Any thoughts on how much we should be paying for a PAM solution?

Posted by This_guy_works@reddit | sysadmin | View on Reddit | 5 comments

I'm having a tough time finding a general ballpark estimate for what is the average cost of a PAM solution. What I am seeing in a lot of search results is "it depends" and then no ballpark estimates are thrown out there. Are we talking a few thousand dollars a year? Tens of thousands? Is it charged per user, per account, or per shared license? We are a smaller company of around 350 users and 500 endpoints. We use about 20 privileged accounts with various admin rights between our IT support, vendors, and our MSP assisting us. I recently had a call with Netwrix to discuss their PAM solution, and they wanted something like 16K annually under a three year contract. To me that sounds outrageous for keeping track of such a small number of accounts. I've heard of other companies like BeyondTrust and CyberArk - but am not sure if their pricing would be any better. I'm also not even sure what to look for in a PAM solution, but don't to waste any more time with a vendor if I am not sure we're on the same page for pricing. I'm looking for a solution that would cost under 10K annually, and I don't think that is too big of an ask. So my questions is basically twofold - what kind PAM solution would be best in our situation, and what kind of cost in general would I be looking at? I know it does varry, but are we talking a few thousand dollars on average per year, or tens of thousands for our small/mid sized company? Are we even big enough to worry about a PAM solution?