Try our new research platform with insights from 80,000+ expert users

BeyondTrust Password Safe vs CyberArk Privileged Access Manager vs Delinea Secret Server comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.0
BeyondTrust Password Safe enhances compliance and security, offering rapid returns, cost-efficiency, automation, and easy privileged account management.
Sentiment score
6.9
Organizations saw improved security, efficiency, and reduced costs using CyberArk Privileged Access Manager, enhancing control over privileged accounts.
Sentiment score
6.7
Delinea Secret Server provides significant security enhancements and ROI, despite its cost, when effectively utilized for extended periods.
Next year, we may add another BeyondTrust element because the overall experience has been good.
The return on investment lies in improved security infrastructure, addressing over-privileged access, and reducing the risk of credential compromise, which is a major source of data breaches.
The end users have the authority to reconcile the password or verify it before using session isolation, which is one of the unique features that can be enabled through Privileged Session Manager, preventing any attacks from happening within the organization when connected with sessions through CyberArk Privileged Access Manager.
CyberArk Privileged Access Manager has helped customers save on costs primarily by reducing the number of engineering and information security personnel.
 

Customer Service

Sentiment score
6.9
BeyondTrust Password Safe support is praised for responsiveness and expertise, but documentation and complex issue resolution need improvement.
Sentiment score
6.5
CyberArk's customer service shows improved efficiency, though users face delays and desire better bug tracking and resource allocation.
Sentiment score
6.3
Delinea Secret Server support is highly rated, though some find it slow and costly, especially for complex issues.
The tickets for minor issues have been resolved efficiently.
One person gets aligned for troubleshooting and maintenance activities during their downtime, and within an hour, they complete these tasks.
I found the technical support from BeyondTrust to be very good.
CyberArk has been exceptional in coming back to us with immediate responses.
It could be forever until you talk to someone who knows what they are doing.
They are helpful, but complex issues can take a long time to resolve, which can delay solutions for urgent customer issues.
When I faced issues integrating custom applications with Delinea Secret Server, the support from their deployment partner was inadequate.
 

Scalability Issues

Sentiment score
7.6
BeyondTrust Password Safe is scalable, integrates with systems, and supports diverse environments for both small businesses and enterprises.
Sentiment score
7.6
CyberArk Privileged Access Manager is scalable and integrates with cloud services, effective for diverse accounts with proper initial planning.
Sentiment score
7.9
Delinea Secret Server is highly scalable, versatile for medium to large organizations, and efficiently manages significant environments with robust options.
If using the built-in database, it requires good knowledge in Microsoft SQL, which could complicate scalability.
BeyondTrust Password Safe is scalable and stable from my perspective, as if you increase your CPU and RAM, you can use as many user licenses as you want on a single platform.
In my experience, the scalability of BeyondTrust Password Safe is also a nine.
The CPM can reportedly handle up to 50,000 accounts independently without issue.
I would rate it a ten out of ten for scalability.
They had 40,000 passwords in this one safe, and it was saving the last ten iterations of each password object. That means they had 400,000 password objects in this safe. They exceeded the limit.
 

Stability Issues

Sentiment score
7.6
BeyondTrust Password Safe is mostly stable and intuitive, though some experience occasional crashes and require substantial management efforts.
Sentiment score
7.7
CyberArk Privileged Access Manager is highly stable, with user issues typically arising from configuration or infrastructure, not software flaws.
Sentiment score
8.1
Delinea Secret Server is stable and reliable, with some minor issues, responsive support, and high user satisfaction ratings.
The solution is very stable.
Proper fine-tuning and expertise ensure the product performs well.
Overall, the stability of the solution is high.
It has a large customer base and positive feedback within my network.
The stability is less than ideal since it updates to our console can take around six to ten hours.
 

Room For Improvement

BeyondTrust Password Safe needs better documentation, support, integration, UI updates, and optimized pricing for enhanced user satisfaction.
CyberArk Privileged Access Manager needs UI improvements, better integration, flexible licensing, enhanced support, and comprehensive documentation for improved user experience.
Delinea Secret Server requires API improvements, enhanced interface, better support, encryption, and integration with systems like Azure Active Directory.
This would help in identifying suspicious activities immediately when users log in.
There are limitations when accessing or creating connectors for each application.
SaaS-based applications and other things should be included, along with their password management options for web applications.
They want everything to be on the cloud, but even in the SaaS version of CyberArk Privileged Access Manager, they need to deploy some servers on-premises.
We cannot generate a plug-in for web-based applications.
If they want clients to move to the cloud, they need to support them in real-time.
Most of the time, the solution tends to fail, necessitating the need to pull data from backup servers.
 

Setup Cost

BeyondTrust Password Safe provides cost-effective subscription licensing based on managed assets, offering flexibility and affordability without hidden fees.
CyberArk Privileged Access Manager offers comprehensive features but is costly, suiting mid to large enterprises with complex licensing needs.
Delinea Secret Server pricing offers flexibility and functionality, but perceptions vary on affordability, especially for advanced features and cloud capabilities.
The pricing model is more affordable with the option of going for either unlimited devices or users.
Pricing is managed by a different team, however, I know it's less expensive than CyberArk Privilege Access.
My experience with the pricing, setup cost, and licensing of BeyondTrust Password Safe is good because we have an asset-based license, not a user-based one, allowing us to add many clients with privilege access.
CyberArk is expensive compared to other products I know.
CyberArk is comparatively expensive compared to other PAM solutions, such as Delinea, especially during renewal.
CyberArk's SaaS solution is particularly expensive.
The price of Delinea Secret Server is okay, however, the solution is considered expensive when compared to others.
 

Valuable Features

BeyondTrust Password Safe provides session recording, password rotation, intuitive interface, streamlined management, and essential reporting for secure account oversight.
CyberArk Privileged Access Manager enhances security through integration, scalability, and comprehensive access controls, vital for modern cybersecurity.
Delinea Secret Server offers easy installation, secret management, password rotation, robust security features, user-friendly interface, and integration capabilities.
The flexibility of the licensing model is significantly better as it offers both unlimited users and unlimited devices, unlike Delinea, which is based on the number of users.
The features I find valuable in Password Safe include password retention and management, session privilege monitoring, live monitoring and recording, and the use of PS automation scripts for creating connections.
The most valuable features of BeyondTrust Password Safe, in my opinion, are its ease of use and robust security management.
CyberArk Privileged Access Manager helps ensure data privacy because we now know who is using which credentials and at what time.
It keeps a record of activities, allowing me to easily fetch screen recordings to detect any misuse and see who did what and what happened.
It can integrate with Splunk, SNMP, and other solutions and technologies.
Delinea Secret Server doesn't offer any exceptional features; most solutions have similar capabilities such as automatic password rotation, activity log monitoring, and activity log auditing.
 

Mindshare comparison

As of July 2025, in the Enterprise Password Managers category, the mindshare of BeyondTrust Password Safe is 3.5%, up from 3.0% compared to the previous year. The mindshare of CyberArk Privileged Access Manager is 8.0%, down from 8.9% compared to the previous year. The mindshare of Delinea Secret Server is 7.1%, up from 6.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Enterprise Password Managers
 

Featured Reviews

Ali Hatamleh - PeerSpot reviewer
Smart tooling streamlines account organization and access through advanced grouping features
The features I find valuable in Password Safe include password retention and management, session privilege monitoring, live monitoring and recording, and the use of PS automation scripts for creating connections. The smart tooling and smart group features are also important as, after finalizing discovery, they auto-collect accounts in the environment and organize them in Smart Groups for easy access.
Abdul Durrani - PeerSpot reviewer
Enables granular and secure access with just-in-time access and Zero Trust model
CyberArk provides a good amount of control over access types. However, as a future enhancement, having additional features for cross-platform integration would be beneficial. It would be good to have integrations with other tools and firewalls, such as Zscaler and CrowdStrike. Although I am not fully aware of recent updates, more cross-platform integration would be valuable. A SOC analyst would like to have centralized access in terms of information flowing in even for privileged access management. They would like to have control over everything instead of opening four to five tabs for different sorts of information. Cross-platform integration would help with that. Customers also want CyberArk's pricing to be better so that they can implement it further and have more licenses. Implementing a privileged access management solution can be challenging. It would be great if CyberArk could provide recommendations based on the compliance standards of an organization. It would help system admins ensure that all the required ports are closed and the systems are being managed properly. If any system is not being used anymore, any ports opened for that system need to be closed. Having such recommendations would be helpful.
Avinash Gopu. - PeerSpot reviewer
Effective for password rotation policies triggered by audit requirements, it helps maintain compliance standards and seamless integration with third-party tools
The "App to App" feature has been most impactful. It allows secure communication between applications without requiring direct user access, which is crucial for several applications. Additionally, working in the finance department, we are heavily focused on enhancing audit reporting and compliance. So, the GRC (Governance, Risk & Compliance) capabilities of Delinea Secret Server have also been crucial for us. We implemented a custom reporting system that can automatically send reports to auditors daily, weekly, or according to your organization's needs. We also upgraded the audit role within Secret Server, allowing auditors to access and analyze the reports directly. Additionally, Secret Server provides comprehensive logging capabilities. Auditors can see what data users access, their access levels, and their activities, including check-in and check-out times. Furthermore, Secret Server helped us manage privileged, elevated access, which we call "K2K." As the lead for this project, I could identify users with the highest access levels and implement specific policies to monitor their activity on servers.
report
Use our free recommendation engine to learn which Enterprise Password Managers solutions are best for your needs.
860,711 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Financial Services Firm
15%
Manufacturing Company
9%
Government
8%
Educational Organization
16%
Financial Services Firm
14%
Computer Software Company
14%
Manufacturing Company
7%
Educational Organization
17%
Computer Software Company
13%
Financial Services Firm
10%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What is your experience regarding pricing and costs for BeyondTrust Password Safe?
My experience with BeyondTrust Password Safe's pricing, setup cost, and licensing has been positive, primarily due to...
What needs improvement with BeyondTrust Password Safe?
While generally a strong product, BeyondTrust Password Safe has a few areas that could use some polish. From an admin...
What is your primary use case for BeyondTrust Password Safe?
The main purpose of BeyondTrust Password Safe is for Privileged Access Management, with session monitoring being very...
How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to m...
What do you like most about CyberArk Privileged Access Manager?
The most valuable features of the solution are control and analytics.
Looking for recommendations and a pros/cons template for software to detect insider threats
This is an inside-out --- outside-in --- inside-in question, as an insider can be an outsider as well. There is no sh...
What do you like most about Delinea Secret Server?
The privileged access management module is the most reliable feature.
What needs improvement with Delinea Secret Server?
The integration with the ticketing system ServiceNow is complex. That can be enabled with an API-based out-of-the-box...
 

Also Known As

BeyondTrust PowerBroker Password Safe
CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
Thycotic Secret Server, Delinea Password Reset Server
 

Overview

 

Sample Customers

Aera Energy LLC, Care New England, James Madison University
Rockwell Automation
Secure-24, University of San Diego, International Rescue Committee, San Francisco Ballet, Perkins Coie, University of San Diego, D.S.S. Limited, Turbo's Hoet, Eclipse Computing, Cathay Bank, Stellarise, J&R Consulting
Find out what your peers are saying about Microsoft, CyberArk, Amazon Web Services (AWS) and others in Enterprise Password Managers. Updated: June 2025.
860,711 professionals have used our research since 2012.