CyberArk Pricing: What Privilege Cloud Really Costs Per User

Short answer: CyberArk pricing is quote-only, with one public exception: CyberArk's AWS Marketplace listing prices a 12-month contract for 25 Standard Privilege Cloud users at $44,712.00, about $1,788 per user per year (checked September 22, 2026). Every other CyberArk figure in circulation is a third-party estimate. There is no free plan.

CyberArk plans and prices

CyberArk does not publish a price list. The table below separates the one vendor-published figure from third-party estimates so you can tell which numbers are real list prices. For the rest of the market, see the privileged access management category hub.

CyberArk prices by source, checked September 22, 2026:

Watch out: The Marketplace listing states that "pricing is based on the duration and terms of your contract with the vendor" and points larger buyers to private offers, so treat $44,712 as a ceiling for 25 users on the public path, not as what a negotiated deal costs.

What CyberArk costs for your team

The formula uses only the published pack: number of 25-user packs times $44,712.00 per year. These are list-price estimates before tax, discounts and add-ons, and they assume packs stack linearly, which CyberArk does not state.

Few 250-user buyers would pay that list figure. Vendr reports that multi-year commitments bring discounts of 15 to 30 percent and that organizations with 500 to 1,000 accounts land 20 to 35 percent below initial quotes. Those are reported patterns from one data provider, not published terms.

What each CyberArk product includes

CyberArk sells privileged access as several separately quoted products rather than one plan ladder. Each has its own license unit, which is why quotes vary so widely.

Privilege Cloud

Privilege Cloud is CyberArk's SaaS privileged access manager: credential vaulting, session isolation and recording for admin accounts. It is licensed per privileged user; the Marketplace pack names "Standard Privilege Cloud users" as the unit. Other user types exist in third-party write-ups, but CyberArk publishes no price for them.

Self-hosted Privileged Access Manager

The self-hosted edition runs in your own data center or cloud. Vendr reports annual maintenance of 17 to 22 percent of license cost for self-hosted deployments, plus the servers and staff to run it. CyberArk publishes no self-hosted list price.

Secrets Manager and Conjur

CyberArk Conjur and Secrets Manager handle machine and application secrets. Pricing is quote-only. One secondary source, UnderDefense (June 2, 2026), estimates $40 to $180 per workload identity per year and labels that figure medium confidence.

Costs beyond the license

The license is often the smaller part of a CyberArk budget. Plan for these lines:

• Implementation services: Vendr reports professional services at 20 to 40 percent of first-year license cost (Vendr).
• Maintenance (self-hosted): 17 to 22 percent of license a year, with reported escalation clauses of 3 to 5 percent a year (same source).
• Staff time: a self-hosted vault needs people to patch, upgrade and run it. UnderDefense models 2 to 5 FTEs for self-hosted programs, which is an author estimate, not vendor data (UnderDefense).
• Add-on modules: endpoint privilege, secrets and identity products are each quoted separately.

Free plan and trial

CyberArk has no free plan. The former cyberark.com trial and pricing pages now 301-redirect to the Palo Alto Networks Idira page, which offers "Request a Demo" and lists no self-serve trial (checked September 22, 2026). Ask sales directly whether a proof of concept is available and on what terms.

Discounts and contract terms

CyberArk publishes no discount program. The AWS Marketplace listings use 12-month contracts, and the GovCloud listing sends orders over 100 named users to CyberArk for a private offer (AWS Marketplace). Buying through AWS Marketplace can let the spend count against an existing AWS commitment; confirm that with your AWS account team. Auto-renewal and cancellation terms are not published.

Renewal pricing

CyberArk does not publish renewal terms. Vendr reports escalation clauses of 3 to 5 percent a year on maintenance. Larger renewal jumps appear in aggregator pages, but we found no primary source for them, so they are left out. Ask for a renewal cap in writing before signing a first-year deal.

CyberArk price history

No dated change to CyberArk per-user pricing was found. The Idira page says existing CyberArk customers can keep their current setup; it does not address pricing.

How CyberArk pricing compares

BeyondTrust and Delinea, the other two vendors most often shortlisted with CyberArk, also sell privileged access mainly by quote. A same-basis price comparison at 50 users is not possible from published list prices today, so this page does not print one. The shortlist builder lets you compare PAM vendors on requirements instead.

Is CyberArk worth the price?

CyberArk fits large, regulated organizations that need vaulting, session recording and audit evidence for many admin accounts and can fund implementation services and staff. At about $1,788 per Standard user per year at Marketplace list, it is a significant line item even before services.

CyberArk does not fit a team with a handful of admins and no audit driver, because the public purchase path starts at a 25-user pack costing $44,712 a year. Those teams should price lighter PAM or just-in-time access tools first and compare them on the privileged access management hub.

Bottom line

Use $44,712 a year for 25 Standard Privilege Cloud users as your list-price anchor, then add 20 to 40 percent for first-year services when you build the budget. Get a private offer and a written renewal cap before you sign. Then use the shortlist builder to check CyberArk against two other PAM vendors so you have competing quotes.