Open source alternatives to CyberArk

One project on starwire does the same job. Ranked by how much of what CyberArk does each one covers, read from its README and website. Ties go to the most active.

What CyberArk does

Privileged account vaultcore
Controlled access to servers and databasescore
Session recording and audit
Credential rotation
Just-in-time access
Secrets for apps and pipelines
Compliance reporting

Each dot in the table is one job, in this order. Square dots are core jobs and count double. Full means yes, half means partly. "See the evidence" under a project shows the line behind each one. Coverage is what a project documents, not how well it works or how hard it is to move to. How we score this

Project	Covers	Stars	Commits, 12 weeks	Last release	Closed vs opened	Setup	License
jumpserverPrivileged access management platform for SSH, RDP, Kubernetes and database access	Replaces it89%	32k+42	560	25 days ago	100%	Needs a server	GPL-3.0
Covers all 2 core jobs. Not shown: Secrets for apps and pipelines.See the evidence Privileged account vaultcoreYesEncrypted credential vault Controlled access to servers and databasescoreYessecure access to SSH, RDP, Kubernetes, databases, websites Session recording and auditYesFull session video recording & playback Credential rotationYesAutomated password rotation & policy Just-in-time accessYesJust-in-time access with time-boxed approval Secrets for apps and pipelinesNot shownNeither the README nor the website mentions it. Compliance reportingYesCompliance-ready audit reports

Vital signs from GitHub, checked weekly. How we read these · How setup is read

All repos

Sort

Form Platform Works with Theme License Setup Language

New repos every two days, stars refreshed daily. Visits are counted without cookies, and the numbers are public. How it works Data RSS Newsletter