Try our new research platform with insights from 80,000+ expert users

AWS Secrets Manager vs CyberArk Privileged Access Manager comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

AWS Secrets Manager
Ranking in Enterprise Password Managers
3rd
Average Rating
8.8
Number of Reviews
12
Ranking in other categories
No ranking in other categories
CyberArk Privileged Access ...
Ranking in Enterprise Password Managers
2nd
Average Rating
8.6
Number of Reviews
193
Ranking in other categories
User Activity Monitoring (1st), Privileged Access Management (PAM) (1st), Mainframe Security (3rd), Operational Technology (OT) Security (3rd)
 

Featured Reviews

ManuelTorres - PeerSpot reviewer
Jan 23, 2024
Simplifies and secures secret management within the AWS ecosystem, though it could enhance integration capabilities with external platforms
I use it for handling any confidential tasks or operations within my systems. Typically, we rely on the AWS Identity and Access Management center to set specific rules. In most cases, systems autonomously manage the secrets. While there are admins who can handle secrets from the console, we aim to…
PG
Aug 21, 2023
Good security, seamless integration, and real time monitoring capabilities
In a large financial institution, CyberArk Privileged Access Management (PAM) plays a pivotal role in ensuring the security and integrity of sensitive financial data. With numerous systems, applications, and databases holding critical client information and transaction data, the institution faced…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"AWS Secrets Manager is used for storing secret information that has to be a secret from your customer and your employees."
"The API is fine and works well."
"It's highly scalable, so I'd rate it a ten out of ten."
"The most valuable feature is the management of credentials."
"The most valuable feature of AWS Secrets Manager is the ability to keep data secret and assign access permissions to people to grant or restrict access."
"The most valuable feature is security."
"The most valuable feature of AWS Secrets Manager is its seamless integration with various AWS services."
"The solution is very scalable."
"CyberArk makes our environment more secure and prevents possible attacks by compromised accounts."
"The automatic change of the password and Privileged Session Manager (PSM) are the most valuable features. With Privileged Session Manager, you can control the password management in a centralized way. You can activate these features in a session; the session isolation and recording. You apply the full intermediation principle. So, you must pass through CyberArk PAM to get access to the target system. You don't need to know the password, and everything that you do is registered and auditable. In this case, no one gets to touch the password directly. Also, you can implement detection and response behavior in case of a breach."
"I love how easily we could operate within Password Vault and get things done. It was almost effortless."
"CyberArk has a lot of modules."
"The most valuable aspects of the solution include password management and Rest API retrieval of vaulted credentials."
"We can make a policy that affects everybody instantly."
"The technical support for this solution is very good. If I was to rate it on a scale of one to five, I would give it a five."
"Rather than multiple tools for maintaining regulatory compliance around passwords and privileged accounts, we have centralized as much as possible with CyberArk. This is now a one stop shop for end users to access their elevated credentials."
 

Cons

"The price of the solution could improve."
"It would be good if the AWS Secrets Manager were more customizable."
"There is a need for better environmental implementation, such as having a security fund as a solution."
"The sidecar feature has room for improvement."
"There is room for improvement in terms of integrating with certain other platforms."
"If you don't have enterprise support, then you will not be able to get through to them to get the help. It is not only applicable to AWS Secrets Manager. It is also applicable to any service on AWS."
"If you add one more layer of security to AWS Secrets Manager, even the programmer will not be able to see the secrets."
"We occasionally have problems with rate limits, although that is a problem more generally with AWS."
"I would like to see better automation in granting access, better tools, more efficient tools, to be able to customize the solution that CyberArk provides."
"They need to provide better training for the System Integrator."
"CyberArk Enterprise Password Vault must incorporate connectors for password and session managers in the marketplace."
"CyberArk PAM is a very broad product as everyone's requirements for implementation are different. In our particular case, the initial implementation was planned and developed by people who didn't know our specific network requirements, so the initial implementation needed to be tweaked over time. While this is normal, at the time all these "major" changes required CyberArk professional services to come in-plant and "assist" with the changes."
"We don't often contact technical support, but when we do it, the response could be faster and better."
"The product could be easier to use. More work needs to be done on this aspect; it is not good enough yet. It also takes up a lot of server space. Sometimes we need to use up to seven servers."
"Performance of PIM could be better and intended for usability as well as security."
"This product needs professional consulting services to onboard accounts effectively based user profiles."
 

Pricing and Cost Advice

"We purchase a monthly license for the product."
"The cost is somewhat high."
"I don't believe there is a license cost for the solution."
"We've observed that AWS Secrets Manager pricing is based on a per-secret-per-month model. As a result, we prefer to divide our secrets into individual pieces to increase security and grant specific access permissions to certain secrets, systems, or individuals. However, this approach results in higher costs. Therefore, we have been exploring ways to combine our secrets into groups to reduce expenses and simplify management. Nonetheless, we acknowledge that this issue may not be related to the secret manager's functionality."
"The solution is expensive."
"I'm a technician so I don't handle the licensing for CyberArk Privileged Access Manager, but I know that the price for the core license is about €140 per year. There's another type of license, the external vendor license, and that's about €600 and you can manage twenty devices. From what I know, the price for one device in a subscription is about €65 per year. You can buy the CyberArk Endpoint Privilege Manager too, or you can buy some other application or application license with CyberArk Privileged Access Manager, but all other features, such as the Analytics Server is included in the basic CyberArk license. With WALLIX, you need to buy separate licenses for the features."
"There are no additional costs other than the standard licensing fees."
"CyberArk provides all the features bundled. This is compared to other vendors who provide them as a different license for each functionality."
"The price of CyberArk Privileged Access Manager is expensive. There are no other fees other than the standard licensing fees."
"With reducing the privileged account access, there has been a huge improvement. They are now bringing more accounts on a little at a time."
"The product’s pricing is feasible for enterprise customers. The pricing is expensive for smaller businesses. You need to pay additional costs for service implementation and local support."
"I'm aware that the organization had purchased licensing for almost all of CyberArk's solutions including licensing for PTA, EPM, and the Application Identity Manager. But when it comes to PSM, this is one of the components where there's an additional charge for any extra PSMs that you want to deploy. I believe that there's some rider where the vendor has a bit of leeway to, at times, charge a premium on whatever additional services you may require above the board."
"The price of CyberArk support could be a little bit less. Otherwise, pricing is fine."
report
Use our free recommendation engine to learn which Enterprise Password Managers solutions are best for your needs.
801,394 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Financial Services Firm
14%
Manufacturing Company
9%
Insurance Company
6%
Educational Organization
28%
Financial Services Firm
13%
Computer Software Company
12%
Manufacturing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is better - Azure Key Vault or AWS Secrets Manager?
Azure Key Vault is a SaaS solution. You can easily store passwords and secrets securely and encrypt them. Azure Key Vault is a great solution to ensure you are compliant with security and governanc...
Which is better - HashiCorp Vault or AWS Secrets Manager?
HashiCorp Vault was designed with your needs in mind. One of the features that makes this evident is its ability to work as both a cloud-agnostic and a multi-cloud solution. As a cloud-agnostic sol...
What do you like most about AWS Secrets Manager?
The most valuable feature of AWS Secrets Manager is its seamless integration with various AWS services.
How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
What do you like most about CyberArk Privileged Access Manager?
The most valuable features of the solution are control and analytics.
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
CyberArk Privileged Access Manager comes at a high cost. But the solution is worth its price.
 

Also Known As

No data available
CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
 

Overview

 

Sample Customers

Autodesk, Clevy, Stackery
Rockwell Automation
Find out what your peers are saying about AWS Secrets Manager vs. CyberArk Privileged Access Manager and other solutions. Updated: August 2024.
801,394 professionals have used our research since 2012.