AWS Secrets Manager vs. Device42 vs. IBM Vault

[AWS Secrets Manager] is really good at managing the secrets for each environment (stage, production, ...), and with a simple command, the users will get all the variables for running the project. Depending on the user role, they could just read and/or edit the variables on the Secrets Manager on AWS. This facilitates the management of the secrets.

Incentivized

1. Installbase management feature allows us to retire our old spreadsheet methods for tracking the data in favour of a singular database with some excellent reporting.2. We are also providing data connectivity from the WAN Providers and keeping all connections in Device42 gives us the ability have documentation of all connection that are made. 3. Ever changing and growing inventory that needs to be carefully tracked and inventoried. We find this so simple to use that we spend much less time than we used to on tracking these items.

Incentivized

HashiCorp Vault, in my opinion, is a defacto standard for any cloud or automation implementation. They're the best of the best as far as products for secrets management and the ability to use it against relatively any service you have is unheard of for other products. HashiCorp has really taken out all the stops when it comes to creating a nice, extensible tool that people can use to suit their needs.

Incentivized

• Single source of truth for secrets
• Securely share secrets with colleagues
• Securely store secrets for services to access during runtime

Incentivized

• Device42 can discover physical and virtual servers as well as your network devices
• Device42 can give resource utilization details like CPU, Memory and Storage
• Device42 can give dependency mapping
• Device42 can give inbound and outbound communication details
• Device42 can create Affinity Groups (Move Groups)
• Device42 can recommend the Cloud platform to which you can migrate your infrastructure.

Incentivized

• The HTTP API you use to write and read secrets is open and can be used by any application.
• It keeps our sensitive data/credentials out of our GitLab repositories.
• Sealing and unsealing the Vault on demand adds an additional layer of security.

Incentivized

• It could be good if a user can use a variable in the project but can't see them in the manager on AWS

Incentivized

• UI/UX is not up to the standards.
• Can't mass update everything.
• No export option for the sub components that have changed linked to the device they are assigned to
• Plugins options are limited
• Sometimes randomly times out my login forcing me to log in again.

Incentivized

• Session Management is terrible to manage
• Monitoring is hard and not enough information
• User management
• Configuration is too complex
• More user friendly UI

HashiCorp Vault is the best there is out there, and it has become critical to our secret management use cases. It would be difficult to find anything that would suit our needs better and that would be beneficial for us to switch over to.

Incentivized

We spent a little more time than we imagined to conceptually understand how HashiCorp Vault operates, as well as how it is configured. This is not trivial, and keep in mind that you will need to take some time to get a thorough understanding of the tool. The documentation could be more helpful in this regard.

Incentivized

Hashicorp has been very responsive to our questions and inquiries up to this point. We are currently working on them to develop a more granular permissions model within Vault. We are very close to achieving our objectives with the help of their support team. We do not seem to be in the same time zone which makes it hard for escalated issues.

Incentivized

Both AWS Secrets Manager & MS Azure Key Vault are pretty similar. They're the default secrets manager on their respective cloud platform.

The choice comes down to where your infra resides on.

Incentivized

What I appreciate and love about Device42 is how everything links together from room layout,to server rack organisation,down to all VMs and Business applications. We are also able to get full value of our money and full visibility of our assets management process.

HashiCorp Vault is way better than Azure Key Vault; it has more features and it goes beyond a key-value secret store.

Incentivized

• Costs are suitable
• ROI is positive

Incentivized

• We use it for the mass updates. Because of which we save lots of time
• It helps in making everything documented
• With this system you can get any information about the location of the device, connected cables, additional information and statuses.
• Inventory Management

Incentivized

• Helped us reach our security compliance goals.
• Helped us strengthen our security position in our infrastructure by improving on poor secret management practices.

Incentivized