No more typing reviews! Try our Samantha, our new voice AI agent.

ARCON Privileged Access Management vs CyberArk Privileged Access Manager vs Delinea Secret Server comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

As of April 2026, in the Privileged Access Management (PAM) category, the mindshare of ARCON Privileged Access Management is 2.5%, down from 3.8% compared to the previous year. The mindshare of CyberArk Privileged Access Manager is 11.4%, down from 19.6% compared to the previous year. The mindshare of Delinea Secret Server is 4.9%, down from 9.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Privileged Access Management (PAM) Mindshare Distribution
ProductMindshare (%)
CyberArk Privileged Access Manager11.4%
Delinea Secret Server4.9%
ARCON Privileged Access Management2.5%
Other81.2%
Privileged Access Management (PAM)
 

Featured Reviews

DS
System and DBA at a energy/utilities company with 1,001-5,000 employees
Enhanced security through session monitoring and activity recording
From an end-user point of view, it would be beneficial if the system could provide information about the last login. This would help identify if the server was accessed by me or if someone has potentially stolen my credentials. It would provide a clearer picture of whether ARCON Privileged Access Management is accessed by an authentic user.
Atul-Gujar - PeerSpot reviewer
CyberArk manager at a comms service provider with 10,001+ employees
Secures critical infrastructures with essential user session audit records
A potential area for improvement is enhancing support for cluster environments and distributed Vaults. Clients in multiple countries that need central access have different challenges that require better solutions from CyberArk. For financial services, CyberArk can improve incident response by ensuring fast support for critical priority tickets to meet compliance requirements. Providing more documentation on CyberArk is recommended for new team members to enhance their troubleshooting capabilities. I understand it's up to the client, but 99% fail to change the demo key, so it's crucial for CyberArk to emphasize changing the key and documenting it as part of the installation process.
Reena Bhardwaj - PeerSpot reviewer
Senior Quality Analyst at YASH Technologies
Has improved credential security with remote password change and role-based access
I have not faced any significant issues with Delinea Secret Server during this period of time, but we had a problem with a web password filler, which is a template used for accessing a web URL using Secret Server, where we faced some session management issues since session management is not applicable for the web password filler. This should be the improvement that we require from Delinea Secret Server. The session management is not applicable in this case; we can manage the session and have session management inside the remote systems within the organization. However, when it comes to web-related access, we can access directly through Delinea Secret Server. We can access any URL through Secret Server, but the problem is that the session cannot be managed on the web URL due to it having multiple systems. I do not have any other recommendations regarding the improvement of Delinea Secret Server at this time.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"That dashboard is okay."
"One important feature is the administrator access, mainly for Windows machines as well as Linux machines. It is important for us because there is accountability associated with each user ID. And the recordings are also helpful."
"The entire conversation that is happening between the servers and the client is recorded. It is a good feature if you want to do some analysis, and for investigation."
"For that reason we introduced the PAM solution and it's working extremely well."
"With this log available, we can drill down to the activities performed by the people within our kiosk. There is a great feature where in the case of Unix servers, we have our own text-based logs. In the case of Window's server, we cannot create a text-based log, so our kiosk takes the screenshot or picture of the screen when I am working. It does this every three seconds."
"It has improved our government compliance score in terms of audits."
"The best part of this product is the administrator convenience. The portal is very user-friendly. An administrator can use it very easily."
"This product seems to appropriately meet our scope financially, as well as technically, which is why we went for it."
"Every aspect of the solution is very well integrated, and even that gives comfort. It is a fail-safe kind of environment."
"The automatic rotation of credentials is probably the most useful feature."
"CyberArk's support is excellent, providing personalized assistance through a dedicated local account manager and sales engineer."
"If you compare this product with anything else as far as an endpoint solution, there is nothing which even compares."
"We found the initial setup to be easy."
"Users were removed from local administrators group on all desktop endpoints providing a more secure computing environment, allowing only those programs approved to run securely."
"Rather than multiple tools for maintaining regulatory compliance around passwords and privileged accounts, we have centralized as much as possible with CyberArk."
"Allows secure, logged access to highly sensitive servers and services."
"Ease of use because of its monolithic software."
"One valuable feature is that it will support a dedicated database. Delinea provides multiple features, like reporting and remote password changes."
"I find it really easy and computer confident, and the experience with the product is really good. Additionally, customizations are easy."
"We implemented the product for our privileged identities. We have configured them in check-in/check-out rotation. Delinea Secret Server rotates the password each time a privileged identity is checked in, making the password valid only for some time."
"The most valuable feature of Delinea Secret Server is secret password management."
"Thycotic Secret Server is a good solution for what it does."
"One valuable feature is that it will support a dedicated database."
"The user interface is quite good. It's very straightforward."
 

Cons

"One thing which needs improvement is where it is keeping video logs of Windows Servers, whatever activities are being carried out by the administrator. Because Windows logs are a video, they are unsearchable, so if you need to search for a specific administrator and what he has done on a server, right now you need to go through different video logs of that particular timeframe. I think they are coming up with an additional feature where in it can be indexed and can be searchable."
"Scalability could be improved."
"Hazard flow could be improved, the data compliance portion."
"There are no APIs readily available."
"They need to support all web browsers. At the moment it only supports Explorer, IE."
"It should be browser-agnostic and, frankly, it is working well on Internet Explorer. It should work on popular browsers like Mozilla and Firefox."
"There are some features lacking but they typically are added when the upgrades are released."
"The solution lacks to offer a governance mechanism for operational technology assets."
"The PTA could be improved. Currently, companies often have multiple domains and sometimes it's difficult to implement CyberArk in this kind of infrastructure."
"I would like to see more integration with more tools, for more APIs."
"The usual workload on the system is sometimes delayed by CyberArk, so any major work is getting delayed and may take twice the amount of time that it usually does."
"The initial setup could be simpler but it may not be as effective."
"One area for improvement is the plug-in development challenge. Although CyberArk provides a plug-in generator utility, it does not fully meet our needs, particularly for web-based applications. The plug-in generator currently works only for Telnet and SSH connections. We cannot generate a plug-in for web-based applications."
"The product is complex and requires extensive configuration."
"There is a learning curve when it comes to planning out the deployment strategy, but once it is defined, it runs itself."
"Integration with the ticketing system should allow any number of fields to be used for validation before allowing a user to be evaluated and able to access a server."
"I would like to see improvement with the integration with Azure Active Directory. This would mean that we can have support on multiple platforms such as Windows, Linux, and Mac."
"Attempting to do that is almost impossible because of the low quality of the API."
"Whenever an update is applied to Secret Server, it requires downtime."
"Installation can sometimes be difficult, depending on the environment."
"We could definitely use some help with API tokenization. If we had a way to store tokens that would be fabulous."
"Referring to Secret Server v10, we want the ability to add subfolders to the "Personal Folders" container."
"Although the password policy was interesting, the default setting was inadequate."
"The solution could be more user-friendly."
 

Pricing and Cost Advice

"The pricing and licensing model is very economical."
"The licensing is simple, and there are only two types licensing: device licensing and user-based licensing."
"The cost of this product is very cheap, comparatively in the global market."
"The product is available with competitive pricing. Licensing is not complex. We calculated the license requirements by counting the number of admins and the number of devices which were going to integrate with it."
"Their licensing model is very simple, as it is based on the number of endpoints which you want to manage along with the number of users and administrators which you want to use."
"We have a subscription to use this solution."
"The solution’s pricing is neither cheap nor expensive."
"Pricing and licensing are good, very aggressive."
"Overall, its pricing is really good. The main difference from all the other vendors is that they have one package that covers all the functionality and modules of the basic PAM, except the add-on modules like adware and server protection. It also doesn't include the licenses for domain controller protection or maybe an API call-related feature. For the basic privileged access management, the bundle pricing is really good, but when it comes to an agent-based solution for advanced cyber protection or application identity managers, it is expensive. Services are also very expensive if you hire the services team from CyberArk, but these guys are really good. For a couple of large banking projects, we had an experience with them. The banks wanted to have things quickly and efficiently, so we had to hire them. If we take four weeks, these guys can do everything on a weekend. They charge quite a big sum of money, but they know the system well."
"CyberArk provides all the features bundled. This is compared to other vendors who provide them as a different license for each functionality."
"Licensing fees are paid on a yearly basis."
"CyberArk Enterprise Password Vault is a very expensive product."
"It costs us around $200 per user."
"It is not a cheap solution. It is expensive as compared with other solutions. However, it is one of the best solutions in their domain."
"CyberArk is good at what they do, and the price reflects that. You have to pay the price for the same."
"The main problem for the tool is its licensing. I work for a really big company. When you try to develop this as a service, usually you work with leverage teams who are formed with dozens of members. You might dedicate one FTE, or less, for something, e.g., an antivirus administrator. You might have half an FTE's effort dedicated to administering the antivirus, but then you have a team of about 30 users who might access that ticket. The problem is that CyberArk eliminated the possibility of concurrent users years ago. This is a big problem for companies who work with leverage teams. You need to pay for everyone. 40 licenses are used by 20 or 30 people. This is a big problem because licenses are not precisely cheap."
"It would be beneficial if it were reduced."
"There are different plans and additional licensing costs that can be instituted for add-ons."
"There is an annual license needed to use Delinea Secret Server."
"The price of this solution is good."
"Most customers opt for a yearly license."
"Compared to other solutions, Delinea Secret Server is competitively priced but on the higher side."
"Secret Server is expensive when compared to the cost to some alternatives."
"Pricing is comparable to competing products."
report
Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.
885,789 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
9%
Manufacturing Company
8%
Computer Software Company
7%
Government
7%
Financial Services Firm
13%
Manufacturing Company
10%
Computer Software Company
8%
Government
5%
Financial Services Firm
10%
Manufacturing Company
10%
Computer Software Company
7%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise11
Large Enterprise17
By reviewers
Company SizeCount
Small Business59
Midsize Enterprise42
Large Enterprise174
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise10
Large Enterprise25
 

Questions from the Community

What needs improvement with ARCON Privileged Access Management?
From an end-user point of view, it would be beneficial if the system could provide information about the last login. ...
How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to m...
What do you like most about CyberArk Privileged Access Manager?
The most valuable features of the solution are control and analytics.
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
My thoughts on the pricing of CyberArk Privileged Access Manager depend entirely on the vendors' requirements. If the...
Looking for recommendations and a pros/cons template for software to detect insider threats
This is an inside-out --- outside-in --- inside-in question, as an insider can be an outsider as well. There is no sh...
Which PAM tool do you prefer: CyberArk Privileged Access Manager, One Identity Safeguard, Delinea Secret Server, or BeyondTrust Privileged Remote A
For a banking or financial services use case you should check out SplitSecure. Very easy to deploy and use and splits...
 

Also Known As

ARCON ARCOS, ARCON PAM
CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
Thycotic Secret Server, Delinea Password Reset Server
 

Overview

 

Sample Customers

RAK Bank, AXIS Bank, Reliance Capital, Kotak Life Insurance, MTS
Rockwell Automation
Secure-24, University of San Diego, International Rescue Committee, San Francisco Ballet, Perkins Coie, University of San Diego, D.S.S. Limited, Turbo's Hoet, Eclipse Computing, Cathay Bank, Stellarise, J&R Consulting
Find out what your peers are saying about CyberArk, One Identity, Okta and others in Privileged Access Management (PAM). Updated: March 2026.
885,789 professionals have used our research since 2012.