CyberArk Endpoint Privilege Manager vs IBM Security Secret Server comparison

CyberArk Endpoint Privilege Manager vs. IBM Security Secret Server

Download the complete report

Helped 850,028 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

CyberArk Endpoint Privilege...

Ranking in Privileged Access Management (PAM)

3rd

Average Rating

8.2

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Endpoint Compliance (4th), Anti-Malware Tools (5th), Application Control (5th), Ransomware Protection (7th)

IBM Security Secret Server

Ranking in Privileged Access Management (PAM)

18th

Average Rating

8.2

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of May 2025, in the Privileged Access Management (PAM) category, the mindshare of CyberArk Endpoint Privilege Manager is 3.6%, down from 3.7% compared to the previous year. The mindshare of IBM Security Secret Server is 1.0%, down from 1.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Privileged Access Management (PAM)

Featured Reviews

Sumit Chavan

Lead Consultant at Aujas Networks Pvt Ltd

Helps secure the infrastructure and control users with admin rights

There are many features that are currently missing. A customization option is required for certain policies. For instance, if we need to stop PowerShell scripting, we have to create a different policy for that. Being able to create a sub-level policy within a top-level policy would be good. Currently, no user-based policy option is available inside the EPM console. We can only create computer-based policies. The database is available, but there is a drawback in not being able to create local groups on the EPM console. We only have to depend on Active Directory. This limits infrastructure security as we depend on the Active Directory team to manage user groups. If they remove any users, we lose control. If we could create groups locally and block them or set specific policies, we would have more control. Local endpoint management is missing from the EPM site. Moreover, there is an issue with policies not running as expected when we make enhancements. We have to find multiple ways to whitelist applications or enhance policies.

Read full review

AsifIqbal

Chief Information Security Officer at a financial services firm with 1,001-5,000 employees

Easy to set up and manage and has good scalability and stability, but its technical support team needs to be more aggressive in solving issues

What needs improvement in IBM Security Secret Server is support. The local partner provides good support, but IBM itself doesn't. Most of the time, the IBM support team does not aggressively resolve issues reported through chat or the IBM website. In the next version of IBM Security Secret Server, I want to see more lightweight recording, architecture, or infrastructure requirements. Currently, it's heavy, so I want it reduced to make adapting IBM Security Secret Server much more effortless.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"What sets CyberArk apart is its continuous innovation, staying ahead of the competition."

"The most valuable feature of CyberArk Endpoint Privilege Manager is its ability to reset passwords every time that it is needed or periodically."

"Their customer support was excellent."

"You can use it to strip users of their local admin rights and, at the same time, elevate applications for them."

"Our setup process is moving to the cloud, which is very good. It reduces complexity."

"I have always found that CyberArk is a very tight, foolproof product compared to most other products available."

"I like that you can remove the admin rights from the user's computer and have control over the environment. That means you can delete the local admins and grant them proper privileges with the console. So, they will get proper permissions for applications they need, but we don't have to do it. In the domain where we don't have control, the user can only do specified actions, but not all of them."

"CyberArk Endpoint Privilege Manager enhances computer security by providing minimal access, effectively preventing ransomware attacks."

More CyberArk Endpoint Privilege Manager pros

"Stability-wise, I think it is a very good solution."

"One of the most valuable features is scalability, and how it allows you to scale it without affecting the underlying core components."

"What I like best about IBM Security Secret Server is its single-access console. It's also easy to manage and fulfills the requirements with the least resistance."

"The live recording is a very useful feature."

"As a PAM solution, Secret Server performs all the use cases in our environment."

Cons

"The turnaround time of the support team is an area of concern where improvements are required."

"Without knowledge, you are not able to find some items as they are really hidden within the UI."

"CyberArk Endpoint Privilege Manager is a perfect solution, but CyberArk Endpoint Privilege Manager for Linux has many issues. Another area for improvement in CyberArk Endpoint Privilege Manager, specifically for Windows, is that there's no way for you to check credential theft from a text file, such as a notepad file."

"They need much better integration with Azure AD."

"The solution's pricing could be better."

"The installation process is pretty difficult."

"CyberArk should consider whitelisting important applications like PowerShell and DLL that are currently not allowed due to some malicious content."

"It is hard to deal with technical support if you are not certified."

More CyberArk Endpoint Privilege Manager cons

"Secret Server should have the ability to discover privileged accounts in the servers, like the administrator or users, from SQL and Oracle without having to import a script."

"It would be preferable if the full proxy was included in the IBM Security Secret Server."

"The nonclustered index is working in an area with a problem that needs improvement."

"What needs improvement in IBM Security Secret Server is support. The local partner provides good support, but IBM itself doesn't. Most of the time, the IBM support team does not aggressively resolve issues reported through chat or the IBM website."

"The newer interface is more difficult to use than the previous one, and consequently, new users might need more training."

Pricing and Cost Advice

"The price of CyberArk Endpoint Privilege Manager is expensive."

"The solution's pricing is reasonable compared to other vendors' products."

"The cost for CyberArk is very high."

"We pay about $17 per user."

"I feel that the price of the product is nominal. It must be around 10 to 15 USD per installation. I rate the product price an eight to nine out of ten, where one is high price, and ten is low price."

"I rate the solution's pricing an eight out of ten since the price can be too high for smaller businesses."

"CyberArk Endpoint Privilege Manager has a very high price, so it's a one out of ten for me in terms of pricing."

"It's not at the lower end of the market. I think the price is reasonable considering the quality it delivers. It is a top-notch solution at a fair price point."

More CyberArk Endpoint Privilege Manager pricing and cost advice

"The price could be better. I think it's a good price for the on-premises environment and the high availability for enterprises the solution provides."

"My rating for the IBM Security Secret Server pricing is seven out of ten. It could be cheaper."

"I believe that we paid 35,000 or 40,000 US dollars for it."

See which vendors are best for you

Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.

See recommendations

850,028 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

15%

Computer Software Company

14%

Manufacturing Company

11%

Government

Computer Software Company

22%

Manufacturing Company

10%

Financial Services Firm

10%

Retailer

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Looking for recommendations and a pros/cons template for software to detect insider threats

This is an inside-out --- outside-in --- inside-in question, as an insider can be an outsider as well. There is no short answer other than a blend of a PAM tool with Behavioral Analytics and Endpo...

What do you like most about CyberArk Endpoint Privilege Manager?

The most valuable feature of the solution is its performance.

What is your experience regarding pricing and costs for CyberArk Endpoint Privilege Manager?

I've received feedback that the pricing is high, however, for me, the value it brings is worth the cost. It's really one of the best solutions.

What do you like most about IBM Security Secret Server?

Stability-wise, I think it is a very good solution.

What needs improvement with IBM Security Secret Server?

The nonclustered index is working in an area with a problem that needs improvement. In some cases, when they create some index in the tool, you may face some problems with the parallelism and some ...

What is your primary use case for IBM Security Secret Server?

I use the tool for dynamic services, integration services, and reporting services. I have years of working experience with the tool. I am a DBA and a support administrator for SQL Server, and also ...

CrowdStrike Falcon vs CyberArk Endpoint Privilege Manager

Comparisons

Compared 25% of the time

Microsoft Defender for Endpoint vs CyberArk Endpoint Privilege Manager

Compared 15% of the time

BeyondTrust Endpoint Privilege Management vs CyberArk Endpoint Privilege Manager

Compared 14% of the time

CyberArk Privileged Access Manager vs CyberArk Endpoint Privilege Manager

Compared 9% of the time

Tanium vs CyberArk Endpoint Privilege Manager

Compared 5% of the time

More CyberArk Endpoint Privilege Manager Competitors

Delinea Secret Server vs IBM Security Secret Server

Compared 78% of the time

Delinea Privileged Access Service vs IBM Security Secret Server

Compared 22% of the time

More IBM Security Secret Server Competitors

Product Reports

CyberArk Endpoint Privilege Manager

Download CyberArk Endpoint Privilege Manager product report

CyberArk Endpoint Privilege Manager report

IBM Security Secret Server

Download IBM Security Secret Server product report

Also Known As

Viewfinity

IBM Secret Server, Secret Server, IBM Security Privileged Identity Manager

Overview

CyberArk Endpoint Privilege Manager, a critical and foundational endpoint control addresses the underlying weaknesses of endpoint defenses against a privileged attacker and helps enterprises defend against these attacks through removing local admin rights, enforcing least privilege, and implementing foundational endpoint security controls across all Windows, macOS and Linux endpoints from hybrid to cloud environments.

Click here for a free 30 day trial: CyberArk Endpoint Privilege Manager free trial

CyberArk

IBM Security Secret Server protects privileged accounts from hackers and insider threats, helps ensure compliance with evolving regulations, and allows authorized employees to seamlessly gain access to the tools and information they need to drive productivity. Easily detect, manage and audit privileged accounts, and control which applications are permitted to run on endpoints and servers to prevent malicious applications from penetrating the environment. IBM Security Secret Server is fast to deploy, easy to use and scalable for the enterprise.

IBM

CyberArk Endpoint Privilege Manager vs. IBM Security Secret Server