No more typing reviews! Try our Samantha, our new voice AI agent.

IBM Security Secret Server vs Idira Privileged Access Manager comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 2, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

IBM Security Secret Server
Ranking in Privileged Access Management (PAM)
20th
Average Rating
8.2
Reviews Sentiment
5.7
Number of Reviews
8
Ranking in other categories
No ranking in other categories
Idira Privileged Access Man...
Ranking in Privileged Access Management (PAM)
1st
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
231
Ranking in other categories
User Activity Monitoring (1st), Enterprise Password Managers (2nd), Mainframe Security (1st), Operational Technology (OT) Security (3rd)
 

Mindshare comparison

As of October 2026, in the Privileged Access Management (PAM) category, the mindshare of IBM Security Secret Server is 1.5%, up from 1.0% compared to the previous year. The mindshare of Idira Privileged Access Manager is 8.6%, down from 16.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Privileged Access Management (PAM) Mindshare Distribution
ProductMindshare (%)
Idira Privileged Access Manager8.6%
IBM Security Secret Server1.5%
Other89.9%
Privileged Access Management (PAM)
 

Featured Reviews

AsifIqbal - PeerSpot reviewer
Chief Information Security Officer at a insurance company with 501-1,000 employees
Privileged access monitoring has strengthened identity control and improved security posture
I find the monitoring and recording parts of IBM Security Secret Server to be the most valuable features. Password vaulting is somewhat typical, but I rate monitoring and recording as very good features, along with ease of deployment. The reporting tools in IBM Security Secret Server have helped me identify vulnerabilities. From the monitoring part, you can somewhat cover the identity vulnerability aspect. However, for identity vulnerability, I think the best approach is to use IAM rather than PAM. It is easy to integrate IBM Security Secret Server with cybersecurity frameworks, which is a very important aspect. When we are improving our attack surface, identity is the most important thing that we need to cover, and PAM will play a very crucial role in improving our cybersecurity framework and architecture. The main benefits that IBM Security Secret Server provides for me include complete control over the privileged identities, which are the main sources that can have the privilege to make numerous changes on the system. If we protect these identities through PAM and provide elevation on their accounts when required, then we can improve our security posture and infrastructure security.
Mahmudul Hoque Khan - PeerSpot reviewer
Lead Engineer at intelQong Technology
Centralized access has improved privileged control and visibility yet still needs better integrations
While the access control capabilities are useful, streamlining some configuration and policy management workflows could enhance the user experience for administrators. A simpler interface for creating access policies and quickly identifying unusual activities would make day-to-day administration more efficient. Stronger integration with existing identity data and secret management could be a significant improvement for Idira Privileged Access Manager. Deeper integration with cloud solutions would make it easier to correlate privileged access activity with other security events. I would also appreciate more flexible reporting and dashboards so administrators can swiftly see access patterns and unusual privileged access from a single view.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The main benefits that IBM Security Secret Server provides for me include complete control over the privileged identities, which are the main sources that can have the privilege to make numerous changes on the system, and if we protect these identities through PAM and provide elevation on their accounts when required, then we can improve our security posture and infrastructure security."
"This product has been able to cover most of the requests from our customers."
"What I like best about IBM Security Secret Server is its single-access console. It's also easy to manage and fulfills the requirements with the least resistance."
"Centralized Password Management: Our client has more than 400 geographical locations and approximately ten employees work at each location."
"It is one of the most well-known names in this field."
"Access to privileged, shared credentials is simplified by optimizing the whole workflow and approval processes."
"One of the most valuable features is scalability, and how it allows you to scale it without affecting the underlying core components."
"As a PAM solution, Secret Server performs all the use cases in our environment."
"CyberArk PAS is our go-to solution for securing against the pass the hash attack vector and auditing privileged account usage."
"The most valuable feature of the solution stems from the fact that it's the best in the market. I haven't seen any other PAM solutions better than CyberArk Enterprise Password Vault."
"CyberArk Privileged Access Manager’s ability to safeguard credentials for our organization is very important because it helps in managing the keys to the kingdom, especially the privileged access for various platforms."
"We found the initial setup to be easy."
"Creating policies and the password rotation feature have been valuable. We don't have to memorize our password for the ADM account."
"The main, most valuable aspect is its capability to secure our environment."
"The flexibility of integrating with other technologies is important because of a lot of applications - a lot of COTS products - are not supported when we are bringing the application IDs. The CyberArk platform provides a lot of opportunities to do customization."
"This solution is quite efficient."
 

Cons

"I mention that password vaulting and password rotation in IBM Security Secret Server are basically the same thing, and it becomes somewhat complex when integrating a different system with them because it requires API development."
"Secret Server should have the ability to discover privileged accounts in the servers, like the administrator or users, from SQL and Oracle without having to import a script."
"What needs improvement in IBM Security Secret Server is support. The local partner provides good support, but IBM itself doesn't. Most of the time, the IBM support team does not aggressively resolve issues reported through chat or the IBM website."
"The newer interface is maybe confusing old customer that using previous one from their point of views, I think they will need little pass of time to be familiar with."
"It would be preferable if the full proxy was included in the IBM Security Secret Server."
"The newer interface is more difficult to use than the previous one, and consequently, new users might need more training."
"The nonclustered index is working in an area with a problem that needs improvement."
"Unfortunately, the technical support is not very responsive because we purchased it from IBM; however, the actual support comes from Thycotic."
"Sometimes critical issues require follow-ups, as the support team doesn't always recognize the urgency of a critical ticket immediately."
"The issue of technical support is crucial, as there are not many specialized partners available in Brazil to provide this service. While English language support is of good quality, there is a significant shortage of partners capable of meeting the demand locally."
"There are upwards of six components you need to set it up. And you might need anywhere from two to five servers. It takes some work to set that up, especially in a larger environment."
"Over the past seven years, I have seen a lot of ups and downs with the product, but now I am happy with the version that we are using now."
"CyberArk has to continue to evolve with that threat landscape to make sure that they're still protecting those credentials that are owned by those that have privileged accounts in the firms."
"More additional features as far as the REST is concerned, because we have something which was the predecessor to REST. A lot of the features which were in the predecessor have not necessarily been ported over to REST yet."
"For users to access a system via CyberArk Privileged Session Manager, a universal connector needs to be coded in a language called AutoIT and its support for web browsers is so-so. Other products like Centrify have browser plugins that can help automate the process when using their products."
"CyberArk Privileged Access Manager is more expensive than its competitors, such as BeyondTrust, Delinea, and ManageEngine PAM360."
 

Pricing and Cost Advice

"I believe that we paid 35,000 or 40,000 US dollars for it."
"The price could be better. I think it's a good price for the on-premises environment and the high availability for enterprises the solution provides."
"My rating for the IBM Security Secret Server pricing is seven out of ten. It could be cheaper."
"CyberArk is very expensive and there are additional fees for add-ons."
"It's per-company, license-based."
"The solution is cost-effective for the features."
"It can be an expensive product."
"The main problem for the tool is its licensing. I work for a really big company. When you try to develop this as a service, usually you work with leverage teams who are formed with dozens of members. You might dedicate one FTE, or less, for something, e.g., an antivirus administrator. You might have half an FTE's effort dedicated to administering the antivirus, but then you have a team of about 30 users who might access that ticket. The problem is that CyberArk eliminated the possibility of concurrent users years ago. This is a big problem for companies who work with leverage teams. You need to pay for everyone. 40 licenses are used by 20 or 30 people. This is a big problem because licenses are not precisely cheap."
"The pricing is slightly higher compared to other solutions, but it is reasonable because there are better security features."
"It's expensive, certainly. But CyberArk is the leader in the market with regards to privileged access management. You pay a lot, but you are paying for the value that is being delivered."
"CyberArk provides all the features bundled. This is compared to other vendors who provide them as a different license for each functionality."
report
Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.
919,894 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Insurance Company
18%
Outsourcing Company
13%
Construction Company
11%
Performing Arts
7%
Outsourcing Company
12%
Financial Services Firm
11%
Manufacturing Company
10%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise2
Large Enterprise2
By reviewers
Company SizeCount
Small Business59
Midsize Enterprise43
Large Enterprise175
 

Questions from the Community

What needs improvement with IBM Security Secret Server?
I believe there is not much that can be improved for IBM Security Secret Server. Providing local support and local vendor availability would be beneficial so we are not dependent on international s...
What is your primary use case for IBM Security Secret Server?
IBM Security Secret Server serves multiple use cases for us, including the monitoring of privileged users, as well as the recording and password vaulting of their accounts, passwords, and need-base...
What advice do you have for others considering IBM Security Secret Server?
I mention that password vaulting and password rotation in IBM Security Secret Server are basically the same thing, and it becomes somewhat complex when integrating a different system with them beca...
How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
The pricing is reasonable compared to other software options we evaluated, and it is straightforward. However, overall costs depend on deployment size and licensing requirements.
What needs improvement with CyberArk Privileged Access Manager?
While the access control capabilities are useful, streamlining some configuration and policy management workflows could enhance the user experience for administrators. A simpler interface for creat...
 

Also Known As

IBM Secret Server, Secret Server, IBM Security Privileged Identity Manager
CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
 

Overview

 

Sample Customers

Information Not Available
Rockwell Automation
Find out what your peers are saying about IBM Security Secret Server vs. Idira Privileged Access Manager and other solutions. Updated: September 2026.
919,894 professionals have used our research since 2012.