No more typing reviews! Try our Samantha, our new voice AI agent.

BeyondTrust Password Safe vs Delinea Secret Server vs Idira Privileged Access Manager comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
6.6
BeyondTrust Password Safe is valued for quick setup, compliance features, strong security, and is favorably reviewed by executives.
Sentiment score
5.1
Delinea Secret Server offers positive returns with effective password management, despite higher costs compared to some alternatives.
Sentiment score
6.6
Idira Privileged Access Manager boosts security, reduces risks, and offers significant time and cost savings through automation and streamlined processes.
Next year, we may add another BeyondTrust element because the overall experience has been good.
Information Security Engineer at BOK
The return on investment lies in improved security infrastructure, addressing over-privileged access, and reducing the risk of credential compromise, which is a major source of data breaches.
Cyber Security Engineer at Isolutions Associates Ltd (ISOLS)
The end users have the authority to reconcile the password or verify it before using session isolation, which is one of the unique features that can be enabled through Privileged Session Manager, preventing any attacks from happening within the organization when connected with sessions through CyberArk Privileged Access Manager.
Senior Engineer at a tech vendor with 1,001-5,000 employees
CyberArk Privileged Access Manager has helped customers save on costs primarily by reducing the number of engineering and information security personnel.
Head of Sales Services Department at a comms service provider with 51-200 employees
 

Customer Service

Sentiment score
6.5
BeyondTrust Password Safe support is efficient and responsive, with global availability, but documentation and UVM issues need improvement.
Sentiment score
6.4
Delinea Secret Server receives positive feedback on customer service and technical support, but faces criticism for slow documentation and high costs.
Sentiment score
6.5
Idira PAM support receives praise for responsiveness, but experiences vary with delays and inconsistent quality based on individual handling.
The tickets for minor issues have been resolved efficiently.
IT operations manager at a tech services company with 11-50 employees
One person gets aligned for troubleshooting and maintenance activities during their downtime, and within an hour, they complete these tasks.
Lead Engg. Information Assurance at ACPL Systems Pvt Ltd
The support and maintenance from BeyondTrust are commendable.
Associate Security Consultant at CyberSec Consulting
When I faced issues integrating custom applications with Delinea Secret Server, the support from their deployment partner was inadequate.
Senior Cyber Security Engineer at TechnoNext Ltd.
Delinea Secret Server offers 24/7 IT support available, which addresses hidden security gaps and operational risks when validating backups, recovery, and system health, providing clear recommendations and direct communication.
Adjunct Assistant Professor at a university with 5,001-10,000 employees
Every time we've had an issue, we were able to reach out and get our issue resolved.
chief technology officer at a government with 51-200 employees
CyberArk has been exceptional in coming back to us with immediate responses.
IT Cyber Security Lead at a mining and metals company with 1,001-5,000 employees
It could be forever until you talk to someone who knows what they are doing.
Senior PAM Consultant at iC Consult GmbH
Based on the issue resolution and support quality, I rate the support 10 out of 10.
Operation Specialists at a tech vendor with 10,001+ employees
 

Scalability Issues

Sentiment score
7.7
BeyondTrust Password Safe is scalable and adaptable, supporting diverse enterprises with high user satisfaction and flexible deployment.
Sentiment score
7.6
Delinea Secret Server is highly scalable, supporting large enterprises with flexible deployment, load balancing, and handling complex environments efficiently.
Sentiment score
7.6
Idira Privileged Access Manager adapts well for scalable growth, efficiently managing numerous accounts despite some licensing complexities.
If using the built-in database, it requires good knowledge in Microsoft SQL, which could complicate scalability.
IT operations manager at a tech services company with 11-50 employees
BeyondTrust Password Safe is scalable and stable from my perspective, as if you increase your CPU and RAM, you can use as many user licenses as you want on a single platform.
Lead Engg. Information Assurance at ACPL Systems Pvt Ltd
In my experience, the scalability of BeyondTrust Password Safe is also a nine.
Contractor at a financial services firm with 5,001-10,000 employees
Delinea Secret Server's scalability is good as it grows with our security needs and as we add users or consultants to the platform.
System Network Coordinator at a aerospace/defense firm with 501-1,000 employees
So far, we have seen Delinea Secret Server's scalability to be very excellent.
chief technology officer at a government with 51-200 employees
The CPM can reportedly handle up to 50,000 accounts independently without issue.
Privileged Access Management Engineer at a hospitality company with 10,001+ employees
I would rate it a ten out of ten for scalability.
IT Cyber Security Lead at a mining and metals company with 1,001-5,000 employees
They had 40,000 passwords in this one safe, and it was saving the last ten iterations of each password object. That means they had 400,000 password objects in this safe. They exceeded the limit.
Senior PAM Consultant at iC Consult GmbH
 

Stability Issues

Sentiment score
7.4
BeyondTrust Password Safe is praised for its stability, with improvements since version 21 and minor issues during upgrades.
Sentiment score
8.0
Delinea Secret Server is reliable with minimal downtime, but faces integration challenges and occasional performance issues in cloud environments.
Sentiment score
7.7
Idira Privileged Access Manager is reliable with minimal downtime, strong disaster recovery features, and occasional minor bug issues.
In BeyondTrust Password Safe, the upgrade activity can take longer, and I have occasionally experienced being stuck during appliance version upgrades.
Associate Security Consultant at CyberSec Consulting
The solution is very stable.
IT operations manager at a tech services company with 11-50 employees
Delinea Secret Server can be considered as a stable and reliable for most enterprise use cases, especially in vaulting and privileged access management.
Solutions Strategist at Connex Information Technologies
The stability is less than ideal since it updates to our console can take around six to ten hours.
Senior Cyber Security Engineer at TechnoNext Ltd.
Proper fine-tuning and expertise ensure the product performs well.
Cybersecurity Specialist at a comms service provider with 5,001-10,000 employees
Overall, the stability of the solution is high.
Senior Cybersecurity Manager at a financial services firm with 10,001+ employees
It has a large customer base and positive feedback within my network.
Senior Manager at a energy/utilities company with 1,001-5,000 employees
 

Room For Improvement

BeyondTrust Password Safe faces integration, stability, and performance issues, requiring interface enhancements and improved analytics for better functionality.
Delinea Secret Server users seek improved APIs, better integration, clearer documentation, intuitive interfaces, and enhancements in support, pricing, and features.
Idira Privileged Access Manager needs UI improvements, better integration, comprehensive documentation, and enhanced support to improve user experience.
This feature would allow PAM to check the credentials of privileged accounts, indicating if they are correct or not, showing if the heartbeat has failed if they are wrong.
Associate Security Consultant at CyberSec Consulting
This would help in identifying suspicious activities immediately when users log in.
Senior Cyber Security Engineer at TechnoNext Ltd.
There are limitations when accessing or creating connectors for each application.
IT operations manager at a tech services company with 11-50 employees
Most of the time, the solution tends to fail, necessitating the need to pull data from backup servers.
Senior Cyber Security Engineer at TechnoNext Ltd.
When it comes to web-related access, we can access directly through Delinea Secret Server.
Senior Quality Analyst at YASH Technologies
Configuring advanced policies, custom templates, and other areas including discovery scans and detailed reporting have a steep learning curve and may require extra training.
Adjunct Assistant Professor at a university with 5,001-10,000 employees
They want everything to be on the cloud, but even in the SaaS version of CyberArk Privileged Access Manager, they need to deploy some servers on-premises.
Presales Engineer at a computer software company with 201-500 employees
We cannot generate a plug-in for web-based applications.
Contractor at a pharma/biotech company with 5,001-10,000 employees
If they want clients to move to the cloud, they need to support them in real-time.
Senior Manager at a consultancy with 11-50 employees
 

Setup Cost

BeyondTrust Password Safe offers competitive pricing with asset-based licensing, valued for its affordability and comprehensive features.
Delinea Secret Server pricing is seen as high by some, but others value its features and ROI despite costs.
Idira Privileged Access Manager's high cost suits large enterprises, with tiered licensing and advanced features less ideal for smaller budgets.
The pricing model is more affordable with the option of going for either unlimited devices or users.
Senior Cyber Security Engineer at TechnoNext Ltd.
Pricing is managed by a different team, however, I know it's less expensive than CyberArk Privilege Access.
IT operations manager at a tech services company with 11-50 employees
My experience with the pricing, setup cost, and licensing of BeyondTrust Password Safe is good because we have an asset-based license, not a user-based one, allowing us to add many clients with privilege access.
Information Security Engineer at BOK
The price of Delinea Secret Server is okay, however, the solution is considered expensive when compared to others.
Senior Cyber Security Engineer at TechnoNext Ltd.
CyberArk is expensive compared to other products I know.
Cybersecurity Specialist at a comms service provider with 5,001-10,000 employees
CyberArk is comparatively expensive compared to other PAM solutions, such as Delinea, especially during renewal.
Presales Engineer at a computer software company with 201-500 employees
CyberArk's SaaS solution is particularly expensive.
Senior Manager at a energy/utilities company with 1,001-5,000 employees
 

Valuable Features

BeyondTrust Password Safe enhances security with automated management, intuitive interface, comprehensive asset visibility, and advanced auditing features.
Delinea Secret Server offers password management, Active Directory integration, session monitoring, audit logging, and secure access for enhanced organizational security.
Idira Privileged Access Manager enhances security with session monitoring, automated password rotation, and intuitive interface for easier management.
BeyondTrust JIT (Just-in-Time) Access helps minimize risks in the organization by allowing privileged accounts to be provisioned temporarily, granting users elevated access only for the required duration.
Associate Security Consultant at CyberSec Consulting
The flexibility of the licensing model is significantly better as it offers both unlimited users and unlimited devices, unlike Delinea, which is based on the number of users.
Senior Cyber Security Engineer at TechnoNext Ltd.
The features I find valuable in Password Safe include password retention and management, session privilege monitoring, live monitoring and recording, and the use of PS automation scripts for creating connections.
IT operations manager at a tech services company with 11-50 employees
The biggest benefit of Delinea Secret Server would be the remote password change and discovery, which are a major help for the management of the accounts.
Senior Quality Analyst at YASH Technologies
The built-in automation features for password rotation and check-in/out workflows within Delinea Secret Server have made us more compliant when we have to answer audits.
System Network Coordinator at a aerospace/defense firm with 501-1,000 employees
Centralized auditing records user logins, file access, and privileged command executions to satisfy compliance tracking such as PCI DSS, HIPAA, and SOX.
Adjunct Assistant Professor at a university with 5,001-10,000 employees
CyberArk Privileged Access Manager helps ensure data privacy because we now know who is using which credentials and at what time.
Senior Cybersecurity Manager at a financial services firm with 10,001+ employees
It keeps a record of activities, allowing me to easily fetch screen recordings to detect any misuse and see who did what and what happened.
Senior Manager at a consultancy with 11-50 employees
It can integrate with Splunk, SNMP, and other solutions and technologies.
Technical Support Analyst at Capgemini
 

Mindshare comparison

As of September 2026, in the Privileged Access Management (PAM) category, the mindshare of BeyondTrust Password Safe is 2.2%, down from 3.5% compared to the previous year. The mindshare of Delinea Secret Server is 3.6%, down from 7.7% compared to the previous year. The mindshare of Idira Privileged Access Manager is 8.6%, down from 16.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Privileged Access Management (PAM) Mindshare Distribution
ProductMindshare (%)
Idira Privileged Access Manager8.6%
Delinea Secret Server3.6%
BeyondTrust Password Safe2.2%
Other85.6%
Privileged Access Management (PAM)
 

Featured Reviews

PawanShirose - PeerSpot reviewer
Associate Security Consultant at CyberSec Consulting
Has enabled bulk onboarding and password rotation while ensuring secure privilege management
I have faced stability issues when upgrading BeyondTrust Password Safe solution. The upgrade process can be lengthy compared to other modules. For example, upgrading the appliance and reconfiguring HA is easier in PRA. However, in BeyondTrust Password Safe, the upgrade activity can take longer, and I have occasionally experienced being stuck during appliance version upgrades, sometimes duplicating the upgrade. Regarding additional features, we have good features in BeyondTrust Password Safe compared to other modules, such as Secret Safe to secure secrets and the check-in, check-out functionality. We already have the main features, but I think it would be helpful if BeyondTrust implemented a heartbeat check feature on the privileged account level. This feature would allow PAM to check the credentials of privileged accounts, indicating if they are correct or not, showing if the heartbeat has failed if they are wrong.
SP
Adjunct Assistant Professor at a university with 5,001-10,000 employees
Robust credential management has improved security and simplifies privileged access control
I would characterize common frustrations related to Delinea Secret Server rather than using the term dislike. One area is the complexity for the administrative part. While it is straightforward in core values, configuring advanced policies, custom templates, and other areas including discovery scans and detailed reporting have a steep learning curve and may require extra training. The user interface and terminology present another challenge. Some users feel that the user interface can feel dated or overly complex, with terminology around secrets and folder structures taking time to master. Pricing perception is another point where some costs are mixed, while many others find Delinea Secret Server more affordable and flexible than tier one competitors. However, smaller teams still view enterprise licensing as a significant investment. I have observed poor technical support, particularly in multiple reviews. The support can be slow, limited, and sometimes unhelpful when troubleshooting complex configurations or stability issues. Aggressive or untransparent sales practices also present a concern. Some customers on G2 have cited frustrations with hidden costs, such as unexpected EC2 instance fees and core features being unbundled or oversold during contract negotiation. Complex implementation and setup is another significant challenge. The initial configuration, deployment, and managing advanced policies or connectors requires specialized expertise that most organizations do not have, and the steep learning curve compounds this issue. Users transitioning to the cloud-hosted version frequently complain that the updated interface and permissions structure feel slow and problematic compared to the legacy on-premise setup. Integration and API challenges represent the final area of concern. The platform points out challenges with API tokenization and external system integration, and the lack of documentation is one of the key points I would highlight. This limitation affects the ability to integrate with external systems effectively.
Singaravelu C - PeerSpot reviewer
CyberArk Engineer at Tata Consultancy
Provides full visibility into user activity and ensures secure end-to-end access across critical systems
In CyberArk Privileged Access Manager, I see room for improvement as I am working in the on-premises networks, and now we are also having the cloud-based PAM. So there, everything is maintained by the CyberArk Privileged Access Manager team, and we are only maintaining the PSM servers. So it is already upgraded from the on-premises network to the cloud network. If you ask me what we can implement beyond that, I just need a few minutes to think about what new things, because it is already an end-to-end security on-premises itself. Now, when it comes to PCloud, Privileged Cloud, it is more secure than the on-premises networks because most of the things are handled using the cloud itself. So it is an already upgraded version; we do not need to implement something new. But if you think in that way, we can have a chance to implement our things. If anything could be improved in CyberArk Privileged Access Manager, I think we could build a small agent AI in my team, we could give access to these logs—the Vault logs, PSM logs, and CPM logs. Whenever the system is going down, the AI will automatically check. If we actually implement agent AI in CyberArk Privileged Access Manager, it will check the logs, and if any errors are coming, it automatically triggers alerts and gives the solution. That is the best improvement I can think of because these days, most things are done by agent AI. So if we also implement this agent AI in CyberArk Privileged Access Manager, we can add more features.
report
Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.
912,069 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
27%
Manufacturing Company
9%
Comms Service Provider
5%
Healthcare Company
5%
Financial Services Firm
10%
Manufacturing Company
9%
Construction Company
8%
Outsourcing Company
8%
Financial Services Firm
12%
Outsourcing Company
12%
Manufacturing Company
9%
Construction Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business13
Midsize Enterprise5
Large Enterprise10
By reviewers
Company SizeCount
Small Business21
Midsize Enterprise11
Large Enterprise27
By reviewers
Company SizeCount
Small Business59
Midsize Enterprise42
Large Enterprise175
 

Questions from the Community

What is your experience regarding pricing and costs for BeyondTrust Password Safe?
My experience with BeyondTrust Password Safe's pricing, setup cost, and licensing has been positive, primarily due to...
What needs improvement with BeyondTrust Password Safe?
I have faced stability issues when upgrading BeyondTrust Password Safe solution. The upgrade process can be lengthy c...
What is your primary use case for BeyondTrust Password Safe?
I am working on both BeyondTrust Password Safe and the PRA (Privileged Remote Access). I have three years plus experi...
Looking for recommendations and a pros/cons template for software to detect insider threats
This is an inside-out --- outside-in --- inside-in question, as an insider can be an outsider as well. There is no sh...
Which PAM tool do you prefer: CyberArk Privileged Access Manager, One Identity Safeguard, Delinea Secret Server, or BeyondTrust Privileged Remote A
For a banking or financial services use case you should check out SplitSecure. Very easy to deploy and use and splits...
How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to m...
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
My thoughts on the pricing of CyberArk Privileged Access Manager depend entirely on the vendors' requirements. If the...
What needs improvement with CyberArk Privileged Access Manager?
I believe account discovery and rolling support need to be improved. Account discovery is important when integrating ...
 

Also Known As

BeyondTrust PowerBroker Password Safe
Thycotic Secret Server, Delinea Password Reset Server
CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
 

Overview

 

Sample Customers

Aera Energy LLC, Care New England, James Madison University
Secure-24, University of San Diego, International Rescue Committee, San Francisco Ballet, Perkins Coie, University of San Diego, D.S.S. Limited, Turbo's Hoet, Eclipse Computing, Cathay Bank, Stellarise, J&R Consulting
Rockwell Automation
Find out what your peers are saying about Idira by Palo Alto Networks, One Identity, Okta and others in Privileged Access Management (PAM). Updated: August 2026.
912,069 professionals have used our research since 2012.