We have a nice question about this over at Server Fault: http://serverfault.com/questions/119892/company-password-management http://serverfault.com/questions/11

We have a nice question about this over at Server Fault: http://serverfault.com/questions/119892/company-password-management http://serverfault.com/questions/119892/company-password-man... I've looked at Thycotic Software's Secret Server product (http://www.thycotic.com/products_secretserver_overview.html http://www.thycotic.com/products_secretserver_overview.html) I was impressed, but none of my consulting customers have signed-up. I recently spun up a copy of the open source WebPasswordSafe (http://code.google.com/p/webpasswordsafe/ http://code.google.com/p/webpasswordsafe/) and liked what I saw but haven't really had much of a chance to bang on it. Wearing my security auditing / pentester hat I've run into CyberArk's Enterprise Vault product (http://www.cyber-ark.com/digital-vault-products/pim-suite/enterprise-password-vault/index.asp http://www.cyber-ark.com/digital-vault-products/pim-suite/en...) and found it very reasonable. It was refreshing to do a pentest where we didn't find a shared Keepass database or something similar.