AWS Secrets Manager vs BeyondTrust Password Safe comparison

Why PeerSpot?

Amazon Web Services (AWS) and BeyondTrust are both solutions in the Enterprise Password Managers category. Amazon Web Services (AWS) is ranked #3 with an average rating of 9.2, while BeyondTrust is ranked #13 with an average rating of 9.0. Amazon Web Services (AWS) holds a 12.6% mindshare in EPM, compared to BeyondTrust’s 2.6% mindshare. Additionally, 100% of Amazon Web Services (AWS) users are willing to recommend the solution, compared to 84% of BeyondTrust users who would recommend it.

AWS Secrets Manager

Read 17 AWS Secrets Manager reviews

8,774 Views
8,686 Comparison Views

100% willing to recommend

BeyondTrust Password Safe

Read 27 BeyondTrust Password Safe reviews

4,601 Views
2,899 Comparison Views

84% willing to recommend

AWS Secrets Manager

BeyondTrust Password Safe

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Dec 16, 2024

BeyondTrust Password Safe and AWS Secrets Manager compete in credential management, with BeyondTrust gaining an edge due to its enterprise-focused features and integration capabilities.

Features: BeyondTrust Password Safe offers session recording, password vaulting, and Smart Rules for automated onboarding and account management, supporting comprehensive audit trails and integration with ticketing systems. AWS Secrets Manager provides efficient secret information management with strong integration capabilities with AWS services, facilitating easier development processes on the AWS platform.

Room for Improvement: BeyondTrust needs enhancements in documentation, error reporting, and support efficiency, with concerns regarding the bundling of necessary components. AWS Secrets Manager faces rate limit challenges and limited integration options outside AWS, with potential improvements in flexibility through incremental backups and enhanced inter-platform integration.

Ease of Deployment and Customer Service: BeyondTrust is ideal for on-premises and hybrid deployments, offering substantial support though sometimes delayed. AWS Secrets Manager suits public cloud environments with generally faster support, but enterprise support can improve resolution times.

Pricing and ROI: BeyondTrust Password Safe is cost-effective with its asset-based licensing, providing substantial ROI with its robust feature set. AWS Secrets Manager charges per secret per month, possibly leading to higher costs with extensive usage but remains valuable for AWS-integrated organizations, offering reasonable pricing aligned with usage patterns.

To learn more, read our detailed AWS Secrets Manager vs. BeyondTrust Password Safe Report (Updated: September 2026).

Buyer's Guide

AWS Secrets Manager vs. BeyondTrust Password Safe

September 2026

Download the complete report

Helped 917,433 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

AWS Secrets Manager

Ranking in Enterprise Password Managers

3rd

Average Rating

9.0

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Secrets Management Tools (3rd)

BeyondTrust Password Safe

Ranking in Enterprise Password Managers

13th

Average Rating

8.0

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Privileged Access Management (PAM) (14th)

Mindshare comparison

As of October 2026, in the Enterprise Password Managers category, the mindshare of AWS Secrets Manager is 12.6%, down from 16.1% compared to the previous year. The mindshare of BeyondTrust Password Safe is 2.6%, down from 3.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Enterprise Password Managers Mindshare Distribution
Product	Mindshare (%)
AWS Secrets Manager	12.6%
BeyondTrust Password Safe	2.6%
Other	84.8%

Enterprise Password Managers

Featured Reviews

Mahadev Metre

Dev Ops Engineer at Paydoh

Consistent security and efficiency improvements optimize IT infrastructure with effective management

When creating AWS Secrets Manager, it should be automated using tools such as Terraform, Puppet, or Ansible. With Terraform code, you specify the encryption key, secret name, rotation policy, and secret replication. Human error occurs when feeding secret values manually, especially with large amounts of secrets to input. Secrets should never be protected only by IAM. They should be protected by multiple layers, such as IAM and one or two KMS keys. Additional security measures could be beneficial if necessary. The rotation policy is crucial because some secrets may become obsolete, require updates, or get compromised. With a weekly rotation policy, if unauthorized access occurs, the exposure is limited to seven days. The rotation policy can be customized according to needs.

Read full review

PawanShirose

Associate Security Consultant at CyberSec Consulting

Has enabled bulk onboarding and password rotation while ensuring secure privilege management

I have faced stability issues when upgrading BeyondTrust Password Safe solution. The upgrade process can be lengthy compared to other modules. For example, upgrading the appliance and reconfiguring HA is easier in PRA. However, in BeyondTrust Password Safe, the upgrade activity can take longer, and I have occasionally experienced being stuck during appliance version upgrades, sometimes duplicating the upgrade. Regarding additional features, we have good features in BeyondTrust Password Safe compared to other modules, such as Secret Safe to secure secrets and the check-in, check-out functionality. We already have the main features, but I think it would be helpful if BeyondTrust implemented a heartbeat check feature on the privileged account level. This feature would allow PAM to check the credentials of privileged accounts, indicating if they are correct or not, showing if the heartbeat has failed if they are wrong.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I would highly recommend AWS Secrets Manager for secret management in AWS."

"The most valuable feature of AWS Secrets Manager is the ability to keep data secret and assign access permissions to people to grant or restrict access."

"AWS Secrets Manager is used for storing secret information that has to be a secret from your customer and your employees."

"The most valuable feature is security."

"It's highly scalable, so I'd rate it a ten out of ten."

"I would recommend everyone to use AWS Secrets Manager for their security and for storing their passwords, because I see that passwords nowadays are easily compromised."

"All our workloads are running on AWS, so integration with our workload is much easier on AWS Secrets Manager than going with another solution such as Thycotic."

"The most valuable feature is usability, as it is quite user-friendly."

More AWS Secrets Manager pros

"It provides integrated password and session management in one solution, which is important for us because, from an auditing standpoint, we are accountable for the type of access being used. We need to ensure that accounts are securely stored and there is the right type of accountability around who is gaining the access. After gaining it, how they're using it, where they're using it, etc."

"BeyondTrust is three times less expensive than CyberArk."

"The best aspect of the product is the ability to onboard devices. You can scan the IP subnets and onboard all the devices. You can then segregate them if it's a network device or a firewall. If it's a Windows server or a UNIX, you can basically scan your IT infrastructure and onboard the efforts, which should be managed. Once they have been onboarded, then the session management and password management are easy and nicely configurable."

"The flexibility of the licensing model is significantly better as it offers both unlimited users and unlimited devices, unlike Delinea, which is based on the number of users."

"The performance is good."

"Team Passwords gives us better control over our passwords."

"BeyondTrust Password Safe has good reporting and Smart Rules which makes it convenient. Though Smart Rules are convenient, those who do not have much experience with such things may find it difficult to understand how these things work. Otherwise, I find Smart Rules very convenient to work with."

"Overall, I rate BeyondTrust Password Safe as nine out of ten."

More BeyondTrust Password Safe pros

Cons

"If you add one more layer of security to AWS Secrets Manager, even the programmer will not be able to see the secrets."

"AWS Secrets Manager could support hybrid infrastructure."

"It would be good if the AWS Secrets Manager were more customizable."

"We occasionally have problems with rate limits, although that is a problem more generally with AWS."

"There is a potential improvement in connecting AWS Secrets Manager to Jenkins CI/CD pipeline to automatically reflect changes in production."

"An area for improvement in AWS Secrets Manager could be expanding integration options beyond AWS services."

"The only concern with AWS Secrets Manager is its cost, which can be prohibitive for small organizations."

"We contacted AWS support and waited approximately an hour for assistance."

More AWS Secrets Manager cons

"If there was one thing, it would be having the documentation standardized. They should keep the documentation consistent. For example, when BeyondTrust updated one of their admin guides, they left out the information on the discovery account requirements, and then over a period of time, we ended up having to search multiple different documents to put together a string of information for a specific topic, which was problematic. It was minor, but it was problematic. Standardized documentation would be the one thing I would suggest."

"Its documentation can be improved. Its documentation is currently complicated, and it is not good. It needs to be better. Their technical support can also be improved. It is not bad, but it can be better."

"From the client perspective, they usually complain that the RDP session disconnects without error notifications."

"There is a limited capacity on the appliance, which I wasn't informed about when I purchased the product. I can have a maximum of 150 rules per appliance; any more than that and rule processing becomes very complex, especially regarding password revision. Hitting a capacity limit you don't know about can be problematic. Ideally, we would not have a limited capacity, allowing us to be in a completely managed state with password rotation for every service account, not just the highly privileged ones."

"The pricing is not cheap, but it could be better."

"We'd like to have incremental backups to ensure the solution's information is protected regularly."

"The only improvement I could suggest would be standardizing documentation, but that's more the responsibility of the implementing engineer rather than BeyondTrust Password Trust itself. The documentation must be specific and narrow for implementation, not just broad guidelines."

"It has crashed on us in the past."

More BeyondTrust Password Safe cons

Pricing and Cost Advice

"The solution is expensive."

"The cost is somewhat high."

"I don't believe there is a license cost for the solution."

"We've observed that AWS Secrets Manager pricing is based on a per-secret-per-month model. As a result, we prefer to divide our secrets into individual pieces to increase security and grant specific access permissions to certain secrets, systems, or individuals. However, this approach results in higher costs. Therefore, we have been exploring ways to combine our secrets into groups to reduce expenses and simplify management. Nonetheless, we acknowledge that this issue may not be related to the secret manager's functionality."

"We purchase a monthly license for the product."

"When you buy Password Safe and perform your initial Discovery, you have all these servers that are added to your assets in BeyondTrust, but you're not using a license until you actually start managing the systems. BeyondTrust's licensing is based on the systems when they're managed, which means when an administrator is able to connect to the server through BeyondTrust with a managed account. There would be a privileged account on the endpoint when the licensing starts. A significant advantage to that is that there are many organizations that want to evaluate their environment prior to automatic management."

"The product is quite affordable."

"At the time, BeyondTrust was significantly cheaper than CyberArk. Pricing-wise, if I remember correctly, it goes by assets. The pricing was negotiated for our instances based on the number of assets that we onboard into the system. It is a little different from CyberArk, where the pricing is by users. So, it depends. If you have a lot of assets, it can get very expensive."

"The pricing structure is better than the competitors. It's much cheaper than CyberArk. They do the licensing on the basis of assets, not on the number of users. For CyberArk, they base the licensing on the number of users, and they have an expensive model of pricing. BeyondTrust has a cheaper model."

"This solution is not cheap—it's a very expensive solution. Very, very expensive compared to the features and functions that they offer."

"The pricing of BeyondTrust is very good as compared to other products. That was the main reason we decided to go with BeyondTrust at first."

"I would rate the pricing a seven out of ten, where one is cheap and ten is expensive."

"We just pay for Password Safe. Session management is included, but we don't use it. There aren't any additional costs besides the standard licensing fees. We pay for an annual license."

More BeyondTrust Password Safe pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Enterprise Password Managers solutions are best for your needs.

See recommendations

917,433 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

12%

Comms Service Provider

Manufacturing Company

Computer Software Company

Financial Services Firm

28%

Manufacturing Company

Healthcare Company

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	8
Large Enterprise	10

By reviewers
Company Size	Count
Small Business	13
Midsize Enterprise	5
Large Enterprise	10

Questions from the Community

Which is better - Azure Key Vault or AWS Secrets Manager?

Azure Key Vault is a SaaS solution. You can easily store passwords and secrets securely and encrypt them. Azure Key Vault is a great solution to ensure you are compliant with security and governanc...

See all answers

Which is better - HashiCorp Vault or AWS Secrets Manager?

HashiCorp Vault was designed with your needs in mind. One of the features that makes this evident is its ability to work as both a cloud-agnostic and a multi-cloud solution. As a cloud-agnostic sol...

See all answers

What needs improvement with AWS Secrets Manager?

AWS Secrets Manager could not be better because there has been no frustration with the product.

See all answers

What is your experience regarding pricing and costs for BeyondTrust Password Safe?

My experience with BeyondTrust Password Safe's pricing, setup cost, and licensing has been positive, primarily due to its asset-based licensing model. This is a significant advantage for us because...

See all answers

What needs improvement with BeyondTrust Password Safe?

See all answers

What is your primary use case for BeyondTrust Password Safe?

I am working on both BeyondTrust Password Safe and the PRA (Privileged Remote Access). I have three years plus experience working with BeyondTrust Password Safe solution, and I have hands-on, good ...

See all answers

Comparisons

Azure Key Vault vs AWS Secrets Manager

Compared 77% of the time

1Password Business vs AWS Secrets Manager

Compared 5% of the time

HashiCorp Vault vs AWS Secrets Manager

Compared 4% of the time

Idira Privileged Access Manager vs AWS Secrets Manager

Compared 3% of the time

Idira Secrets Management vs AWS Secrets Manager

Compared 1% of the time

More AWS Secrets Manager Competitors

Idira Privileged Access Manager vs BeyondTrust Password Safe

Compared 11% of the time

1Password Business vs BeyondTrust Password Safe

Compared 10% of the time

Delinea Secret Server vs BeyondTrust Password Safe

Compared 9% of the time

Safeguard by One Identity vs BeyondTrust Password Safe

Compared 6% of the time

NordPass Business - Enterprise vs BeyondTrust Password Safe

Compared 3% of the time

More BeyondTrust Password Safe Competitors

Product Reports

Buyer's Guide

Enterprise Password Managers

September 2026

Download AWS Secrets Manager product report

Buyer's Guide

BeyondTrust Password Safe

October 2026

Download BeyondTrust Password Safe product report

Also Known As

No data available

BeyondTrust PowerBroker Password Safe

Overview

AWS Secrets Manager offers key-value storage, credential management, and secure access permissions, streamlining the handling of API keys and secret information within the AWS environment.

AWS Secrets Manager integrates seamlessly with AWS services, supporting secure management of credentials and encryption with KMS. It enhances security and efficiency with automated secret retrieval, IAM roles, and version control. While its simplicity and cost-effectiveness are notable, there is potential for improvement in rate limits, integrating with platforms like Azure, and addressing small organization pricing. Its centralized approach benefits auto-scaling, secure card details, microservices, and databases.

What are the main features of AWS Secrets Manager?

Key-Value Pair Storage: Stores credentials securely.
Credential Management: Manages system-to-system credentials.
Rotation Configurations: Supports Lambda-based automatic secret rotation.
Seamless Integration: Works smoothly with AWS services.
API Key Handling: Secure management of API keys and secrets.

What benefits should users consider when evaluating AWS Secrets Manager?

Enhanced Security: Automated encryption and secret retrieval.
Cost-Effectiveness: Reduces risks and facilitates AWS integration.
Operational Efficiency: Simplifies credential management.

AWS Secrets Manager is implemented in diverse industries for managing sensitive information, facilitating secure operations for microservices, GoLang applications, and databases. It supports orchestration and dynamic secret retrieval, beneficial for automated scaling and secure data access during application runtime.

Amazon Web Services (AWS)

BeyondTrust Password Safe is a robust Privileged Access Management tool designed to secure access to servers, databases, and applications. It automates onboarding, rotation, and integration processes, enhancing efficiency and compliance with advanced security measures.

BeyondTrust Password Safe offers a comprehensive approach to managing privileged accounts, integrating smoothly into organizational frameworks to bolster security protocols. Its standout capabilities include session recording, Smart Rules for onboarding automation, and sophisticated auditing tools that support compliance and real-time monitoring. While it exhibits high availability and facilitates seamless usability, enhancements are needed in management console integration, documentation, and installation processes. Users benefit from its password rotation and policy enforcement, despite facing challenges with authentication sync times and session disconnects.

What are the core features of BeyondTrust Password Safe?

Smart Rules: Automates onboarding processes to increase efficiency.
Session Recording: Provides detailed session records for compliance and analysis.
Password Rotation: Ensures secure and regular password changes to mitigate risks.
Application Integration: Streamlines connectivity with essential applications for cohesive operations.
Advanced Auditing: Enhances security and compliance through detailed auditing and reporting.

What benefits should users expect from BeyondTrust Password Safe?

Enhanced Security: Protects sensitive access with robust security protocols.
Compliance Adherence: Simplifies meeting regulatory standards through comprehensive auditing.
Efficiency Boost: Automates complex processes, saving time and reducing manual effort.
Streamlined Onboarding: Improves onboarding speed with automated tools and clear processes.
Seamless Usability: Offers an intuitive interface for efficient navigation and use.

In industries with stringent security demands, BeyondTrust Password Safe is employed to safeguard privileged accounts, ensuring compliance with regulatory requirements. It is crucial for sectors like finance and healthcare, where access to sensitive data must be tightly controlled and monitored.

BeyondTrust

Sample Customers

Autodesk, Clevy, Stackery

Aera Energy LLC, Care New England, James Madison University

Buyer's Guide

AWS Secrets Manager vs. BeyondTrust Password Safe

September 2026

Free Report: AWS Secrets Manager vs. BeyondTrust Password Safe

Find out what your peers are saying about AWS Secrets Manager vs. BeyondTrust Password Safe and other solutions. Updated: September 2026.

DOWNLOAD NOW

917,433 professionals have used our research since 2012.

See our AWS Secrets Manager vs. BeyondTrust Password Safe report.

See our list of best Enterprise Password Managers vendors.

We monitor all Enterprise Password Managers reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.