IBM Security Secret Server vs Idira Privileged Access Manager comparison

Why PeerSpot?

IBM and Idira by Palo Alto Networks are both solutions in the Privileged Access Management (PAM) category. IBM is ranked #20 with an average rating of 8.0, while Idira by Palo Alto Networks is ranked #1 with an average rating of 8.6. IBM holds a 1.5% mindshare in PAM, compared to Idira by Palo Alto Networks’s 8.6% mindshare. Additionally, 100% of IBM users are willing to recommend the solution, compared to 95% of Idira by Palo Alto Networks users who would recommend it.

IBM Security Secret Server

Read 8 IBM Security Secret Server reviews

1,371 Views
1,357 Comparison Views

100% willing to recommend

Idira Privileged Access Man...

Read 231 Idira Privileged Access Manager reviews

27,682 Views
11,073 Comparison Views

95% willing to recommend

IBM Security Secret Server

Idira Privileged Access Man...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jun 2, 2026

Idira Privileged Access Manager and IBM Security Secret Server compete in the privileged access management space. Idira seems to have the upper hand due to its robust session handling and adaptability features.

Features: Idira Privileged Access Manager is recognized for its powerful session monitoring, strong audit capabilities, and seamless SIEM integration. Real-time session management is a standout feature. IBM Security Secret Server excels in credential management and session recording, offering easy integration with cybersecurity frameworks. Its effective monitoring and comprehensive recording capabilities are particularly valued.

Room for Improvement: Idira users note the need for better plugin connectors and broader device integration without custom development. Enhancements in session monitoring search and SAML or AWS account integrations would be beneficial. IBM could benefit from improved local support, a lighter architecture, and enhanced shared storage features to automatically sync passwords across servers, reducing scripting needs.

Ease of Deployment and Customer Service: Idira offers versatile deployment options, including on-premises, hybrid, and public cloud environments but is noted for slower technical support response times. IBM supports mainly on-premises and hybrid setups, with users praising its knowledgeable support, though there are concerns about responsiveness. Overall, IBM's support is seen as effective.

Pricing and ROI: Idira is perceived as expensive, yet customers believe its cost is justified by leadership in the market. It provides a robust feature set for large organizations. IBM is viewed as a mid-range option, priced relative to its enterprise features, offering balanced pricing. While Idira may require a higher initial investment, both provide solid ROI through enhanced security and reduced breach risks.

To learn more, read our detailed IBM Security Secret Server vs. Idira Privileged Access Manager Report (Updated: September 2026).

Buyer's Guide

IBM Security Secret Server vs. Idira Privileged Access Manager

September 2026

Download the complete report

Helped 917,382 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

IBM Security Secret Server

Ranking in Privileged Access Management (PAM)

20th

Average Rating

8.2

Reviews Sentiment

5.7

Number of Reviews

Ranking in other categories

No ranking in other categories

Idira Privileged Access Man...

Ranking in Privileged Access Management (PAM)

1st

Average Rating

8.6

Reviews Sentiment

6.8

Number of Reviews

231

Ranking in other categories

User Activity Monitoring (1st), Enterprise Password Managers (2nd), Mainframe Security (1st), Operational Technology (OT) Security (3rd)

Mindshare comparison

As of October 2026, in the Privileged Access Management (PAM) category, the mindshare of IBM Security Secret Server is 1.5%, up from 1.0% compared to the previous year. The mindshare of Idira Privileged Access Manager is 8.6%, down from 16.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Privileged Access Management (PAM) Mindshare Distribution
Product	Mindshare (%)
Idira Privileged Access Manager	8.6%
IBM Security Secret Server	1.5%
Other	89.9%

Privileged Access Management (PAM)

Featured Reviews

AsifIqbal

Chief Information Security Officer at a insurance company with 501-1,000 employees

Privileged access monitoring has strengthened identity control and improved security posture

I find the monitoring and recording parts of IBM Security Secret Server to be the most valuable features. Password vaulting is somewhat typical, but I rate monitoring and recording as very good features, along with ease of deployment. The reporting tools in IBM Security Secret Server have helped me identify vulnerabilities. From the monitoring part, you can somewhat cover the identity vulnerability aspect. However, for identity vulnerability, I think the best approach is to use IAM rather than PAM. It is easy to integrate IBM Security Secret Server with cybersecurity frameworks, which is a very important aspect. When we are improving our attack surface, identity is the most important thing that we need to cover, and PAM will play a very crucial role in improving our cybersecurity framework and architecture. The main benefits that IBM Security Secret Server provides for me include complete control over the privileged identities, which are the main sources that can have the privilege to make numerous changes on the system. If we protect these identities through PAM and provide elevation on their accounts when required, then we can improve our security posture and infrastructure security.

Read full review

Singaravelu C

CyberArk Engineer at Tata Consultancy

Provides full visibility into user activity and ensures secure end-to-end access across critical systems

In CyberArk Privileged Access Manager, I see room for improvement as I am working in the on-premises networks, and now we are also having the cloud-based PAM. So there, everything is maintained by the CyberArk Privileged Access Manager team, and we are only maintaining the PSM servers. So it is already upgraded from the on-premises network to the cloud network. If you ask me what we can implement beyond that, I just need a few minutes to think about what new things, because it is already an end-to-end security on-premises itself. Now, when it comes to PCloud, Privileged Cloud, it is more secure than the on-premises networks because most of the things are handled using the cloud itself. So it is an already upgraded version; we do not need to implement something new. But if you think in that way, we can have a chance to implement our things. If anything could be improved in CyberArk Privileged Access Manager, I think we could build a small agent AI in my team, we could give access to these logs—the Vault logs, PSM logs, and CPM logs. Whenever the system is going down, the AI will automatically check. If we actually implement agent AI in CyberArk Privileged Access Manager, it will check the logs, and if any errors are coming, it automatically triggers alerts and gives the solution. That is the best improvement I can think of because these days, most things are done by agent AI. So if we also implement this agent AI in CyberArk Privileged Access Manager, we can add more features.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"As a PAM solution, Secret Server performs all the use cases in our environment."

"The main benefits that IBM Security Secret Server provides for me include complete control over the privileged identities, which are the main sources that can have the privilege to make numerous changes on the system, and if we protect these identities through PAM and provide elevation on their accounts when required, then we can improve our security posture and infrastructure security."

"Stability-wise, I think it is a very good solution."

"It is one of the most well-known names in this field."

"What I like best about IBM Security Secret Server is its single-access console. It's also easy to manage and fulfills the requirements with the least resistance."

"This product has been able to cover most of the requests from our customers."

"The live recording is a very useful feature."

"Access to privileged, shared credentials is simplified by optimizing the whole workflow and approval processes."

More IBM Security Secret Server pros

"The Vault offers great capabilities for structuring and accessing data."

"It is one of the best solutions in the market, and ever since I started using this solution, there has not been any compromise when it comes to our lab."

"The most valuable feature I find in CyberArk Privileged Access Manager is that we can record the sessions. It provides flexible workflows. I can change the workflow to specify if it needs one approval or two approvals, and I can approve my peer."

"There are two main ways CyberArk Privileged Access Manager Server Control has been helpful to us."

"We primarily use this product for privileged identity management, restricting privileged IDs, and governance."

"CyberArk Privileged Access Manager's main benefit is it provides secure access to our servers. There are features to capture the user activity, it provides video recording processing. If the users are logged in to the server, we can see what activities they are performing. It's a very nice tool for Privileged Access Management. They have plenty of useful services and the solution has fulfilled our needs."

"It's highly secure and very flexible. It gives us all types of storage options and it gives us a high level of security."

"The solution is highly stable."

More Idira Privileged Access Manager pros

Cons

"Although much has improved in last two years, the GUI for IBM products can be improved."

"The newer interface is maybe confusing old customer that using previous one from their point of views, I think they will need little pass of time to be familiar with."

"I mention that password vaulting and password rotation in IBM Security Secret Server are basically the same thing, and it becomes somewhat complex when integrating a different system with them because it requires API development."

"Secret Server should have the ability to discover privileged accounts in the servers, like the administrator or users, from SQL and Oracle without having to import a script."

"Unfortunately, the technical support is not very responsive because we purchased it from IBM; however, the actual support comes from Thycotic."

"The nonclustered index is working in an area with a problem that needs improvement."

"What needs improvement in IBM Security Secret Server is support. The local partner provides good support, but IBM itself doesn't. Most of the time, the IBM support team does not aggressively resolve issues reported through chat or the IBM website."

"If you have a hosted PIM in your local environment and you plan to migrate it to some cloud-based environment, then migration will become a painful task."

More IBM Security Secret Server cons

"PAM could be more user-friendly and CyberArk could update the documentation to include more real-world examples. You have to learn it yourself through trial and error. In particular, the online documentation should have more information about troubleshooting."

"Implementation documentation could use some improvement in a few areas."

"The deployment architecture, the ability to locate and change credentials and the stability need to be improved."

"I would like to see improvement in the custom connector for integration with different devices."

"The product is very vaulting-focused. I'd love to see it expanding its capabilities a bit further into areas like just-in-time elevation, and access with non-vaulted credentials."

"The authentication port is available in CyberArk Alero but not Fortinet products."

"They need to provide better training for the System Integrator."

"This is probably a common thing, but they do ask for a lot of log files, a lot of information. They ask you to provide a lot of information to them before they're willing to give you anything at all upfront. It would be better if they were a little more give-and-take upfront: "Why don't you try these couple of things while we take your log files and stuff and go research them?" A little bit of that might be more helpful."

More Idira Privileged Access Manager cons

Pricing and Cost Advice

"I believe that we paid 35,000 or 40,000 US dollars for it."

"The price could be better. I think it's a good price for the on-premises environment and the high availability for enterprises the solution provides."

"My rating for the IBM Security Secret Server pricing is seven out of ten. It could be cheaper."

"It's per-company, license-based."

"The price of the solution is reasonable."

"CyberArk Enterprise Password Vault is a very expensive product."

"The price of this solution is expensive."

"With the current model of licensing, for my use cases, sometimes it's hard to convince the management and get budget approvals for it. It's expensive and you're not getting anything new. It's just a control, but in terms of risk, you are covering a big impact on the company. Improvement in the licensing prices is something I would want to have."

"It costs us around $200 per user."

"Overall, its pricing is really good. The main difference from all the other vendors is that they have one package that covers all the functionality and modules of the basic PAM, except the add-on modules like adware and server protection. It also doesn't include the licenses for domain controller protection or maybe an API call-related feature. For the basic privileged access management, the bundle pricing is really good, but when it comes to an agent-based solution for advanced cyber protection or application identity managers, it is expensive. Services are also very expensive if you hire the services team from CyberArk, but these guys are really good. For a couple of large banking projects, we had an experience with them. The banks wanted to have things quickly and efficiently, so we had to hire them. If we take four weeks, these guys can do everything on a weekend. They charge quite a big sum of money, but they know the system well."

"It's an affordable platform."

More Idira Privileged Access Manager pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.

See recommendations

917,382 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Insurance Company

18%

Outsourcing Company

12%

Construction Company

11%

Performing Arts

Outsourcing Company

12%

Financial Services Firm

12%

Manufacturing Company

10%

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	4
Midsize Enterprise	2
Large Enterprise	2

By reviewers
Company Size	Count
Small Business	59
Midsize Enterprise	43
Large Enterprise	175

Questions from the Community

What needs improvement with IBM Security Secret Server?

I believe there is not much that can be improved for IBM Security Secret Server. Providing local support and local vendor availability would be beneficial so we are not dependent on international s...

See all answers

What is your primary use case for IBM Security Secret Server?

IBM Security Secret Server serves multiple use cases for us, including the monitoring of privileged users, as well as the recording and password vaulting of their accounts, passwords, and need-base...

See all answers

What advice do you have for others considering IBM Security Secret Server?

I mention that password vaulting and password rotation in IBM Security Secret Server are basically the same thing, and it becomes somewhat complex when integrating a different system with them beca...

See all answers

How does Sailpoint IdentityIQ compare with CyberArk PAM?

We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...

See all answers

What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?

The pricing is reasonable compared to other software options we evaluated, and it is straightforward. However, overall costs depend on deployment size and licensing requirements.

See all answers

What needs improvement with CyberArk Privileged Access Manager?

While the access control capabilities are useful, streamlining some configuration and policy management workflows could enhance the user experience for administrators. A simpler interface for creat...

See all answers

Comparisons

WALLIX Bastion vs IBM Security Secret Server

Compared 26% of the time

Delinea Secret Server vs IBM Security Secret Server

Compared 12% of the time

Fortra's Powertech Identity & Access Manager vs IBM Security Secret Server

Compared 11% of the time

Okta Platform vs IBM Security Secret Server

Compared 4% of the time

Delinea Privileged Access Service vs IBM Security Secret Server

Compared 4% of the time

More IBM Security Secret Server Competitors

Safeguard by One Identity vs Idira Privileged Access Manager

Compared 3% of the time

Keeper Enterprise Password Manager vs Idira Privileged Access Manager

Compared 3% of the time

Teleport vs Idira Privileged Access Manager

Compared 3% of the time

NetWitness Platform vs Idira Privileged Access Manager

Compared 3% of the time

F5 BIG-IP Access Policy Manager (APM) vs Idira Privileged Access Manager

Compared 2% of the time

More Idira Privileged Access Manager Competitors

Product Reports

Buyer's Guide

IBM Security Secret Server

October 2026

Download IBM Security Secret Server product report

Buyer's Guide

Idira Privileged Access Manager

October 2026

Download Idira Privileged Access Manager product report

Also Known As

IBM Secret Server, Secret Server, IBM Security Privileged Identity Manager

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault

Overview

IBM Security Secret Server provides centralized management of privileged credentials, secure access, session recording, and replay. Its pricing model is unique, being based on user count rather than system connections, making it a flexible choice for organizations.

IBM Security Secret Server enhances cybersecurity by integrating with frameworks and offering features like monitoring, high availability, and adaptable reporting. It simplifies password management, automates changes, and ensures compliance with security protocols. The platform is valued for its ease of deployment and user-friendly interface, although it can improve in areas such as the GUI and integration process. Complex high availability and disaster recovery setups are noted challenges, along with nonclustered indexing issues affecting performance. Users desire improvements in local support and migration processes.

What are the key features of IBM Security Secret Server?

Centralized Management: Streamlines credential management across systems.
Session Recording: Allows recording and replay of sessions for forensic purposes.
Integration Capabilities: Enhances security with diverse cybersecurity frameworks.
Adaptable Reporting: Provides tools for customizable reporting.
Single-Access Console: Offers a unified user experience with granular roles.

What benefits should users look for in reviews?

User-Friendly Interface: Simplifies deployment and daily operations.
Scalability: User-based pricing model ensures flexibility and cost-efficiency.
Security Compliance: Ensures adherence to security protocols with automated processes.
Audit and Reporting: Robust capabilities for auditing and compliance documentation.
Enhanced Security Posture: Integrates well with existing frameworks to bolster security.

Organizations across various industries implement IBM Security Secret Server for managing privileged access and securing critical systems. It serves financial institutions by providing a secure jump server for accessing core banking platforms and databases. IT managers benefit from workflow approvals and automated password management, ensuring compliance and boosting security posture. The platform's session recording and auditing features are crucial for sectors needing detailed activity documentation.

IBM

CyberArk Privileged Access Manager safeguards privileged accounts through password management, credential rotation, and session recording. With seamless integration and real-time monitoring, it ensures robust security across platforms.

CyberArk Privileged Access Manager is recognized for its extensive capabilities in managing and securing privileged accounts. It offers vital functionalities such as automatic password rotation, real-time session monitoring, and cross-platform integration through APIs and custom connectors. Users find the flexibility in workflows and granular access controls beneficial, particularly in protecting access across cloud and on-prem infrastructures. However, improvements in its interface, installation process, plugin support, and integration with third-party tools are often suggested. Pricing is a concern for many, along with the need for better dashboard reporting, user provisioning, and enhanced documentation. Organizations leverage this tool for encrypting and monitoring critical account activities and automating password management to bolster security.

What are the key features of CyberArk Privileged Access Manager?

Enterprise Password Vault: Provides secure storage and management of enterprise credentials.
Privilege Session Manager: Offers comprehensive session recording and monitoring.
Privileged Threat Analytics: Detects and alerts on potential credential threats.
Integration Capabilities: Easily integrates with multiple systems using APIs and custom connectors.

What benefits or ROI should users expect?

Enhanced Security: Automates and centralizes password management, reducing risk of account misuse.
Compliance Support: Ensures alignment with compliance policies through automated processes.
Operational Efficiency: Streamlines security operations with real-time monitoring and integration.
Adaptability: Protects privileged access across diverse infrastructure setups including cloud and on-prem.

CyberArk Privileged Access Manager finds substantial use in industries such as finance, healthcare, and technology, where the protection of privileged accounts is critical. These sectors rely on its capabilities to manage application credentials securely and provide safe access for developers, administrators, and vendors across various infrastructures.

Idira by Palo Alto Networks

Sample Customers

Information Not Available

Rockwell Automation

Buyer's Guide

IBM Security Secret Server vs. Idira Privileged Access Manager

September 2026

Free Report: IBM Security Secret Server vs. Idira Privileged Access Manager

Find out what your peers are saying about IBM Security Secret Server vs. Idira Privileged Access Manager and other solutions. Updated: September 2026.

DOWNLOAD NOW

917,382 professionals have used our research since 2012.

See our IBM Security Secret Server vs. Idira Privileged Access Manager report.

See our list of best Privileged Access Management (PAM) vendors.

We monitor all Privileged Access Management (PAM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.