Centralizing privileged account management while maintaining strong security controls has been the biggest win for us. Password vaulting allowed us to eliminate shared passwords entirely, and session recording has been especially helpful for monitoring privileged activity and investigating incidents when needed. The audit trails also make compliance reporting much faster, since we can quickly pull the access records we need. Support was responsive throughout the implementation process. Review collected by and hosted on G2.com.

We noticed a bit of lag in one of the earlier release versions. Also ran into an issue once where the resources section stopped working, which needed a fix from their support team. Review collected by and hosted on G2.com.

Secrets management helped us move API keys and service account credentials out of CI/CD configs and engineers’ local files and into a single vault with automatic rotation. SSH key management ended up being the bigger win, though—those keys were scattered across laptops and old repos, with no clear ownership trail. Now access to our cloud infrastructure is centralized, regularly rotated, and tied to real identities, rather than a key someone generated two years ago and then forgot about. Review collected by and hosted on G2.com.

A few engineers initially pushed back on losing direct SSH access to the servers. It took some internal change management and a bit of time for the team to get comfortable with the brokered access model, but once we worked through that adjustment, things went more smoothly. Review collected by and hosted on G2.com.

Session monitoring has been the most valuable capability for us. With hundreds of users across departments accessing critical systems, having a complete audit trail for every privileged session gives us the accountability that compliance audits demand. Least-privilege enforcement was something we had on paper but never truly implemented; miniOrange made it operational. Users now receive only what their role requires—nothing more—and access reviews are much easier to run, track, and document. Review collected by and hosted on G2.com.

The initial role mapping across departments took longer than I expected, given the scale of our environment. It wasn’t really a product issue so much as the reality of enforcing least-privilege in an organization that had accumulated access rights over the years without much cleanup. Review collected by and hosted on G2.com.

Credential management has taken database passwords completely out of human hands; everything is now checked out and rotated automatically. The approval workflows also help a lot: when a vendor needs access to patch a system that touches patient records, it can be approved with a single click instead of three emails and a phone call. Combined with JIT access, none of our clinical IT staff maintain standing privileged accounts anymore, and that made our last HIPAA audit much easier. Review collected by and hosted on G2.com.

Mapping the approval chains during setup took some back-and-forth, mainly because the clinical systems team and general IT follow different sign-off structures. I’d recommend budgeting a couple of weeks for that configuration phase so there’s enough time to align everyone. Review collected by and hosted on G2.com.

miniOrange PAM stands out for its simplicity and strong security features combined in one platform. The deployment process was straightforward, and the UI is clean compared to other PAM tools we tested. Features like session monitoring, credential vaulting, and role-based access controls work seamlessly.

I especially like how it integrates well with existing identity providers and supports multi-factor authentication, adding an extra layer of protection. The centralized dashboard makes it easy to manage privileged accounts without complexity, which is great for mid-sized teams. Review collected by and hosted on G2.com.

While the platform is solid, there are a few areas that could be improved. Some advanced configurations require technical expertise, which may be challenging for non-technical users.

Also, the reporting and analytics section could be more detailed and customizable. At times, extracting specific audit logs requires extra steps. Enhancing documentation and providing more out-of-the-box templates would make the experience smoother. Review collected by and hosted on G2.com.

miniOrange PAM has helped us gain better control over privileged access across our production servers and manufacturing infrastructure. The privileged access controls are straightforward to manage, and we especially value the ability to securely handle vendor access without exposing sensitive credentials. The audit reports are detailed, and they’ve been very useful during compliance reviews as well as internal security assessments. Review collected by and hosted on G2.com.

Some advanced configuration steps required help from the support team, but they stayed responsive throughout the deployment process. In an older release, we occasionally experienced lag. Review collected by and hosted on G2.com.

The customer care is quite excellent. in times when our Cisco routers go wrong or our in house bankihng web applications fail, we simply pick the phone and talk to engineers. The turnaround time is nice. besides, it is easy to use in our daily IT activities after installation was complete. Review collected by and hosted on G2.com.

The initial installation was time consuming. The compliance audit logs had a very narrow customization need on our part due to the fact that we are a bank. however their team had a series of calls with us until it had been properly functioning, but they requested us to pay them an extra customization fee. Review collected by and hosted on G2.com.

As an IT services company managing both human and non-human identities, we needed a PAM solution that could secure modern AI-driven environments, enforce just in time access, and manage ephemeral secrets effectively. The real-time session monitoring and AI runtime authorization capabilities give much better visibility and control over AI agents and automated workflows. Review collected by and hosted on G2.com.

Some Advanced AI security and automation-related configurations require technical expertise during deployment Review collected by and hosted on G2.com.

miniOrange PAM provides strong control over privileged accounts, which is critical in the financial sector. I really appreciate the session recording and audit trails, as they help us meet compliance requirements. The interface is intuitive, and integrating MFA across all admin access points was seamless. It reduced our dependency on manual monitoring significantly. Review collected by and hosted on G2.com.

The initial configuration required some support assistance, especially when setting up complex approval workflows. Also, the reporting dashboard could offer more customizable views to better align with financial compliance audits. Improvements in documentation would make onboarding smoother for new admins. Review collected by and hosted on G2.com.

What I like most about miniOrange PAM is the balance between usability and strong security controls. The session monitoring and audit logs are very detailed, which is critical for incident investigations. I also appreciate how quickly we were able to deploy the solution and start managing privileged credentials without major disruptions. Review collected by and hosted on G2.com.

The UI is functional but could be improved visually. Some configurations require digging into documentation, especially when customizing policies. A more guided setup wizard would help reduce the learning curve for first-time users. Review collected by and hosted on G2.com.