Compare CyberArk PAS vs. Thycotic Secret Server

CyberArk PAS is ranked 1st in Privileged Access Management with 50 reviews while Thycotic Secret Server is ranked 3rd in Privileged Access Management with 7 reviews. CyberArk PAS is rated 9.0, while Thycotic Secret Server is rated 8.2. The top reviewer of CyberArk PAS writes "Gives us the security of all credentials in one place and lightens our administrative load". On the other hand, the top reviewer of Thycotic Secret Server writes "Good user interface and session monitoring and easy to set up". CyberArk PAS is most compared with BeyondTrust Endpoint Privilege Management, SailPoint IdentityIQ and Cisco ISE (Identity Services Engine), whereas Thycotic Secret Server is most compared with CyberArk PAS, HashiCorp Vault and IBM Security Secret Server. See our CyberArk PAS vs. Thycotic Secret Server report.
Cancel
You must select at least 2 products to compare!
Most Helpful Review
Anonymous User
Find out what your peers are saying about CyberArk PAS vs. Thycotic Secret Server and other solutions. Updated: January 2020.
399,230 professionals have used our research since 2012.
Quotes From Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros
CyberArk has been easy for us to implement and the adoption has been good. We've been able to standardize a bunch of things. We've been able to standardize relatively easily with the use of the platforms and managing the policies.CyberArk is a very stable product and it's a stable product because it has a simple design and a simple architecture that allows you to leverage the economies of scale across the base of your infrastructure that you already have implemented. It doesn't really introduce any new complex pieces of infrastructure that would make it that much more difficult to scale.When we started with RPA, there was a requirement that every credential and the bots themselves be protected through the PAM system. From the get-go, we've had CyberArk in the middle... We've got a pretty robust RPA implementation with our PAM platform. Users, bots, the credentials — everything is managed via our PAM solution.Right off the bat, the most valuable feature is the DNA scan. It gives us the ability to scan our environment and find the accounts that we're going to need to take under control.The Password Upload Utility tool makes it easier when setting up a Safe that contains multiple accounts and has cut down the amount of time that it takes to complete the task.For a while, there were individual IDs having privileged access. We wanted to restrict that. We implemented the solution so that it can be more of internal control. We can have session recordings happening and reduce our attacks.There are no issues with scalability. Our clients are very happy to use the product.We are maintaining compliance in PCI, SOX and HIPPA, which is a big thing. Auditors really like it, and it has made us stay compliant.

Read more »

The user interface is quite good. It's very straightforward.The most valuable feature is session monitoring.Ease of use because of its monolithic software.It offers the possibility of secure administration of hardware devices, as well as Linux systems administration from a Windows environment.The most valuable feature of this solution is the random changing of passwords.Provides us with the ability to control access [to secrets] by groups.The ability to give some groups access to different kind of databases with the storage of a password is the most valuable feature.

Read more »

Cons
There is a bit of a learning curve, but it's a pretty complex solution.CyberArk has to continue to evolve with that threat landscape to make sure that they're still protecting those credentials that are owned by those that have privileged accounts in the firms.The one place where we found that this product really needs to improve is the cloud. Simple integrations don't exist, even today. We don't have anything specific on CyberArk for managing, SaaS products, SaaS vendors, SaaS credentials. I understand it's a vendor-based thing and that they have to coordinate with the other vendors to be able to do that, and there are integrations coming. But these are the major places where CyberArk definitely needs to invest some more time.It's a big program. To scale excessively, locally, on an on-prem application, takes a lot of servers.Currently, in Secure Connect, an end user is required to enter account information manually, and cannot save any of this information for future use.Integration with the ticketing system should allow any number of fields to be used for validation before allowing a user to be evaluated and able to access a server.The initial setup of CyberArk is a challenge if you do not have prior experience with it.Make it easier to deploy.

Read more »

There could be tweaks here and there. For example, instead of going to one main function to do this and another main function to do that, the solution could remap the user interface so that a person only has to go through one function. The way that function branches off should make a bit more sense.Having more detailed reporting would improve this solution.Documentation could be improved if they were to include more about connectors. There is not enough documentation.I would like to see the shadowing of ongoing terminal sessions (Remote Desktop Mirroring).We could definitely use some help with API tokenization. If we had a way to store tokens that would be fabulous.One of the things that we want is to be able to do some of the management of it using APIs.I don't know what kind of a cryptographic it uses to encrypt the password but it should be one of the stronger ones. Some of the cryptos have been accessed by hackers.

Read more »

Pricing and Cost Advice
In comparison to other products on the market, CyberArk is a more costly product.This solution is considered to be more expensive than others out there on the market today.I do not have any opinions to add about the pricing of the product.No, I do not have any advice on the price of the product.Network and security licenses are currently being managed by other outsource vendors, so they are facing some type of problems in the digital aspect.With reducing the privileged account access, there has been a huge improvement. They are now bringing more accounts on a little at a time.If you are looking at implementing this solution, buy the training and go to it.Our risk is definitely significantly lower. Also, our resources are low.

Read more »

The price of this solution is good.It isn't terribly expensive.

Read more »

report
Use our free recommendation engine to learn which Privileged Access Management solutions are best for your needs.
399,230 professionals have used our research since 2012.
Ranking
Views
32,535
Comparisons
16,150
Reviews
48
Average Words per Review
688
Avg. Rating
9.0
Views
8,211
Comparisons
4,646
Reviews
5
Average Words per Review
346
Avg. Rating
8.4
Top Comparisons
Also Known As
CyberArk Privileged Access Security, CyberArk Privileged Account Security, SSH Key Manager, Privileged Session Manager, Privileged Threat Analytics, Application Identity Manager, On-Demand Privileges Manager, Endpoint Privilege Manager
Learn
CyberArk
Thycotic
Overview

CyberArk is the trusted expert in privileged account security. Designed from the ground up with a focus on security, CyberArk has developed a powerful, modular technology platform that provides the industry's most comprehensive Privileged Account Security Solution.

Secret Server is the only fully featured Privileged Account Management (PAM) solution available both on premise and in the cloud. It empowers security and IT ops teams to secure and manage all types of privileged accounts and offers the fastest time to value of any PAM solution.

Offer
Learn more about CyberArk PAS
Learn more about Thycotic Secret Server
Sample Customers
Rockwell AutomationSecure-24, University of San Diego, International Rescue Committee, San Francisco Ballet, Perkins Coie, University of San Diego, D.S.S. Limited, Turbo's Hoet, Eclipse Computing, Cathay Bank, Stellarise, J&R Consulting
Top Industries
REVIEWERS
Financial Services Firm28%
Insurance Company15%
Energy/Utilities Company9%
Healthcare Company9%
VISITORS READING REVIEWS
Software R&D Company29%
Comms Service Provider15%
Financial Services Firm11%
Retailer6%
VISITORS READING REVIEWS
Software R&D Company29%
Comms Service Provider12%
Insurance Company8%
Financial Services Firm8%
Company Size
REVIEWERS
Small Business16%
Midsize Enterprise11%
Large Enterprise73%
VISITORS READING REVIEWS
Small Business7%
Midsize Enterprise7%
Large Enterprise86%
REVIEWERS
Small Business27%
Midsize Enterprise45%
Large Enterprise27%
Find out what your peers are saying about CyberArk PAS vs. Thycotic Secret Server and other solutions. Updated: January 2020.
399,230 professionals have used our research since 2012.
We monitor all Privileged Access Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.