CyberArk Secrets Management

Name: CyberArk Secrets Management
Brand: CyberArk
Rating: 4.3 (113 reviews)

Leader

CyberArk is the global leader in identity security.

Est 1999|Valuation $20.6B|Raised $1.5B

LinkedIn 325K|Website|Web traffic 444K|FTEs 4,000|HQ Newton, MA

MarketsCloud-Native Application Protection Platform (CNAPP)Privileged Access Management (PAM)Security Service Edge (SSE)Identity Provider (IdP) & Single Sign-On (SSO)Secrets Management

Platform CoversPrivileged Access Management (PAM)

01Competitive Landscape

Narrative analysis

Where CyberArk tends to be selected: - hybrid enterprise governance scenarios where secrets management is part of a broader privileged access and identity control program, - central management across cloud-native stores using an overlay approach (secrets discovery and rotation across CSP-native stores), - organizations requiring integrated governance and audit trails that align with compliance programs. Where competitors often win: - HashiCorp Vault commonly has strong mindshare among DevOps teams for dynamic secrets engines and broad integrations; it is often the default in DevOps-centric environments, - cloud-native secret stores (AWS Secrets Manager, Azure Key Vault, Google Secret Manager) can be simpler and lower-cost for single-cloud workloads, - some administrators report that alternatives such as Delinea Secret Server are simpler to operate with fewer dedicated administrators in certain environments. Market/ownership trend that may affect competition: - Following a recent acquisition, CyberArk may be increasingly sold as part of a larger vendor platform; buyers may see bundling opportunities or should verify roadmap and pricing implications.

	CyberArk Secrets Management	HashiCorp Vault (managed/self-managed)	Delinea Secret Server
Starting Price	Quote-based (not publicly listed on core product pages)	Public PAYG signals exist for some managed offerings	Pricing often quote-based; some public-sector price documents exist
Typical fit	Enterprises needing secrets aligned with PAM and hybrid governance	Cloud-native teams needing dynamic secrets engines and broad integrations	Organizations seeking a simpler PAM/secrets admin experience in some cases
Key Strength	Enterprise control, rotation, and audit; integration options across PAM and secrets overlays	Dynamic secrets engines, PKI integrations, and a strong DevOps ecosystem	Administrative simplicity relative to larger enterprise PAM stacks (per some practitioner reports)
Key Weakness	Complexity and operational overhead; cost perception; lifecycle edge-cases	Pricing and renewal concerns reported by some users; deployment choices affect complexity	May not provide the same platform-wide governance for organizations standardized on other identity stacks

01Competitive Landscape

Narrative analysis

Where CyberArk tends to be selected:

hybrid enterprise governance scenarios where secrets management is part of a broader privileged access and identity control program,
central management across cloud-native stores using an overlay approach (secrets discovery and rotation across CSP-native stores),
organizations requiring integrated governance and audit trails that align with compliance programs.

Where competitors often win:

HashiCorp Vault commonly has strong mindshare among DevOps teams for dynamic secrets engines and broad integrations; it is often the default in DevOps-centric environments,
cloud-native secret stores (AWS Secrets Manager, Azure Key Vault, Google Secret Manager) can be simpler and lower-cost for single-cloud workloads,
some administrators report that alternatives such as Delinea Secret Server are simpler to operate with fewer dedicated administrators in certain environments.

Market/ownership trend that may affect competition:

Following a recent acquisition, CyberArk may be increasingly sold as part of a larger vendor platform; buyers may see bundling opportunities or should verify roadmap and pricing implications.

	CyberArk Secrets Management	HashiCorp Vault (managed/self-managed)	Delinea Secret Server
Starting Price	Quote-based (not publicly listed on core product pages)	Public PAYG signals exist for some managed offerings	Pricing often quote-based; some public-sector price documents exist
Typical fit	Enterprises needing secrets aligned with PAM and hybrid governance	Cloud-native teams needing dynamic secrets engines and broad integrations	Organizations seeking a simpler PAM/secrets admin experience in some cases
Key Strength	Enterprise control, rotation, and audit; integration options across PAM and secrets overlays	Dynamic secrets engines, PKI integrations, and a strong DevOps ecosystem	Administrative simplicity relative to larger enterprise PAM stacks (per some practitioner reports)
Key Weakness	Complexity and operational overhead; cost perception; lifecycle edge-cases	Pricing and renewal concerns reported by some users; deployment choices affect complexity	May not provide the same platform-wide governance for organizations standardized on other identity stacks