# ManageEngine PAM360 Pricing & Plans

## High-value PAM platform, transparent pricing model

Privileged access management pricing options for all your enterprise needs.

- Straightforward pricing
- Personalized consultation
- Last-mile implementation
- Premium technical support

## Subscription Model

### Subscription model - billed annually

| Administrators and keys (no limit on users and resources) | License fee (billed annually) | Annual maintenance & Support fee |
|---|---|---|
| 10 administrators and 25 keys | $7,995/year (English)<br>$9,595/year (Multilingual) | Free |
| 20 administrators and 50 keys | $12,995/year (English)<br>$15,595/year (Multilingual) | Free |
| 25 administrators and 100 keys | $14,995/year (English)<br>$17,995/year (Multilingual) | Free |
| 50 administrators and 200 keys | $24,995/year (English)<br>$29,995/year (Multilingual) | Free |
| 100 administrators and 300 keys | $36,995/year (English)<br>$44,395/year (Multilingual) | Free |
| 150 administrators and 500 keys | $44,995/year (English)<br>$53,995/year (Multilingual) | Free |
| 200 administrators and 1000 keys | $49,995/year (English)<br>$59,995/year (Multilingual) | Free |

**Note:**

- The licensing fee includes the annual maintenance and support fee. Customers do not have to pay an additional amount for it.
- The licensing fee in the subscription model is billed annually. Customers can choose to renew the license every subsequent year.

## Perpetual Model

### Perpetual model - One-time purchase

| Administrators and keys (no limit on users and resources) | License fee | Annual maintenance & Support fee |
|---|---|---|
| 10 administrators and 25 keys | $19,995 (English)<br>$23,995 (Multilingual) | $3,999 (English)<br>$4,799 (Multilingual) |
| 20 administrators and 50 keys | $32,495 (English)<br>$38,995 (Multilingual) | $6,499 (English)<br>$7,799 (Multilingual) |
| 25 administrators and 100 keys | $37,495 (English)<br>$44,995 (Multilingual) | $7,499 (English)<br>$8,999 (Multilingual) |
| 50 administrators and 200 keys | $62,495 (English)<br>$74,995 (Multilingual) | $12,499 (English)<br>$14,999 (Multilingual) |
| 100 administrators and 300 keys | $92,495 (English)<br>$110,995 (Multilingual) | $18,499 (English)<br>$22,199 (Multilingual) |
| 150 administrators and 500 keys | $112,495 (English)<br>$134,995 (Multilingual) | $22,499 (English)<br>$26,999 (Multilingual) |
| 200 administrators and 1000 keys | $124,995 (English)<br>$149,995 (Multilingual) | $24,999 (English)<br>$29,999 (Multilingual) |

**Note:**

- The perpetual licensing model provides a way for customers to make a one-time purchase of PAM360.
- After the initial purchase of the license, the customer will only have to pay the annual maintenance and support fee every year.

## Unified PAM, out of the box

### Privileged account governance

- Automated privileged account discovery
- Centralized credential vaulting with AES-256 encryption
- Role-based and policy-based access controls
- Password rotation and life cycle management
- Access request and approval workflows
- Comprehensive audits and compliance-ready reports

### Least privilege access

- JIT privilege elevation
- Time-bound, purpose-specific access provisioning
- Trust score-based access controls
- Automatic privilege revocation upon session expiry
- Fine-grained delegation for Windows and Linux

### Privileged session management

- Secure remote connections via RDP, SSH, VNC, and SQL
- Real-time session shadowing and dual control
- Full session recording and video playback
- Keystroke logging and command capture
- Gateway-based access without direct endpoint exposure
- Audit trails for investigative reviews

### Non-human identity management

- Application-to-application password management
- Secrets management for DevOps pipelines
- SDK-based credential retrieval (Java, Python, C#)
- Service account credential rotation
- API key and token management
- Jenkins, Kubernetes, and CI/CD pipeline integration

### Cloud infrastructure entitlements management

- Continuous visibility into cloud entitlements
- Shadow admin and dormant identity detection
- Excessive permission identification and rightsizing
- Risk-based cloud access scoring
- Centralized cloud privilege dashboard

### Endpoint privilege management

- Local admin rights removal
- Application allowlisting and blocklisting
- Child process restriction controls
- JIT elevation for endpoint users
- Granular application-level privilege controls
- Agent-based endpoint discovery and management

### Third-party access management

- Secure, time-bound access for vendors and contractors
- Approval-based access provisioning
- Full session recording for third-party activity
- Automatic access revocation post remote session
- Audit-ready logs for external user sessions

### Privileged threat analytics

- AI and ML-driven anomaly detection
- User behavior baselining and deviation alerts
- Off-hours and unusual location access detection
- SIEM integration (Splunk, Sumo Logic, EventLog Analyzer)
- Real-time alerts on suspicious privileged activity
- Context-rich event logs and forensic data

### Privileged task automation

- Custom SSH and PowerShell script execution
- Sequential, parallel, and batch task orchestration
- Multi-endpoint task deployment
- Integration with 800+ business applications via Zoho Flow
- ITSM ticket-based workflow automation
- Scheduled, recurring privileged operations

## We’re with you every step of the way

From faster deployment to smooth implementation, our experts help your team get up to speed quickly.

### Online

| Number of sessions | Training only | Onboarding, implementation, and training |
|---|---|---|
| Online: 4 hours | $995 | $2,495 |
| Online: 8 hours | $1,495 | $3,495 |
| Online: 12 hours | $1,995 | $4,495 |

### Onsite

| Number of sessions | Onboarding, implementation, and training |
|---|---|
| Onsite: 2 days | $4,495 |
| Onsite: 3 days | $6,999 |
| Onsite: 5 days | $9,999 |

[Contact us](https://www.manageengine.com/privileged-access-management/support.html)

## Frequently asked questions

### Who are Administrators in PAM360? How are they different from other users?

Administrators in PAM360 are users with elevated privileges, enabling them to perform administrative functions related to your privileged resources and users. Some of these administrative functions include onboarding resources, configuring security settings, implementing access control mechanisms, and so on. Non-administrative users typically only have read-only access levels to privileged resources.

PAM360 comes with five user roles: Administrator, Password Administrator, Privileged Administrator, Password Auditor, and Password User. The term administrator denotes Administrators, Password Administrators, and Privileged Administrators.

Licensing restricts the number of administrators as a whole, which includes Administrators, Password Administrators, and Privileged Administrators. There is no restriction on the number of Password Users and Password Auditors. To get more details on the five user roles, refer to [this section of our help documentation](https://www.manageengine.com/privileged-access-management/help/user_management.html).

### What are Keys in PAM360?

Secure Shell (SSH) keys are a commonly used method of authentication and provide access to a wide range of critical assets within corporate networks. ManageEngine PAM360 facilitates the complete life cycle management of SSH keys from a single, unified console.

### Can I try PAM360 for free?

Yes, PAM360 offers a [30-day free trial](https://www.manageengine.com/privileged-access-management/download.html).

### What are the different license types in PAM360?

There are three license types:

- **Evaluation download/Trial Version**: You can download and install this trial version straightaway. It is fully functional, capable of supporting a maximum of five administrators and you can evaluate all the features for 30 days.
- **Free Edition**: This licensed software allows you to have one administrator and manage up to 10 resources. This is valid forever.
- **Registered Version**: You get the Enterprise edition, and licensing is based on the number of administrators. This is useful if you require more enterprise-class features such as auto discovery of privileged accounts, integration with ticketing systems and SIEM solutions, jump server configuration, application-to-application password management, out-of-the-box compliance reports, SQL server/cluster as backend database, etc.

### What are the different pricing models available?

- **Subscription model** - This is an annually billed pricing model based on the number of administrators and keys. The subscription model is inclusive of the annual maintenance and support fee.
- **Perpetual model** - The perpetual license will cost three times the annual subscription price, with 20% annual maintenance and support fee from the second year. Contact [sales@manageengine.com](mailto:sales@manageengine.com) for more details.

### How do I renew the license?

To renew your license, please send an email to [sales@manageengine.com](mailto:sales@manageengine.com) along with your User ID details and a screenshot of your current license.

### How do I get a personalized price quote?

To get a custom price quote tailored to meet the requirements of your organization, please fill out the form on [this page](https://www.manageengine.com/privileged-access-management/get-quote.html?new-homepage), and our team will get in touch with you shortly.

### After the initial purchase, can I buy licenses for additional Administrators or Keys as and when required?

Yes, the number of Administrators/Keys can be upgraded anytime during the subscription period and the upgrades will be pro-rated to the current subscription validity. Reach out to [sales@manageengine.com](mailto:sales@manageengine.com) for more information and to get a tailored price quote.

### Can I extend my evaluation to include more administrator users or for more number of days?

Yes, you can. Kindly reach out to [sales@manageengine.com](mailto:sales@manageengine.com) for more details.

### I want to have a High Availability setup with multiple servers. Will a single license suffice for this?

Yes, if you buy a single license, you are entitled to have a High Availability setup. You can apply for the same license for the primary as well as the secondary servers. Follow the below steps:

- Stop the PAM360 service in the primary server.
- Login to PAM360 using the secondary server URL as an Administrator.
- Tap License under the User menu, at the top right corner of the console.
- Apply the same license file which is applied for the primary server.