IBM Security Secret Server vs StrongDM comparison

IBM Security Secret Server

Read 5 StrongDM reviews

1,645 Views
1,349 Comparison Views

100% willing to recommend

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Mar 29, 2026

IBM Security Secret Server and StrongDM compete in access and identity protection. StrongDM takes the lead due to its comprehensive feature set aligning with modern operational demands.

Features: IBM Security Secret Server provides advanced secret storage, automated password management, and strong auditing. StrongDM focuses on infrastructure access control, seamless integration with existing software, and dynamic access policies.

Ease of Deployment and Customer Service: IBM Security Secret Server requires substantial setup and configuration time, supported by professional assistance and extensive resources. StrongDM offers cloud-based quick setup and intuitive operation with responsive customer service for easy troubleshooting and adoption.

Pricing and ROI: IBM Security Secret Server generally involves higher upfront setup costs, offering value through long-term security capabilities. StrongDM delivers quicker ROI due to easy integration and immediate operational efficiency impact. Its pricing strategy is favorable for business adaptation, enhancing cost-effectiveness over time.

To learn more, read our detailed IBM Security Secret Server vs. StrongDM Report (Updated: April 2026).

IBM Security Secret Server vs. StrongDM

April 2026

Download the complete report

Helped 894,738 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

IBM Security Secret Server

Ranking in Privileged Access Management (PAM)

22nd

Average Rating

8.2

Reviews Sentiment

5.7

Number of Reviews

Ranking in other categories

No ranking in other categories

StrongDM

Ranking in Privileged Access Management (PAM)

18th

Average Rating

7.8

Reviews Sentiment

6.6

Number of Reviews

Ranking in other categories

Access Management (18th)

Mindshare comparison

As of May 2026, in the Privileged Access Management (PAM) category, the mindshare of IBM Security Secret Server is 1.3%, up from 1.0% compared to the previous year. The mindshare of StrongDM is 2.5%, up from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Privileged Access Management (PAM) Mindshare Distribution
Product	Mindshare (%)
StrongDM	2.5%
IBM Security Secret Server	1.3%
Other	96.2%

Privileged Access Management (PAM)

Featured Reviews

AsifIqbal

Chief Information Security Officer at a insurance company with 501-1,000 employees

Privileged access monitoring has strengthened identity control and improved security posture

I find the monitoring and recording parts of IBM Security Secret Server to be the most valuable features. Password vaulting is somewhat typical, but I rate monitoring and recording as very good features, along with ease of deployment. The reporting tools in IBM Security Secret Server have helped me identify vulnerabilities. From the monitoring part, you can somewhat cover the identity vulnerability aspect. However, for identity vulnerability, I think the best approach is to use IAM rather than PAM. It is easy to integrate IBM Security Secret Server with cybersecurity frameworks, which is a very important aspect. When we are improving our attack surface, identity is the most important thing that we need to cover, and PAM will play a very crucial role in improving our cybersecurity framework and architecture. The main benefits that IBM Security Secret Server provides for me include complete control over the privileged identities, which are the main sources that can have the privilege to make numerous changes on the system. If we protect these identities through PAM and provide elevation on their accounts when required, then we can improve our security posture and infrastructure security.

Read full review

reviewer2804475

Iam Engineer at a manufacturing company with 10,001+ employees

Access management has improved privileged logins while still needing fewer crashes and less upkeep

The best features in StrongDM are the password rotation capabilities, which I think are pretty cool, and also how you can literally log in to any of the privileged servers through a single platform. You just copy-paste the IP and the port number and log in over there through RDP, so I think that's pretty cool. I have used CyberArk before, but I think StrongDM as a product has pretty good potential. My impression of the credential-less access control is that it's pretty good because it reduces the attack surface. Basically, if you cannot see the password and everything, even the privileged users cannot see the password. It's a password-less system where you just log in to the servers without knowing your password, and even if you know your password, it's probably going to be rotated after a while. So, I think that's a pretty good use case for reducing the attack surface and maintaining zero trust throughout an identity perimeter. StrongDM helps with runtime features in a twenty-four-seven dynamic environment. Whenever I try to access at maybe two a.m. or three a.m. at night and I have a production issue on a server located in a different continent, I can access it right at that moment. I think the application works pretty much like a charm. It's readily available, and I think the runtime feature is pretty cool, although the application sometimes crashes when it's downloaded locally on your machine. Regarding pricing, I find StrongDM to be definitely cost-efficient. We used to use CyberArk before, but StrongDM is more cost-effective, which is why we are using it. Our director is a board member at StrongDM, allowing us to utilize the product and the flexibility it provides, which tailor-suits our needs based on the organization and is something we do not get from other PAM products.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The live recording is a very useful feature."

"Access to privileged, shared credentials is simplified by optimizing the whole workflow and approval processes."

"What I like best about IBM Security Secret Server is its single-access console. It's also easy to manage and fulfills the requirements with the least resistance."

"This product has been able to cover most of the requests from our customers."

"The main benefits that IBM Security Secret Server provides for me include complete control over the privileged identities, which are the main sources that can have the privilege to make numerous changes on the system, and if we protect these identities through PAM and provide elevation on their accounts when required, then we can improve our security posture and infrastructure security."

"Centralized Password Management: Our client has more than 400 geographical locations and approximately ten employees work at each location."

"Stability-wise, I think it is a very good solution."

"It is one of the most well-known names in this field."

More IBM Security Secret Server pros

"StrongDM replaced the puzzle of different solutions with one single product, which made managing resources more efficient."

"The best features in StrongDM are that it is the easiest product in the market for this situation with easy access."

"All of the logging is handled for us, including for auditing purposes. Looking through the audit logs is not a painful experience."

"The best features in StrongDM are the password rotation capabilities, which I think are pretty cool, and also how you can literally log in to any of the privileged servers through a single platform."

"I absolutely would say that the best features of StrongDM and what I appreciate about the solution is that time to onboard is absolutely minimal."

"We primarily used StrongDM for access to resources on private networks like EC2 machines, Kubernetes clusters, and various databases."

Cons

"The newer interface is more difficult to use than the previous one, and consequently, new users might need more training."

"The nonclustered index is working in an area with a problem that needs improvement."

"Secret Server should have the ability to discover privileged accounts in the servers, like the administrator or users, from SQL and Oracle without having to import a script."

"It would be preferable if the full proxy was included in the IBM Security Secret Server."

"The newer interface is maybe confusing old customer that using previous one from their point of views, I think they will need little pass of time to be familiar with."

"Unfortunately, the technical support is not very responsive because we purchased it from IBM; however, the actual support comes from Thycotic."

"I mention that password vaulting and password rotation in IBM Security Secret Server are basically the same thing, and it becomes somewhat complex when integrating a different system with them because it requires API development."

"Although much has improved in last two years, the GUI for IBM products can be improved."

More IBM Security Secret Server cons

"It would be beneficial to have better control and alignment between frequent updates and improved communication regarding possible negative effects on existing customer bases."

"We've had a few issues with the stability of this product in the past."

"I rate the stability of the product five out of ten because crashes sometimes happen when we are working on it."

"It would be beneficial to have better control and alignment between frequent updates and improved communication regarding possible negative effects on existing customer bases."

"I think the stability of StrongDM is about four to five due to the occasional crashes that I mentioned."

"My thoughts on the pricing of StrongDM is that it is expensive."

Pricing and Cost Advice

"I believe that we paid 35,000 or 40,000 US dollars for it."

"The price could be better. I think it's a good price for the on-premises environment and the high availability for enterprises the solution provides."

"My rating for the IBM Security Secret Server pricing is seven out of ten. It could be cheaper."

"The licensing is per user per month."

See which vendors are best for you

Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.

See recommendations

894,738 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Insurance Company

20%

Construction Company

11%

Computer Software Company

Performing Arts

Financial Services Firm

15%

Computer Software Company

15%

Manufacturing Company

University

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	4
Midsize Enterprise	2
Large Enterprise	2

By reviewers
Company Size	Count
Small Business	2
Midsize Enterprise	2
Large Enterprise	3

Questions from the Community

What needs improvement with IBM Security Secret Server?

I believe there is not much that can be improved for IBM Security Secret Server. Providing local support and local vendor availability would be beneficial so we are not dependent on international s...

What is your primary use case for IBM Security Secret Server?

IBM Security Secret Server serves multiple use cases for us, including the monitoring of privileged users, as well as the recording and password vaulting of their accounts, passwords, and need-base...

What advice do you have for others considering IBM Security Secret Server?

I mention that password vaulting and password rotation in IBM Security Secret Server are basically the same thing, and it becomes somewhat complex when integrating a different system with them beca...

What is your experience regarding pricing and costs for StrongDM?

The leadership chose StrongDM after comparative research, which suggests economic benefits. It was mentioned that while the product is rapidly gaining features, it might become cost-prohibitive for...

What needs improvement with StrongDM?

In StrongDM, I think the installation was hard, and they want to be more flexible in the initial setup. I think they want to add more features like traditional PAM. It is difficult to find document...

What is your primary use case for StrongDM?

My use case involves a company I'm working in that wants to secure the connectivity between the DevOps team and the backend server in the company.

Fortra's Powertech Identity & Access Manager vs IBM Security Secret Server

Comparisons

Compared 22% of the time

Delinea Secret Server vs IBM Security Secret Server

Compared 21% of the time

CyberArk Privileged Access Manager vs IBM Security Secret Server

Compared 20% of the time

Delinea Privileged Access Service vs IBM Security Secret Server

Compared 15% of the time

Okta Platform vs IBM Security Secret Server

Compared 8% of the time

More IBM Security Secret Server Competitors

Endpoint Privilege Manager vs StrongDM

Compared 21% of the time

KeeperPAM vs StrongDM

Compared 19% of the time

CyberArk Privileged Access Manager vs StrongDM

Compared 18% of the time

HashiCorp Boundary vs StrongDM

Compared 12% of the time

Okta Platform vs StrongDM

Compared 8% of the time

More StrongDM Competitors

Product Reports

IBM Security Secret Server

May 2026

Download IBM Security Secret Server product report

Download StrongDM product report

April 2026

Also Known As

IBM Secret Server, Secret Server, IBM Security Privileged Identity Manager

No data available

Overview

IBM Security Secret Server provides centralized management of privileged credentials, secure access, session recording, and replay. Its pricing model is unique, being based on user count rather than system connections, making it a flexible choice for organizations.

IBM Security Secret Server enhances cybersecurity by integrating with frameworks and offering features like monitoring, high availability, and adaptable reporting. It simplifies password management, automates changes, and ensures compliance with security protocols. The platform is valued for its ease of deployment and user-friendly interface, although it can improve in areas such as the GUI and integration process. Complex high availability and disaster recovery setups are noted challenges, along with nonclustered indexing issues affecting performance. Users desire improvements in local support and migration processes.

What are the key features of IBM Security Secret Server?

Centralized Management: Streamlines credential management across systems.
Session Recording: Allows recording and replay of sessions for forensic purposes.
Integration Capabilities: Enhances security with diverse cybersecurity frameworks.
Adaptable Reporting: Provides tools for customizable reporting.
Single-Access Console: Offers a unified user experience with granular roles.

What benefits should users look for in reviews?

User-Friendly Interface: Simplifies deployment and daily operations.
Scalability: User-based pricing model ensures flexibility and cost-efficiency.
Security Compliance: Ensures adherence to security protocols with automated processes.
Audit and Reporting: Robust capabilities for auditing and compliance documentation.
Enhanced Security Posture: Integrates well with existing frameworks to bolster security.

Organizations across various industries implement IBM Security Secret Server for managing privileged access and securing critical systems. It serves financial institutions by providing a secure jump server for accessing core banking platforms and databases. IT managers benefit from workflow approvals and automated password management, ensuring compliance and boosting security posture. The platform's session recording and auditing features are crucial for sectors needing detailed activity documentation.

IBM

StrongDM streamlines secure, password-less access, reducing attack surfaces with its zero trust approach. It integrates smoothly with existing systems supporting IP whitelisting and excels in managing runtime features while offering comprehensive audit logging and seamless resource access.

StrongDM provides organizations with enhanced security through features like password rotation and efficient management of access to resources such as EC2 instances, Kubernetes clusters, and databases. Its integration capabilities are complemented by cost-effectiveness compared to competitors like CyberArk. Companies utilize StrongDM for controlling access in dynamic environments, benefiting from audit logging for detailed movement tracking. While users appreciate its efficiency, they also seek improvements in update control and better accompanying documentation. Some express the need for a cloud-native option to address diverse demands, as the current setup can be challenging without comprehensive materials. Flexibility and more traditional PAM features are in demand.

What are StrongDM's key features?

Secure Password-less Access: Facilitates client connections without passwords to reduce attack vectors.
Zero Trust Architecture: Maintains stringent security protocols with a zero trust approach.
Seamless Resource Integration: Works effectively with systems like EC2 and Kubernetes clusters.
IP Whitelisting Support: Enhances third-party resource accessibility with targeted IP controls.
Audit Logging: Provides detailed tracking of user interactions within systems.
Password Rotation: Regularly updates access credentials to boost security.

Why is StrongDM beneficial in reviews?

Cost-Effectiveness: Competitive pricing offers value against alternatives.
Resource Management Efficiency: Simplifies access to complex systems.
Enhanced Security: Protective measures reduce vulnerabilities and ensure secure transactions.
Zero Trust Implementation: Adopts advanced security models right into client operations.
Operational Streamlining: Eases the access management process for multiple environments.

In industries managing sensitive data or requiring regulated access, StrongDM is crucial for securing cloud private networks and managing user access to databases and hosts. DevOps teams benefit from its ability to protect connectivity to backend servers, ensuring identity and access management remains robust and adaptable for companies dealing with frequent changes or expansions.