BeyondTrust Password Safe vs IBM Security Secret Server comparison

BeyondTrust Password Safe vs. IBM Security Secret Server

Download the complete report

Helped 909,725 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

BeyondTrust Password Safe

Ranking in Privileged Access Management (PAM)

8th

Average Rating

8.0

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Enterprise Password Managers (10th)

IBM Security Secret Server

Ranking in Privileged Access Management (PAM)

20th

Average Rating

8.2

Reviews Sentiment

5.7

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of August 2026, in the Privileged Access Management (PAM) category, the mindshare of BeyondTrust Password Safe is 2.3%, down from 3.5% compared to the previous year. The mindshare of IBM Security Secret Server is 1.4%, up from 1.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Privileged Access Management (PAM) Mindshare Distribution
Product	Mindshare (%)
BeyondTrust Password Safe	2.3%
IBM Security Secret Server	1.4%
Other	96.3%

Privileged Access Management (PAM)

Featured Reviews

PawanShirose

Associate Security Consultant at CyberSec Consulting

Has enabled bulk onboarding and password rotation while ensuring secure privilege management

I have faced stability issues when upgrading BeyondTrust Password Safe solution. The upgrade process can be lengthy compared to other modules. For example, upgrading the appliance and reconfiguring HA is easier in PRA. However, in BeyondTrust Password Safe, the upgrade activity can take longer, and I have occasionally experienced being stuck during appliance version upgrades, sometimes duplicating the upgrade. Regarding additional features, we have good features in BeyondTrust Password Safe compared to other modules, such as Secret Safe to secure secrets and the check-in, check-out functionality. We already have the main features, but I think it would be helpful if BeyondTrust implemented a heartbeat check feature on the privileged account level. This feature would allow PAM to check the credentials of privileged accounts, indicating if they are correct or not, showing if the heartbeat has failed if they are wrong.

Read full review

AsifIqbal

Chief Information Security Officer at a insurance company with 501-1,000 employees

Privileged access monitoring has strengthened identity control and improved security posture

I find the monitoring and recording parts of IBM Security Secret Server to be the most valuable features. Password vaulting is somewhat typical, but I rate monitoring and recording as very good features, along with ease of deployment. The reporting tools in IBM Security Secret Server have helped me identify vulnerabilities. From the monitoring part, you can somewhat cover the identity vulnerability aspect. However, for identity vulnerability, I think the best approach is to use IAM rather than PAM. It is easy to integrate IBM Security Secret Server with cybersecurity frameworks, which is a very important aspect. When we are improving our attack surface, identity is the most important thing that we need to cover, and PAM will play a very crucial role in improving our cybersecurity framework and architecture. The main benefits that IBM Security Secret Server provides for me include complete control over the privileged identities, which are the main sources that can have the privilege to make numerous changes on the system. If we protect these identities through PAM and provide elevation on their accounts when required, then we can improve our security posture and infrastructure security.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I find that BeyondTrust Password Safe is a very effective application for password management."

"The features I find valuable in Password Safe include password retention and management, session privilege monitoring, live monitoring and recording, and the use of PS automation scripts for creating connections."

"BeyondTrust is three times less expensive than CyberArk."

"The ability to manage privileged account passwords is the most valuable feature, giving us the capability of rotating passwords as soon as an event is triggered."

"The flexibility of the licensing model is significantly better as it offers both unlimited users and unlimited devices, unlike Delinea, which is based on the number of users."

"It simplifies your compliance and tracking to benchmark other credentials and analytics."

"I rate BeyondTrust Password Safe as an overall 10 out of 10."

"It is very easy to deploy. It's easy to use. That's the major thing I like about it."

More BeyondTrust Password Safe pros

"It is one of the most well-known names in this field."

"The main benefits that IBM Security Secret Server provides for me include complete control over the privileged identities, which are the main sources that can have the privilege to make numerous changes on the system, and if we protect these identities through PAM and provide elevation on their accounts when required, then we can improve our security posture and infrastructure security."

"This product has been able to cover most of the requests from our customers."

"The live recording is a very useful feature."

"One of the most valuable features is scalability, and how it allows you to scale it without affecting the underlying core components."

"Access to privileged, shared credentials is simplified by optimizing the whole workflow and approval processes."

"Stability-wise, I think it is a very good solution."

"What I like best about IBM Security Secret Server is its single-access console. It's also easy to manage and fulfills the requirements with the least resistance."

More IBM Security Secret Server pros

Cons

"The effectiveness of BeyondTrust Password Safe's session management capabilities for SSH and RDP is pretty much robust, but it needs more improvement for other applications and web-based applications."

"The early version of this solution was not stable. It was terrible, but I think they eventually got their act together and it's better now so that they can compete."

"When we deploy BeyondTrust, we have to deploy our own database on a SQL server. It doesn't deploy the database. I wish BeyondTrust packages the whole solution in one and includes the MySQL database so that when you deploy it, it deploys everything for you. BeyondTrust gives you the software, but you are in charge of setting up your own database. It is a single appliance just for the BeyondTrust portion but not the database. Unless that has changed in later releases, you have to set up your own database for BeyondTrust Password Safe. I find that part complex because we then need the expertise and help of the database team to set it up, which also increases the deployment time. If they can deploy the database, it will reduce the deployment time."

"I have faced stability issues when upgrading BeyondTrust Password Safe solution. The upgrade process can be lengthy compared to other modules."

"The database instance onboarding should be simplified. The problem is that you can scan the assets and databases inside a server, but you cannot onboard them or manage them with the smart tools. It has to be done manually. I think they should try to include more custom platforms."

"The pricing is not cheap, but it could be better."

"The only feature they could improve is the banners because they aren't informative."

"If there was one thing, it would be having the documentation standardized. They should keep the documentation consistent. For example, when BeyondTrust updated one of their admin guides, they left out the information on the discovery account requirements, and then over a period of time, we ended up having to search multiple different documents to put together a string of information for a specific topic, which was problematic. It was minor, but it was problematic. Standardized documentation would be the one thing I would suggest."

More BeyondTrust Password Safe cons

"It would be preferable if the full proxy was included in the IBM Security Secret Server."

"Although much has improved in last two years, the GUI for IBM products can be improved."

"Secret Server should have the ability to discover privileged accounts in the servers, like the administrator or users, from SQL and Oracle without having to import a script."

"What needs improvement in IBM Security Secret Server is support. The local partner provides good support, but IBM itself doesn't. Most of the time, the IBM support team does not aggressively resolve issues reported through chat or the IBM website."

"If you have a hosted PIM in your local environment and you plan to migrate it to some cloud-based environment, then migration will become a painful task."

"The newer interface is maybe confusing old customer that using previous one from their point of views, I think they will need little pass of time to be familiar with."

"Unfortunately, the technical support is not very responsive because we purchased it from IBM; however, the actual support comes from Thycotic."

"The newer interface is more difficult to use than the previous one, and consequently, new users might need more training."

More IBM Security Secret Server cons

Pricing and Cost Advice

"The product is quite affordable."

"When you buy Password Safe and perform your initial Discovery, you have all these servers that are added to your assets in BeyondTrust, but you're not using a license until you actually start managing the systems. BeyondTrust's licensing is based on the systems when they're managed, which means when an administrator is able to connect to the server through BeyondTrust with a managed account. There would be a privileged account on the endpoint when the licensing starts. A significant advantage to that is that there are many organizations that want to evaluate their environment prior to automatic management."

"This solution is not cheap—it's a very expensive solution. Very, very expensive compared to the features and functions that they offer."

"At the time, BeyondTrust was significantly cheaper than CyberArk. Pricing-wise, if I remember correctly, it goes by assets. The pricing was negotiated for our instances based on the number of assets that we onboard into the system. It is a little different from CyberArk, where the pricing is by users. So, it depends. If you have a lot of assets, it can get very expensive."

"The pricing structure is better than the competitors. It's much cheaper than CyberArk. They do the licensing on the basis of assets, not on the number of users. For CyberArk, they base the licensing on the number of users, and they have an expensive model of pricing. BeyondTrust has a cheaper model."

"It has subscription-based licensing. BeyondTrust is three times less expensive than CyberArk."

"The pricing of BeyondTrust is very good as compared to other products. That was the main reason we decided to go with BeyondTrust at first."

"We just pay for Password Safe. Session management is included, but we don't use it. There aren't any additional costs besides the standard licensing fees. We pay for an annual license."

More BeyondTrust Password Safe pricing and cost advice

"I believe that we paid 35,000 or 40,000 US dollars for it."

"My rating for the IBM Security Secret Server pricing is seven out of ten. It could be cheaper."

"The price could be better. I think it's a good price for the on-premises environment and the high availability for enterprises the solution provides."

See which vendors are best for you

Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.

See recommendations

909,725 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

27%

Manufacturing Company

Construction Company

Government

Insurance Company

19%

Construction Company

13%

Performing Arts

Outsourcing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	13
Midsize Enterprise	5
Large Enterprise	10

By reviewers
Company Size	Count
Small Business	4
Midsize Enterprise	2
Large Enterprise	2

Questions from the Community

What is your experience regarding pricing and costs for BeyondTrust Password Safe?

My experience with BeyondTrust Password Safe's pricing, setup cost, and licensing has been positive, primarily due to its asset-based licensing model. This is a significant advantage for us because...

What needs improvement with BeyondTrust Password Safe?

What is your primary use case for BeyondTrust Password Safe?

I am working on both BeyondTrust Password Safe and the PRA (Privileged Remote Access). I have three years plus experience working with BeyondTrust Password Safe solution, and I have hands-on, good ...

What needs improvement with IBM Security Secret Server?

I believe there is not much that can be improved for IBM Security Secret Server. Providing local support and local vendor availability would be beneficial so we are not dependent on international s...

What is your primary use case for IBM Security Secret Server?

IBM Security Secret Server serves multiple use cases for us, including the monitoring of privileged users, as well as the recording and password vaulting of their accounts, passwords, and need-base...

What advice do you have for others considering IBM Security Secret Server?

I mention that password vaulting and password rotation in IBM Security Secret Server are basically the same thing, and it becomes somewhat complex when integrating a different system with them beca...

Idira Privileged Access Manager vs BeyondTrust Password Safe

Comparisons

Compared 13% of the time

Delinea Secret Server vs BeyondTrust Password Safe

Compared 10% of the time

1Password Business vs BeyondTrust Password Safe

Compared 8% of the time

Safeguard by One Identity vs BeyondTrust Password Safe

Compared 7% of the time

BeyondTrust Privileged Remote Access vs BeyondTrust Password Safe

Compared 6% of the time

More BeyondTrust Password Safe Competitors

WALLIX Bastion vs IBM Security Secret Server

Compared 24% of the time

Idira Privileged Access Manager vs IBM Security Secret Server

Compared 16% of the time

Fortra's Powertech Identity & Access Manager vs IBM Security Secret Server

Compared 15% of the time

Delinea Secret Server vs IBM Security Secret Server

Compared 15% of the time

Delinea Privileged Access Service vs IBM Security Secret Server

Compared 7% of the time

More IBM Security Secret Server Competitors

Product Reports

BeyondTrust Password Safe

Download BeyondTrust Password Safe product report

IBM Security Secret Server

Download IBM Security Secret Server product report

Also Known As

BeyondTrust PowerBroker Password Safe

IBM Secret Server, Secret Server, IBM Security Privileged Identity Manager

Overview

BeyondTrust Password Safe is a robust Privileged Access Management tool designed to secure access to servers, databases, and applications. It automates onboarding, rotation, and integration processes, enhancing efficiency and compliance with advanced security measures.

BeyondTrust Password Safe offers a comprehensive approach to managing privileged accounts, integrating smoothly into organizational frameworks to bolster security protocols. Its standout capabilities include session recording, Smart Rules for onboarding automation, and sophisticated auditing tools that support compliance and real-time monitoring. While it exhibits high availability and facilitates seamless usability, enhancements are needed in management console integration, documentation, and installation processes. Users benefit from its password rotation and policy enforcement, despite facing challenges with authentication sync times and session disconnects.

What are the core features of BeyondTrust Password Safe?

Smart Rules: Automates onboarding processes to increase efficiency.
Session Recording: Provides detailed session records for compliance and analysis.
Password Rotation: Ensures secure and regular password changes to mitigate risks.
Application Integration: Streamlines connectivity with essential applications for cohesive operations.
Advanced Auditing: Enhances security and compliance through detailed auditing and reporting.

What benefits should users expect from BeyondTrust Password Safe?

Enhanced Security: Protects sensitive access with robust security protocols.
Compliance Adherence: Simplifies meeting regulatory standards through comprehensive auditing.
Efficiency Boost: Automates complex processes, saving time and reducing manual effort.
Streamlined Onboarding: Improves onboarding speed with automated tools and clear processes.
Seamless Usability: Offers an intuitive interface for efficient navigation and use.

In industries with stringent security demands, BeyondTrust Password Safe is employed to safeguard privileged accounts, ensuring compliance with regulatory requirements. It is crucial for sectors like finance and healthcare, where access to sensitive data must be tightly controlled and monitored.

BeyondTrust

IBM Security Secret Server provides centralized management of privileged credentials, secure access, session recording, and replay. Its pricing model is unique, being based on user count rather than system connections, making it a flexible choice for organizations.

IBM Security Secret Server enhances cybersecurity by integrating with frameworks and offering features like monitoring, high availability, and adaptable reporting. It simplifies password management, automates changes, and ensures compliance with security protocols. The platform is valued for its ease of deployment and user-friendly interface, although it can improve in areas such as the GUI and integration process. Complex high availability and disaster recovery setups are noted challenges, along with nonclustered indexing issues affecting performance. Users desire improvements in local support and migration processes.

What are the key features of IBM Security Secret Server?

Centralized Management: Streamlines credential management across systems.
Session Recording: Allows recording and replay of sessions for forensic purposes.
Integration Capabilities: Enhances security with diverse cybersecurity frameworks.
Adaptable Reporting: Provides tools for customizable reporting.
Single-Access Console: Offers a unified user experience with granular roles.

What benefits should users look for in reviews?

User-Friendly Interface: Simplifies deployment and daily operations.
Scalability: User-based pricing model ensures flexibility and cost-efficiency.
Security Compliance: Ensures adherence to security protocols with automated processes.
Audit and Reporting: Robust capabilities for auditing and compliance documentation.
Enhanced Security Posture: Integrates well with existing frameworks to bolster security.

Organizations across various industries implement IBM Security Secret Server for managing privileged access and securing critical systems. It serves financial institutions by providing a secure jump server for accessing core banking platforms and databases. IT managers benefit from workflow approvals and automated password management, ensuring compliance and boosting security posture. The platform's session recording and auditing features are crucial for sectors needing detailed activity documentation.

IBM

Sample Customers

Aera Energy LLC, Care New England, James Madison University

Information Not Available

BeyondTrust Password Safe vs. IBM Security Secret Server