CyberArk Pricing: What Privilege Cloud Really Costs Per User

Short answer: CyberArk Privilege Cloud's listed AWS offer costs $44,712 in USD for 25 Standard users over 12 months, equivalent to $1,788.48 per user yearly at full use. That pack is one purchasing route, not a universal CyberArk minimum or total-cost cap. Other products and private offers need a scoped quote. Checked October 25, 2026.

CyberArk plans and prices

CyberArk products do not share one universal per-user rate. The table separates a verified AWS Privilege Cloud contract dimension from derived arithmetic and historical third-party benchmarks. For the rest of the market, see the privileged access management category hub.

CyberArk prices by source. AWS Privilege Cloud pack rechecked October 25, 2026; historical benchmark dates are identified separately:

Watch out: $44,712 is a listed license-pack price, not a total-cost ceiling or an independently purchasable per-seat rate. AWS notes that infrastructure costs may apply and offers private quotes. Confirm services, support, add-ons, user type and renewal terms separately (AWS offer).

Is CyberArk free?

The AWS Privilege Cloud offer on this page is paid PAM. It should not be confused with Conjur Open Source: CyberArk's Conjur repository publishes its server under LGPL v3.0 and also refers to commercial licenses. Open-source software is not a free managed Privilege Cloud subscription; you still operate and maintain it (Conjur repository and license).

The current Idira product page offers a demo request. Confirm any trial or proof-of-concept terms with sales, including product, duration, features and what happens at expiry. A demo, a trial and an open-source edition are different purchase options; none establishes free access to every CyberArk product. Checked October 25, 2026.

What CyberArk costs for your team

The formula uses only the published pack: number of 25-user packs times $44,712.00 per year. These are modeled license-only totals before tax, services, infrastructure, discounts and add-ons. The listed dimension is 25 Standard users; multiple-pack examples assume linear pricing and are not vendor quotes.

Do not use the 250-user model as a negotiated quote. Vendr reports that multi-year commitments bring discounts of 15 to 30 percent and that organizations with 500 to 1,000 accounts land 20 to 35 percent below initial quotes. Those are reported patterns from one data provider, not published terms.

What each CyberArk product includes

CyberArk sells privileged access as several separately quoted products rather than one plan ladder. Each has its own license unit, which is why quotes vary so widely.

Privilege Cloud

Privilege Cloud is CyberArk's SaaS privileged access manager: credential vaulting, session isolation and recording for admin accounts. It is licensed per privileged user; the Marketplace pack names "Standard Privilege Cloud users" as the unit. Other user types exist in third-party write-ups, but CyberArk publishes no price for them.

Self-hosted Privileged Access Manager

The self-hosted edition runs in your own data center or cloud. Vendr reports annual maintenance of 17 to 22 percent of license cost for self-hosted deployments, plus the servers and staff to run it. CyberArk publishes no self-hosted list price.

Secrets Manager and Conjur

Conjur Open Source and commercial Secrets Manager are distinct options for machine and application secrets. The Conjur repository documents open-source and commercial licensing. The current Secrets Manager product page offers SaaS or self-hosted deployment and a demo request, without a public list rate. Request a quote identifying workloads, deployment and support; do not apply the Privilege Cloud Standard-user pack to machine identities.

Costs beyond the license

A complete CyberArk budget includes more than the license. Request separate prices for these lines:

• Implementation services: Vendr reports professional services at 20 to 40 percent of first-year license cost (Vendr).
• Maintenance (self-hosted): 17 to 22 percent of license a year, with reported escalation clauses of 3 to 5 percent a year (same source).
• Staff time: a self-hosted vault needs people to patch, upgrade and run it. UnderDefense models 2 to 5 FTEs for self-hosted programs, which is an author estimate, not vendor data (UnderDefense).
• Add-on modules: endpoint privilege, secrets and identity products are each quoted separately.

Free plan and trial

The checked Idira page offers a demo request rather than a self-serve Privilege Cloud free-plan price. Ask sales about a proof of concept and its expiry terms. For open-source secrets management, review Conjur separately; it is not the same deployment or entitlement as paid Privilege Cloud.

Discounts and contract terms

CyberArk publishes no discount program. The AWS Marketplace listings use 12-month contracts, and the GovCloud listing sends orders over 100 named users to CyberArk for a private offer (AWS Marketplace). Buying through AWS Marketplace can let the spend count against an existing AWS commitment; confirm that with your AWS account team. Auto-renewal and cancellation terms are not published.

Renewal pricing

CyberArk does not publish renewal terms. Vendr reports escalation clauses of 3 to 5 percent a year on maintenance. Larger renewal jumps appear in aggregator pages, but we found no primary source for them, so they are left out. Ask for a renewal cap in writing before signing a first-year deal.

CyberArk price history

No dated change to CyberArk per-user pricing was found. The Idira page says existing CyberArk customers can keep their current setup; it does not address pricing.

How CyberArk pricing compares

BeyondTrust and Delinea, the other two vendors most often shortlisted with CyberArk, also sell privileged access mainly by quote. A same-basis price comparison at 50 users is not possible from published list prices today, so this page does not print one. The shortlist builder lets you compare PAM vendors on requirements instead.

Is CyberArk worth the price?

CyberArk fits large, regulated organizations that need vaulting, session recording and audit evidence for many admin accounts and can fund implementation services and staff. At about $1,788 per Standard user per year at Marketplace list, it is a significant line item even before services.

For a team with a handful of admins, the listed AWS 25-user pack may leave substantial unused capacity. Compare a scoped private offer with lighter PAM or just-in-time access tools first and compare them on the privileged access management hub.

Bottom line

Use the listed $44,712 AWS pack as one reference for 25 Standard Privilege Cloud users over 12 months. Request an itemized quote for your user types, deployment, services, support and add-ons instead of treating a benchmark percentage as a service quote. Get a private offer and written renewal terms before you sign. Then use the shortlist builder to check CyberArk against two other PAM vendors so you have competing quotes.