TrustRadius: an HG Insights company

IBM Vault vs. Symantec Critical System Protection

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    IBM Vault

    Score8.6 out of 10
    N/AIBM Vault (formerly Hashicorp Vault) is an encryption tool for managing secrets including credentials, passwords and other secrets, providing access control, audit trail, and support for multiple authentication methods. It is available open source, or under an enterprise license.

    $0.03

    Symantec Critical System Protection

    Score8 out of 10
    N/ASymantec Critical System Protection is a lightweight behavioral hardening engine purpose-built to protect legacy, EOL systems and embedded devices, by adding layers of defense at the kernel level to prevent unhygenic operations on IoT devices and machines.N/A
    Pricing
    IBM VaultSymantec Critical System Protection
    Editions & Modules
    Cloud - HCP Vault
    $0.03/hr
    Open Source
    Free
    Enterprise
    Contact sales team
    No answers on this topic
    Offerings
    Pricing Offerings
    IBM VaultSymantec Critical System Protection
    Free Trial
    NoNo
    Free/Freemium Version
    YesNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details——
    More Pricing Information
    Best Alternatives
    IBM VaultSymantec Critical System Protection
    Small Businesses
    Keeper
    Score8.3 out of 10
    No answers on this topic
    Medium-sized Companies
    Keeper
    Score8.3 out of 10
    No answers on this topic
    Enterprises
    No answers on this topic
    No answers on this topic
    All AlternativesView all alternativesView all alternatives
    User Ratings
    IBM VaultSymantec Critical System Protection
    Likelihood to Recommend
    8.0
    (7 ratings)
    5.0
    (2 ratings)
    Likelihood to Renew
    10.0
    (1 ratings)
    -
    (0 ratings)
    Usability
    9.0
    (3 ratings)
    -
    (0 ratings)
    Support Rating
    6.3
    (3 ratings)
    10.0
    (1 ratings)
    User Testimonials
    IBM VaultSymantec Critical System Protection
    Likelihood to Recommend
    IBM
    HashiCorp Vault, in my opinion, is a defacto standard for any cloud or automation implementation. They're the best of the best as far as products for secrets management and the ability to use it against relatively any service you have is unheard of for other products. HashiCorp has really taken out all the stops when it comes to creating a nice, extensible tool that people can use to suit their needs.
    Incentivized
    Read full review
    Broadcom
    Symantec Critical System Protection (CSP) is very well suited for environments that do not change such as point of sale systems and critical servers. This product is spectacular at protecting end of life operating systems when supporting legacy software prevents upgrades. When security updates are no longer available, CSP will prevent exploits and other malware from taking advantage. This product is not well suited for systems that require a lot of changes. For one, it does not notify when a change has been blocked by CSP, causing some server administrators to waste many hours chasing a phantom technical problem when turning off CSP could have solved it right away. Also, profiling takes time so systems that constantly change would need hundreds of exceptions made.
    Incentivized
    Read full review
    Pros
    IBM
    • The HTTP API you use to write and read secrets is open and can be used by any application.
    • It keeps our sensitive data/credentials out of our GitLab repositories.
    • Sealing and unsealing the Vault on demand adds an additional layer of security.
    Incentivized
    Read full review
    Broadcom
    • Data Center Security 6.0 and higher allows you to easily build out policies to deploy to monitor/block what is required/needed.
    • The agent that is installed on the hosts has a small footprint in terms of CPU and memory usage.
    • The ability to customize it anyway you need to as well as utilize out of the box policies to monitor critical OS functionality.
    Read full review
    Cons
    IBM
    • Session Management is terrible to manage
    • Monitoring is hard and not enough information
    • User management
    • Configuration is too complex
    • More user friendly UI
    Read full review
    Broadcom
    • Tuning takes a very long time
    • Turning the product on or off can take time
    • When an action is prevented by CSP, there is no pop up or notification, making this a burden for server administrators
    Incentivized
    Read full review
    Likelihood to Renew
    IBM
    HashiCorp Vault is the best there is out there, and it has become critical to our secret management use cases. It would be difficult to find anything that would suit our needs better and that would be beneficial for us to switch over to.
    Incentivized
    Read full review
    Broadcom
    No answers on this topic
    Usability
    IBM
    We spent a little more time than we imagined to conceptually understand how HashiCorp Vault operates, as well as how it is configured. This is not trivial, and keep in mind that you will need to take some time to get a thorough understanding of the tool. The documentation could be more helpful in this regard.
    Incentivized
    Read full review
    Broadcom
    No answers on this topic
    Support Rating
    IBM
    Hashicorp has been very responsive to our questions and inquiries up to this point. We are currently working on them to develop a more granular permissions model within Vault. We are very close to achieving our objectives with the help of their support team. We do not seem to be in the same time zone which makes it hard for escalated issues.
    Incentivized
    Read full review
    Broadcom
    They respond quickly and efficiently without the need to reiterate the actual issue. Their backline support is amazing and always there for us when it is needed. They explain the troubleshooting steps taken and what they did to help us resolve the issue just incase it creeps up again we have the information to correct it ourselves.
    Read full review
    Alternatives Considered
    IBM
    HashiCorp Vault is way better than Azure Key Vault; it has more features and it goes beyond a key-value secret store.
    Incentivized
    Read full review
    Broadcom
    We evaluated Bit 9 and you have more flexibility with the rule set and do not rely on the cloud to tell you what is approved and not approved. You build out the policies the way you need them to be and who better knows the environment that the people that work it daily.
    Read full review
    Return on Investment
    IBM
    • Helped us reach our security compliance goals.
    • Helped us strengthen our security position in our infrastructure by improving on poor secret management practices.
    Incentivized
    Read full review
    Broadcom
    • Great protection for unchanging systems
    • We have comfort that the protected systems are safe from intrusion
    • Excellent price
    Incentivized
    Read full review
    ScreenShots

    IBM Vault Screenshots

    Screenshot of an example of writing a secret to Vault. Secrets are always encrypted and written to backend storage.Screenshot of the secrets menu to manage integrated secrets engines. Secrets Engines are components which store, generate, or encrypt data and are enabled at a path in Vault.Screenshot of where vault identity has support for groups. A group can contain multiple entities as its members. A group can also have subgroups.Screenshot of HCP Vault, which provides all of the power and security of Vault, without the complexity and overhead of managing it yourself.Screenshot of where to view entity client and non-entity client counts.Screenshot of MFA is built on top of the Identity system of Vault.