site. There are no sponsored vendor placements. The calculator's default ordering is by ascending annual list price, deterministic.
Corrections and disputes
If you find an error, email oliver@digitalsignet.com with the page URL, the claim, and a link to a vendor pricing page or authoritative source showing the correct figure.
Last verified June 2026 · Next refresh September 2026