Try our new research platform with insights from 80,000+ expert users

CyberArk Privileged Access Manager vs HashiCorp Vault vs Keeper Enterprise Password Manager comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

As of October 2025, in the Enterprise Password Managers category, the mindshare of CyberArk Privileged Access Manager is 7.7%, down from 7.8% compared to the previous year. The mindshare of HashiCorp Vault is 10.0%, down from 13.2% compared to the previous year. The mindshare of Keeper Enterprise Password Manager is 5.1%, up from 3.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Enterprise Password Managers Market Share Distribution
ProductMarket Share (%)
CyberArk Privileged Access Manager7.7%
HashiCorp Vault10.0%
Keeper Enterprise Password Manager5.1%
Other77.2%
Enterprise Password Managers
 

Featured Reviews

Atul-Gujar - PeerSpot reviewer
Secures critical infrastructures with essential user session audit records
A potential area for improvement is enhancing support for cluster environments and distributed Vaults. Clients in multiple countries that need central access have different challenges that require better solutions from CyberArk. For financial services, CyberArk can improve incident response by ensuring fast support for critical priority tickets to meet compliance requirements. Providing more documentation on CyberArk is recommended for new team members to enhance their troubleshooting capabilities. I understand it's up to the client, but 99% fail to change the demo key, so it's crucial for CyberArk to emphasize changing the key and documenting it as part of the installation process.
Anand-Awasthi - PeerSpot reviewer
Offers dynamic secrets and certificate management for proactive security measures
The best features in HashiCorp Vault are its dynamic certificate management and dynamic secret management, which are the key features that use data effectively. These are very targeted use cases that cut across multiple solutions. I have utilized Vault's encryption capabilities for securing data in transit and at rest, especially for dynamically consuming database encryption, which covers the requirements of various scenarios where databases do not have encryption capability. HashiCorp Vault provides security by rotating the keys and taking all the burden of securing the data from the database. These are key core features that many users employ in this solution. Vault's audit logs provide insights into access patterns and help ensure compliance. These facilities are configurable, and the logs are encrypted, ensuring that anything recorded in the logs is secure. We could use systems that comply with specific standards for audit logging and scanning, especially when working with them. The benefits from HashiCorp Vault include significant advantages in security lifecycle management itself. The value becomes apparent when security incidents occur. It has substantial value in proactively protecting from adverse situations, providing resilience and appreciation by customers in complete security lifecycle management solutions for core infrastructure applications.
Parwiz ElmJo - PeerSpot reviewer
It's an inexpensive, scalable solution that has improved our security
We use Keeper to store passwords We previously kept our passwords in an Excel file. Using Keeper makes us more secure.  Keeper has strong security features.  The password rotation feature could be improved. I have used Keeper for three years. I rate Keeper eight out of 10 for stability.  I…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I found it valuable that CyberArk Privileged Access Manager can be integrated with PTA (privileged threat analytics), and this means that it will tell you if there's a risk to the logins and signs of risk and if risky behavior is observed. It's a good feature. Another good feature is the CPM (central password manager) because it helps you rotate the passwords automatically without involving the admins. It can go and update the scheduled tasks and the services. At the same time, if there's an application where it cannot do all of these, CPM will trigger an automatic email to the application owners, telling them that they should go ahead and change the password. This allows you to manage the account password that CyberArk cannot manage, which helps mitigate the risk of old passwords, where the password gets compromised, and also allows you to manage the security of the domain."
"It takes people out of the machine work of ensuring credentials remain up-to-date, and handles connection brokering such that human usage and credential management remain independent."
"It is a scalable product."
"Super stable and easy to scale"
"It supports lots of requirements in the privileged access management area."
"If properly set up, CyberArk Enterprise Password Vault has good stability, and is a very solid tool. It can run by itself. Its most valuable features are auto password recycling and PSM."
"CyberArk Privileged Access Manager is very powerful and customizable."
"We know when passwords will be expiring so we can force users to change their passwords, as well as requiring specific password requirements for length, complexity, etc."
"We were using it because we have compliance requirements around secret management. Having a secure vault and encrypting data was an additional requirement. When we looked at it first, we were just looking for a vault, like a lockbox. The greatest benefit of HashiCorp is its ability to manage encryption on the fly. It provides encryption of data at rest, in use, in transit, on the fly, and linked with applications, which was really attractive."
"The interface is very simple to navigate."
"The most valuable feature of HashiCorp Vault is version control."
"The tool's dynamic rotation of the password credentials is good."
"For me, the most valuable features include that it's easy to manage and maintain the password API for retrieving passwords and other things."
"It's stable. I would rate the stability a nine out of ten."
"It is user-friendly and easy to implement from any application point."
"The product is free and easy to use. It is well documented with an easy implementation process."
"I like a couple of things about this solution. Being able to share passwords with other people is valuable. You can see if the information is out on the dark web and whether you have weak passwords and the last time they were changed. You could also have the 2FA or MFA codes embedded in the application so that you don't have to use your phone or any other 2FA device, which is something very important."
"i have only one password to remember, which is the one to get me into Keeper."
"Available for Windows platforms and also Mac OS and Linux systems."
"The generator of complex passwords keeps me safe from being hacked."
"It keeps my passwords organized and safe."
"The chat support is quick. I have never encountered any problems. On the contrary, they have been very helpful and kind."
"Password sharing and SSO. These features almost become a necessity to make sure that company data is safe and reduce the possibility of data breach."
"Keeper Bridge."
 

Cons

"They can do a better job in the PSM space."
"It is very complex and difficult to set up the solution."
"Areas of CyberArk Privileged Access Manager that can be improved include offering clearer configuration options."
"Transitioning from a traditional on-premises deployment to the privileged cloud has resulted in losing access to many logs and administrative tools typically available on the back end."
"Initial setup is complex. Lots of architecture, lots of planning, and lots of education and training are needed."
"Tech support staff can be more proactive."
"CyberArk has a lot on the privileged access side but they have to concentrate more on the application side as well."
"The authentication port is available in CyberArk Alero but not Fortinet products."
"An improvement needed is the ability for auto-initialization."
"I would rate the stability a six out of ten. There are some bugs and glitches. We are in touch with the vendor to resolve them."
"We could use more documentation, primarily to do with integrations."
"The solution could be much easier to implement."
"A drawback for some clients who have to be PCI compliant is that they still need to use and subscribe to an HSM (Hardware Security Module) solution."
"It would be helpful to have more advanced features."
"The product needs to improve its customization. It should be also more like easy to plug and play."
"There could be a plugin for the database to change the secret automatically. It would be an efficient feature for password security."
"The password rotation feature could be improved."
"I would love it if you didn't have to re-authenticate when you start up a new browser."
"The organization of items needs improvement. For example, when I log onto the cloud version as well, everything is shown on my folder. It is hard to differentiate between files and documents in my list of items I have stored inside."
"The user experience and the mobile app could be improved."
"Ability to set up password profiles that can predefine custom fields and password complexity."
"Needs to provide an API to be integrated with the information systems and offer secure file hosting service with sharing and editing capabilities."
"The technical support for this solution could be faster support and improved if they had a better understanding of my questions."
"Needs to improve KeeperFill on iOS."
 

Pricing and Cost Advice

"Pricing is a problem. CyberArk is expensive compared to other products I know. It is similar to buying a German car. It comes with all the bells and whistles, but some companies may find it too expensive."
"The price of CyberArk support could be a little bit less. Otherwise, pricing is fine."
"The SaaS version of CyberArk Enterprise Password Vault is very expensive, but the on-premises version is relative, e.g. depending on the size of the environment, it can be a bit pricey, but it's relatively okay compared to the others."
"Network and security licenses are currently being managed by other outsource vendors, so they are facing some type of problems in the digital aspect."
"It's per-company, license-based."
"There are no additional costs other than the standard licensing fees."
"The pricing is slightly higher compared to other solutions, but it is reasonable because there are better security features."
"There are additional features added to our CyberArk Privileged Access Manager license. For example, features that allow us to integrate into various kinds of platforms."
"The product is expensive."
"I am using the open-source version of Vault and I would have to buy a license if I want to get support."
"It could do everything we wanted it to do and it is brilliant, but it is super pricey. To be fair to HashiCorp, we drove the price up with our requirements around resiliency. Because of the nature of our company, we don't really operate in the cloud."
"The AWS version is much cheaper than HashiCorp Vault."
"The solution's cost is reasonable."
"In my case, the open-source version works well. It's advisable for small to medium-scale organizations, but for large-scale organizations, you should go with the enterprise version."
"Pricing might be a little less, but with promo codes and family plan - best offer"
"The more users, the better the price. Always opt for the live support."
"It's definitely worth it and affordable. Their sales team can definitely help scale your needs on licensing and provide pricing options."
"Just buy the yearly subscription."
"Its cost is relative to the value of the information stored in Keeper."
"Free works unless the paid is absolutely necessary."
"Its price is reasonable."
"We chose their optional annual subscription; I believe we paid monthly — I thought it was a good deal."
report
Use our free recommendation engine to learn which Enterprise Password Managers solutions are best for your needs.
868,706 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
14%
Manufacturing Company
9%
Government
6%
Financial Services Firm
19%
Computer Software Company
13%
Manufacturing Company
8%
Government
6%
Computer Software Company
13%
Manufacturing Company
10%
Financial Services Firm
8%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business59
Midsize Enterprise41
Large Enterprise171
By reviewers
Company SizeCount
Small Business5
Midsize Enterprise4
Large Enterprise9
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise4
Large Enterprise8
 

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to m...
What do you like most about CyberArk Privileged Access Manager?
The most valuable features of the solution are control and analytics.
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
Regarding costs, CyberArk Privileged Access Manager is not a cheap product; hence, many companies struggle with its h...
Which is better - HashiCorp Vault or AWS Secrets Manager?
HashiCorp Vault was designed with your needs in mind. One of the features that makes this evident is its ability to w...
What do you like most about HashiCorp Vault?
The feature I find most beneficial in HashiCorp Vault is the secret engine. It integrates smoothly with many applicat...
What is your experience regarding pricing and costs for HashiCorp Vault?
If I were to set it up in AWS Secret Management, I would have to manage it, pay, and create secrets without being clo...
What is your experience regarding pricing and costs for Keeper?
The solution was more expensive than the competition, but considering our business needs, it was perfectly aligned wi...
What needs improvement with Keeper?
There is no improvement needed. Everything was good, and it was perfect for my needs.
What is your primary use case for Keeper?
I used Keeper primarily for password and credential management. It was used on my team of about one hundred people. T...
 

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
No data available
Keeper Security
 

Overview

 

Sample Customers

Rockwell Automation
Adobe, SAP Ariba, Citadel, Spaceflight, Cruise
At&t, Wells Fargo, Disney, GM, Chase, Honeywell, Samsung, Dow
Find out what your peers are saying about Microsoft, Amazon Web Services (AWS), CyberArk and others in Enterprise Password Managers. Updated: August 2025.
868,706 professionals have used our research since 2012.