CyberArk Conjur
Cloud workload protection platforms
Secrets management tools
Container security tools
Privileged access management (PAM) software
Cloud security software
Data security software
DevSecOps software
Identity management software
- Features
- Ease of use
- Ease of management
- Quality of support
- Affordability
- Market presence
Take the quiz to check if CyberArk Conjur and its alternatives fit your requirements.
Contact the product provider
Free Trial unavailable
Free version
Small
Medium
Large
- Healthcare and life sciences
- Public sector and nonprofit organizations
- Banking and insurance
What is CyberArk Conjur
CyberArk Conjur is a secrets management tool for storing, controlling, and delivering application credentials (such as API keys, database passwords, and certificates) to workloads and CI/CD pipelines. It is used by DevOps and security teams to reduce hard-coded secrets and centralize access control for machine identities across cloud and containerized environments. Conjur integrates with common orchestration and automation tooling (for example, Kubernetes and CI systems) and supports policy-as-code for defining access rules. It is typically deployed as part of a broader privileged access and identity security program, especially in environments that already use CyberArk products.
Policy-as-code access control
Conjur uses declarative policies to define which applications and workloads can retrieve specific secrets and under what conditions. This approach supports version control, peer review, and repeatable promotion across environments. It also helps standardize access patterns for machine identities in DevSecOps workflows.
Strong integration with DevOps tooling
Conjur is designed to integrate with CI/CD pipelines and container platforms so applications can fetch secrets at runtime rather than embedding them in code or images. It supports common patterns such as sidecar or init-container based secret retrieval in Kubernetes. These integrations make it practical for teams operating at scale across multiple services.
Alignment with PAM programs
As part of the CyberArk portfolio, Conjur fits into organizations that manage privileged access and want consistent governance for both human and machine credentials. This can simplify vendor management and security architecture when teams already standardize on CyberArk for privileged identity controls. It also supports centralized auditing expectations common in regulated environments.
Operational complexity to run
Self-managed deployments can require non-trivial setup and ongoing operations, including high availability design, upgrades, and backup/restore planning. Teams may need dedicated expertise to manage policy structure, authentication methods, and integrations. This can be heavier than simpler, cloud-native secret stores for smaller environments.
Narrower scope than CWPP/CSPM
Conjur focuses on secrets delivery and machine-to-machine credential control rather than broad cloud workload protection, posture management, or threat detection. Organizations typically need additional tools for vulnerability management, runtime protection, and cloud configuration risk. Buyers evaluating it as a “cloud security platform” may find coverage gaps outside secrets.
Learning curve for policy model
The policy language and identity model can take time for application teams to adopt correctly, especially when mapping complex microservice relationships. Misconfiguration can lead to overly permissive access or deployment friction. Successful rollouts often require governance and enablement work beyond initial installation.
Plan & Pricing
| Plan | Price | Key features & notes |
|---|---|---|
| Conjur Open Source (Conjur OSS) | $0 (open-source) | Freely available open-source secrets manager for applications and DevOps tools (supported by CyberArk resources). |
| CyberArk Secrets Manager, Self-Hosted (formerly Conjur Enterprise) | Quote-based / Contact Sales | Enterprise self-hosted secrets management for cloud-native, containerized apps, CI/CD pipelines; request demo/contact sales on CyberArk website. |
| CyberArk Secrets Manager, SaaS (Conjur Cloud) | Quote-based / Contact Sales | SaaS secrets management for multi-cloud and hybrid environments; pricing not published — request demo/contact sales. |
Seller details
CyberArk Software Ltd.
Newton, Massachusetts, USA
1999
Public
https://www.cyberark.com/
https://x.com/CyberArk
https://www.linkedin.com/company/cyber-ark-software/
