Try our new research platform with insights from 80,000+ expert users

CyberArk Privileged Access Manager vs HashiCorp Vault comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 16, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.1
CyberArk Privileged Access Manager enhances security by automating tasks, improving compliance, reducing breaches, and increasing efficiency and ROI.
No sentiment score available
 

Customer Service

Sentiment score
6.5
CyberArk's support is efficient and knowledgeable, but challenges exist in response times, communication, and handling complex cases.
No sentiment score available
Response times seem to correlate with the strength of the relationship with the CyberArk account manager, with quicker responses when rapport is strong.
They are helpful, but complex issues can take a long time to resolve, which can delay solutions for urgent customer issues.
CyberArk's customer service has improved recently and is now very responsive.
 

Scalability Issues

Sentiment score
7.7
CyberArk Privileged Access Manager is highly scalable and versatile, though complexity in licensing and configurations may pose challenges.
Sentiment score
7.5
HashiCorp Vault offers robust scalability, performing well on Kubernetes, with scalability ratings of seven to eight out of ten.
We started small and expanded it to an enterprise level, and are now moving to the cloud for further growth.
We have different operating systems, database systems, and decentralized infrastructure.
I find SaaS to be more promising in scalability.
 

Stability Issues

Sentiment score
7.8
CyberArk Privileged Access Manager is stable, with issues mainly from configuration, infrastructure, or resource limitations rather than the software.
Sentiment score
7.7
HashiCorp Vault is stable with high ratings despite occasional issues, praised for machine communication but limited for regional scaling.
Proper fine-tuning and expertise ensure the product performs well.
Overall, the stability of the solution is high.
It has a large customer base and positive feedback within my network.
 

Room For Improvement

CyberArk Privileged Access Manager needs UI, integration, and performance improvements, simpler setup, cost-effectiveness, and more plugins for usability.
HashiCorp Vault struggles with cloud integration, documentation, costs, UI, support, automation, customization, stability, pricing, and plugin features.
They want everything to be on the cloud, but even in the SaaS version of CyberArk Privileged Access Manager, they need to deploy some servers on-premises.
In the long term, I would like to see these processes simplified, especially for on-premise installations.
Incorporating automated onboarding and offboarding features directly into the product would reduce the maintenance burden on administrators.
 

Setup Cost

CyberArk Privileged Access Manager is costly, especially for small businesses, though discounts exist for larger purchases.
HashiCorp Vault's enterprise edition offers valuable features but is costly, with some users finding the pricing model confusing.
CyberArk is expensive compared to other products I know.
CyberArk's SaaS solution is particularly expensive.
CyberArk is comparatively expensive compared to other PAM solutions, such as Delinea, especially during renewal.
 

Valuable Features

CyberArk Privileged Access Manager enhances security with password management, session monitoring, integration flexibility, and real-time auditing for compliance.
Consul offers seamless integration, robust encryption, and user-friendly APIs for secure, cloud-agnostic management with easy CI/CD expansion.
CyberArk Privileged Access Manager helps ensure data privacy because we now know who is using which credentials and at what time.
For me, CyberArk Privileged Access Manager's most valuable features are password and session management.
After giving access, it continually checks if the user is the same user.
 

Categories and Ranking

CyberArk Privileged Access ...
Ranking in Enterprise Password Managers
3rd
Average Rating
8.6
Reviews Sentiment
6.9
Number of Reviews
197
Ranking in other categories
User Activity Monitoring (1st), Privileged Access Management (PAM) (1st), Mainframe Security (2nd), Operational Technology (OT) Security (3rd)
HashiCorp Vault
Ranking in Enterprise Password Managers
4th
Average Rating
8.2
Reviews Sentiment
7.2
Number of Reviews
16
Ranking in other categories
No ranking in other categories
 

Featured Reviews

SatishIyer - PeerSpot reviewer
Lets you ensure relevant, compliant access in good time and with an audit trail, yet lacks clarity on MITRE ATT&CK
When I was a component owner for PAM's Privileged Threat Analytics (PTA) component, what I wanted was a clear mapping to the MITRE ATT&CK framework, a framework which has a comprehensive list of use cases. We reached out to the vendor and asked them how much coverage they have of the uses cases found on MITRE, which would have given us a better view of things while I was the product owner. Unfortunately they did not have the capability of mapping onto MITRE's framework at that time. PTA is essentially the monitoring interface of the broker (e.g. Privileged Access Management, the Vault, CPM, PSM, etc.), and it's where you can capture your broker bypass and perform related actions. For this reason, we thought that this kind of mapping would be required, but CyberArk informed us that they did not have the capability we had in mind with regard to MITRE ATT&CK. I am not sure what the situation is now, but it would definitely help to have that kind of alignment with one of the more well-known frameworks like MITRE. For CyberArk as a vendor, it would also help them to clearly spell out in which areas they have full functionality and in which ares they have partial or none. Of course, it also greatly benefits the customers when they're evaluating the product.
KishoreKumar1 - PeerSpot reviewer
Useful for machine-to-machine communication and has secret engine feature
The feature I find most beneficial in HashiCorp Vault is the secret engine. It integrates smoothly with many applications, making it easy to set up and implement quickly. This allows you to test it easily and see good results rapidly. When you integrate an internal API or application, it quickly manages that application's secrets. The access management feature in HashiCorp is great, especially if you are considering situations where users are getting onboarded. They can manage their passwords themselves, and it integrates well with Active Directory or any other directory services. This is particularly useful for user management and applications that communicate with each other without human intervention.
report
Use our free recommendation engine to learn which Enterprise Password Managers solutions are best for your needs.
824,067 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
32%
Financial Services Firm
12%
Computer Software Company
11%
Manufacturing Company
6%
Financial Services Firm
19%
Computer Software Company
15%
Manufacturing Company
8%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
What do you like most about CyberArk Privileged Access Manager?
The most valuable features of the solution are control and analytics.
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
CyberArk Privileged Access Manager comes at a high cost. But the solution is worth its price.
Which is better - HashiCorp Vault or AWS Secrets Manager?
HashiCorp Vault was designed with your needs in mind. One of the features that makes this evident is its ability to work as both a cloud-agnostic and a multi-cloud solution. As a cloud-agnostic sol...
What do you like most about HashiCorp Vault?
The feature I find most beneficial in HashiCorp Vault is the secret engine. It integrates smoothly with many applications, making it easy to set up and implement quickly. This allows you to test it...
What is your experience regarding pricing and costs for HashiCorp Vault?
The enterprise version would require considering factors like the level of support needed, the amount of secret data being stored, and replication needs. But in my case, the open-source version wor...
 

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
No data available
 

Overview

 

Sample Customers

Rockwell Automation
Adobe, SAP Ariba, Citadel, Spaceflight, Cruise
Find out what your peers are saying about CyberArk Privileged Access Manager vs. HashiCorp Vault and other solutions. Updated: December 2024.
824,067 professionals have used our research since 2012.