No more typing reviews! Try our Samantha, our new voice AI agent.

IBM Security Secret Server vs Safeguard by One Identity comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jul 20, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

IBM Security Secret Server
Ranking in Privileged Access Management (PAM)
20th
Average Rating
8.2
Reviews Sentiment
5.7
Number of Reviews
8
Ranking in other categories
No ranking in other categories
Safeguard by One Identity
Ranking in Privileged Access Management (PAM)
2nd
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
91
Ranking in other categories
User Entity Behavior Analytics (UEBA) (1st), Non-Human Identity Management (NHIM) (2nd)
 

Mindshare comparison

As of November 2026, in the Privileged Access Management (PAM) category, the mindshare of IBM Security Secret Server is 1.5%, up from 1.0% compared to the previous year. The mindshare of Safeguard by One Identity is 4.4%, up from 3.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Privileged Access Management (PAM) Mindshare Distribution
ProductMindshare (%)
Safeguard by One Identity4.4%
IBM Security Secret Server1.5%
Other94.1%
Privileged Access Management (PAM)
 

Featured Reviews

AsifIqbal - PeerSpot reviewer
Chief Information Security Officer at a insurance company with 501-1,000 employees
Privileged access monitoring has strengthened identity control and improved security posture
I find the monitoring and recording parts of IBM Security Secret Server to be the most valuable features. Password vaulting is somewhat typical, but I rate monitoring and recording as very good features, along with ease of deployment. The reporting tools in IBM Security Secret Server have helped me identify vulnerabilities. From the monitoring part, you can somewhat cover the identity vulnerability aspect. However, for identity vulnerability, I think the best approach is to use IAM rather than PAM. It is easy to integrate IBM Security Secret Server with cybersecurity frameworks, which is a very important aspect. When we are improving our attack surface, identity is the most important thing that we need to cover, and PAM will play a very crucial role in improving our cybersecurity framework and architecture. The main benefits that IBM Security Secret Server provides for me include complete control over the privileged identities, which are the main sources that can have the privilege to make numerous changes on the system. If we protect these identities through PAM and provide elevation on their accounts when required, then we can improve our security posture and infrastructure security.
Mahesh Malve - PeerSpot reviewer
Senior Business Development Associate at DigitalTrack Solutions ind pvt ltd
Centralized control has strengthened privileged security and simplified audit investigations
While One Identity Safeguard is a strong and reliable PAM solution, there are a few areas where it can be further improved to enhance user experience and scalability. Regarding the user interface and experience, the UI, while functional, can be a bit complex for new users. A more intuitive and modern dashboard with simplified navigation would improve adoption, especially for non-technical stakeholders. Regarding integration flexibility, although it supports major integrations, expanding out-of-the-box connectors for more cloud-native apps, DevOps tools, and SaaS platforms would be beneficial. Faster and simpler API-based integrations could reduce deployment efforts. Regarding scalability and performance in large enterprise environments, performance tuning and scaling can require additional efforts. Enhancing seamless scalability and high availability configuration would improve enterprise readiness.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Access to privileged, shared credentials is simplified by optimizing the whole workflow and approval processes."
"One of the most valuable features is scalability, and how it allows you to scale it without affecting the underlying core components."
"The main benefits that IBM Security Secret Server provides for me include complete control over the privileged identities, which are the main sources that can have the privilege to make numerous changes on the system, and if we protect these identities through PAM and provide elevation on their accounts when required, then we can improve our security posture and infrastructure security."
"What I like best about IBM Security Secret Server is its single-access console. It's also easy to manage and fulfills the requirements with the least resistance."
"As a PAM solution, Secret Server performs all the use cases in our environment."
"Stability-wise, I think it is a very good solution."
"The live recording is a very useful feature."
"It is one of the most well-known names in this field."
"The solution transparently integrates into the infrastructure and users do not notice it. I would give this feature the highest rating."
"We use the Approval Anywhere, or cloud assistant feature and it is great. It enables us to add an extra layer of security for critical passwords without adding time to the approval process."
"I like Safeguard's snapshot feature that enables us to review the last time an application was opened and by whom. If there are any issues, we can look behind the scenes to see what has been done. We can suspend a user's access or close off a server."
"The whole product solves the privileged access management challenge for our company. We have a secure tunnel, a secure session manager, and automatic logging of sessions, which is good for forensic purposes. We have a rich level of logs and can trace what happened on which machine and see who did what."
"It has greatly helped improve our security posture. Safeguard has an option where it will reset passwords on service accounts, then go out to those servers where that service account is running as a service and update the password on it. That makes password changes very easy. We can regularly change passwords now and are planning on making it an annual activity, where all the people who own service accounts will go in and make sure all their passwords get changed, updated, and reset."
"This solution gives them real confidence that they can keep their customers safe and their data protected."
"The implementation time was quick. It was basically up and running within a week."
"We were able to take an environment where we had several hosts managed by different people and consolidate that into a single, centrally managed solution."
 

Cons

"It would be preferable if the full proxy was included in the IBM Security Secret Server."
"The newer interface is more difficult to use than the previous one, and consequently, new users might need more training."
"The newer interface is maybe confusing old customer that using previous one from their point of views, I think they will need little pass of time to be familiar with."
"I mention that password vaulting and password rotation in IBM Security Secret Server are basically the same thing, and it becomes somewhat complex when integrating a different system with them because it requires API development."
"The nonclustered index is working in an area with a problem that needs improvement."
"Although much has improved in last two years, the GUI for IBM products can be improved."
"If you have a hosted PIM in your local environment and you plan to migrate it to some cloud-based environment, then migration will become a painful task."
"What needs improvement in IBM Security Secret Server is support. The local partner provides good support, but IBM itself doesn't. Most of the time, the IBM support team does not aggressively resolve issues reported through chat or the IBM website."
"The high availability function of the box itself requires a long time to switch over from one appliance to another, so there is room for improvement."
"The interface is better now, but it still could be improved a lot. It needs more organization, menus, automatic refresh of information, and Web 2.0."
"The multilanguage functionality does not support the Arabic language, even though this solution is deployed in an Arabic region."
"Documentation can be much better and they should provide typical use cases to get started more easily."
"I think the initial setup of One Identity Safeguard could be more simplified, and the dashboard customization could also be improved."
"Unfortunately, my experience with Safeguard by One Identity's customer support is not very positive. They tend to respond slowly, generally do not find solutions effectively, and it is challenging to request calls that could resolve issues more quickly."
"Support can be improved in terms of response times and consistency. Sometimes resolving complex issues takes longer than expected and requires multiple follow-ups."
"I think Safeguard by One Identity could be improved by making the user interface a little simpler and more intuitive, especially for new administrators."
 

Pricing and Cost Advice

"My rating for the IBM Security Secret Server pricing is seven out of ten. It could be cheaper."
"The price could be better. I think it's a good price for the on-premises environment and the high availability for enterprises the solution provides."
"I believe that we paid 35,000 or 40,000 US dollars for it."
"It is more expensive than Secret Server but way less expensive than CyberArk. As a customer, I would like the pricing to be lower, but it has a good price point."
"Its subscription cost is too much, and sometimes, it is very difficult to pitch the solution to the management for cost approval. If the cost is reduced a little bit, it would be easier. If its cost was less, many other organizations that currently cannot afford it would be able to use this technology. I'm sure many organizations around the globe are having issues with identity management, and it is a very difficult task for IT to manage privileged accounts."
"Setup cost, pricing and licensing are all very expensive."
"It is cheaper than CyberArk. Its price is fair."
"One Identity Safeguard is expensive and the cost goes up as we scale."
"They offer a fair price for a robust solution."
"Safeguard is cheaper than CyberArk."
"We have a yearly license. The cost depends on how much a company wants to invest in technology. In our organization, we believe in modern digitization and automation processes so we found it affordable. One Identity was not that much less than other solutions and it is not a cheap solution. There were number of cheaper solutions. However, it's the most effective, according to our evaluation."
report
Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.
921,523 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Insurance Company
19%
Outsourcing Company
13%
Construction Company
11%
Performing Arts
7%
Outsourcing Company
14%
Retailer
10%
Financial Services Firm
8%
University
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise2
Large Enterprise2
By reviewers
Company SizeCount
Small Business93
Midsize Enterprise27
Large Enterprise40
 

Questions from the Community

What needs improvement with IBM Security Secret Server?
I believe there is not much that can be improved for IBM Security Secret Server. Providing local support and local vendor availability would be beneficial so we are not dependent on international s...
What is your primary use case for IBM Security Secret Server?
IBM Security Secret Server serves multiple use cases for us, including the monitoring of privileged users, as well as the recording and password vaulting of their accounts, passwords, and need-base...
What advice do you have for others considering IBM Security Secret Server?
I mention that password vaulting and password rotation in IBM Security Secret Server are basically the same thing, and it becomes somewhat complex when integrating a different system with them beca...
What is your experience regarding pricing and costs for One Identity Safeguard?
My experience with the pricing, setup cost, and licensing of Safeguard by One Identity is moderate.
What needs improvement with One Identity Safeguard?
Safeguard by One Identity could be improved by making the interface even easier to use, expanding reporting and analytics, and providing more customization options for access policies. It would be ...
What is your primary use case for One Identity Safeguard?
My main use case for Safeguard by One Identity is securing and managing user identities and access across the application with a focus on improving authentication, enforcing access control, and red...
 

Also Known As

IBM Secret Server, Secret Server, IBM Security Privileged Identity Manager
No data available
 

Overview

 

Sample Customers

Information Not Available
Cavium
Find out what your peers are saying about IBM Security Secret Server vs. Safeguard by One Identity and other solutions. Updated: November 2026.
921,523 professionals have used our research since 2012.