Idira/CyberArk Privilege Cloud, set up right and properly supported
We help organizations mature their Privilege Cloud tenant — from first onboarding and connector design to integrations, policies, migration and everyday support.
Certified: CDE-CPC (Privilege Cloud) and CyberArk Guardian.
100% satisfaction guarantee — every engagement, every time.Privilege Cloud or PAM Self-Hosted?
Two very different operational realities. We deliver both, but Privilege Cloud is our focus.
Privilege Cloud (SaaS)
- Idira/CyberArk runs the vault infrastructure; you run the usage
- Upgrades follow the SaaS cadence — preparation is on you
- Connectors (PSM/CPM) run inside your own network
- Faster to start, far less infrastructure to maintain
- Focus shifts to onboarding, policies, integrations and adoption
PAM Self-Hosted (on-prem)
- You operate vault, PVWA, CPM, PSM, PTA and DR yourself
- Upgrades, patching and capacity are your responsibility
- Maximum control and customization, higher operational load
- Often required by strict isolation or compliance demands
- We continue to support it fully, including towards migration
Not sure which model fits? We assess your situation honestly and advise without pushing you anywhere.
What we do for your Privilege Cloud tenant
Concrete work, delivered by certified engineers.
Onboarding & deployment
Tenant setup, network design, connector installation and a working foundation your team can build on.
Connector design & scaling
PSM and CPM connectors sized correctly, made redundant and distributed across sites and network zones.
Integrations
SIEM, ITSM/ticketing, LDAP and identity providers, MFA and automation through the REST API.
Account onboarding & policies
Discovery, platform configuration, safes and access model, rotation and session policies that survive real life.
Upgrades & health checks
Preparation for the SaaS release cadence, connector upgrades and periodic health reviews.
Troubleshooting & break-fix
Help with outages, failed rotations, session issues and vendor escalations.
Migrating from PAM Self-Hosted to Privilege Cloud
A phased approach that takes the risk off your team.
1. Assess
Inventory of accounts, safes, platforms, integrations and customizations — including what should not move at all.
2. Design
Target architecture, connector placement, access model and migration order per user group.
3. Pilot
A limited set of users and accounts live, with session and rotation validation.
4. Migrate
Phased cutover per safe and audience, with rollback options and clear communication.
5. Decommission
Retire legacy components, document the result and hand over to your operations team.
We keep your existing on-prem environment running throughout the migration — no big bang.
How to work with us
Pick whatever fits your question.
Buy support hours
Flexible hours you use whenever you need them. Our most popular route.
View packagesOpen a ticket
Describe your question in writing; we pick it up and schedule a session if needed.
Open a ticketBook a consultation
Discuss your Privilege Cloud situation or migration plan with a specialist.
Book a free 30-min consultationProfessional Certifications
Our team holds industry-leading Idira (formerly CyberArk) certifications
CyberArk CDE CPC
Validated expertise in deploying and supporting Idira/CyberArk Privilege Cloud in enterprise environments.
CyberArk Guardian
Recognized Idira/CyberArk expert with advanced knowledge across multiple Idira/CyberArk solutions and complex enterprise deployments.
CyberArk CDE PAM
Certified in deploying and managing Idira/CyberArk's self-hosted Privileged Access Management solutions with best practices.
CyberArk CDE EPM
Skilled in implementing and configuring Idira/CyberArk Endpoint Privilege Manager for least privilege and application control.
Privilege Cloud questions we get a lot
What is the difference between Privilege Cloud and PAM Self-Hosted?
With Privilege Cloud, Idira/CyberArk operates the vault infrastructure as SaaS while you own usage, policies and the connectors running in your own network. With PAM Self-Hosted you operate the whole stack yourself, including upgrades, capacity and disaster recovery.
Can you help with an existing Privilege Cloud tenant?
Yes. Much of our work is improving existing tenants: connector design, account onboarding, policy clean-up, integrations and troubleshooting.
How long does a migration to Privilege Cloud take?
It depends on the number of safes, accounts, integrations and customizations. After the assessment we give a realistic phasing; smaller environments often move in weeks, complex landscapes in months.
Do you still support on-prem PAM?
Yes. We fully support PAM Self-Hosted projects and operations, including for organizations that are not migrating.
How quickly can you start?
With support hours you can start immediately: buy hours and book a session based on availability, typically within a few business days.
What if we are not satisfied?
Every engagement is covered by our 100% satisfaction guarantee. If the delivered work isn't right, we remediate it within reasonable limits at no additional cost.
Ready to move your Privilege Cloud forward?
Discuss your tenant, migration plan or open issues with a certified specialist.
Also available for existing PAM Self-Hosted environments.
Prefer insight first? See the PAM Gap Analysis (€800 excl. VAT).