CyberArk Privileged Access Manager vs HashiCorp Vault vs Keeper Enterprise Password Manager comparison

CyberArk and HashiCorp are both solutions in the Enterprise Password Managers category. CyberArk is ranked #2 with an average rating of 8.7, while HashiCorp is ranked #4 with an average rating of 8.4. CyberArk holds a 8.0% mindshare in EPM, compared to HashiCorp’s 11.3% mindshare. Additionally, 95% of CyberArk users are willing to recommend the solution, compared to 89% of HashiCorp users who would recommend it.

CyberArk Privileged Access ...

Read 225 CyberArk Privileged Access Manager reviews

17,191 Views
4,470 Comparison Views

95% willing to recommend

HashiCorp Vault

Read 18 HashiCorp Vault reviews

6,497 Views
6,497 Comparison Views

89% willing to recommend

Keeper Enterprise Password ...

Read 33 Keeper Enterprise Password Manager reviews

2,187 Views
1,640 Comparison Views

96% willing to recommend

CyberArk Privileged Access ...

HashiCorp Vault

Keeper Enterprise Password ...

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between CyberArk Privileged Access Manager, HashiCorp Vault, and Keeper Enterprise Password Manager based on real PeerSpot user reviews.

Find out what your peers are saying about Microsoft, CyberArk, Amazon Web Services (AWS) and others in Enterprise Password Managers.

To learn more, read our detailed Enterprise Password Managers Report (Updated: July 2025).

Buyer's Guide

Enterprise Password Managers

July 2025

Download the complete report

Helped 864,574 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Mindshare comparison

As of August 2025, in the Enterprise Password Managers category, the mindshare of CyberArk Privileged Access Manager is 8.0%, down from 8.7% compared to the previous year. The mindshare of HashiCorp Vault is 11.3%, down from 13.6% compared to the previous year. The mindshare of Keeper Enterprise Password Manager is 4.3%, up from 3.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Enterprise Password Managers

Featured Reviews

Abdul Durrani

Security Manager at Insight

Enables granular and secure access with just-in-time access and Zero Trust model

CyberArk provides a good amount of control over access types. However, as a future enhancement, having additional features for cross-platform integration would be beneficial. It would be good to have integrations with other tools and firewalls, such as Zscaler and CrowdStrike. Although I am not fully aware of recent updates, more cross-platform integration would be valuable. A SOC analyst would like to have centralized access in terms of information flowing in even for privileged access management. They would like to have control over everything instead of opening four to five tabs for different sorts of information. Cross-platform integration would help with that. Customers also want CyberArk's pricing to be better so that they can implement it further and have more licenses. Implementing a privileged access management solution can be challenging. It would be great if CyberArk could provide recommendations based on the compliance standards of an organization. It would help system admins ensure that all the required ports are closed and the systems are being managed properly. If any system is not being used anymore, any ports opened for that system need to be closed. Having such recommendations would be helpful.

Read full review

Anand-Awasthi

Cloud Solutions Architect at IBM

Offers dynamic secrets and certificate management for proactive security measures

The best features in HashiCorp Vault are its dynamic certificate management and dynamic secret management, which are the key features that use data effectively. These are very targeted use cases that cut across multiple solutions. I have utilized Vault's encryption capabilities for securing data in transit and at rest, especially for dynamically consuming database encryption, which covers the requirements of various scenarios where databases do not have encryption capability. HashiCorp Vault provides security by rotating the keys and taking all the burden of securing the data from the database. These are key core features that many users employ in this solution. Vault's audit logs provide insights into access patterns and help ensure compliance. These facilities are configurable, and the logs are encrypted, ensuring that anything recorded in the logs is secure. We could use systems that comply with specific standards for audit logging and scanning, especially when working with them. The benefits from HashiCorp Vault include significant advantages in security lifecycle management itself. The value becomes apparent when security incidents occur. It has substantial value in proactively protecting from adverse situations, providing resilience and appreciation by customers in complete security lifecycle management solutions for core infrastructure applications.

Read full review

Mahesh Subramanian

Global Head - Development Operations, at Chargebacks911

Helps with password management and sharing

The tool's setup was easy and we have deployed it on the cloud. The deployment was quick and we completed it in less than a week. We have two teams one in the US and another in India. We first implemented Keeper in the US, got feedback, and then implemented it in India. The overall deployment took about four months to complete.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"We've written over a hundred custom connectors ourselves that allow us to do all types of privileged session management for various applications. On top of that, the rest of the API-based central credential providers allow us to get away from credentials that may be hard-coded in the script or some application."

"The most beneficial feature in CyberArk Privileged Access Manager is its simple user interface."

"The access control feature and privilege and role-based assignment are outstanding."

"CyberArk Privileged Access Manager provides granularity. You can break things down into individual safes. You have specific access to safes by individual or group. The interface is with AD, with LDAP, or with local CyberArk passwords. You also have the ability to establish policies for your individual credentials."

"The ability to develop and deploy applications with no stored secrets is very valuable."

"Super stable and easy to scale"

"I would recommend implementing CyberArk Privileged Access Manager as it is the best so far."

"PSM enables after-hours monitoring."

More CyberArk Privileged Access Manager pros

"The most valuable feature of HashiCorp Vault is version control."

"It is a good product to consider for companies who are looking to build on-premise or hybrid infrastructure."

"It can still be configured by a separate team other than developers. That's why I think it's more secure."

"The tool's dynamic rotation of the password credentials is good."

"The solution is stable. It has been working perfectly without any problem."

"For me, the most valuable features include that it's easy to manage and maintain the password API for retrieving passwords and other things."

"The most valuable feature of HashiCorp Vault is the management of tickets in the pipeline."

"The feature I find most beneficial in HashiCorp Vault is the secret engine. It integrates smoothly with many applications, making it easy to set up and implement quickly. This allows you to test it easily and see good results rapidly. When you integrate an internal API or application, it quickly manages that application's secrets."

More HashiCorp Vault pros

"Auto login across platforms allows for no copying and pasting."

"I can access my passwords from any Internet connected device."

"The possibility of assigning information to different groups and individuals has been the most valuable."

"I like Keeper's mobility and its accessibility."

"The ability to autofill the login credentials has saved me a lot of time in my day to day computing."

"Keeper was user-friendly."

"It keeps my passwords organized and safe."

"Available for Windows platforms and also Mac OS and Linux systems."

More Keeper Enterprise Password Manager pros

Cons

"We require IAM (identify and access management) capability at the administrator level because we need more identification."

"It's not a cheap application. It's very expensive."

"The product could be easier to use. More work needs to be done on this aspect; it is not good enough yet. It also takes up a lot of server space. Sometimes we need to use up to seven servers."

"I would like to see better usability for non-technical people."

"Initially, there was a lot of hiccups, because there were a lot of transitions due to manual installations."

"In CyberArk Privileged Access Manager, the UI has room for improvement, as does the dashboard reporting, which could be made better or easier to use."

"There are upwards of six components you need to set it up. And you might need anywhere from two to five servers. It takes some work to set that up, especially in a larger environment."

"The issue of technical support is crucial, as there are not many specialized partners available in Brazil to provide this service. While English language support is of good quality, there is a significant shortage of partners capable of meeting the demand locally."

More CyberArk Privileged Access Manager cons

"The product needs to improve its customization. It should be also more like easy to plug and play."

"In my opinion, HashiCorp Vault could improve its user interface. Right now, they don't offer much in terms of a graphical interface, which means you usually have to manage things manually through API calls. I think CyberArk has a better approach because it provides a UI that integrates features across all its components, making it easier, especially for new users or those from organizations with strict licensing policies."

"A drawback for some clients who have to be PCI compliant is that they still need to use and subscribe to an HSM (Hardware Security Module) solution."

"The technical support was hard to get a hold of and lacking in service."

"The solution could be much easier to implement."

"I would rate the stability a six out of ten. There are some bugs and glitches. We are in touch with the vendor to resolve them."

"It would be helpful to have more advanced features."

"The solution's initial setup process is complicated."

More HashiCorp Vault cons

"Ability to store 'files' from IOS & Android devices. You can store pics from these devices currently. Most file formats can be uploaded from PC's/Macs"

"The technical support for this solution could be faster support and improved if they had a better understanding of my questions."

"Possible offline access to passwords. Therefore, when internet access is unavailable, I can still access my vault."

"If you purchase the premium, then after the subscription expires, you cannot edit your passwords any longer, even if you could before you purchased the paid subscription."

"I would add a category for personal documents or photos of ID cards."

"The technical support has no experience."

"The stability of the solution can be improved."

"I would like to see a way to store files and photos in the next update. If it already does this, I have yet to explore it."

More Keeper Enterprise Password Manager cons

Pricing and Cost Advice

"If you want a Ferrari, it will cost you. The solution is really nice, so it costs the client, but in the long run, it is very good. If you buy a solution that costs a lot to maintain because it is not stable, and you are frequently asking for consultant support, it costs more."

"It can be an expensive product."

"Overall, its pricing is really good. The main difference from all the other vendors is that they have one package that covers all the functionality and modules of the basic PAM, except the add-on modules like adware and server protection. It also doesn't include the licenses for domain controller protection or maybe an API call-related feature. For the basic privileged access management, the bundle pricing is really good, but when it comes to an agent-based solution for advanced cyber protection or application identity managers, it is expensive. Services are also very expensive if you hire the services team from CyberArk, but these guys are really good. For a couple of large banking projects, we had an experience with them. The banks wanted to have things quickly and efficiently, so we had to hire them. If we take four weeks, these guys can do everything on a weekend. They charge quite a big sum of money, but they know the system well."

"Payments have to be made on a yearly basis toward the licensing costs of the solution."

"Its price can be reduced."

"It costs us around $200 per user."

"Our risk is definitely significantly lower. Also, our resources are low."

"I focus more on the technical side, but I hear customers say that if CyberArk was more affordable, they might have acquired more licenses. Some clients consider alternative solutions due to pricing concerns."

More CyberArk Privileged Access Manager pricing and cost advice

"The solution's cost is reasonable."

"The product is expensive."

"It could do everything we wanted it to do and it is brilliant, but it is super pricey. To be fair to HashiCorp, we drove the price up with our requirements around resiliency. Because of the nature of our company, we don't really operate in the cloud."

"The AWS version is much cheaper than HashiCorp Vault."

"In my case, the open-source version works well. It's advisable for small to medium-scale organizations, but for large-scale organizations, you should go with the enterprise version."

"I am using the open-source version of Vault and I would have to buy a license if I want to get support."

"The more users, the better the price. Always opt for the live support."

"Free works unless the paid is absolutely necessary."

"Pricing might be a little less, but with promo codes and family plan - best offer"

"ROI is hard to know, but it has to be several times the expense of the product."

"Its cost is relative to the value of the information stored in Keeper."

"We chose their optional annual subscription; I believe we paid monthly — I thought it was a good deal."

"Its price is reasonable."

"The pricing is available on the vendor's website."

More Keeper Enterprise Password Manager pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Enterprise Password Managers solutions are best for your needs.

See recommendations

864,574 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

15%

Financial Services Firm

15%

Manufacturing Company

Government

Financial Services Firm

19%

Computer Software Company

14%

Manufacturing Company

Government

Computer Software Company

14%

Financial Services Firm

10%

Manufacturing Company

10%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?

We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to m...

See all answers

What do you like most about CyberArk Privileged Access Manager?

The most valuable features of the solution are control and analytics.

See all answers

What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?

It's not a cheap application. It's very expensive.

See all answers

Which is better - HashiCorp Vault or AWS Secrets Manager?

HashiCorp Vault was designed with your needs in mind. One of the features that makes this evident is its ability to w...

See all answers

What do you like most about HashiCorp Vault?

The feature I find most beneficial in HashiCorp Vault is the secret engine. It integrates smoothly with many applicat...

See all answers

What is your experience regarding pricing and costs for HashiCorp Vault?

If I were to set it up in AWS Secret Management, I would have to manage it, pay, and create secrets without being clo...

See all answers

What do you like most about Keeper?

I like the tool's keyword editor and SSO.

See all answers

What is your experience regarding pricing and costs for Keeper?

The solution was more expensive than the competition, but considering our business needs, it was perfectly aligned wi...

See all answers

What needs improvement with Keeper?

There is no improvement needed. Everything was good, and it was perfect for my needs.

See all answers

Comparisons

Microsoft Entra ID vs CyberArk Privileged Access Manager

Compared 8% of the time

WALLIX Bastion vs CyberArk Privileged Access Manager

Compared 6% of the time

Delinea Secret Server vs CyberArk Privileged Access Manager

Compared 6% of the time

Cisco Identity Services Engine (ISE) vs CyberArk Privileged Access Manager

Compared 5% of the time

1Password Business vs CyberArk Privileged Access Manager

Compared 3% of the time

More CyberArk Privileged Access Manager Competitors

Bitwarden vs HashiCorp Vault

Compared 27% of the time

AWS Secrets Manager vs HashiCorp Vault

Compared 13% of the time

Delinea Secret Server vs HashiCorp Vault

Compared 11% of the time

Azure Key Vault vs HashiCorp Vault

Compared 9% of the time

BeyondTrust Password Safe vs HashiCorp Vault

Compared 3% of the time

More HashiCorp Vault Competitors

Delinea Secret Server vs Keeper Enterprise Password Manager

Compared 8% of the time

Azure Key Vault vs Keeper Enterprise Password Manager

Compared 6% of the time

LastPass Business vs Keeper Enterprise Password Manager

Compared 6% of the time

Fortinet FortiToken vs Keeper Enterprise Password Manager

Compared 4% of the time

Devolutions Hub vs Keeper Enterprise Password Manager

Compared 4% of the time

More Keeper Enterprise Password Manager Competitors

Product Reports

Buyer's Guide

CyberArk Privileged Access Manager

August 2025

CyberArk Privileged Access Manager report

Download CyberArk Privileged Access Manager product report

Buyer's Guide

HashiCorp Vault

July 2025

Download HashiCorp Vault product report

Buyer's Guide

Enterprise Password Managers

July 2025

Keeper Enterprise Password Manager report

Download Keeper Enterprise Password Manager product report

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault

No data available

Keeper Security

Overview

CyberArk Privileged Access Manager is a next-generation solution that allows users to secure both their applications and their confidential corporate information. It is extremely flexible and can be implemented across a variety of environments. This program runs with equal efficiency in a fully cloud-based, hybrid, or on-premises environment. Users can now protect their critical infrastructure and access it in any way that best meets their needs.

CyberArk Privileged Access Manager possesses a simplified and unified user interface. Users are able to manage the solution from one place. The UI allows users to view and manage all of the information and controls that administrators need to be able to easily access. Very often, management UIs do not have all of the controls and information streamlined in a single location. This platform provides a level of visibility that ensures users will be able to view all of their system’s most critical information at any time that they wish.

Benefits of CyberArk Privileged Access Manager

Some of CyberArk Privileged Access Manager’s benefits include:

The ability to manage IDs and permissions across a cloud environment. In a world where being able to work remotely is becoming increasingly important, CyberArk Privileged Access Manager is a very valuable tool. Administrators do not need to worry about infrastructure security when they are away from the office. They can assign and manage security credentials from anywhere in the world.
The ability to manage the program from a single centralized UI. CyberArk Privileged Access Manager’s UI contains all of the system controls and information. Users now have the ability to view and use all of their system’s most critical information and controls from one place.
The ability to automate user management tasks. Administrators can save valuable time by assigning certain management tasks to be fulfilled by the system itself. Users can now reserve their time for tasks that are most pressing. It can also allow for the system to simplify the management process by having the platform perform the most complex functions.

Reviews from Real Users

CyberArk Privileged Access Manager’s software stands out among its competitors for one very fundamental reason. CyberArk Privileged Access Manager is an all-in-one solution. Users are given the ability to accomplish with a single platform what might usually only be accomplished with multiple solutions.

PeerSpot users note the truly all-in-one nature of this solution. Mateusz K., IT Manager at a financial services firm, wrote, "It improves security in our company. We have more than 10,000 accounts that we manage in CyberArk. We use these accounts for SQLs, Windows Server, and Unix. Therefore, keeping these passwords up-to-date in another solution or software would be impossible. Now, we have some sort of a platform to manage passwords, distribute the inflow, and manage IT teams as well as making regular changes to it according to the internal security policies in our bank."

Hichem T.-B., CDO & Co-Founder at ELYTIK, noted that “This is a complete solution that can detect cyber attacks well. I have found the proxy features most valuable for fast password web access.”

CyberArk

HashiCorp Vault is a cloud-agnostic solution used for security and secret management. Its valuable features include integration with other HashiCorp tools, token sharing, open source nature, cloud agnosticism, and on-the-fly encryption management.

The solution provides encryption of data at rest, in use, in transit, on the fly, and linked with applications. It is free to use, and the interface is simple to navigate. HashiCorp Vault has helped organizations with its multiple authentication methods and RESTful API.

HashiCorp Vault Features

Data encryption: The solution is capable of encrypting and decrypting data, and will not store it. Organizations’ security personnel define their own encryption protocols; developers can store the encrypted data where they choose and are not obligated to design specific encryption processes.
Robust secrets: For systems such as AWS or SQL databases, Vault is able to generate secrets automatically. HashiCorp Vault is able to generate AWS keypairs with all the appropriate permissions when necessary, and when the approved time expires, will nullify them.
Secure secret storage: Any type of value or key secrets can be stored in the Vault. The Vault automatically encrypts the desired secrets before recording them into persistent storage, keeping them safe and secure. Users can record data using HCP Vault’s Consul service or disk, or choose from other options.
Nullification: Vault is able to nullify single secrets or all secrets from a particular group or specific user. This process is integral in securing systems in the event of an attack or inappropriate access.

Reviews from Real Users

“The greatest benefit of HashiCorp is its ability to manage encryption on the fly. It provides encryption of data at rest, in use, in transit, on the fly, and linked with applications, which was really attractive. The lifecycle of a key is so easy to manage in terms of rotating, revoking, and issuing. They have different auth methods, and I tried all different auth methods. It is seamless.”- Project Manager at a comms service provider.

“The most valuable feature of HashiCorp Vault is that it's an open source solution. Second, it's cloud-agnostic, so it's very easy to maintain and control, which is why we prefer HashiCorp. “ - Mohamed A., Lead DevOps Engineer at Etisalat.

HashiCorp

Keeper Enterprise Password Manager provides robust security across devices with two-factor authentication and seamless password sharing for users seeking ease of use and strong encryption.

Keeper Enterprise Password Manager offers a comprehensive solution for managing sensitive information with features like cross-platform compatibility, multi-device access, and complex password generation. Businesses appreciate its user-friendly interfaces and mobile-friendly design that enhances productivity. Keeper supports secure credential management with AES 256 encryption, browser extensions, and cloud storage, catering to both personal and professional needs. Advanced features such as autofill, folder organization, and fingerprint login ensure streamlined operations for individuals and teams.

What features make Keeper Enterprise Password Manager stand out?

Multi-Device Access: Seamless usage across all devices.
Two-Factor Authentication: Enhanced security for data protection.
Password Sharing: Simplifies credential sharing.
Complex Password Generation: Automates strong password creation.
Folder Organization: Efficient management of passwords.
Browser Extensions: Streamlines access across the web.
Cloud Storage: Securely stores data with AES 256 encryption.

What benefits should users look for in reviews?

Security: High-level data protection through encryption.
Productivity Enhancement: Facilitates efficient time management.
Mobile-Friendly: Ensures smooth user experience on smartphones.
Cross-Platform Compatibility: Available on various operating systems.
Ease of Use: Intuitive interfaces simplify navigation.

In industries like finance, healthcare, and education, Keeper Enterprise Password Manager is crucial for securing access credentials and sensitive information. Organizations leverage its features to manage passwords efficiently, ensuring compliance and streamlined operations. Teams benefit from enhanced security protocols and data synchronization across all devices, making it a favored choice in sectors requiring stringent data protection measures.

Keeper Security, Inc.

Sample Customers

Rockwell Automation

Adobe, SAP Ariba, Citadel, Spaceflight, Cruise

At&t, Wells Fargo, Disney, GM, Chase, Honeywell, Samsung, Dow

Buyer's Guide

Enterprise Password Managers

July 2025

Download Free Report

Find out what your peers are saying about Microsoft, CyberArk, Amazon Web Services (AWS) and others in Enterprise Password Managers. Updated: July 2025.

DOWNLOAD NOW

864,574 professionals have used our research since 2012.