HashiCorp offers Vault, an encryption tool of use in the management of secrets including credentials, passwords and other secrets, providing access control, audit trail, and support for multiple authentication methods. It is available open source, or under an enterprise license.
$0.03
ManageEngine Password Manager Pro
Score 8.4 out of 10
N/A
ManageEngine Password Manager Pro is the Zoho Corporation's password management solution for small and medium sized businesses and enterprises alike.
Vault is a reliable and resilient as the Key Management System. It is not for the novice user that does not have a background in information security. It requires a significant time investment into the different key engines that the solution offers to get started. It works very well once implemented and is very flexible in general.
Password Manager does a good job of segregating passwords in to different categories which then can be aligned to different users or different job roles within the organization or department. I think the user interface looks a little dated, however, is perfectly functional for retrieving passwords. In adding the passwords initially, I found it a bit clunky, but of course, you don't need to do that too often.
HashiCorp Vault is the best there is out there, and it has become critical to our secret management use cases. It would be difficult to find anything that would suit our needs better and that would be beneficial for us to switch over to.
We spent a little more time than we imagined to conceptually understand how HashiCorp Vault operates, as well as how it is configured. This is not trivial, and keep in mind that you will need to take some time to get a thorough understanding of the tool. The documentation could be more helpful in this regard.
ManageEngine Password Manager Pro has an amazing interface for all kind of users. It is easy to use over different ambient and for anybody. T he privileges use have much more control over his password databases and its action for its teams. The auditors have many reports on differents formats, type of reports, filters o action and more.
Hashicorp has been very responsive to our questions and inquiries up to this point. We are currently working on them to develop a more granular permissions model within Vault. We are very close to achieving our objectives with the help of their support team. We do not seem to be in the same time zone which makes it hard for escalated issues.
The contact is very easy. It is by mail. The resolution isn't easy because the support don't speak spanish and its english isn't good. In my opinion, ManageEngine Password Manager Pro should be have a Spanish Call Center for America.
Planning the implementation with the Team leader of end users. At the begining start with two server in High Availability. Organice the data base structure of resources and users access before that to deploy in production.
HashiCorp Vault integrates with a lot of tools and systems, and the documentation was pretty robust with a lot of community help. Because HashiCorp Vault is also older than other solutions, it is already well developed with a lot of features you need for storing secrets and configuration. HashiCorp Vault is also friendlier towards application build and is focused in providing security and a lot of customization for almost any use case scenario. Bitwarden is more limited to password management of enterprise accounts, but for application usage is not that great or easy to integrate. It does not scale well also. AWS Secrets Manager on the other hand is really good but more limited to AWS applications and vendor lock is problematic as well for such a critical piece of infrastructure.
Both Google and Microsoft offer a lot of SSO options with their products, but ManageEngine Password Manager Pro has kept competitive by offering its own integrations, and has the added feature of being self-hosted, which allows greater control of the environment compared to a cloud solution. While normally I am a cloud-first believer, in this case the ability to directly tie into local apps as well as cloud apps, and to integrate into the GINA over the LAN and WAN, has proved its value to me.
