IBM Security Secret Server vs Idira Privileged Access Manager comparison

IBM Security Secret Server vs. Idira Privileged Access Manager

Download the complete report

Helped 913,076 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

IBM Security Secret Server

Ranking in Privileged Access Management (PAM)

20th

Average Rating

8.2

Reviews Sentiment

5.7

Number of Reviews

Ranking in other categories

No ranking in other categories

Idira Privileged Access Man...

Ranking in Privileged Access Management (PAM)

1st

Average Rating

8.6

Reviews Sentiment

6.8

Number of Reviews

230

Ranking in other categories

User Activity Monitoring (1st), Enterprise Password Managers (2nd), Mainframe Security (1st), Operational Technology (OT) Security (3rd)

Mindshare comparison

As of September 2026, in the Privileged Access Management (PAM) category, the mindshare of IBM Security Secret Server is 1.4%, up from 1.0% compared to the previous year. The mindshare of Idira Privileged Access Manager is 8.6%, down from 16.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Privileged Access Management (PAM) Mindshare Distribution
Product	Mindshare (%)
Idira Privileged Access Manager	8.6%
IBM Security Secret Server	1.4%
Other	90.0%

Privileged Access Management (PAM)

Featured Reviews

AsifIqbal

Chief Information Security Officer at a insurance company with 501-1,000 employees

Privileged access monitoring has strengthened identity control and improved security posture

I find the monitoring and recording parts of IBM Security Secret Server to be the most valuable features. Password vaulting is somewhat typical, but I rate monitoring and recording as very good features, along with ease of deployment. The reporting tools in IBM Security Secret Server have helped me identify vulnerabilities. From the monitoring part, you can somewhat cover the identity vulnerability aspect. However, for identity vulnerability, I think the best approach is to use IAM rather than PAM. It is easy to integrate IBM Security Secret Server with cybersecurity frameworks, which is a very important aspect. When we are improving our attack surface, identity is the most important thing that we need to cover, and PAM will play a very crucial role in improving our cybersecurity framework and architecture. The main benefits that IBM Security Secret Server provides for me include complete control over the privileged identities, which are the main sources that can have the privilege to make numerous changes on the system. If we protect these identities through PAM and provide elevation on their accounts when required, then we can improve our security posture and infrastructure security.

Read full review

Singaravelu C

CyberArk Engineer at Tata Consultancy

Provides full visibility into user activity and ensures secure end-to-end access across critical systems

In CyberArk Privileged Access Manager, I see room for improvement as I am working in the on-premises networks, and now we are also having the cloud-based PAM. So there, everything is maintained by the CyberArk Privileged Access Manager team, and we are only maintaining the PSM servers. So it is already upgraded from the on-premises network to the cloud network. If you ask me what we can implement beyond that, I just need a few minutes to think about what new things, because it is already an end-to-end security on-premises itself. Now, when it comes to PCloud, Privileged Cloud, it is more secure than the on-premises networks because most of the things are handled using the cloud itself. So it is an already upgraded version; we do not need to implement something new. But if you think in that way, we can have a chance to implement our things. If anything could be improved in CyberArk Privileged Access Manager, I think we could build a small agent AI in my team, we could give access to these logs—the Vault logs, PSM logs, and CPM logs. Whenever the system is going down, the AI will automatically check. If we actually implement agent AI in CyberArk Privileged Access Manager, it will check the logs, and if any errors are coming, it automatically triggers alerts and gives the solution. That is the best improvement I can think of because these days, most things are done by agent AI. So if we also implement this agent AI in CyberArk Privileged Access Manager, we can add more features.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The main benefits that IBM Security Secret Server provides for me include complete control over the privileged identities, which are the main sources that can have the privilege to make numerous changes on the system, and if we protect these identities through PAM and provide elevation on their accounts when required, then we can improve our security posture and infrastructure security."

"Stability-wise, I think it is a very good solution."

"Access to privileged, shared credentials is simplified by optimizing the whole workflow and approval processes."

"What I like best about IBM Security Secret Server is its single-access console. It's also easy to manage and fulfills the requirements with the least resistance."

"This product has been able to cover most of the requests from our customers."

"It is one of the most well-known names in this field."

"Centralized Password Management: Our client has more than 400 geographical locations and approximately ten employees work at each location."

"The live recording is a very useful feature."

More IBM Security Secret Server pros

"The combination of CPM and PSM resolves a lot of use cases."

"It is a central repository. Therefore, if someone needs to access a server, then they go through CyberArk PAM. It provides a secure way to do this and CyberArk PAM records everything. For example, if you are connecting to a Linux server, then once you get into the Linux server and if it is integrated with CyberArk, it will automatically start recording everything that is being done. In most banks, seeing the recordings is very useful. If there are any gaps or something has happened which shouldn't have happened, then we can check the logs and videos. So, it gives security, in a robust manner, to the organization."

"The value is probably the best of all of the other products which are offering the same services."

"The password rotation and cyber gateway have been quite useful."

"I see the Auto IT integration as the most valuable feature."

"The features that are most effective, like every PAM solution, include monitoring and password rotations."

"The auditing and recording functionality along with stringent password-change policies and one-time password use has made compliance with customer requirements a much clearer and easily managed process."

"If properly set up, CyberArk Enterprise Password Vault has good stability, and is a very solid tool. It can run by itself. Its most valuable features are auto password recycling and PSM."

More Idira Privileged Access Manager pros

Cons

"I mention that password vaulting and password rotation in IBM Security Secret Server are basically the same thing, and it becomes somewhat complex when integrating a different system with them because it requires API development."

"Secret Server should have the ability to discover privileged accounts in the servers, like the administrator or users, from SQL and Oracle without having to import a script."

"If you have a hosted PIM in your local environment and you plan to migrate it to some cloud-based environment, then migration will become a painful task."

"Although much has improved in last two years, the GUI for IBM products can be improved."

"The newer interface is more difficult to use than the previous one, and consequently, new users might need more training."

"The newer interface is maybe confusing old customer that using previous one from their point of views, I think they will need little pass of time to be familiar with."

"Unfortunately, the technical support is not very responsive because we purchased it from IBM; however, the actual support comes from Thycotic."

"It would be preferable if the full proxy was included in the IBM Security Secret Server."

More IBM Security Secret Server cons

"There are upwards of six components you need to set it up. And you might need anywhere from two to five servers. It takes some work to set that up, especially in a larger environment."

"One area for improvement is the plug-in development challenge. Although CyberArk provides a plug-in generator utility, it does not fully meet our needs, particularly for web-based applications. The plug-in generator currently works only for Telnet and SSH connections. We cannot generate a plug-in for web-based applications."

"Areas of CyberArk Privileged Access Manager that can be improved include offering clearer configuration options."

"The major pain point that we have is the capacity of CyberArk due to the sheer volume of NPAs that we are managing."

"CyberArk could enhance its usability by simplifying its architecture and design."

"Authentication to the PVWA utilises integration to IIS. Therefore, it is not as strong as desired."

"I sometimes require learning resources when there is a new solution for CyberArk."

"For users to access a system via CyberArk Privileged Session Manager, a universal connector needs to be coded in a language called AutoIT and its support for web browsers is so-so. Other products like Centrify have browser plugins that can help automate the process when using their products."

More Idira Privileged Access Manager cons

Pricing and Cost Advice

"I believe that we paid 35,000 or 40,000 US dollars for it."

"My rating for the IBM Security Secret Server pricing is seven out of ten. It could be cheaper."

"The price could be better. I think it's a good price for the on-premises environment and the high availability for enterprises the solution provides."

"The price of this solution is quite reasonable."

"I do not have any opinions to add about the pricing of the product."

"I would rate the tool’s pricing a six out of ten."

"I would rate CyberArk's pricing a nine out of ten, with one being cheap and ten being expensive. It's one of the most expensive solutions in the market, but it's worth it."

"CyberArk is very expensive and there are additional fees for add-ons."

"They have two types of licensing: purchase and subscription. You have to pay for each admin user, such as Microsoft admin, mail admin, database admin, etc."

"Compared to other solutions, it is costly."

"Although CyberArk Privileged Access Management is expensive, its protection capabilities outweigh the cost."

More Idira Privileged Access Manager pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.

See recommendations

913,076 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Insurance Company

19%

Outsourcing Company

13%

Construction Company

12%

Performing Arts

Outsourcing Company

12%

Financial Services Firm

12%

Manufacturing Company

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	4
Midsize Enterprise	2
Large Enterprise	2

By reviewers
Company Size	Count
Small Business	59
Midsize Enterprise	42
Large Enterprise	175

Questions from the Community

What needs improvement with IBM Security Secret Server?

I believe there is not much that can be improved for IBM Security Secret Server. Providing local support and local vendor availability would be beneficial so we are not dependent on international s...

What is your primary use case for IBM Security Secret Server?

IBM Security Secret Server serves multiple use cases for us, including the monitoring of privileged users, as well as the recording and password vaulting of their accounts, passwords, and need-base...

What advice do you have for others considering IBM Security Secret Server?

I mention that password vaulting and password rotation in IBM Security Secret Server are basically the same thing, and it becomes somewhat complex when integrating a different system with them beca...

How does Sailpoint IdentityIQ compare with CyberArk PAM?

We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...

What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?

My thoughts on the pricing of CyberArk Privileged Access Manager depend entirely on the vendors' requirements. If they want their things to be secure, they have to spend accordingly. We have four t...

What needs improvement with CyberArk Privileged Access Manager?

I believe account discovery and rolling support need to be improved. Account discovery is important when integrating with other systems, as other PAM solutions can perform account discovery and onb...

WALLIX Bastion vs IBM Security Secret Server

Comparisons

Compared 26% of the time

Delinea Secret Server vs IBM Security Secret Server

Compared 13% of the time

Fortra's Powertech Identity & Access Manager vs IBM Security Secret Server

Compared 12% of the time

Delinea Privileged Access Service vs IBM Security Secret Server

Compared 6% of the time

Okta Platform vs IBM Security Secret Server

Compared 5% of the time

More IBM Security Secret Server Competitors

Safeguard by One Identity vs Idira Privileged Access Manager

Compared 4% of the time

Teleport vs Idira Privileged Access Manager

Compared 3% of the time

Keeper Enterprise Password Manager vs Idira Privileged Access Manager

Compared 3% of the time

NetWitness Platform vs Idira Privileged Access Manager

Compared 2% of the time

Delinea Secret Server vs Idira Privileged Access Manager

Compared 2% of the time

More Idira Privileged Access Manager Competitors

Product Reports

IBM Security Secret Server

Download IBM Security Secret Server product report

Idira Privileged Access Manager

Download Idira Privileged Access Manager product report

Also Known As

IBM Secret Server, Secret Server, IBM Security Privileged Identity Manager

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault

Overview

IBM Security Secret Server provides centralized management of privileged credentials, secure access, session recording, and replay. Its pricing model is unique, being based on user count rather than system connections, making it a flexible choice for organizations.

IBM Security Secret Server enhances cybersecurity by integrating with frameworks and offering features like monitoring, high availability, and adaptable reporting. It simplifies password management, automates changes, and ensures compliance with security protocols. The platform is valued for its ease of deployment and user-friendly interface, although it can improve in areas such as the GUI and integration process. Complex high availability and disaster recovery setups are noted challenges, along with nonclustered indexing issues affecting performance. Users desire improvements in local support and migration processes.

What are the key features of IBM Security Secret Server?

Centralized Management: Streamlines credential management across systems.
Session Recording: Allows recording and replay of sessions for forensic purposes.
Integration Capabilities: Enhances security with diverse cybersecurity frameworks.
Adaptable Reporting: Provides tools for customizable reporting.
Single-Access Console: Offers a unified user experience with granular roles.

What benefits should users look for in reviews?

User-Friendly Interface: Simplifies deployment and daily operations.
Scalability: User-based pricing model ensures flexibility and cost-efficiency.
Security Compliance: Ensures adherence to security protocols with automated processes.
Audit and Reporting: Robust capabilities for auditing and compliance documentation.
Enhanced Security Posture: Integrates well with existing frameworks to bolster security.

Organizations across various industries implement IBM Security Secret Server for managing privileged access and securing critical systems. It serves financial institutions by providing a secure jump server for accessing core banking platforms and databases. IT managers benefit from workflow approvals and automated password management, ensuring compliance and boosting security posture. The platform's session recording and auditing features are crucial for sectors needing detailed activity documentation.

IBM

CyberArk Privileged Access Manager safeguards privileged accounts through password management, credential rotation, and session recording. With seamless integration and real-time monitoring, it ensures robust security across platforms.

CyberArk Privileged Access Manager is recognized for its extensive capabilities in managing and securing privileged accounts. It offers vital functionalities such as automatic password rotation, real-time session monitoring, and cross-platform integration through APIs and custom connectors. Users find the flexibility in workflows and granular access controls beneficial, particularly in protecting access across cloud and on-prem infrastructures. However, improvements in its interface, installation process, plugin support, and integration with third-party tools are often suggested. Pricing is a concern for many, along with the need for better dashboard reporting, user provisioning, and enhanced documentation. Organizations leverage this tool for encrypting and monitoring critical account activities and automating password management to bolster security.

What are the key features of CyberArk Privileged Access Manager?

Enterprise Password Vault: Provides secure storage and management of enterprise credentials.
Privilege Session Manager: Offers comprehensive session recording and monitoring.
Privileged Threat Analytics: Detects and alerts on potential credential threats.
Integration Capabilities: Easily integrates with multiple systems using APIs and custom connectors.

What benefits or ROI should users expect?

Enhanced Security: Automates and centralizes password management, reducing risk of account misuse.
Compliance Support: Ensures alignment with compliance policies through automated processes.
Operational Efficiency: Streamlines security operations with real-time monitoring and integration.
Adaptability: Protects privileged access across diverse infrastructure setups including cloud and on-prem.

CyberArk Privileged Access Manager finds substantial use in industries such as finance, healthcare, and technology, where the protection of privileged accounts is critical. These sectors rely on its capabilities to manage application credentials securely and provide safe access for developers, administrators, and vendors across various infrastructures.

Idira by Palo Alto Networks

Sample Customers

Information Not Available

Rockwell Automation

IBM Security Secret Server vs. Idira Privileged Access Manager