IBM Vault (formerly HashiCorp Vault) Features

Expedites user logins using methods like a master password or password autofill.

Integrates the tool with your browser for easy use.

Integrates with your mobile device for use on mobile apps.

Enables user to use the tool across multiple devices.

Allows an employer or administrator to manage employee access.

Generates passwords for each of your logins.

Provides extra security by requiring an extra for of verification in addition to a password.

Analyzes and evaluates the quality and variety of your passwords.

Stores records like credit cards or receipts in addition to passwords.

Stores files in addition to passwords.

Encrypts the content of emails and their attachments.

Encrypts messages being sent via text or within an application.

Protects data with within or as it leaves your secure or local network.

Provide a level of encryption of data in transit, protecting sensitive data while it lives in the backup application.

Provides a level of encryption for text documents.

Encrypts entire device to secure data in case it is lost or stolen.

Allows administrators to set multi-factor authentication requirements including tokens, keys, or sms messaging

Abilities to set standards for database security and risk management.

Allows administrators to set user access privileges to permit approved parties to access sensitive data.

Stores data remotely, on-premise, or in cloud databases in case of recovery during disaster.

Decrypts datasets or files or allows users access to a backup database for reintegration.

Allows administrators to set levels of encryption for file types. Allows administrators to decide which files to encrypt.

Monitors activity within networks and alerts administrators when unusual activity occurs.

Supports different database platforms and data types. Typically integrates with a variety of existing databases.

Administrators can access and organize data related to incidents to produce reports or make data more navigable.

Provides required reports to manage business. Provides adequate logging to troubleshoot and support auditing.

Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications.

Supports compliance with PII, GDPR, HIPPA, PCI, and other regulatory standards.

Provides a centralized console for administation tasks and unified control.

Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications.

Documents access and alterations of the database for analytics and reporting.

Supports compliance with PII, GDPR, HIPPA, PCI, and other regulatory standards.

Provides Administration tools/console that are easy to use and learn for routine maintenance tasks.

Creates access requirements and standards and establishes user, roles, and access rights.

Allows administrators to approve or reject access changes to using defined workflows.

Automates provisioning and deprovisioning to reduce the amount of administrative manual work.

Reduces manual administrative work.

Manages identity information from on-premise and cloud applications.

Automatically allows access if users meet policy requirements.

Supports compliance with PII, GDPR, HIPPA, PCI, and other regulatory standards.

Allows administrators to set user access privileges to permit approved parties to access sensitive data.

Requires a second level of authentication, such as sms messaging or customized tokens, to access data.

Documents the actions related to the database. Alerts users of incidents and abnormal activities and documents the access point.

Protects database and sensitive information from a variety of attacks and malware threats.

Protects sensitive data by disguising or encrypting data, keeping it usable by the organization and approved parties.

Perform ad-hoc or ongoing IT audits at different levels of the company.

Enforces security paramaters to prevent unauthorized access.

Protects servers, data center infrastructure and information from a variety of attacks and malware threats.

Provide some level of encryption of information, protecting sensitive data while it exists within the data center.

Facilitates system and network security by identifying and remediating vulnerabilities

Provides high quality and wide scope of in-cloud and offline data security capabilities.

Detects unauthorized access and use of privileged systems.

Detects anomalies in functionality, user accessibility, traffic flows, and tampering.

Provides multiple techniques and information sources to alert users of malware occurrences.

Logs and stores multiple copies and versions of master keys.

Implements a key hierarchy with a local data encryption key (DEK) and a key encryption key (KEK).

Allows administrative control over automated tasks related to key management, storage and distribution.

Provides support for Multi-Factor authentication, so users are required to provide multiple factors to authenticate.

Provides a single access point for users to access multiple cloud products without multiple logins.

Enables users to bring-your-own-device to access company applications.

Stores credentials and passwords in a secure vault. Eliminates hard-coded passwords. Hides passwords from users.

Ensures that credentials are centrally stored (in a secure vault) and when changed, that systems remain connected.

Allows privileges based on roles, such as business unit or other factors.

Configure which events will trigger a notification to prevent privileged access abuse in real-time.

Offers live session recording and playback for compliance and auditing purposes.

Offers the option to hide passwords when sharing with users, such as contract workers

Allows for temporary privileges for a defined task or period of time, to reduce the risk of credential abuse.

Creates audit trail of secrets lifecycle

Has a centralized dashboard for users to interact with

Offers a universal approach to secrets management with integrations to centralize secrets regardless of platform

Integrates with third-party software to provide other features and expand functionality.

Integrates with major cloud service provider offerings for simplified management and distribution.

Supports key distribution across multi-regions to increase availability.

Expands functionality while maintaining balanced loads. Serves growing demand without reducing functionality.

Provides audit logs for compliance reasons.

Monitors, records, and logs both real-time and post-event activity.

Detects abnormal user behavior to mitigate risks.

Creates a comprehnsive log of all activities when utilizing Privileged Access Management Software software.

Includes reporting functionality.