CyberArk Enterprise Password Vault Competitors and Alternatives

What is most valuable?

It is very easy to install and enumerate all machines from an Active Directory domain and begin changing passwords on domain and local accounts. Managing service accounts is very easy as well.

What needs improvement?

Session recording generally works but intermittently stops. The permission model for individual accounts could be made better. It would also be nice to be able to group accounts together, specifically with domain accounts. Currently, the product is centered around nodes and machines. The permission model is based around what they call Management Sets. Management... more»

What is most valuable?

* Heart beats – it tells me when passwords on file are no longer working. This could be an oversight, but could also be a sign of hacker activity. * Secret Expiry – reports on passwords that haven’t been changed and may be out of policy. *... more»

How has it helped my organization?

We previously had a very lax password policy, and passwords were stored in Excel spreadsheets. Passwords were often not documented, or the documented password was not updated if changed. We now have a much stricter, safer password policy.... more»

What needs improvement?

Session recording could offer more control and block certain actions or commands. I have experience of other products that focus on session recording, so I’m aware of what advanced functionality can be achieved. Specifically, I’m referring... more»

What is most valuable?

For our company: * Enterprise admin console * Reporting * Integration with Active Directory

How has it helped my organization?

* It increased security around password management for teams and collaborative efforts with external vendors. * A reduction in the number of sensitive passwords stored insecurely on our local systems.

What needs improvement?

* It needs more flexibility/functionality around making enterprise changes. * It needs more granular admin capabilities for a global distributed company. * The ability to set up an account expiration limit/date would be very useful.