HashiCorp Vault vs. IBM Verify

Vault is a reliable and resilient as the Key Management System. It is not for the novice user that does not have a background in information security. It requires a significant time investment into the different key engines that the solution offers to get started. It works very well once implemented and is very flexible in general.

Incentivized

It is brilliant for use as an identity and access management tool and ensures the safeguarding of our systems and upholds data integrity as a consequence. It was very easy to set up and apart from a straightforward installation, we have found customisation and configuration easy. It was easy to deploy in the cloud after using it previously on premises.

Incentivized

• The HTTP API you use to write and read secrets is open and can be used by any application.
• It keeps our sensitive data/credentials out of our GitLab repositories.
• Sealing and unsealing the Vault on demand adds an additional layer of security.

Incentivized

• MFA authentication - you can verify the users using the mobile app.
• Password repository - We don't have to remember passwords for each app; we only need one for IBM security, which then authenticates us and lets us access the app.
• Sharing access to new users, we just create a new user in IBM and it authenticates and takes care of the user.

Incentivized

• Documentation for the API moves slower than changes in the API itself
• The database secret engine's API design isn't as elegant as it could be
• No support for revocation of all secrets under one path

Incentivized

• It was a bit overwhelming to implement and was neither obvious nor user-friendly.
• While the product is quite powerful, the documentation left something to be desired if one wants to fully appreciate its capabilities.
• The cost was almost prohibitive, but it was the only product we could find that addressed all the needs of our organization in one place.

Incentivized

HashiCorp Vault is the best there is out there, and it has become critical to our secret management use cases. It would be difficult to find anything that would suit our needs better and that would be beneficial for us to switch over to.

Incentivized

It works flawlessly, i have never faced any major issues with this. It has all the features such as Iam and security management. I think its a good investment and the benefits we reap from this software are worth the price.

Incentivized

We spent a little more time than we imagined to conceptually understand how HashiCorp Vault operates, as well as how it is configured. This is not trivial, and keep in mind that you will need to take some time to get a thorough understanding of the tool. The documentation could be more helpful in this regard.

Incentivized

While setup and implementation takes work and time, the flexibility and possibilities make up for that in the long run. This is not a product you can just install and run, but if you design and implement your ruleset well, it will save you a lot of work afterwards. Just make sure that the systems you want to use it for have an existing and proven connector.

Incentivized

Throughout the system testing we conducted, we never encountered an issue that wasn't easily solvable. We did find some of the documentation confusing at times, but we overcame this quickly with some speedy support assistance. Implementation into production was a lot smoother following the testing we conducted.

Incentivized

Hashicorp has been very responsive to our questions and inquiries up to this point. We are currently working on them to develop a more granular permissions model within Vault. We are very close to achieving our objectives with the help of their support team. We do not seem to be in the same time zone which makes it hard for escalated issues.

Incentivized

The support team has always been the primary consultation base when we are faced by performance problems. From the deployment stage the team has managed to monitor the operation lifecycle and give best insights based on their observation. It works 24/7 to enhance productive service delivery to clients. The IBM Security Verify Support team has been the main player in the successful performance of this software.

Incentivized

HashiCorp Vault integrates with a lot of tools and systems, and the documentation was pretty robust with a lot of community help. Because HashiCorp Vault is also older than other solutions, it is already well developed with a lot of features you need for storing secrets and configuration. HashiCorp Vault is also friendlier towards application build and is focused in providing security and a lot of customization for almost any use case scenario. Bitwarden is more limited to password management of enterprise accounts, but for application usage is not that great or easy to integrate. It does not scale well also. AWS Secrets Manager on the other hand is really good but more limited to AWS applications and vendor lock is problematic as well for such a critical piece of infrastructure.

We conducted a comparison study between IBM Verify and Okta as well as Duo Security before making our selection. IBM Verify emerged as the perfect fit because its superior capability to integrate with our current system environment surpassed competitor security solutions. IBM Verify demonstrated superior reliability through its enterprise-class scalability and fully transparent auditing mechanisms.

Incentivized

• Allowed better access control for credentials, passwords, and important keys.
• After we started using HashiCorp Vault, we were able to base our environment 100% as code.
• SSH access control that is possible using HashiCorp Vault adds an extra level of security in environments where external remote access is required.

Incentivized

• Providing an additional layer of authentication security, IBM Security Verify helps protect customer data, reduce the risk of fraud, and improve the customer experience.
• Lead to increased customer loyalty, improved customer retention, and better overall customer satisfaction.
• Reduce the cost of fraud prevention, thereby improving the bottom line.

Incentivized