HashiCorp Vault vs. ManageEngine Password Manager Pro

Vault is a reliable and resilient as the Key Management System. It is not for the novice user that does not have a background in information security. It requires a significant time investment into the different key engines that the solution offers to get started. It works very well once implemented and is very flexible in general.

Incentivized

Password Manager does a good job of segregating passwords in to different categories which then can be aligned to different users or different job roles within the organization or department. I think the user interface looks a little dated, however, is perfectly functional for retrieving passwords. In adding the passwords initially, I found it a bit clunky, but of course, you don't need to do that too often.

Incentivized

• The HTTP API you use to write and read secrets is open and can be used by any application.
• It keeps our sensitive data/credentials out of our GitLab repositories.
• Sealing and unsealing the Vault on demand adds an additional layer of security.

Incentivized

• Once we got used to the application specific terminology, the tool is fairly straight forward.
• Has all the basic functionality for password management.
• Its cost effective. For an enterprise tool, it is the lowest cost.

Incentivized

• Documentation for the API moves slower than changes in the API itself
• The database secret engine's API design isn't as elegant as it could be
• No support for revocation of all secrets under one path

Incentivized

• In some browsers the copy password function does not work well
• The search engine sometimes returns blank results (all browsers included: Chrome, IE11)
• New upgrades are not visible in the tool itself, like in other third party tools

Incentivized

HashiCorp Vault is the best there is out there, and it has become critical to our secret management use cases. It would be difficult to find anything that would suit our needs better and that would be beneficial for us to switch over to.

Incentivized

We are really pleased with ManageEngine Password Manager Pro. It is great software!

Incentivized

We spent a little more time than we imagined to conceptually understand how HashiCorp Vault operates, as well as how it is configured. This is not trivial, and keep in mind that you will need to take some time to get a thorough understanding of the tool. The documentation could be more helpful in this regard.

Incentivized

ManageEngine Password Manager Pro has an amazing interface for all kind of users. It is easy to use over different ambient and for anybody. T he privileges use have much more control over his password databases and its action for its teams. The auditors have many reports on differents formats, type of reports, filters o action and more.

Incentivized

Hashicorp has been very responsive to our questions and inquiries up to this point. We are currently working on them to develop a more granular permissions model within Vault. We are very close to achieving our objectives with the help of their support team. We do not seem to be in the same time zone which makes it hard for escalated issues.

Incentivized

The contact is very easy. It is by mail. The resolution isn't easy because the support don't speak spanish and its english isn't good. In my opinion, ManageEngine Password Manager Pro should be have a Spanish Call Center for America.

Incentivized

Planning the implementation with the Team leader of end users. At the begining start with two server in High Availability. Organice the data base structure of resources and users access before that to deploy in production.

Incentivized

HashiCorp Vault integrates with a lot of tools and systems, and the documentation was pretty robust with a lot of community help. Because HashiCorp Vault is also older than other solutions, it is already well developed with a lot of features you need for storing secrets and configuration. HashiCorp Vault is also friendlier towards application build and is focused in providing security and a lot of customization for almost any use case scenario. Bitwarden is more limited to password management of enterprise accounts, but for application usage is not that great or easy to integrate. It does not scale well also. AWS Secrets Manager on the other hand is really good but more limited to AWS applications and vendor lock is problematic as well for such a critical piece of infrastructure.

Both Google and Microsoft offer a lot of SSO options with their products, but ManageEngine Password Manager Pro has kept competitive by offering its own integrations, and has the added feature of being self-hosted, which allows greater control of the environment compared to a cloud solution. While normally I am a cloud-first believer, in this case the ability to directly tie into local apps as well as cloud apps, and to integrate into the GINA over the LAN and WAN, has proved its value to me.

Incentivized

• Allowed better access control for credentials, passwords, and important keys.
• After we started using HashiCorp Vault, we were able to base our environment 100% as code.
• SSH access control that is possible using HashiCorp Vault adds an extra level of security in environments where external remote access is required.

Incentivized

• PMP has made it easier for us to store and share important credentials with other team members in a secure manner.
• PMP has eliminated the need for using personal credential management tools that can be insecure and could put data at risk.
• Integrating PMP with SSO has made it easier for everyone to access the tool quickly.

Incentivized