When comparing Thycotic Secret Server vs Keywhiz, the Slant community recommends Keywhiz for most people. In the question“What are the best shared secret managers?” Keywhiz is ranked 9th while Thycotic Secret Server is ranked 12th. The most important reason people chose Keywhiz is:
Keywhiz supports versioning secrets through its admin UI or CLI utilities.
Ranked in these QuestionsQuestion Ranking
Pros
Pro Free Version Available
NB: Free edition does not have all features. See comparison chart: https://thycotic.com/products/secret-server/features/
Pro Geo-Replication
Pro Clustering (HA)
Pro Unlimited Admin / Break Glass
Pro Custom Ticket System Integration
Pro SSH Dependencies
Pro SQL Dependencies
Pro PowerShell Dependencies
Pro PowerShell Password Changing
Pro Application API
Pro Web Services API
Pro SSH Key Management
Pro Unix SUPM
Pro Keystroke Logging
Pro Session Monitoring
Pro Session Recording
Pro Proxying RDP & SSH
Pro HSM Integration
Pro SAP Integration
Pro IBM z/OS Integration
Pro SIEM Integration
Pro SAML Integration
Pro CRM Integration
Pro Vulnerability Scanning Integration
Pro Workflow: Native Ticket System Integration
Pro Workflow: Checkout (OTP)
Pro Workflow: DoubleLock
Pro Workflow: Request Access
Pro Workflow: Require Comment
Pro FIPS Compliance
Pro Custom Reports
Pro Scheduled Reports
Pro Event Subscriptions
Pro Dual Control
Pro Discover and Manage Service Accounts
Pro Discovery Rules
Pro Discover Local Accounts
Pro Automated Distributed Engine
Pro Automated Secret Policy
Pro Automated Heartbeat
Pro Automated Changing of Network Passwords
Pro IP Address Restrictions
Pro Automatic Backups
Pro Email Notifications
Pro Auditing & Reports
Pro Password “Hiding”
Pro Smartphones and Devices
Pro Import / Export
Pro Web Password Filler
Pro RDP/PuTTY Support
Pro Active Directory Integration
Pro File Attachments
Pro Folders & Permissions
Pro Role Based Access Control
Pro Two Factor Authentication
Pro AES 256 Encryption
Uses a recognised secure encryption protocol.
Pro Versioning support
Keywhiz supports versioning secrets through its admin UI or CLI utilities.
Cons
Con Prices are not published
To gain a quote, you need to contact Thycotic Sales; prices are not published openly on their site.
You can obtain a quote via: https://thycotic.com/products/request-a-quote/
Con More advanced features incur a cost
See https://thycotic.com/products/secret-server/features/ for comparison of editions.
Con Still in alpha stage
Keywhiz is still in a very early stage of its development and may not be ready for production yet since it's prone to changes and may have some security issues.