ManageEngine Password Manager Pro is the Zoho Corporation's password management solution for small and medium sized businesses and enterprises alike.
N/A
SplashID
Score 8.0 out of 10
N/A
Salexo Software (alternately known as SplashData) in Los Gatos offers SplashID, their flagship password manager emphasizing flexible synchronization rules and record keeping with automated backup.
It's great for any company that relies on active-directory as their primary source of user password authentication and other data. It's ability to integrate with a host of other tools such as Google Workspace, Azure AD (if you aren't using ADFS/DirSync/etc.), FreshService, Trello, etc. as well local apps like Postgres, i/AS400, and more make it a great middleware tool for SS.
SplashID is really only well suited if you are looking to store passwords offline on your own server. There is no risk of them being leakedin a large scale breach of SplashID, but then it is only up to your security. Since it is not stored online, there is also not a way to restore the master password, so don't forget it!
PMP is great for sorting passwords into different groups depending on the category of application access. This makes it easy to find the password that you are looking for.
Application credentials can easily be saved to the clipboard to make it easier to copy and paste them into the appropriate log in screen.
Different types of credentials for the same application can be stored next to each other and are easy to distinguish by the icon next to the name. For example, SSH credentials, web credentials, and local root credentials are all easy to sort under one application group.
There is no flexibility in how accounts are grouped.
The implementation of lowest privilege means you cannot use groups for assigning role based security. If you give a team read access, and a limited subset of the team write access, the read access supersedes write.
Some versions have been fragile. There have been times where the server has stopped working and needed a restart daily/weekly. Read the issues resolved in updates. There have been some critical failures in security over the years (i.e. unauthorized access possible by URL manipulation).
SplashID is pretty usable, but there are definitely some key downfalls. Like I previously mentioned, it lacks easy organization. It is also not very user friendly to enter passwords. The password generation tool could use some additional options to remove certain special characters because on more than one occasion I have had to adjust a password to remove a prohibited special character.
We evaluated one on-premise solution, Password Manager Pro, one cloud-based solution called Passwordstate to store all sensitive password information and also secure notes. The latter was licensed by users, so we knew as the team grew it would cost quite a lot more to maintain. We wanted access for various users within the information technology and systems department at a granular level to have separation of the various passwords into categories which we then give permission relevant for the right users.
SplashID is not nearly as comprehensive as LastPass. LastPass is much easier to orginize and create folders for certain categories. It is also easier to launch logins stored in the vault. The only benefit SplashID provides is that you can store passwords offline. SplashID is better on the pocket book because it is a one time fee where LastPass is subscription based.
