We performed a comparison between AWS Secrets Manager and BeyondTrust Password Safe based on real PeerSpot user reviews.
Find out in this report how the two Enterprise Password Managers solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The product is easy to use and is inexpensive."
"The most valuable feature is security."
"All our workloads are running on AWS, so integration with our workload is much easier on AWS Secrets Manager than going with another solution such as Thycotic."
"The most valuable feature is the management of credentials."
"AWS Secrets Manager is used for storing secret information that has to be a secret from your customer and your employees."
"The API is fine and works well."
"Integrating with other services was straightforward, especially within the AWS environment."
"The solution is very scalable."
"The CI/CD and REST API are also satisfactory; the solution has a full PAM feature set and they all work well."
"Its number one feature is discovery. The discovery engine in BeyondTrust is off the charts. When they perform a discovery, you know everything there is about a server, including what software is installed. For example, if you want to group all of your database servers together, you can do that by using discovery and Smart Rules. If a server has Microsoft SQL installed, it gets put into a group based on a Smart Rule. It makes it very easy to determine what is what in your environment. As organizations grow or acquire other companies and merge, they lose track of what they have. BeyondTrust can help you throw a rope around it very rapidly."
"BeyondTrust Password Safe has good reporting and Smart Rules which makes it convenient. Though Smart Rules are convenient, those who do not have much experience with such things may find it difficult to understand how these things work. Otherwise, I find Smart Rules very convenient to work with."
"Screen recording is valuable, and integration with applications is easy. We can customize whatever we want. We did a lot of application integration using scripting."
"It simplifies your compliance and tracking to benchmark other credentials and analytics."
"BeyondTrust Password Safe is a good PAM tool."
"It provides integrated password and session management in one solution, which is important for us because, from an auditing standpoint, we are accountable for the type of access being used. We need to ensure that accounts are securely stored and there is the right type of accountability around who is gaining the access. After gaining it, how they're using it, where they're using it, etc."
"The ability to manage privileged account passwords is the most valuable feature."
"We occasionally have problems with rate limits, although that is a problem more generally with AWS."
"The solution's initial setup process is complicated."
"There is room for improvement in the pricing model."
"An area for improvement in AWS Secrets Manager could be expanding integration options beyond AWS services."
"The sidecar feature has room for improvement."
"There is a need for better environmental implementation, such as having a security fund as a solution."
"If you add one more layer of security to AWS Secrets Manager, even the programmer will not be able to see the secrets."
"It would be good if the AWS Secrets Manager were more customizable."
"When we deploy BeyondTrust, we have to deploy our own database on a SQL server. It doesn't deploy the database. I wish BeyondTrust packages the whole solution in one and includes the MySQL database so that when you deploy it, it deploys everything for you. BeyondTrust gives you the software, but you are in charge of setting up your own database. It is a single appliance just for the BeyondTrust portion but not the database. Unless that has changed in later releases, you have to set up your own database for BeyondTrust Password Safe. I find that part complex because we then need the expertise and help of the database team to set it up, which also increases the deployment time. If they can deploy the database, it will reduce the deployment time."
"If there was one thing, it would be having the documentation standardized. They should keep the documentation consistent. For example, when BeyondTrust updated one of their admin guides, they left out the information on the discovery account requirements, and then over a period of time, we ended up having to search multiple different documents to put together a string of information for a specific topic, which was problematic. It was minor, but it was problematic. Standardized documentation would be the one thing I would suggest."
"We face screensaver timeout issues and problems with the server. I would like the product to include a server visibility feature."
"The product needs to have better integration with SAP products."
"I think that BeyondTrust Password Safe could be improved with more testing. In the beginning, they were practically using customers as beta testers. Maybe the product has evolved since I last used it, but if you look at PAM, privileged access management, whatever's out there has already been done. I don't see there being any other enhancements that are being made regarding PAM, except to support more cloud-based applications."
"We weren't aware that the Password Safe virtual appliance runs on a Windows server. As part of our monthly patching process, we ran into an issue. BeyondTrust Password Safe wasn't compatible with the patching we used to put on our server."
"There is a limited capacity on the appliance, which I wasn't informed about when I purchased the product. I can have a maximum of 150 rules per appliance; any more than that and rule processing becomes very complex, especially regarding password revision. Hitting a capacity limit you don't know about can be problematic. Ideally, we would not have a limited capacity, allowing us to be in a completely managed state with password rotation for every service account, not just the highly privileged ones."
"Documentation is the primary area of improvement."
AWS Secrets Manager is ranked 3rd in Enterprise Password Managers with 12 reviews while BeyondTrust Password Safe is ranked 5th in Enterprise Password Managers with 19 reviews. AWS Secrets Manager is rated 8.8, while BeyondTrust Password Safe is rated 7.6. The top reviewer of AWS Secrets Manager writes "Seamlessly integrates with various AWS services while offering reasonable pricing". On the other hand, the top reviewer of BeyondTrust Password Safe writes "Allows us to automatically rotate passwords, set the complexity, and enforce password policies on privileged accounts". AWS Secrets Manager is most compared with Azure Key Vault, HashiCorp Vault, 1Password, CyberArk Enterprise Password Vault and Delinea Secret Server, whereas BeyondTrust Password Safe is most compared with HashiCorp Vault, Azure Key Vault, LastPass, BeyondTrust Privileged Remote Access and ManageEngine Password Manager Pro. See our AWS Secrets Manager vs. BeyondTrust Password Safe report.
See our list of best Enterprise Password Managers vendors.
We monitor all Enterprise Password Managers reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
