CyberArk Secrets Management vs IBM Security Verify Access comparison

CyberArk Secrets Management vs. IBM Security Verify Access

Download the complete report

Helped 859,129 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

CyberArk Secrets Management

Ranking in Access Management

19th

Average Rating

7.2

Reviews Sentiment

7.6

Number of Reviews

Ranking in other categories

Enterprise Password Managers (16th)

IBM Security Verify Access

Ranking in Access Management

12th

Average Rating

7.8

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

Single Sign-On (SSO) (15th), Identity Management (IM) (25th), Identity and Access Management as a Service (IDaaS) (IAMaaS) (17th)

Featured Reviews

Rajat-Jain

Senior Member Of Technical Staff at a energy/utilities company with 10,001+ employees

Helps with compliance and improves operational flexibility

We have had both on-premises and SaaS models. The on-premise setup was a little difficult, but now that it has been moved to the SaaS model, everything is controlled by CyberArk. We just go and do our work. The initial on-premises setup took two weeks because it was an integrated effort. I had to spin up the servers and bring in the CyberArk Secrets Management resource to deploy the scripts. I then had to open networks and firewalls between CyberArk Secrets Management's on-premise servers and the application server. In the initial phase, it took two to three weeks, but it became easier when moving to the SaaS model. In terms of maintenance, it requires patching or upgrades, which happens one day in a month. If there is a failure, we have to roll back and try once again, which takes more time, but if everything goes smoothly, there is three to five hours of downtime.

Read full review

Jared Ochieng

Information Technology Security Specialist at infoark

Offers multiple authentication methods like tokens and one-time passwords

The authentication process with IBM Security Verify Access is good and is considered one of the best identity and access management solutions. It helps with multi-factor authentication. It offers multiple authentication methods like tokens and one-time passwords, enhancing security. It also includes features like password vaults and single sign-on, streamlining the access process for remote and local users across different solutions. The tool provides a password vault, single sign-on, and multifactor authentication. It offers various authentication methods like fingerprint integration, one-time passwords, or tokens sent via email or SMS. This ensures secure access to your accounts by providing multiple authentication options. The policy control feature allows you to set authentication measures and policies for your organization's identity governance. This feature helps create standardized policies and organize them into groups based on departments or specific needs. It simplifies access management for both administrators and users. IBM Security Verify Access can be integrated with almost any solution using APIs. The time required for integration depends on whether the solution is out of the box or custom. Out-of-the-box solutions can be integrated quickly, typically within a few days or hours, while custom solutions may require additional steps and take longer to integrate.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"With CyberArk Secrets Management, we were able to resolve the automatic change of the passwords based on timelines. We were also able to retrieve the passwords in an encrypted format by utilizing the CyberArk platform, which was not provided to us by UiPath."

"The automatic rotation of the password is the top feature."

"One of the most important features for us is the system's performance, particularly its speed of retrieving secrets."

"CyberArk Secrets Management is a critical solution for strengthening our security posture."

"It's vital for effectively managing and securing my credentials."

"CyberArk's support team is knowledgeable and helpful, consistently responding on time."

"The audit trails have been extremely important for us in helping our organization meet regulatory requirements."

"Its stability and UI are most valuable."

"From the integration point of view, it supports SAML, OIDC, and OAuth. For legacy applications that don't have support for SAML and other new protocols, it provides single sign-on access to end-users. From the integration compatibility point of view, it is highly capable."

"The tool provides a password vault, single sign-on, and multifactor authentication. It offers various authentication methods like fingerprint integration, one-time passwords, or tokens sent via email or SMS. This ensures secure access to your accounts by providing multiple authentication options."

"The solution has powerful authentification and authorization. It offers a good way to increase security."

"The most valuable feature of IBM Security Access Manager, at least for my company, is multi-factor authentication. That's the only feature my company is using. The solution works well and has no glitches. IBM Security Access Manager is a very good solution, so my company is still using it."

"I have found this solution to be really practical and when a user wants to log in, it is effortless and runs smooth."

"It's a good solution for identification and access management."

Cons

"We occasionally experience incidents that delay password injection back into the script."

"There is room for improvement with better documentation and less need for CyberArk Secrets Management personnel to assist us with their presence."

"Improvements for CyberArk Secrets Management include enhanced documentation with more use cases and step-by-step integration guides."

"Implementing it and ensuring seamless password rotations present challenges."

"We did not have a good experience with technical support because their numerous processes caused delays in engaging, leading to project delays or issues with production."

"The password search feature and integration between different vaults could be enhanced. For instance, when updating passwords in both lower and higher environment vaults, improvement is required in search and upgrade functions."

"Implementation was complex and required professional services."

"What we'd like improved in IBM Security Access Manager is its onboarding process as it's complex, particularly when onboarding new applications. We need to be very, very careful during the onboarding. We have no issues with IBM Security Access Manager because the solution works fine, apart from the onboarding process and IBM's involvement in onboarding issues. If we need support related to the onboarding, we've noticed a pattern where support isn't available, or they don't have much experience, or we're not getting a response from them. We're facing the same issue with IBM Guardium. As we're just focusing on the multi-factor authentication feature of IBM Security Access Manager and we didn't explore any other features, we don't have additional features to suggest for the next release of the solution, but we're in discussion about exploring ID management and access management features, but those are just possibilities because right now, we're focused on exploring our domain."

"Configuration could be simplified for the end-user."

"They can improve the single sign-on configuration for OIDC and OAuth. That is not very mature in this product, and they can improve it in this particular area. OIDC is a third-party integration that we do with the cloud platforms, and OAuth is an authorization mechanism for allowing a user having an account with Google or any other provider to access an application. Organizations these days are looking for just-in-time provisioning use cases, but IBM Security Access Manager is not very mature for such use cases. There are only a few applications that can be integrated, and this is where this product is lagging. However, in terms of configuration and single sign-on mechanisms, it is a great product."

"The user interface needs to be simplified, it's complex and not user-friendly."

"There are a lot of areas that can be improved, but the main area is the lack of customization. You cannot easily customize anything in the product. It is not easy to tweak the functionality. It is challenging to change the out-of-the-box functionality."

"The user interface for users and administrators could be improved to make it easier. Automating some functions could also be beneficial."

"The solution could be classified as a hilt system. There are a lot of resources being used and it is suitable for very large enterprises or the public sector."

Pricing and Cost Advice

"CyberArk Secrets Management has a moderate pricing structure based on a per-tenant licensing model rather than a per-user account model like their PAM solution."

"It is in the middle. It is neither very cheap nor very expensive, so I would place it in the middle."

"The product is not expensive. It depends on the number of users."

"The license and costs depend on the amount range of users you have. For just approximately 2,000 users, the price is practical and fair. However, when you have 20,000 users, it starts to become really expensive, and the discount per user is not attractive enough to go ahead and purchase."

"It costs about 300K AED for a year. Its pricing is a bit on the higher end, but in comparison to other products in the market, its price is still better. There are lots of other products that are very costly."

See which vendors are best for you

Use our free recommendation engine to learn which Access Management solutions are best for your needs.

See recommendations

859,129 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

No data available

Financial Services Firm

25%

Insurance Company

16%

Government

12%

Computer Software Company

11%

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What is your experience regarding pricing and costs for CyberArk Secrets Management?

It is in the middle. It is neither very cheap nor very expensive, so I would place it in the middle.

What needs improvement with CyberArk Secrets Management?

There is room for improvement with better documentation and less need for CyberArk Secrets Management personnel to assist us with their presence.

What is your primary use case for CyberArk Secrets Management?

My main use cases at the moment promote security all across the organization.

What do you like most about IBM Security Access Manager?

The tool provides a password vault, single sign-on, and multifactor authentication. It offers various authentication methods like fingerprint integration, one-time passwords, or tokens sent via ema...

What needs improvement with IBM Security Access Manager?

The user interface for users and administrators could be improved to make it easier. Automating some functions could also be beneficial.

What advice do you have for others considering IBM Security Access Manager?

I rate the product an eight out of ten.

HashiCorp Vault vs CyberArk Secrets Management

Comparisons

Compared 100% of the time

More CyberArk Secrets Management Competitors

Oracle Access Manager vs IBM Security Verify Access

Compared 21% of the time

Ping Identity Platform vs IBM Security Verify Access

Compared 12% of the time

Microsoft Entra ID vs IBM Security Verify Access

Compared 12% of the time

Okta Workforce Identity vs IBM Security Verify Access

Compared 9% of the time

F5 BIG-IP Access Policy Manager (APM) vs IBM Security Verify Access

Compared 8% of the time

More IBM Security Verify Access Competitors

Product Reports

CyberArk Secrets Management

Download CyberArk Secrets Management product report

Identity and Access Management as a Service (IDaaS) (IAMaaS)

Download IBM Security Verify Access product report

Also Known As

No data available

IBM Security Verify Access (SVA), IBM Security Access Manager, ISAM

Overview

CyberArk Secrets Management offers comprehensive security for managing sensitive information, addressing crucial needs in secure storage, access, and control of credentials across IT environments.

CyberArk Secrets Management focuses on ensuring the secure handling of sensitive enterprise data, offering a robust infrastructure for credentials and secrets management. Designed for organizations that need high levels of security, it provides efficiency in automating access controls and compliance. Its features are tailored to integrate seamlessly with existing IT frameworks, facilitating a secure and scalable approach to managing critical information across complex infrastructures. CyberArk's approach addresses both security and operational efficiency.

What features make CyberArk Secrets Management essential?

Enhanced Security Controls: Allows detailed configuration of access policies to safeguard sensitive data.
Automated Credential Rotation: Automatically rotates credentials to minimize the risk of security breaches.
Integrated Audit Trails: Provides comprehensive tracking and reporting to ensure compliance and accountability.

What benefits and ROI can be expected from CyberArk Secrets Management?

Risk Reduction: Minimizes potential exposure to data breaches through advanced security measures.
Operational Efficiency: Streamlines access management tasks, reducing manual overhead and errors.
Regulatory Compliance: Helps maintain adherence to industry standards and regulations, reducing the risk of fines.

CyberArk Secrets Management is widely implemented across sectors like finance, healthcare, and government, focusing on industries where data sensitivity and compliance are critical. Its application helps organizations mitigate risks and enhance data governance, proving invaluable in environments where trust and security are paramount.

CyberArk

IBM Security Verify Access is a complete authorization and network security policy management solution. It provides end-to-end protection of resources over geographically dispersed intranets and extranets.Provides a wide range of built-in authenticators and supports external authenticators.Provides permit and deny decisions for protected resources requests in the secure domain through the authorization API.Manages secure access to private internal network-based resources by using the public Internet's broad connectivity and ease of use with a corporate firewall system.

IBM

Sample Customers

Information Not Available

POST Luxembourg

CyberArk Secrets Management vs. IBM Security Verify Access