Number of Seats/Users: CyberArk Privileged Access Management Solutions offers discounts based on the number of users or seats. A higher volume typically leads to a better discount structure, especially for enterprise-level usage.

Commitment to a Long-Term Contract: Discounts are often provided to companies that commit to using the service for a longer period (e.g., 1-year or 3-year contracts). A longer commitment shows CyberArk Privileged Access Management Solutions that the company is serious and willing to invest in the platform long-term.

No Active Discounts: Companies that are not already receiving other active discounts may have a better chance of qualifying for additional discounts from CyberArk Privileged Access Management Solutions. CyberArk Privileged Access Management Solutions reserves discounts for new customers or those not currently under promotional pricing.

Volume or Usage Commitment: CyberArk Privileged Access Management Solutions offers discounts if you agree to a minimum amount of usage or transaction volume. This could be based on data storage, transactions, or other metrics tied to how much you will use the platform.

Enterprise-Level Negotiation: Companies that qualify as “enterprise” due to their size or complexity (e.g., having large teams, multiple departments, or geographical presence) may be eligible for additional discounts from CyberArk Privileged Access Management Solutions. Such companies are often in a position to negotiate for better pricing.

Early Renewal or Prepayment: CyberArk Privileged Access Management Solutions often offers discounts if you renew early or prepay for the entire contract period. This is a common approach to securing a lower price.

Here at Spendbase our internal data shows that CyberArk Privileged Access Management Solutions delivers strong security and control, but often at a higher cost and complexity that needs to be justified and optimized.

From what our Spendbase clients tell us, the main strengths are:

• Strong security posture
• High trust in the vault, encryption, and MFA
• Automatic credential rotation and password reconciliation

• Session recording and detailed audit logs, useful for forensics

• Centralized access and convenience

• One place for all privileged accounts and many day‑to‑day apps
• SSO with MFA across cloud, on‑prem, and hybrid environments

• Users remember a single login, which cuts password reset tickets

• Compliance and governance

• Helps meet PCI‑DSS and other regulatory requirements
• Good visibility into high‑privilege accounts and “blind spots”

• Clear accountability: who accessed what, when, and how

• Enterprise‑grade operations

• Scales well versus in‑house/custom tools
• Flexible deployment options, including on‑prem
• Strong technical support is mentioned frequently

At the same time, our internal data highlights recurring friction points:

• Cost and total cost of ownership
• License is often perceived as pricey, especially for SMBs

• Extra VMs / physical servers, storage for recordings, and complex HA setups increase hidden costs

• Complexity and deployment effort

• Initial rollout and configuration can be lengthy
• Steep learning curve for administration

• Integration with custom apps and some non‑SAML systems can be tricky

• Usability and performance

• Admin portal and UI feel outdated or cluttered to some
• Occasional performance issues, especially in cloud or large data sets

• MFA re-enrollment and phone changes can be time‑consuming

• Support and product polish

• Overall support is praised, but product knowledge can be inconsistent
• Documentation and new features sometimes lag behind real‑world use cases

From a Spendbase savings perspective, CyberArk tends to be a high‑value, high‑cost security investment. Clients who get the best ROI typically:

• Right‑size licenses to real usage, not theoretical maximums
• Consolidate overlapping SSO/PAM tools into CyberArk where it’s stronger
• Tune recording, storage, and HA to actual risk and compliance needs
• Plan integrations carefully to avoid costly delays and rework

If you’d like, we can map your current CyberArk usage and identify where discounts, license optimization, or scope adjustments could bring the total spend more in line with the value you’re getting.