CyberArk Privileged Access Manager vs HashiCorp Vault comparison

CyberArk Privileged Access Manager vs. HashiCorp Vault

Download the complete report

Helped 831,265 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

CyberArk Privileged Access ...

Ranking in Enterprise Password Managers

3rd

Average Rating

8.6

Reviews Sentiment

6.9

Number of Reviews

203

Ranking in other categories

User Activity Monitoring (1st), Privileged Access Management (PAM) (1st), Mainframe Security (2nd), Operational Technology (OT) Security (3rd)

HashiCorp Vault

Ranking in Enterprise Password Managers

4th

Average Rating

8.2

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

No ranking in other categories

Featured Reviews

Lasantha Wijesinghe

Cybersecurity Specialist at a comms service provider with 5,001-10,000 employees

We have visibility and control through real-time user behavior analytics

It took us some time to realize its benefits because there was a learning curve for us. It took us about a year to get our heads around this product and start effectively using it. It is a journey. It takes at least five years for any company to make this product very useful and reach maturity. It is not only the product's fault. The company needs to have a vision, and the company culture needs to go with it. Senior leadership needs to support the vision. You need to have lots of ingredients for success. If everything is in place, you will see success after one year. In the first year, it is a struggle for everybody. My company was bought by a bigger company, and they were very new to privileged access management. Everybody was struggling. The advice I would give is to have a good vision for privileged access management. You need dedicated teams, senior management support, and proper company policies and standards before implementing the solution. Start building knowledge slowly and avoid jumping into the deep end without preparation. I would rate CyberArk Privileged Access Manager a nine out of ten.

Read full review

KishoreKumar1

Architect at Accenture

Useful for machine-to-machine communication and has secret engine feature

The feature I find most beneficial in HashiCorp Vault is the secret engine. It integrates smoothly with many applications, making it easy to set up and implement quickly. This allows you to test it easily and see good results rapidly. When you integrate an internal API or application, it quickly manages that application's secrets. The access management feature in HashiCorp is great, especially if you are considering situations where users are getting onboarded. They can manage their passwords themselves, and it integrates well with Active Directory or any other directory services. This is particularly useful for user management and applications that communicate with each other without human intervention.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"When we started with RPA, there was a requirement that every credential and the bots themselves be protected through the PAM system. From the get-go, we've had CyberArk in the middle... We've got a pretty robust RPA implementation with our PAM platform. Users, bots, the credentials — everything is managed via our PAM solution."

"We have the identity provider for all the authentication processes. However, sometimes, we need access to different applications for customers or clients that are not integrated into the identity provider. For these, we need to store a password to gain access. For example, we use the CyberArk Password Vault for third-party services. This vault needs to be shared with many people in our company."

"On the customer accounts side, our account managers are responsive. If you ask them, they will get you whomever you need."

"PSM enables after-hours monitoring."

"It is very simple to use."

"There are no issues with scalability. Our clients are very happy to use the product."

"The most valuable feature of CyberArk Privileged Access Manager is privileged threat analytics."

"I would rate this solution a nine out of ten."

More CyberArk Privileged Access Manager pros

"The tool's dynamic rotation of the password credentials is good."

"It is a good product to consider for companies who are looking to build on-premise or hybrid infrastructure."

"This solution is easy to use and to integrate."

"The most valuable feature of HashiCorp Vault is that it's an open source solution. Second, it's cloud agnostic, so it's very easy to maintain and control, which is why we prefer HashiCorp."

"The most valuable feature of HashiCorp Vault is the management of tickets in the pipeline."

"The feature I find most beneficial in HashiCorp Vault is the secret engine. It integrates smoothly with many applications, making it easy to set up and implement quickly. This allows you to test it easily and see good results rapidly. When you integrate an internal API or application, it quickly manages that application's secrets."

"We were using it because we have compliance requirements around secret management. Having a secure vault and encrypting data was an additional requirement. When we looked at it first, we were just looking for a vault, like a lockbox. The greatest benefit of HashiCorp is its ability to manage encryption on the fly. It provides encryption of data at rest, in use, in transit, on the fly, and linked with applications, which was really attractive."

"For me, the most valuable features include that it's easy to manage and maintain the password API for retrieving passwords and other things."

More HashiCorp Vault pros

Cons

"It is complicated to deploy for Windows servers compared to other vendors."

"I think having a distributed architecture would certainly help this solution."

"The support services could act faster when people reach out to resolve issues."

"Tech support staff can be more proactive."

"Over the past seven years, I have seen a lot of ups and downs with the product."

"Enhanced PSM support for Java based applications."

"The product could be easier to use. More work needs to be done on this aspect; it is not good enough yet. It also takes up a lot of server space. Sometimes we need to use up to seven servers."

"it manages creds based on Organizational Units. That is, a "safe" is limited to specific OUs. That makes for very elaborate OU structure, or you risk exposing too many devices by putting most of them in fewer OUs."

More CyberArk Privileged Access Manager cons

"It would be helpful to have more advanced features."

"The solution's initial setup process is complicated."

"I would rate the stability a six out of ten. There are some bugs and glitches. We are in touch with the vendor to resolve them."

"The product is complicated to install."

"The technical support was hard to get a hold of and lacking in service."

"In my opinion, HashiCorp Vault could improve its user interface. Right now, they don't offer much in terms of a graphical interface, which means you usually have to manage things manually through API calls. I think CyberArk has a better approach because it provides a UI that integrates features across all its components, making it easier, especially for new users or those from organizations with strict licensing policies."

"The product needs to improve its customization. It should be also more like easy to plug and play."

"We could use more documentation, primarily to do with integrations."

More HashiCorp Vault cons

Pricing and Cost Advice

"Although CyberArk Privileged Access Management is expensive, its protection capabilities outweigh the cost."

"Payments have to be made on a yearly basis toward the licensing costs of the solution."

"The price of CyberArk Privileged Access Manager is expensive. There are no other fees other than the standard licensing fees."

"It's expensive, certainly. But CyberArk is the leader in the market with regards to privileged access management. You pay a lot, but you are paying for the value that is being delivered."

"With reducing the privileged account access, there has been a huge improvement. They are now bringing more accounts on a little at a time."

"Generally, I don't get involved in the licensing or the purchasing side of it, but I do know that the licenses are expensive."

"Previously, the pricing was very meager. They started publicizing and advertising the solution, growing CyberArk, as an organization. They also changed their pricing with that growth, e.g., the pricier the product, the more people who will purchase it."

"Compared to other solutions, it is costly."

More CyberArk Privileged Access Manager pricing and cost advice

"In my case, the open-source version works well. It's advisable for small to medium-scale organizations, but for large-scale organizations, you should go with the enterprise version."

"The product is expensive."

"I am using the open-source version of Vault and I would have to buy a license if I want to get support."

"The solution's cost is reasonable."

"It could do everything we wanted it to do and it is brilliant, but it is super pricey. To be fair to HashiCorp, we drove the price up with our requirements around resiliency. Because of the nature of our company, we don't really operate in the cloud."

"The AWS version is much cheaper than HashiCorp Vault."

See which vendors are best for you

Use our free recommendation engine to learn which Enterprise Password Managers solutions are best for your needs.

See recommendations

831,265 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Educational Organization

33%

Financial Services Firm

12%

Computer Software Company

11%

Manufacturing Company

Financial Services Firm

19%

Computer Software Company

15%

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?

We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...

What do you like most about CyberArk Privileged Access Manager?

The most valuable features of the solution are control and analytics.

What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?

CyberArk Privileged Access Manager is more expensive than its competitors, such as BeyondTrust, Delinea, and ManageEngine PAM360. While ManageEngine PAM360 offers similar flexibility and support at...

Which is better - HashiCorp Vault or AWS Secrets Manager?

HashiCorp Vault was designed with your needs in mind. One of the features that makes this evident is its ability to work as both a cloud-agnostic and a multi-cloud solution. As a cloud-agnostic sol...

What do you like most about HashiCorp Vault?

What is your experience regarding pricing and costs for HashiCorp Vault?

The enterprise version would require considering factors like the level of support needed, the amount of secret data being stored, and replication needs. But in my case, the open-source version wor...

Microsoft Entra ID vs CyberArk Privileged Access Manager

Comparisons

Compared 10% of the time

Delinea Secret Server vs CyberArk Privileged Access Manager

Compared 8% of the time

Cisco Identity Services Engine (ISE) vs CyberArk Privileged Access Manager

Compared 8% of the time

WALLIX Bastion vs CyberArk Privileged Access Manager

Compared 6% of the time

ManageEngine PAM360 vs CyberArk Privileged Access Manager

Compared 3% of the time

More CyberArk Privileged Access Manager Competitors

AWS Secrets Manager vs HashiCorp Vault

Compared 26% of the time

Azure Key Vault vs HashiCorp Vault

Compared 22% of the time

Bitwarden vs HashiCorp Vault

Compared 12% of the time

Keeper vs HashiCorp Vault

Compared 11% of the time

ManageEngine Password Manager Pro vs HashiCorp Vault

Compared 2% of the time

More HashiCorp Vault Competitors

Product Reports

CyberArk Privileged Access Manager

Download CyberArk Privileged Access Manager product report

CyberArk Privileged Access Manager report

HashiCorp Vault

Download HashiCorp Vault product report

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault

No data available

Learn More

CyberArk

HashiCorp

Overview

CyberArk Privileged Access Manager is a next-generation solution that allows users to secure both their applications and their confidential corporate information. It is extremely flexible and can be implemented across a variety of environments. This program runs with equal efficiency in a fully cloud-based, hybrid, or on-premises environment. Users can now protect their critical infrastructure and access it in any way that best meets their needs.

CyberArk Privileged Access Manager possesses a simplified and unified user interface. Users are able to manage the solution from one place. The UI allows users to view and manage all of the information and controls that administrators need to be able to easily access. Very often, management UIs do not have all of the controls and information streamlined in a single location. This platform provides a level of visibility that ensures users will be able to view all of their system’s most critical information at any time that they wish.

Benefits of CyberArk Privileged Access Manager

Some of CyberArk Privileged Access Manager’s benefits include:

The ability to manage IDs and permissions across a cloud environment. In a world where being able to work remotely is becoming increasingly important, CyberArk Privileged Access Manager is a very valuable tool. Administrators do not need to worry about infrastructure security when they are away from the office. They can assign and manage security credentials from anywhere in the world.
The ability to manage the program from a single centralized UI. CyberArk Privileged Access Manager’s UI contains all of the system controls and information. Users now have the ability to view and use all of their system’s most critical information and controls from one place.
The ability to automate user management tasks. Administrators can save valuable time by assigning certain management tasks to be fulfilled by the system itself. Users can now reserve their time for tasks that are most pressing. It can also allow for the system to simplify the management process by having the platform perform the most complex functions.

Reviews from Real Users

CyberArk Privileged Access Manager’s software stands out among its competitors for one very fundamental reason. CyberArk Privileged Access Manager is an all-in-one solution. Users are given the ability to accomplish with a single platform what might usually only be accomplished with multiple solutions.

PeerSpot users note the truly all-in-one nature of this solution. Mateusz K., IT Manager at a financial services firm, wrote, "It improves security in our company. We have more than 10,000 accounts that we manage in CyberArk. We use these accounts for SQLs, Windows Server, and Unix. Therefore, keeping these passwords up-to-date in another solution or software would be impossible. Now, we have some sort of a platform to manage passwords, distribute the inflow, and manage IT teams as well as making regular changes to it according to the internal security policies in our bank."

Hichem T.-B., CDO & Co-Founder at ELYTIK, noted that “This is a complete solution that can detect cyber attacks well. I have found the proxy features most valuable for fast password web access.”

HashiCorp Vault is a cloud-agnostic solution used for security and secret management. Its valuable features include integration with other HashiCorp tools, token sharing, open source nature, cloud agnosticism, and on-the-fly encryption management.

The solution provides encryption of data at rest, in use, in transit, on the fly, and linked with applications. It is free to use, and the interface is simple to navigate. HashiCorp Vault has helped organizations with its multiple authentication methods and RESTful API.

HashiCorp Vault Features

Data encryption: The solution is capable of encrypting and decrypting data, and will not store it. Organizations’ security personnel define their own encryption protocols; developers can store the encrypted data where they choose and are not obligated to design specific encryption processes.
Robust secrets: For systems such as AWS or SQL databases, Vault is able to generate secrets automatically. HashiCorp Vault is able to generate AWS keypairs with all the appropriate permissions when necessary, and when the approved time expires, will nullify them.
Secure secret storage: Any type of value or key secrets can be stored in the Vault. The Vault automatically encrypts the desired secrets before recording them into persistent storage, keeping them safe and secure. Users can record data using HCP Vault’s Consul service or disk, or choose from other options.
Nullification: Vault is able to nullify single secrets or all secrets from a particular group or specific user. This process is integral in securing systems in the event of an attack or inappropriate access.

Reviews from Real Users

“The greatest benefit of HashiCorp is its ability to manage encryption on the fly. It provides encryption of data at rest, in use, in transit, on the fly, and linked with applications, which was really attractive. The lifecycle of a key is so easy to manage in terms of rotating, revoking, and issuing. They have different auth methods, and I tried all different auth methods. It is seamless.”- Project Manager at a comms service provider.

“The most valuable feature of HashiCorp Vault is that it's an open source solution. Second, it's cloud-agnostic, so it's very easy to maintain and control, which is why we prefer HashiCorp. “ - Mohamed A., Lead DevOps Engineer at Etisalat.

Sample Customers

Rockwell Automation

Adobe, SAP Ariba, Citadel, Spaceflight, Cruise

CyberArk Privileged Access Manager vs. HashiCorp Vault