CyberArk Endpoint Privilege Manager vs IBM Security Secret Server comparison

CyberArk and IBM are both solutions in the Privileged Access Management (PAM) category. CyberArk is ranked #4 with an average rating of 8.6, while IBM is ranked #29. CyberArk holds a 3.2% mindshare in PAM, compared to IBM’s 1.0% mindshare. Additionally, 86% of CyberArk users are willing to recommend the solution, compared to 100% of IBM users who would recommend it.

CyberArk Endpoint Privilege...

Read 38 CyberArk Endpoint Privilege Manager reviews

1,223 Views
764 Comparison Views

86% willing to recommend

IBM Security Secret Server

Read 7 IBM Security Secret Server reviews

454 Views
113 Comparison Views

100% willing to recommend

CyberArk Endpoint Privilege...

IBM Security Secret Server

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 6, 2024

CyberArk Endpoint Privilege Manager and IBM Security Secret Server are key players in cybersecurity management. IBM Security Secret Server is favored for its extensive feature set, which appeals to those needing comprehensive security solutions.

Features: CyberArk Endpoint Privilege Manager includes intuitive security management, seamless enforcement of least privilege policies, and user-friendly accessibility. IBM Security Secret Server offers robust integration capabilities, comprehensive security features ideal for complex IT environments, and a broader feature set for intricate security needs.

Room for Improvement: CyberArk could improve customization options, provide more comprehensive user training resources, and enhance user engagement strategies. IBM Security Secret Server needs smoother setup processes, improved integration speeds, and a more streamlined deployment experience.

Ease of Deployment and Customer Service: CyberArk Endpoint Privilege Manager is known for straightforward deployment and proactive customer service, boosting user confidence during implementation. IBM Security Secret Server, while requiring more technical expertise, benefits from reliable client support.

Pricing and ROI: CyberArk offers attractive initial setup costs and favorable ROI, with users noting significant long-term value. IBM Security Secret Server, despite higher initial costs, provides substantial ROI due to its comprehensive feature set, offering a trade-off between price and robustness.

To learn more, read our detailed CyberArk Endpoint Privilege Manager vs. IBM Security Secret Server Report (Updated: June 2025).

Buyer's Guide

CyberArk Endpoint Privilege Manager vs. IBM Security Secret Server

June 2025

Download the complete report

Helped 860,168 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

CyberArk Endpoint Privilege...

Ranking in Privileged Access Management (PAM)

4th

Average Rating

8.2

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Endpoint Compliance (5th), Anti-Malware Tools (5th), Application Control (5th), Ransomware Protection (5th)

IBM Security Secret Server

Ranking in Privileged Access Management (PAM)

29th

Average Rating

8.2

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of July 2025, in the Privileged Access Management (PAM) category, the mindshare of CyberArk Endpoint Privilege Manager is 3.2%, down from 3.7% compared to the previous year. The mindshare of IBM Security Secret Server is 1.0%, down from 1.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Privileged Access Management (PAM)

Featured Reviews

Sumit Chavan

Lead Consultant at Aujas Networks Pvt Ltd

Helps secure the infrastructure and control users with admin rights

There are many features that are currently missing. A customization option is required for certain policies. For instance, if we need to stop PowerShell scripting, we have to create a different policy for that. Being able to create a sub-level policy within a top-level policy would be good. Currently, no user-based policy option is available inside the EPM console. We can only create computer-based policies. The database is available, but there is a drawback in not being able to create local groups on the EPM console. We only have to depend on Active Directory. This limits infrastructure security as we depend on the Active Directory team to manage user groups. If they remove any users, we lose control. If we could create groups locally and block them or set specific policies, we would have more control. Local endpoint management is missing from the EPM site. Moreover, there is an issue with policies not running as expected when we make enhancements. We have to find multiple ways to whitelist applications or enhance policies.

Read full review

AsifIqbal

Chief Information Security Officer at a financial services firm with 1,001-5,000 employees

Easy to set up and manage and has good scalability and stability, but its technical support team needs to be more aggressive in solving issues

What needs improvement in IBM Security Secret Server is support. The local partner provides good support, but IBM itself doesn't. Most of the time, the IBM support team does not aggressively resolve issues reported through chat or the IBM website. In the next version of IBM Security Secret Server, I want to see more lightweight recording, architecture, or infrastructure requirements. Currently, it's heavy, so I want it reduced to make adapting IBM Security Secret Server much more effortless.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I like that you can remove the admin rights from the user's computer and have control over the environment. That means you can delete the local admins and grant them proper privileges with the console. So, they will get proper permissions for applications they need, but we don't have to do it. In the domain where we don't have control, the user can only do specified actions, but not all of them."

"CyberArk Endpoint Privilege Manager is very easy to manage, which I like. The solution also has a dashboard where you can see which software is suspicious, which I find valuable."

"The product is stable."

"We have not had issues with CyberArk. It works very smoothly. We can do many things with CyberArk. It helps us to see exactly what is happening."

"The most valuable feature is the ability to control users with admin rights. Even if developers and senior folks maintain their admin rights, we can still manage their activities."

"CyberArk Endpoint Privilege Manager (EPM) 's most valuable feature is its ability to manage user application privileges and protect against ransomware attacks by controlling access to specific files and applications."

"CyberArk Endpoint Privilege Manager helped us reduce the time for regulatory processes to approximately two to four months, completing the solution and training."

"Their customer support was excellent."

More CyberArk Endpoint Privilege Manager pros

"The live recording is a very useful feature."

"One of the most valuable features is scalability, and how it allows you to scale it without affecting the underlying core components."

"As a PAM solution, Secret Server performs all the use cases in our environment."

"What I like best about IBM Security Secret Server is its single-access console. It's also easy to manage and fulfills the requirements with the least resistance."

"Stability-wise, I think it is a very good solution."

Cons

"It is hard to deal with technical support if you are not certified."

"CyberArk should consider whitelisting important applications like PowerShell and DLL that are currently not allowed due to some malicious content."

"CyberArk has some performance issues. For example, servers could not handle the solution when we first took CyberArk Endpoint Privilege Manager."

"The price of the solution should improve."

"CyberArk Endpoint Privilege Manager can improve its Identity Governance, which is already working effectively yet could continue to enhance its capabilities."

"The solution can be complex to use at times."

"One area that has room for improvement is in managing the credentials for network devices."

"CyberArk meets clients' need very spot-on. It covers everything customers ask for. As for improvements, honestly, the feedback's been really positive. I haven't heard any specific areas that need work."

More CyberArk Endpoint Privilege Manager cons

"It would be preferable if the full proxy was included in the IBM Security Secret Server."

"What needs improvement in IBM Security Secret Server is support. The local partner provides good support, but IBM itself doesn't. Most of the time, the IBM support team does not aggressively resolve issues reported through chat or the IBM website."

"The nonclustered index is working in an area with a problem that needs improvement."

"The newer interface is more difficult to use than the previous one, and consequently, new users might need more training."

"Secret Server should have the ability to discover privileged accounts in the servers, like the administrator or users, from SQL and Oracle without having to import a script."

Pricing and Cost Advice

"licensing for this solution is based on the number of APV (privileged users), and the number of sessions that you want to record."

"The solution requires an annual license to use it. There can be some extra costs in some cases."

"Although I do not deal directly with the pricing, CyberArk Endpoint Privilege Manager is costly compared to other solutions. However, it offers beneficial features."

"The product's license is easy to procure."

"The professional services for one eight-hour day would be $1,800."

"I believe it's quite a reasonably priced solution. It's not very common to use CyberArk because it's a niche solution, but customers who are willing to control administrative accounts are willing to pay this money."

"The tool's pricing is reasonable for customers."

"We pay about $17 per user."

More CyberArk Endpoint Privilege Manager pricing and cost advice

"I believe that we paid 35,000 or 40,000 US dollars for it."

"My rating for the IBM Security Secret Server pricing is seven out of ten. It could be cheaper."

"The price could be better. I think it's a good price for the on-premises environment and the high availability for enterprises the solution provides."

See which vendors are best for you

Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.

See recommendations

860,168 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

15%

Computer Software Company

14%

Manufacturing Company

11%

Government

Computer Software Company

23%

Financial Services Firm

11%

Manufacturing Company

Insurance Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Looking for recommendations and a pros/cons template for software to detect insider threats

This is an inside-out --- outside-in --- inside-in question, as an insider can be an outsider as well. There is no short answer other than a blend of a PAM tool with Behavioral Analytics and Endpo...

See all answers

What do you like most about CyberArk Endpoint Privilege Manager?

The most valuable feature of the solution is its performance.

See all answers

What is your experience regarding pricing and costs for CyberArk Endpoint Privilege Manager?

I believe it's quite a reasonably priced solution. It's not very common to use CyberArk because it's a niche solution, but customers who are willing to control administrative accounts are willing t...

See all answers

Ask a question

Earn 20 points

Comparisons

CrowdStrike Falcon vs CyberArk Endpoint Privilege Manager

Compared 19% of the time

Microsoft Defender for Endpoint vs CyberArk Endpoint Privilege Manager

Compared 15% of the time

BeyondTrust Endpoint Privilege Management vs CyberArk Endpoint Privilege Manager

Compared 15% of the time

CyberArk Privileged Access Manager vs CyberArk Endpoint Privilege Manager

Compared 9% of the time

Tanium vs CyberArk Endpoint Privilege Manager

Compared 6% of the time

More CyberArk Endpoint Privilege Manager Competitors

Delinea Secret Server vs IBM Security Secret Server

Compared 78% of the time

Delinea Privileged Access Service vs IBM Security Secret Server

Compared 22% of the time

More IBM Security Secret Server Competitors

Product Reports

Buyer's Guide

CyberArk Endpoint Privilege Manager

June 2025

CyberArk Endpoint Privilege Manager report

Download CyberArk Endpoint Privilege Manager product report

Buyer's Guide

IBM Security Secret Server

June 2025

Download IBM Security Secret Server product report

Also Known As

Viewfinity

IBM Secret Server, Secret Server, IBM Security Privileged Identity Manager

Overview

CyberArk Endpoint Privilege Manager, a critical and foundational endpoint control addresses the underlying weaknesses of endpoint defenses against a privileged attacker and helps enterprises defend against these attacks through removing local admin rights, enforcing least privilege, and implementing foundational endpoint security controls across all Windows, macOS and Linux endpoints from hybrid to cloud environments.

Click here for a free 30 day trial: CyberArk Endpoint Privilege Manager free trial

CyberArk

IBM Security Secret Server protects privileged accounts from hackers and insider threats, helps ensure compliance with evolving regulations, and allows authorized employees to seamlessly gain access to the tools and information they need to drive productivity. Easily detect, manage and audit privileged accounts, and control which applications are permitted to run on endpoints and servers to prevent malicious applications from penetrating the environment. IBM Security Secret Server is fast to deploy, easy to use and scalable for the enterprise.

IBM

Buyer's Guide

CyberArk Endpoint Privilege Manager vs. IBM Security Secret Server

June 2025

Free Report: CyberArk Endpoint Privilege Manager vs. IBM Security Secret Server

Find out what your peers are saying about CyberArk Endpoint Privilege Manager vs. IBM Security Secret Server and other solutions. Updated: June 2025.

DOWNLOAD NOW

860,168 professionals have used our research since 2012.

See our CyberArk Endpoint Privilege Manager vs. IBM Security Secret Server report.

See our list of best Privileged Access Management (PAM) vendors.

We monitor all Privileged Access Management (PAM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.