- Home
- Secrets Management Tools
- CyberArk Secrets Manager
CyberArk Secrets Manager
Santa Clara, California, United States
What it is
CyberArk Secrets Manager centrally stores, rotates, and governs credentials used across cloud, on-premises, and hybrid environments. It manages API keys, tokens, passwords, certificates, and database credentials, with policies that can rotate, expire, or retire secrets while tracking ownership, expiration, and audit history. Applications and containers can be authenticated using application attributes and role-based access controls, and key events are captured in tamper-resistant audit logs. Teams can choose managed SaaS or self-hosted deployment in a customer data center, including for data-residency or air-gap requirements. The SaaS service can assign workloads cryptographic SPIFFE identities based on verified attributes; those identities expire in hours and cannot be shared or reused. The product page describes a distributed, high-availability architecture and validated integrations across DevOps, CI/CD, automation, PaaS, and public cloud tools. CyberArk was founded in 2005 and is headquartered in Santa Clara, California. Pricing is available on request, and the product page directs visitors to request a demo.
For and against
For
- Manages several types of credentials in one platform.
- Policies can rotate, expire, and retire secrets.
- Offers managed SaaS and self-hosted deployment.
- Records key events in tamper-resistant audit logs.
- Validated integrations cover DevOps, CI/CD, and cloud tools.
Against
- Pricing is available on request.
- Support contact requires an active subscription and administrator access.
- SaaS hosting-region availability varies by subscribed service.
The verdict
CyberArk Secrets Manager combines credential lifecycle controls, access management, and audit trails across multiple deployment environments. Pricing is not public, and support access has stated subscription and administrator requirements.
Who it suits
It is designed for security teams managing nonhuman credentials, as well as applications, containers, CI/CD pipelines, and workloads that use them. Organizations needing managed SaaS or self-hosted deployment can consider the listed options.
On the record
- Access controls and audit
- Applications and containers can be authenticated using native application attributes and role-based access controls, with key events recorded in tamper-resistant audit logs.paloaltonetworks.com · read 8 Oct 2026
- Audit and compliance
- The maker says centralized visibility, policy enforcement and audit trails help teams establish who accessed what, when and under which controls.paloaltonetworks.com · read 8 Oct 2026
- Authorization and audit
- Applications and containers can be authenticated using native application attributes and role-based access controls, with key events recorded in tamper-resistant audit logs.paloaltonetworks.com · read 8 Oct 2026
- Availability
- The product page describes a distributed, high-availability architecture for enterprise resiliency, scalability and performance requirements.paloaltonetworks.com · read 8 Oct 2026
- Data hosting
- For SaaS services, Idira says customers can nominate a hosting region, with the available regions varying by subscribed service.paloaltonetworks.com · read 8 Oct 2026
- Deployment
- The product is available as fully managed SaaS or self-hosted in a customer data center, including for data residency or air-gap requirements.paloaltonetworks.com · read 8 Oct 2026
- Deployment options
- Secrets Manager is offered as managed SaaS or self-hosted in a customer data center, including for data residency or air-gap requirements.paloaltonetworks.com · read 8 Oct 2026
- Integrations
- The maker lists validated integrations for DevOps tools, CI/CD toolchains, automation tools, PaaS platforms and public cloud platforms.paloaltonetworks.com · read 8 Oct 2026
- Lifecycle automation
- It can rotate, expire and retire secrets according to policy, with ownership, expiration and audit trails.paloaltonetworks.com · read 8 Oct 2026
- Pricing
- The product page directs visitors to request a demo and does not state a price.paloaltonetworks.com · read 8 Oct 2026
- Purpose
- Secrets Manager centrally stores, rotates and governs credentials across cloud, on-premises and hybrid environments.paloaltonetworks.com · read 8 Oct 2026
- Secrets stored
- It manages API keys, tokens, passwords, certificates and database credentials.paloaltonetworks.com · read 8 Oct 2026
- Security practices
- Idira says its services follow industry security practices such as OWASP, NIST and CAIQ, and use tenant data isolation and frequent security reviews where multitenancy applies.paloaltonetworks.com · read 8 Oct 2026
- Support
- The vendor offers a product demo request; the product page says a Palo Alto Networks specialist will contact the requester.paloaltonetworks.com · read 8 Oct 2026
- Supported secrets
- It manages API keys, tokens, passwords, certificates and database credentials from a single platform.paloaltonetworks.com · read 8 Oct 2026
- Target users
- The product is designed for security teams managing nonhuman credentials and for applications, containers, CI/CD pipelines and workloads.paloaltonetworks.com · read 8 Oct 2026
- Workload identity
- Secrets Manager SaaS assigns workloads unique cryptographic SPIFFE identities based on verified attributes; the identities expire in hours, according to the product page.paloaltonetworks.com · read 8 Oct 2026
- Workload identity details
- Secrets Manager SaaS assigns workloads unique cryptographic SPIFFE identities based on verified attributes; the vendor says these identities expire in hours and cannot be shared or reused.paloaltonetworks.com · read 8 Oct 2026
