Try our new research platform with insights from 80,000+ expert users

CyberArk Privileged Access Manager vs HashiCorp Vault vs Keeper comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

As of May 2025, in the Enterprise Password Managers category, the mindshare of CyberArk Privileged Access Manager is 7.8%, down from 9.2% compared to the previous year. The mindshare of HashiCorp Vault is 12.3%, down from 14.2% compared to the previous year. The mindshare of Keeper is 4.0%, up from 3.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Enterprise Password Managers
 

Featured Reviews

Lasantha Wijesinghe - PeerSpot reviewer
We have visibility and control through real-time user behavior analytics
It took us some time to realize its benefits because there was a learning curve for us. It took us about a year to get our heads around this product and start effectively using it. It is a journey. It takes at least five years for any company to make this product very useful and reach maturity. It is not only the product's fault. The company needs to have a vision, and the company culture needs to go with it. Senior leadership needs to support the vision. You need to have lots of ingredients for success. If everything is in place, you will see success after one year. In the first year, it is a struggle for everybody. My company was bought by a bigger company, and they were very new to privileged access management. Everybody was struggling. The advice I would give is to have a good vision for privileged access management. You need dedicated teams, senior management support, and proper company policies and standards before implementing the solution. Start building knowledge slowly and avoid jumping into the deep end without preparation. I would rate CyberArk Privileged Access Manager a nine out of ten.
AKASHGUPTA3 - PeerSpot reviewer
Easy to manage and maintain the password API but stability could be improved
I would advise doing a Proof of Concept first and then deciding accordingly because your use case might be simple. You can try out AWS Key Management or Azure Key Vault. They are different products. Do the POC and then decide what you need. Overall, I would rate the solution a six out of ten. No solution is a ten in my opinion.
Parwiz ElmJo - PeerSpot reviewer
It's an inexpensive, scalable solution that has improved our security
We use Keeper to store passwords We previously kept our passwords in an Excel file. Using Keeper makes us more secure.  Keeper has strong security features.  The password rotation feature could be improved. I have used Keeper for three years. I rate Keeper eight out of 10 for stability.  I…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We are able to rotate credentials and have privileged account access."
"The most valuable features of CyberArk Privileged Access Manager include quick access, ease of use, and a variety of connection methods beyond the web portal."
"It enables us to secure accounts and make sure they are compliant."
"You can gradually implement CyberArk, starting with more easily attainable goals."
"Rather than multiple tools for maintaining regulatory compliance around passwords and privileged accounts, we have centralized as much as possible with CyberArk. This is now a one stop shop for end users to access their elevated credentials."
"Customer support has been very helpful and responsive."
"The most valuable feature is the special management. It records the activity and the actions that we use for auditing."
"This solution is quite stable."
"It is an added value for our customers to have a Secrets Management workflow available that is PaaS/CaaS/KaaS Platform agnostic."
"The product is free and easy to use. It is well documented with an easy implementation process."
"The most valuable feature of HashiCorp Vault is version control."
"The most valuable feature of HashiCorp Vault is version control."
"The interface is very simple to navigate."
"The feature I find most beneficial in HashiCorp Vault is the secret engine. It integrates smoothly with many applications, making it easy to set up and implement quickly. This allows you to test it easily and see good results rapidly. When you integrate an internal API or application, it quickly manages that application's secrets."
"We were using it because we have compliance requirements around secret management. Having a secure vault and encrypting data was an additional requirement. When we looked at it first, we were just looking for a vault, like a lockbox. The greatest benefit of HashiCorp is its ability to manage encryption on the fly. It provides encryption of data at rest, in use, in transit, on the fly, and linked with applications, which was really attractive."
"It can still be configured by a separate team other than developers. That's why I think it's more secure."
"The possibility of assigning information to different groups and individuals has been the most valuable."
"I like a couple of things about this solution. Being able to share passwords with other people is valuable. You can see if the information is out on the dark web and whether you have weak passwords and the last time they were changed. You could also have the 2FA or MFA codes embedded in the application so that you don't have to use your phone or any other 2FA device, which is something very important."
"​The installation and its use are very simple​."
"A useful solution for storing encryption keys, programming and developing a SaaS platform."
"The generator of complex passwords keeps me safe from being hacked."
"Available for Windows platforms and also Mac OS and Linux systems."
"It syncs with all devices and supports all platforms."
"Enables IT department to force very complex passwords for certain users."
 

Cons

"The solution could improve by adding more connectors."
"Improved user-friendliness, granularity, and functionality would enhance the product further."
"They could improve CyberArk Privileged Access Manager by providing more reports. If I need to know the 10 most-used accounts for this week, that functionality can be made available in the reports."
"When we are implementing it, it is quite tricky. It could be less complex for new users. The learning curve could be a little better."
"Integration with the ticketing system should allow any number of fields to be used for validation before allowing a user to be evaluated and able to access a server."
"CyberArk Privileged Access Manager could improve the integration docking, it should have more layers. For example, integration with OpenShift."
"The solution's architecture could be improved. It requires installation on four to five different servers. Each server has a purpose, but when you need to troubleshoot, it can be difficult because you need to access each of them. Reducing the number of servers would be helpful."
"The installation process should be easier and more user-friendly so that you don't need to hire a third party to deploy it."
"The documentation is very general; it should have more examples and more use cases."
"It would be helpful to have more advanced features."
"The technical support was hard to get a hold of and lacking in service."
"The product needs to improve its customization. It should be also more like easy to plug and play."
"In my opinion, HashiCorp Vault could improve its user interface. Right now, they don't offer much in terms of a graphical interface, which means you usually have to manage things manually through API calls. I think CyberArk has a better approach because it provides a UI that integrates features across all its components, making it easier, especially for new users or those from organizations with strict licensing policies."
"An improvement needed is the ability for auto-initialization. There should be an inbuilt option for automatic initialization rather than running it manually."
"A drawback for some clients who have to be PCI compliant is that they still need to use and subscribe to an HSM (Hardware Security Module) solution."
"I would like to see better integration of HashiCorp Vault with SAP products."
"Ability to store 'files' from IOS & Android devices. You can store pics from these devices currently. Most file formats can be uploaded from PC's/Macs"
"The user experience and the mobile app could be improved."
"I would love it if you didn't have to re-authenticate when you start up a new browser."
"The password rotation feature could be improved."
"Possible offline access to passwords. Therefore, when internet access is unavailable, I can still access my vault."
"If you purchase the premium, then after the subscription expires, you cannot edit your passwords any longer, even if you could before you purchased the paid subscription."
"Needs to improve KeeperFill on iOS."
"Its aesthetic needs improvement."
 

Pricing and Cost Advice

"I'm a technician so I don't handle the licensing for CyberArk Privileged Access Manager, but I know that the price for the core license is about €140 per year. There's another type of license, the external vendor license, and that's about €600 and you can manage twenty devices. From what I know, the price for one device in a subscription is about €65 per year. You can buy the CyberArk Endpoint Privilege Manager too, or you can buy some other application or application license with CyberArk Privileged Access Manager, but all other features, such as the Analytics Server is included in the basic CyberArk license. With WALLIX, you need to buy separate licenses for the features."
"CyberArk is good at what they do, and the price reflects that. You have to pay the price for the same."
"CyberArk Privileged Access Manager is more expensive than its competitors, such as BeyondTrust, Delinea, and ManageEngine PAM360."
"Its price can be reduced."
"The SaaS version of CyberArk Enterprise Password Vault is very expensive, but the on-premises version is relative, e.g. depending on the size of the environment, it can be a bit pricey, but it's relatively okay compared to the others."
"This solution is expensive."
"CyberArk Enterprise Password Vault is a very expensive product."
"There are additional features added to our CyberArk Privileged Access Manager license. For example, features that allow us to integrate into various kinds of platforms."
"The solution's cost is reasonable."
"I am using the open-source version of Vault and I would have to buy a license if I want to get support."
"The product is expensive."
"In my case, the open-source version works well. It's advisable for small to medium-scale organizations, but for large-scale organizations, you should go with the enterprise version."
"The AWS version is much cheaper than HashiCorp Vault."
"It could do everything we wanted it to do and it is brilliant, but it is super pricey. To be fair to HashiCorp, we drove the price up with our requirements around resiliency. Because of the nature of our company, we don't really operate in the cloud."
"It's definitely worth it and affordable. Their sales team can definitely help scale your needs on licensing and provide pricing options."
"We chose their optional annual subscription; I believe we paid monthly — I thought it was a good deal."
"Its cost is relative to the value of the information stored in Keeper."
"Pricing might be a little less, but with promo codes and family plan - best offer"
"The pricing is available on the vendor's website."
"ROI is hard to know, but it has to be several times the expense of the product."
"Its price is reasonable."
"Just buy the yearly subscription."
report
Use our free recommendation engine to learn which Enterprise Password Managers solutions are best for your needs.
851,604 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
33%
Financial Services Firm
12%
Computer Software Company
11%
Manufacturing Company
6%
Financial Services Firm
20%
Computer Software Company
14%
Manufacturing Company
8%
Government
6%
Computer Software Company
15%
Financial Services Firm
10%
Manufacturing Company
10%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to m...
What do you like most about CyberArk Privileged Access Manager?
The most valuable features of the solution are control and analytics.
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
With the current model of licensing, for my use cases, sometimes it's hard to convince the management and get budget ...
Which is better - HashiCorp Vault or AWS Secrets Manager?
HashiCorp Vault was designed with your needs in mind. One of the features that makes this evident is its ability to w...
What do you like most about HashiCorp Vault?
The feature I find most beneficial in HashiCorp Vault is the secret engine. It integrates smoothly with many applicat...
What is your experience regarding pricing and costs for HashiCorp Vault?
If I were to set it up in AWS Secret Management, I would have to manage it, pay, and create secrets without being clo...
What do you like most about Keeper?
I like the tool's keyword editor and SSO.
What is your experience regarding pricing and costs for Keeper?
The solution was more expensive than the competition, but considering our business needs, it was perfectly aligned wi...
What needs improvement with Keeper?
There is no improvement needed. Everything was good, and it was perfect for my needs.
 

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
No data available
Keeper Security
 

Overview

 

Sample Customers

Rockwell Automation
Adobe, SAP Ariba, Citadel, Spaceflight, Cruise
At&t, Wells Fargo, Disney, GM, Chase, Honeywell, Samsung, Dow
Find out what your peers are saying about Microsoft, CyberArk, Amazon Web Services (AWS) and others in Enterprise Password Managers. Updated: May 2025.
851,604 professionals have used our research since 2012.