No more typing reviews! Try our Samantha, our new voice AI agent.

IBM Security Secret Server vs Idira Endpoint Privilege Manager comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 2, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

IBM Security Secret Server
Ranking in Privileged Access Management (PAM)
20th
Average Rating
8.2
Reviews Sentiment
5.7
Number of Reviews
8
Ranking in other categories
No ranking in other categories
Idira Endpoint Privilege Ma...
Ranking in Privileged Access Management (PAM)
7th
Average Rating
8.2
Reviews Sentiment
6.8
Number of Reviews
38
Ranking in other categories
Endpoint Compliance (5th), Anti-Malware Tools (12th), Application Control (5th), Ransomware Protection (5th)
 

Mindshare comparison

As of November 2026, in the Privileged Access Management (PAM) category, the mindshare of IBM Security Secret Server is 1.5%, up from 1.0% compared to the previous year. The mindshare of Idira Endpoint Privilege Manager is 2.6%, down from 3.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Privileged Access Management (PAM) Mindshare Distribution
ProductMindshare (%)
Idira Endpoint Privilege Manager2.6%
IBM Security Secret Server1.5%
Other95.9%
Privileged Access Management (PAM)
 

Featured Reviews

AsifIqbal - PeerSpot reviewer
Chief Information Security Officer at a insurance company with 501-1,000 employees
Privileged access monitoring has strengthened identity control and improved security posture
I find the monitoring and recording parts of IBM Security Secret Server to be the most valuable features. Password vaulting is somewhat typical, but I rate monitoring and recording as very good features, along with ease of deployment. The reporting tools in IBM Security Secret Server have helped me identify vulnerabilities. From the monitoring part, you can somewhat cover the identity vulnerability aspect. However, for identity vulnerability, I think the best approach is to use IAM rather than PAM. It is easy to integrate IBM Security Secret Server with cybersecurity frameworks, which is a very important aspect. When we are improving our attack surface, identity is the most important thing that we need to cover, and PAM will play a very crucial role in improving our cybersecurity framework and architecture. The main benefits that IBM Security Secret Server provides for me include complete control over the privileged identities, which are the main sources that can have the privilege to make numerous changes on the system. If we protect these identities through PAM and provide elevation on their accounts when required, then we can improve our security posture and infrastructure security.
Sumit Chavan - PeerSpot reviewer
Lead Consultant at a tech vendor with 501-1,000 employees
Helps secure the infrastructure and control users with admin rights
There are many features that are currently missing. A customization option is required for certain policies. For instance, if we need to stop PowerShell scripting, we have to create a different policy for that. Being able to create a sub-level policy within a top-level policy would be good. Currently, no user-based policy option is available inside the EPM console. We can only create computer-based policies. The database is available, but there is a drawback in not being able to create local groups on the EPM console. We only have to depend on Active Directory. This limits infrastructure security as we depend on the Active Directory team to manage user groups. If they remove any users, we lose control. If we could create groups locally and block them or set specific policies, we would have more control. Local endpoint management is missing from the EPM site. Moreover, there is an issue with policies not running as expected when we make enhancements. We have to find multiple ways to whitelist applications or enhance policies.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"What I like best about IBM Security Secret Server is its single-access console. It's also easy to manage and fulfills the requirements with the least resistance."
"One of the most valuable features is scalability, and how it allows you to scale it without affecting the underlying core components."
"The live recording is a very useful feature."
"As a PAM solution, Secret Server performs all the use cases in our environment."
"Stability-wise, I think it is a very good solution."
"It is one of the most well-known names in this field."
"This product has been able to cover most of the requests from our customers."
"Access to privileged, shared credentials is simplified by optimizing the whole workflow and approval processes."
"Their customer support was excellent."
"The product is stable."
"The product is very flexible"
"Our setup process is moving to the cloud, which is very good. It reduces complexity."
"The most valuable feature is that it does lifecycle management and that it will change to whatever the end target is."
"What sets CyberArk apart is its continuous innovation, staying ahead of the competition."
"There are many valuable aspects of the product, but the most common feature is working with the privileges. The controls of CyberArk Endpoint Privilege Manager influence the visibility into endpoints for my customers. It allows them to granularly manage controls to prevent some malicious activities on the endpoint machine."
"I like that you can remove the admin rights from the user's computer and have control over the environment."
 

Cons

"The newer interface is more difficult to use than the previous one, and consequently, new users might need more training."
"What needs improvement in IBM Security Secret Server is support. The local partner provides good support, but IBM itself doesn't. Most of the time, the IBM support team does not aggressively resolve issues reported through chat or the IBM website."
"It would be preferable if the full proxy was included in the IBM Security Secret Server."
"Unfortunately, the technical support is not very responsive because we purchased it from IBM; however, the actual support comes from Thycotic."
"The newer interface is maybe confusing old customer that using previous one from their point of views, I think they will need little pass of time to be familiar with."
"The nonclustered index is working in an area with a problem that needs improvement."
"I mention that password vaulting and password rotation in IBM Security Secret Server are basically the same thing, and it becomes somewhat complex when integrating a different system with them because it requires API development."
"Although much has improved in last two years, the GUI for IBM products can be improved."
"CyberArk is a pretty heavy solution. There are a lot of moving components and a lot of things involved."
"Compared to other tools like Linux, this solution isn't as user-friendly."
"It's an old product and has many areas that can be improved."
"The product's threat protection and defense capabilities need enhancement."
"Without knowledge, you are not able to find some items as they are really hidden within the UI."
"CyberArk Endpoint Privilege Manager could be improved by simplifying the administration process, specifically when setting up policies and applications."
"One area that has room for improvement is in managing the credentials for network devices."
"The price of the product is an area of concern where improvements are required. The product's price should be made more flexible."
 

Pricing and Cost Advice

"My rating for the IBM Security Secret Server pricing is seven out of ten. It could be cheaper."
"The price could be better. I think it's a good price for the on-premises environment and the high availability for enterprises the solution provides."
"I believe that we paid 35,000 or 40,000 US dollars for it."
"The tool is a bit pricey compared to its competitors. My company does work with competitors, but I don't have hands-on experience with other software. I've just done some comparisons."
"It is an expensive solution."
"The price of CyberArk Endpoint Privilege Manager is expensive."
"I believe it's quite a reasonably priced solution. It's not very common to use CyberArk because it's a niche solution, but customers who are willing to control administrative accounts are willing to pay this money."
"CyberArk Endpoint Privilege Manager has a very high price, so it's a one out of ten for me in terms of pricing."
"Pricing depends on how many devices you use. Right now, on-premise, it costs us a little, but it's worth it. It seems like the cloud solution is much more expensive. We got this solution one year ago, and it's like we bought the solution, and now they are not going to support it on-premise anymore. We are in the implementation phase, and we missed this, and we already paid for the licenses. This is wasted time from my perspective, and CyberArk should be more customer-friendly."
"I think that it was in the range of $200,000 that had to get approved."
"The professional services for one eight-hour day would be $1,800."
report
Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Insurance Company
18%
Outsourcing Company
13%
Construction Company
11%
Performing Arts
7%
Financial Services Firm
12%
Manufacturing Company
11%
Outsourcing Company
11%
Construction Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise2
Large Enterprise2
By reviewers
Company SizeCount
Small Business18
Midsize Enterprise8
Large Enterprise20
 

Questions from the Community

What needs improvement with IBM Security Secret Server?
I believe there is not much that can be improved for IBM Security Secret Server. Providing local support and local vendor availability would be beneficial so we are not dependent on international s...
What is your primary use case for IBM Security Secret Server?
IBM Security Secret Server serves multiple use cases for us, including the monitoring of privileged users, as well as the recording and password vaulting of their accounts, passwords, and need-base...
What advice do you have for others considering IBM Security Secret Server?
I mention that password vaulting and password rotation in IBM Security Secret Server are basically the same thing, and it becomes somewhat complex when integrating a different system with them beca...
Looking for recommendations and a pros/cons template for software to detect insider threats
This is an inside-out --- outside-in --- inside-in question, as an insider can be an outsider as well. There is no short answer other than a blend of a PAM tool with Behavioral Analytics and Endpo...
What is your experience regarding pricing and costs for CyberArk Endpoint Privilege Manager?
I believe it's quite a reasonably priced solution. It's not very common to use CyberArk because it's a niche solution, but customers who are willing to control administrative accounts are willing t...
What needs improvement with CyberArk Endpoint Privilege Manager?
While CyberArk Endpoint Privilege Manager is a great tool, I believe the functionality could be wider. If it could work not only with permissions but also involve pure EDR tasks or User and Entity ...
 

Also Known As

IBM Secret Server, Secret Server, IBM Security Privileged Identity Manager
Viewfinity
 

Overview

Find out what your peers are saying about IBM Security Secret Server vs. Idira Endpoint Privilege Manager and other solutions. Updated: September 2026.
920,769 professionals have used our research since 2012.