No more typing reviews! Try our Samantha, our new voice AI agent.

IBM Security zSecure vs Idira Privileged Access Manager comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 2, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

IBM Security zSecure
Ranking in Mainframe Security
2nd
Average Rating
8.4
Reviews Sentiment
8.8
Number of Reviews
3
Ranking in other categories
No ranking in other categories
Idira Privileged Access Man...
Ranking in Mainframe Security
1st
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
231
Ranking in other categories
User Activity Monitoring (1st), Enterprise Password Managers (2nd), Privileged Access Management (PAM) (1st), Operational Technology (OT) Security (3rd)
 

Mindshare comparison

As of October 2026, in the Mainframe Security category, the mindshare of IBM Security zSecure is 14.2%, down from 20.0% compared to the previous year. The mindshare of Idira Privileged Access Manager is 5.5%, up from 4.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Mainframe Security Mindshare Distribution
ProductMindshare (%)
Idira Privileged Access Manager5.5%
IBM Security zSecure14.2%
Other80.3%
Mainframe Security
 

Featured Reviews

it_user635553 - PeerSpot reviewer
Mainframe Systems Programmer with 51-200 employees
Provides administration of the RACF database. We can identify and remove old security database records.
* The zSecure Admin provides us with a much more user-friendly administration of the RACF database. * TopSecret and ACF2 are also supported (if they were ordered). * The Database Cleanup utility feature: Used for identifying and removing old security database records that are no longer relevant or being used.
Singaravelu C - PeerSpot reviewer
CyberArk Engineer at Tata Consultancy
Provides full visibility into user activity and ensures secure end-to-end access across critical systems
In CyberArk Privileged Access Manager, I see room for improvement as I am working in the on-premises networks, and now we are also having the cloud-based PAM. So there, everything is maintained by the CyberArk Privileged Access Manager team, and we are only maintaining the PSM servers. So it is already upgraded from the on-premises network to the cloud network. If you ask me what we can implement beyond that, I just need a few minutes to think about what new things, because it is already an end-to-end security on-premises itself. Now, when it comes to PCloud, Privileged Cloud, it is more secure than the on-premises networks because most of the things are handled using the cloud itself. So it is an already upgraded version; we do not need to implement something new. But if you think in that way, we can have a chance to implement our things. If anything could be improved in CyberArk Privileged Access Manager, I think we could build a small agent AI in my team, we could give access to these logs—the Vault logs, PSM logs, and CPM logs. Whenever the system is going down, the AI will automatically check. If we actually implement agent AI in CyberArk Privileged Access Manager, it will check the logs, and if any errors are coming, it automatically triggers alerts and gives the solution. That is the best improvement I can think of because these days, most things are done by agent AI. So if we also implement this agent AI in CyberArk Privileged Access Manager, we can add more features.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The zSecure Admin provides us with a much more user-friendly administration of the RACF database."
"Technical support is optimal."
"The productivity and consistency in our organization has been improved by the ability to easily generate reports and a common interface for the security administrators."
"Password rotation is the most valuable feature"
"Automates password management to remove the human chain weakness."
"It supports lots of requirements in the privileged access management area."
"It makes compliance of the organization with password management easy, resulting in a handy auditing process and adherence to all risk compliance as well."
"When we started with RPA, there was a requirement that every credential and the bots themselves be protected through the PAM system. From the get-go, we've had CyberArk in the middle... We've got a pretty robust RPA implementation with our PAM platform. Users, bots, the credentials — everything is managed via our PAM solution."
"It's been a big win for us as we're now able to start managing service accounts with AIM."
"CyberArk is a more secure product - much better than Thycotic."
"The implementation of the PSM proxy has reduced the specific risk of "insider attacks" on our domain controllers and SLDAP servers by eliminating direct user login by an open secure connection on the user's behalf without ever revealing the privileged credentials."
 

Cons

"The reporting feature needs to improve."
"I would like to see improvements in the certification (SSL). It must be less complicated."
"There should be more supplied reports and CARLa samples."
"I don't know if "failed authentication" is a glitch or if that was an update... However, since we are the CyberArk support within our organization, we need to know that the password is suspended and we won't know that unless we have the ITA log up. So when a user calls and says, "Hey, I'm locked out of CyberArk, I can't get into CyberArk," we have to go through all of these other troubleshooting steps because the first thing we don't think of right now is, "The account is suspended." It doesn't say that anymore."
"The PTA could be improved. Currently, companies often have multiple domains and sometimes it's difficult to implement CyberArk in this kind of infrastructure. For example, you can add CPM (Central Policy Manager) and PSM (Privileged Session Manager and PVWA (Password Vault Web Access) for access, but if you want to add PTA (Privileged Threat Analysis) to scan Vault logs, it is difficult because this component may be adding multiple domain environments."
"CyberArk Privileged Access Manager can be improved because I have experienced one issue where a user connected through RDP to a Linux server and the PAM could not fetch any commands or key store logging from the Linux server, which works fine on Windows servers."
"The scalability, sometimes, is lacking. It works really well for more static environments... But for an environment where you're constantly spinning up new infrastructure or new endpoints, sometimes it has a hard time keeping up."
"The web interface has come a long way, but the PrivateArk client seems clunky and not intuitive. It could use an update to be brought up to speed with the usability of PVWA."
"CyberArk has to continue to evolve with that threat landscape to make sure that they're still protecting those credentials that are owned by those that have privileged accounts in the firms."
"We require IAM (identify and access management) capability at the administrator level because we need more identification."
"Within CyberArk, I would like to see more support for personal accounts."
 

Pricing and Cost Advice

Information not available
"CyberArk Privileged Access Manager is on the expensive side. It is very expensive."
"Cost efficiency is the number one thing that can be improved in my mind. This would change lots of companies minds on purchasing the product."
"It costs us around $200 per user."
"I focus more on the technical side, but I hear customers say that if CyberArk was more affordable, they might have acquired more licenses. Some clients consider alternative solutions due to pricing concerns."
"I rate the tool's pricing an eight out of ten."
"Pricing is quite high and it could be improved."
"Previously, the pricing was very meager. They started publicizing and advertising the solution, growing CyberArk, as an organization. They also changed their pricing with that growth, e.g., the pricier the product, the more people who will purchase it."
"I'm a technician so I don't handle the licensing for CyberArk Privileged Access Manager, but I know that the price for the core license is about €140 per year. There's another type of license, the external vendor license, and that's about €600 and you can manage twenty devices. From what I know, the price for one device in a subscription is about €65 per year. You can buy the CyberArk Endpoint Privilege Manager too, or you can buy some other application or application license with CyberArk Privileged Access Manager, but all other features, such as the Analytics Server is included in the basic CyberArk license. With WALLIX, you need to buy separate licenses for the features."
report
Use our free recommendation engine to learn which Mainframe Security solutions are best for your needs.
917,433 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
17%
Computer Software Company
13%
Outsourcing Company
10%
Insurance Company
9%
Outsourcing Company
12%
Financial Services Firm
12%
Manufacturing Company
10%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business59
Midsize Enterprise43
Large Enterprise175
 

Questions from the Community

How does IBM Security zSecure handle encryption and secure transmission of data?
zSecure, a suite of products, simplifies security management on z/OS and z/VM with an intuitive interface, surpassing ISPF panels and RACF commands. It focuses on enhancing technology management, n...
How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
The pricing is reasonable compared to other software options we evaluated, and it is straightforward. However, overall costs depend on deployment size and licensing requirements.
What needs improvement with CyberArk Privileged Access Manager?
While the access control capabilities are useful, streamlining some configuration and policy management workflows could enhance the user experience for administrators. A simpler interface for creat...
 

Also Known As

No data available
CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
 

Overview

 

Sample Customers

Swiss Re
Rockwell Automation
Find out what your peers are saying about IBM Security zSecure vs. Idira Privileged Access Manager and other solutions. Updated: September 2026.
917,433 professionals have used our research since 2012.