48 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener'>trScore algorithm: Learn more.</a>
Score 8.2 out of 100
13 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener'>trScore algorithm: Learn more.</a>
Score 8.7 out of 100

Attribute Ratings

  • CyberArk Privileged Access Management is rated higher in 1 area: Support Rating
  • HashiCorp Vault is rated higher in 1 area: Likelihood to Recommend

Likelihood to Recommend

8.0

CyberArk Privileged Access Management

80%
9 Ratings
8.5

HashiCorp Vault

85%
5 Ratings

Likelihood to Renew

CyberArk Privileged Access Management

N/A
0 Ratings
10.0

HashiCorp Vault

100%
1 Rating

Usability

CyberArk Privileged Access Management

N/A
0 Ratings
7.0

HashiCorp Vault

70%
2 Ratings

Support Rating

7.3

CyberArk Privileged Access Management

73%
7 Ratings
6.3

HashiCorp Vault

63%
6 Ratings

Likelihood to Recommend

Cyberark

The system is great for enterprise or larger IT departments or teams where temporary or full access may be given using privileged IDs. Requirements for needing local admin access is also eliminated which can help with specific Windows workstation related tasks. It can be very useful when working with remote teams or contractors who may need temporary access to a system when required.
Read full review

HashiCorp

HashiCorp Vault, in my opinion, is a defacto standard for any cloud or automation implementation. They're the best of the best as far as products for secrets management and the ability to use it against relatively any service you have is unheard of for other products. HashiCorp has really taken out all the stops when it comes to creating a nice, extensible tool that people can use to suit their needs.
Read full review

Pros

Cyberark

  • Automatically discover new servers on the network and take control of the local admin password by vaulting it and ensuring nobody knows the password. A different password on every server.
  • Automatically roll the password in a configurable manner - after each use, after a certain period of time, etc.
  • Track and govern sensitive account usage by ensuring only properly authorized users can access the vault and obtain the credentials and then monitor usage.
Read full review

HashiCorp

  • The HTTP API you use to write and read secrets is open and can be used by any application.
  • It keeps our sensitive data/credentials out of our GitLab repositories.
  • Sealing and unsealing the Vault on demand adds an additional layer of security.
Read full review

Cons

Cyberark

  • GUI - right now everything is on one page/dashboard. Some level of folder/Safe type view would be great
  • More options when storing passwords - especially for network based passwords
  • Better integrations with vendors like Cisco so that admins dont need to really get the password from the vault (think Last Pass type add on)
Read full review

HashiCorp

  • Documentation could be better.
  • The multiple key unseal process can be a problem if the need arises.
  • It would make more sense if HashiCorp Vault combined with HashiCorp Consul to create a unique product.
Read full review

Pricing Details

CyberArk Privileged Access Management

Starting Price

Editions & Modules

CyberArk Privileged Access Management editions and modules pricing
EditionModules

Footnotes

    Offerings

    Free Trial
    Free/Freemium Version
    Premium Consulting/Integration Services

    Entry-level set up fee?

    No setup fee

    Additional Details

    CyberArk offers a variety of Identity Security packages for different user types within an organization.

    HashiCorp Vault

    Starting Price

    $0

    Editions & Modules

    HashiCorp Vault editions and modules pricing
    EditionModules
    Open SourceFree1
    EnterpriseContact sales team2
    ModulesContact sales team3

    Offerings

    Free Trial
    Free/Freemium Version
    Premium Consulting/Integration Services

    Entry-level set up fee?

    No setup fee

    Additional Details

    Likelihood to Renew

    Cyberark

    No answers on this topic

    HashiCorp

    HashiCorp Vault is the best there is out there, and it has become critical to our secret management use cases. It would be difficult to find anything that would suit our needs better and that would be beneficial for us to switch over to.
    Read full review

    Usability

    Cyberark

    No answers on this topic

    HashiCorp

    We spent a little more time than we imagined to conceptually understand how HashiCorp Vault operates, as well as how it is configured. This is not trivial, and keep in mind that you will need to take some time to get a thorough understanding of the tool. The documentation could be more helpful in this regard.
    Read full review

    Support Rating

    Cyberark

    Customer support and technical support have always been great when we require assistance. Especially when we come across issues that we're not familiar with.
    Read full review

    HashiCorp

    Hashicorp has been very responsive to our questions and inquiries up to this point. We are currently working on them to develop a more granular permissions model within Vault. We are very close to achieving our objectives with the help of their support team. We do not seem to be in the same time zone which makes it hard for escalated issues.
    Read full review

    Alternatives Considered

    Cyberark

    It is known as one of the safest products in the market. It has good support and is also available as on-premise. You can run it virtually on VMWare (and probably on other hypervisors as well). You can have a second instance on bare metal and that makes it a very safe system.
    Read full review

    HashiCorp

    HashiCorp Vault is way better than Azure Key Vault; it has more features and it goes beyond a key-value secret store.
    Read full review

    Return on Investment

    Cyberark

    • Decreased the probability of an external cyber attack to privileged accounts..
    • Management can control privileged account life cycle management more effectively
    • Recording privileged sessions allows our organization to play back exactly the point of a breach or malicious behavior
    • Automated system to manage and verify passwords, as privileged accounts are constantly created and deleted
    • Automatic PWD change functionality will substantially decrease probability of PWD theft or misuse.
    Read full review

    HashiCorp

    • Helped us reach our security compliance goals.
    • Helped us strengthen our security position in our infrastructure by improving on poor secret management practices.
    Read full review

    Screenshots

    Add comparison