Chief Information Security Officer at a insurance company with 501-1,000 employees
Real User
Top 5
Jan 28, 2026
I believe there is not much that can be improved for IBM Security Secret Server. Providing local support and local vendor availability would be beneficial so we are not dependent on international support. I do not think IBM can add much to the product at the moment as I think everything else is very well done.
Information Security Officer at a tech services company with 11-50 employees
Real User
Jun 1, 2023
The nonclustered index is working in an area with a problem that needs improvement. In some cases, when they create some index in the tool, you may face some problems with the parallelism and some problems with the CPU. Then, sometimes you need to remove some index.
Chief Information Security Officer at a insurance company with 501-1,000 employees
Real User
Top 5
Jan 17, 2023
What needs improvement in IBM Security Secret Server is support. The local partner provides good support, but IBM itself doesn't. Most of the time, the IBM support team does not aggressively resolve issues reported through chat or the IBM website. In the next version of IBM Security Secret Server, I want to see more lightweight recording, architecture, or infrastructure requirements. Currently, it's heavy, so I want it reduced to make adapting IBM Security Secret Server much more effortless.
Cyber security consultant at a tech services company with 1,001-5,000 employees
Consultant
Nov 8, 2022
There are improvements that IBM Security Secret Server could make with respect to shared storage. For example, if you have two servers with the same users and passwords, and a user changes their password in one server, it should automatically change in the other server. With IBM Security Secret Server, you need to write some scripts to handle this. It would be beneficial if the process was simplified and had a dependency where changes on both servers would automatically occur without having to write a script. I would like to see Secret Server have the ability to discover privileged accounts in the servers, like the administrator or users, from SQL and Oracle without having to import a script, making the solution more of an out-of-the-box solution.
Head of IT Security at a financial services firm with 5,001-10,000 employees
Real User
Sep 1, 2022
It requires customization, whereas out-of-the-box integrations do not. It takes a lot of coding and customization to integrate with so many different systems. It is not a networking device, it does not support the full proxy features for all PAM, or Privilege Access Management, access for any target systems. Other vendors have a full proxy feature, so we can't access the target system unless we go through the PAM server on the network. Because the IBM Security Secret Server lacks that feature, it will be proxified by the application rather than the network layer. It would be preferable if the full proxy was included in the IBM Security Secret Server. It's also not a hard-end appliance like BeyondTrust or One Identity. Now, rather than just the application, you must obtain the hardware, install the operating system, and manage the operating system. The application is then installed. Other vendors, as I have mentioned, such as BeyondTrust and One Identity, simply retrace the entire package, a hardened appliance. You do not have access to the operating system, you do not bear the burden of maintaining the operating system, you do not maintain the operating system's license, you do not install the SQL Server, and you do not install the web server. You don't do anything. You install and configure the entire package.
Senior Presales Specialist at a computer software company with 11-50 employees
Real User
Jan 30, 2022
I Think Vendor always working on that as every period of time not so long a new release version is available which is mean research and development team always working and alerted for any request or change. The newer interface is maybe confusing old customer that using previous one from their point of views, I think they will need little pass of time to be familiar with. But from my point of view, it more organized and allows arranging some lists in more than one mode".
IBM Security Secret Server provides centralized management of privileged credentials, secure access, session recording, and replay. Its pricing model is unique, being based on user count rather than system connections, making it a flexible choice for organizations.IBM Security Secret Server enhances cybersecurity by integrating with frameworks and offering features like monitoring, high availability, and adaptable reporting. It simplifies password management, automates changes, and ensures...
I believe there is not much that can be improved for IBM Security Secret Server. Providing local support and local vendor availability would be beneficial so we are not dependent on international support. I do not think IBM can add much to the product at the moment as I think everything else is very well done.
The nonclustered index is working in an area with a problem that needs improvement. In some cases, when they create some index in the tool, you may face some problems with the parallelism and some problems with the CPU. Then, sometimes you need to remove some index.
What needs improvement in IBM Security Secret Server is support. The local partner provides good support, but IBM itself doesn't. Most of the time, the IBM support team does not aggressively resolve issues reported through chat or the IBM website. In the next version of IBM Security Secret Server, I want to see more lightweight recording, architecture, or infrastructure requirements. Currently, it's heavy, so I want it reduced to make adapting IBM Security Secret Server much more effortless.
There are improvements that IBM Security Secret Server could make with respect to shared storage. For example, if you have two servers with the same users and passwords, and a user changes their password in one server, it should automatically change in the other server. With IBM Security Secret Server, you need to write some scripts to handle this. It would be beneficial if the process was simplified and had a dependency where changes on both servers would automatically occur without having to write a script. I would like to see Secret Server have the ability to discover privileged accounts in the servers, like the administrator or users, from SQL and Oracle without having to import a script, making the solution more of an out-of-the-box solution.
It requires customization, whereas out-of-the-box integrations do not. It takes a lot of coding and customization to integrate with so many different systems. It is not a networking device, it does not support the full proxy features for all PAM, or Privilege Access Management, access for any target systems. Other vendors have a full proxy feature, so we can't access the target system unless we go through the PAM server on the network. Because the IBM Security Secret Server lacks that feature, it will be proxified by the application rather than the network layer. It would be preferable if the full proxy was included in the IBM Security Secret Server. It's also not a hard-end appliance like BeyondTrust or One Identity. Now, rather than just the application, you must obtain the hardware, install the operating system, and manage the operating system. The application is then installed. Other vendors, as I have mentioned, such as BeyondTrust and One Identity, simply retrace the entire package, a hardened appliance. You do not have access to the operating system, you do not bear the burden of maintaining the operating system, you do not maintain the operating system's license, you do not install the SQL Server, and you do not install the web server. You don't do anything. You install and configure the entire package.
I Think Vendor always working on that as every period of time not so long a new release version is available which is mean research and development team always working and alerted for any request or change. The newer interface is maybe confusing old customer that using previous one from their point of views, I think they will need little pass of time to be familiar with. But from my point of view, it more organized and allows arranging some lists in more than one mode".