BeyondTrust Endpoint Privilege Management vs IBM Security Secret Server comparison

BeyondTrust Endpoint Privilege Management vs. IBM Security Secret Server

Download the complete report

Helped 909,725 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

BeyondTrust Endpoint Privil...

Ranking in Privileged Access Management (PAM)

10th

Average Rating

8.0

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Anti-Malware Tools (22nd)

IBM Security Secret Server

Ranking in Privileged Access Management (PAM)

20th

Average Rating

8.2

Reviews Sentiment

5.7

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of August 2026, in the Privileged Access Management (PAM) category, the mindshare of BeyondTrust Endpoint Privilege Management is 3.1%, down from 3.9% compared to the previous year. The mindshare of IBM Security Secret Server is 1.4%, up from 1.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Privileged Access Management (PAM) Mindshare Distribution
Product	Mindshare (%)
BeyondTrust Endpoint Privilege Management	3.1%
IBM Security Secret Server	1.4%
Other	95.5%

Privileged Access Management (PAM)

Featured Reviews

NasirAkbar

Presales Engineer at SAUDI PARAMOUNT COMPUTER SYSTEMS

Improved security measures with some support response delays

For BeyondTrust Endpoint Privilege Management, the best features are the security measures we have, such as not sharing any credentials with employees in the bank sector. For security purposes in BeyondTrust Endpoint Privilege Management, when employees are working in the system, we can make a recording of the video, showing the modifications and configurations they made, allowing us to see everything. The recording option is available. BeyondTrust Endpoint Privilege Management positively impacts the organization by providing more security and benefits, such as ensuring that if modifications are made, we can see where mistakes occurred in the recording video. The recording video in BeyondTrust Endpoint Privilege Management allows us to see modifications and mistakes, which is an advantage.

Read full review

AsifIqbal

Chief Information Security Officer at a insurance company with 501-1,000 employees

Privileged access monitoring has strengthened identity control and improved security posture

I find the monitoring and recording parts of IBM Security Secret Server to be the most valuable features. Password vaulting is somewhat typical, but I rate monitoring and recording as very good features, along with ease of deployment. The reporting tools in IBM Security Secret Server have helped me identify vulnerabilities. From the monitoring part, you can somewhat cover the identity vulnerability aspect. However, for identity vulnerability, I think the best approach is to use IAM rather than PAM. It is easy to integrate IBM Security Secret Server with cybersecurity frameworks, which is a very important aspect. When we are improving our attack surface, identity is the most important thing that we need to cover, and PAM will play a very crucial role in improving our cybersecurity framework and architecture. The main benefits that IBM Security Secret Server provides for me include complete control over the privileged identities, which are the main sources that can have the privilege to make numerous changes on the system. If we protect these identities through PAM and provide elevation on their accounts when required, then we can improve our security posture and infrastructure security.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"One of the valuable features is the absence of any local user in a unique system. All users are defined in the AD; communication is only between Unix and AD."

"AI adds value by automating the onboarding of assets and using smart rules to assign privileges."

"It reduces major vulnerabilities by removing local administrator privileges."

"The privileged access management into sensitive systems is very valuable. That includes control from the endpoint all the way through to the managing of passwords and credentials that are used by the person to access the sensitive information. It's very useful, because nobody ever really maintains passwords for those endpoint systems. It's maintained in the Dropbox password file."

"I find the comprehensive Privilege Access Management features valuable, including automation, and the ability to integrate with applications and the Windows operating system."

"The solution is very fast, offers good authentication, makes managing passwords and access easy, ensures that access is granted only to respective people and organizations, and BeyondTrust has very good integrations with quite a lot of security vendors such as SailPoint, IBM, FortiGuard, and Splunk."

"Technical support is good."

"Overall, I would rate this solution a nine out of ten."

More BeyondTrust Endpoint Privilege Management pros

"The live recording is a very useful feature."

"Centralized Password Management: Our client has more than 400 geographical locations and approximately ten employees work at each location."

"Stability-wise, I think it is a very good solution."

"The main benefits that IBM Security Secret Server provides for me include complete control over the privileged identities, which are the main sources that can have the privilege to make numerous changes on the system, and if we protect these identities through PAM and provide elevation on their accounts when required, then we can improve our security posture and infrastructure security."

"Access to privileged, shared credentials is simplified by optimizing the whole workflow and approval processes."

"What I like best about IBM Security Secret Server is its single-access console. It's also easy to manage and fulfills the requirements with the least resistance."

"One of the most valuable features is scalability, and how it allows you to scale it without affecting the underlying core components."

"It is one of the most well-known names in this field."

More IBM Security Secret Server pros

Cons

"They need to come up with better integrative options which should be customer-centric."

"All products have room to improve. I would like to see support for many more systems, such as AS400."

"They are doing good for now, but they should start to consider tight integration with Mac solutions. There should be more integration with Mac. There should be Active Directory (AD) Bridging. Thycotic and Centrify have it currently because they merged and joined forces, and it was a feature available in Centrify. So, basically, they joined forces to create a kind of perfect product. If you have a hybrid or mixed environment with Windows and Mac, your Active Directory can only manage or enforce policies on Windows, but what about your Mac devices? How do you control them? So, AD Bridging will act as a bridge to bring all your Mac devices into your Active Directory. This way you have full control over your entire environment."

"Reporting analytics is one of the areas that can be improved."

"What's bothering me, which is true of all of them, is that sometimes, the error codes that come up don't necessarily get reflected in the searches within their support sites or they're out of date. I would rather search by an error code than type in the text and search for it by text because the error code means that it is programmatic, and it is known. It might not be desired, but it at least is not unexpected. If you don't have an error code, you just get an anomalous error, and if it is lengthy, it can be difficult to search and find the specific instance you're looking for. This is something I would like all of them to improve. BeyondTrust, CyberArk, Centrify, and Thycotic could do some improvements in staying up to date and actually allowing you to search based on the product version. They are assuming that everybody is on their way to release. They put out a new release, but it is not reflected on the support site, which makes no sense to me, especially when they revamp all the error codes. They all have been guilty of this in some way."

"How the accounts are presented in the solution's UI can be improved."

"The initial setup was very difficult. Even if you are an expert in EPM, it is still very difficult."

"Improvements could focus on adding more AI features to automate processes that are currently manual or challenging for end users."

More BeyondTrust Endpoint Privilege Management cons

"The newer interface is maybe confusing old customer that using previous one from their point of views, I think they will need little pass of time to be familiar with."

"What needs improvement in IBM Security Secret Server is support. The local partner provides good support, but IBM itself doesn't. Most of the time, the IBM support team does not aggressively resolve issues reported through chat or the IBM website."

"The nonclustered index is working in an area with a problem that needs improvement."

"I mention that password vaulting and password rotation in IBM Security Secret Server are basically the same thing, and it becomes somewhat complex when integrating a different system with them because it requires API development."

"Although much has improved in last two years, the GUI for IBM products can be improved."

"If you have a hosted PIM in your local environment and you plan to migrate it to some cloud-based environment, then migration will become a painful task."

"It would be preferable if the full proxy was included in the IBM Security Secret Server."

"Secret Server should have the ability to discover privileged accounts in the servers, like the administrator or users, from SQL and Oracle without having to import a script."

More IBM Security Secret Server cons

Pricing and Cost Advice

"It was very expensive."

"I'm sure everyone should have the cluster environment, which means more expensive, anyway, cheaper than the other solutions."

"The solution's pricing is high."

"The product’s licensing is different for Windows, Linux, and Mac. The tool’s licensing is yearly."

"It is relatively more cost-effective compared to the competing product."

"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a seven out of ten."

"What BeyondTrust was providing was user-based licensing which was a great benefit from the client point of view. Recently, I don't know why, the licensing model has been changed, and that is the reason that they have lost a bit of their edge when it comes to the PAM, against our competition. The asset-based licensing, from the user's point of view, is not beneficial. The licensing should be based on the users. The greater the number of users, the greater will be the load and the greater the scalability problems. I presume that is why the licensing model has changed."

"Price-wise, it is very competitive. In our area, government entities and banks don't go for the monthly payment. It is a headache even for us in terms of finance and procurement to go for monthly payments. Quarterly might be more logical and reasonable, but the minimum that we go for is one year, and sometimes, we even try to compile and give one offering for three years."

More BeyondTrust Endpoint Privilege Management pricing and cost advice

"I believe that we paid 35,000 or 40,000 US dollars for it."

"My rating for the IBM Security Secret Server pricing is seven out of ten. It could be cheaper."

"The price could be better. I think it's a good price for the on-premises environment and the high availability for enterprises the solution provides."

See which vendors are best for you

Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.

See recommendations

909,725 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

14%

Manufacturing Company

Comms Service Provider

Government

Insurance Company

19%

Construction Company

13%

Performing Arts

Outsourcing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	15
Midsize Enterprise	3
Large Enterprise	15

By reviewers
Company Size	Count
Small Business	4
Midsize Enterprise	2
Large Enterprise	2

Questions from the Community

Looking for recommendations and a pros/cons template for software to detect insider threats

This is an inside-out --- outside-in --- inside-in question, as an insider can be an outsider as well. There is no short answer other than a blend of a PAM tool with Behavioral Analytics and Endpo...

What is your experience regarding pricing and costs for BeyondTrust Endpoint Privilege Management?

BeyondTrust's pricing is premium but negotiable for Bangladesh. Expect 20-30% extra costs from currency/import factors. Start with modular licensing (EPM first), demand emerging market discounts, a...

What needs improvement with BeyondTrust Endpoint Privilege Management?

In future updates of BeyondTrust Endpoint Privilege Management, I would prefer to see features for Password Safe and VPN access, as we have applications for that. Technical support for BeyondTrust ...

What needs improvement with IBM Security Secret Server?

I believe there is not much that can be improved for IBM Security Secret Server. Providing local support and local vendor availability would be beneficial so we are not dependent on international s...

What is your primary use case for IBM Security Secret Server?

IBM Security Secret Server serves multiple use cases for us, including the monitoring of privileged users, as well as the recording and password vaulting of their accounts, passwords, and need-base...

What advice do you have for others considering IBM Security Secret Server?

I mention that password vaulting and password rotation in IBM Security Secret Server are basically the same thing, and it becomes somewhat complex when integrating a different system with them beca...

Idira Privileged Access Manager vs BeyondTrust Endpoint Privilege Management

Comparisons

Compared 9% of the time

Idira Endpoint Privilege Manager vs BeyondTrust Endpoint Privilege Management

Compared 7% of the time

WALLIX Bastion vs BeyondTrust Endpoint Privilege Management

Compared 6% of the time

Symantec Identity Governance and Administration vs BeyondTrust Endpoint Privilege Management

Compared 5% of the time

Omada Identity vs BeyondTrust Endpoint Privilege Management

Compared 5% of the time

More BeyondTrust Endpoint Privilege Management Competitors

WALLIX Bastion vs IBM Security Secret Server

Compared 24% of the time

Idira Privileged Access Manager vs IBM Security Secret Server

Compared 16% of the time

Fortra's Powertech Identity & Access Manager vs IBM Security Secret Server

Compared 15% of the time

Delinea Secret Server vs IBM Security Secret Server

Compared 15% of the time

Delinea Privileged Access Service vs IBM Security Secret Server

Compared 7% of the time

More IBM Security Secret Server Competitors

Product Reports

BeyondTrust Endpoint Privilege Management

Download BeyondTrust Endpoint Privilege Management product report

BeyondTrust Endpoint Privilege Management report

IBM Security Secret Server

Download IBM Security Secret Server product report

Also Known As

BeyondTrust PowerBroker, BeyondTrust Endpoint Privilege Management for Windows, BeyondTrust Endpoint Privilege Management for Mac, BeyondTrust Endpoint Privilege Management for Linux, BeyondTrust Endpoint Privilege Management for Unix, Avecto Defendpoint

IBM Secret Server, Secret Server, IBM Security Privileged Identity Manager

Overview

BeyondTrust Endpoint Privilege Management offers enhanced security through asset discovery and privilege elevation without administrative rights, supporting seamless operations in complex environments.

BeyondTrust Endpoint Privilege Management combines advanced threat detection with powerful tools like application control and session management. It is designed to secure IT infrastructures by removing local admin privileges and facilitating remote application publishing. With integration capabilities and robust compliance support, it is suitable for sectors needing stringent security measures. However, improvements in update frequency, Mac integration, and pricing, along with enhanced reporting and console access, are needed to broaden market reach. Organizations value its scalability and flexibility, despite needing better support and development maturity.

What Features Define BeyondTrust Endpoint Privilege Management?

Asset Discovery: Identifies and catalogs IT assets for comprehensive visibility.
Privilege Management: Manages user privileges to minimize risks.
Session Management: Monitors and controls sessions for secure access.
Password Management: Secures credentials to prevent unauthorized access.
Application Control: Enables whitelisting and blacklisting for security.
Analytics: Offers insights into security trends and threats.

What Benefits Should Organizations Expect from Using BeyondTrust Endpoint Privilege Management?

Enhanced Security: Reduces vulnerabilities by managing permissions effectively.
Scalable Deployment: Adapts to growing organizational requirements.
Compliance Support: Assists in meeting regulatory standards.
Improved Integration: Facilitates connections with other platforms like Active Directory.

BeyondTrust Endpoint Privilege Management is widely adopted in the finance and healthcare industries for privileged access management and compliance. It is instrumental in secure server access and remote management, aligning with zero-trust approaches and integrating smoothly with enterprise platforms.

BeyondTrust

IBM Security Secret Server provides centralized management of privileged credentials, secure access, session recording, and replay. Its pricing model is unique, being based on user count rather than system connections, making it a flexible choice for organizations.

IBM Security Secret Server enhances cybersecurity by integrating with frameworks and offering features like monitoring, high availability, and adaptable reporting. It simplifies password management, automates changes, and ensures compliance with security protocols. The platform is valued for its ease of deployment and user-friendly interface, although it can improve in areas such as the GUI and integration process. Complex high availability and disaster recovery setups are noted challenges, along with nonclustered indexing issues affecting performance. Users desire improvements in local support and migration processes.

What are the key features of IBM Security Secret Server?

Centralized Management: Streamlines credential management across systems.
Session Recording: Allows recording and replay of sessions for forensic purposes.
Integration Capabilities: Enhances security with diverse cybersecurity frameworks.
Adaptable Reporting: Provides tools for customizable reporting.
Single-Access Console: Offers a unified user experience with granular roles.

What benefits should users look for in reviews?

User-Friendly Interface: Simplifies deployment and daily operations.
Scalability: User-based pricing model ensures flexibility and cost-efficiency.
Security Compliance: Ensures adherence to security protocols with automated processes.
Audit and Reporting: Robust capabilities for auditing and compliance documentation.
Enhanced Security Posture: Integrates well with existing frameworks to bolster security.

Organizations across various industries implement IBM Security Secret Server for managing privileged access and securing critical systems. It serves financial institutions by providing a secure jump server for accessing core banking platforms and databases. IT managers benefit from workflow approvals and automated password management, ensuring compliance and boosting security posture. The platform's session recording and auditing features are crucial for sectors needing detailed activity documentation.

IBM

Sample Customers

Aera Energy LLC, Care New England, James Madison University

Information Not Available

BeyondTrust Endpoint Privilege Management vs. IBM Security Secret Server