Choosing between Devolutions Server or Devolutions Hub Business

Who is this use case for?

This use case is intended for organizations evaluating whether to adopt Devolutions Server (self-hosted) or Devolutions Hub Business (cloud-based) to centralize management of business-user passwords and sensitive information (e.g., building alarm codes, software license keys, etc.)

The problem

Poor password management remains a leading cause of data breaches. Research has found that 81% of data breaches stem from weak, reused, or compromised passwords, and 29% of all data breaches (regardless of attack type) involve the use of stolen credentials.

Organizations that want to reduce these risks and improve their overall security posture typically turn to centralized password management solutions. However, the challenge is not whether to adopt a solution — it's which one to choose.

Navigating a market saturated with options can be overwhelming: some solutions are cloud-based, others are self-hosted — and each model comes with its own strengths and trade-offs in terms of security, scalability, compliance, and user experience.

The solution

Devolutions Server (self-hosted) and Devolutions Hub Business (cloud-based) are secure, user-friendly, full-featured password management solutions available in distinct deployment models. Both solutions include:

• Role-based access control (RBAC)
• A centralized password vault
• Strong password generation
• Support for multi-factor authentication (MFA)
• Secure password sharing
• Comprehensive activity logs and reports

There are a few key differences that may make one option more suitable than the other, and make the right choice simple.

Answering three key questions can help organizations determine the best fit.

1. Do we need to authenticate users via Active Directory?

Organizations that answer “yes” to this question should choose Devolutions Server, which allows authentication via local Active Directory. Devolutions Hub Business does not support this option. However, both platforms support SSO authentication.

2. Do we need Privileged Access Management (PAM)?

Organizations that answer “yes” to this question can choose either Devolutions Server or Devolutions Hub, which both have a built-in PAM module for monitoring and controlling privileged accounts. Key PAM-related features include:

• Privileged session recording and monitoring
• Privileged account discovery
• Check-out request approval workflow
• Password rotation on check-in
• Real-time notifications

3. Do we need an self-hosted solution for compliance or security purposes?

Organizations that answer “yes” to this question should choose Devolutions Server. Despite that Devolutions Hub Business leverages the latest encryption standards, some organizations may prefer or be required to use a self-hosted solution for enhanced compliance or security. Certain industries (such as healthcare) may mandate full in-house data control (i.e., an organization’s data cannot be stored outside its environment through a third-party service provider).

Deployment

• Devolutions Server: The server is deployed within the organization’s infrastructure using a back-end database like SQL Server or Azure SQL.

• Devolutions Hub Business: Created online and ready to launch in minutes.

   

  Both Devolutions Server and Devolutions Hub Business feature a web interface, allowing users to quickly and easily save credentials and other sensitive data in a shared vault, or in their private user vaults. In addition, both solutions seamlessly integrate with Remote Desktop Manager, which centralizes all remote connections on a platform that can be shared securely among entire teams.

Summary of benefits

• • Increase security: Enforce password management policies and overall security hygiene across the organization.
  • Improve usability and oversight: Empower end users with secure, easy-to-use vaults while giving IT teams full control through access policies, audit logs, and administrative tools.
  • Make the right choice for your needs: Devolutions offers two solutions with a shared foundation of robust features. With just three questions, you can identify the right fit for your team.