Delinea Secret Server Reviews

Delinea Secret Server is robust, and the solution provides value-added security for sensitive credentials. Automatic rotation is one of the key features I appreciate for this particular functionality. Access control is also one of the key features, particularly role-based access control and checkout workflows, including temporary access logs and detailed session tracking, which simplifies the reporting process. I particularly appreciate the deployment speed, as it is generally faster and less cumbersome to deploy compared to heavier legacy systems such as CyberArk.

Built-in automation features, such as password rotation and check-in, check-out workflows, impact operational efficiency and compliance posture significantly. The core built-in capabilities include Active Directory integration that allows joining Unix, Linux, or Windows systems directly into Active Directory without needing complex third-party LDAP synchronization tools. Privilege elevation is another feature that highlights built-in commands, granting specific users or groups temporary administrative rights without sharing a root password. Centralized auditing records user logins, file access, and privileged command executions to satisfy compliance tracking such as PCI DSS, HIPAA, and SOX. RBAC, the granular role-based access controls, is provided to show individuals only the specific server and command access required for their job duties.

I would characterize common frustrations related to Delinea Secret Server rather than using the term dislike. One area is the complexity for the administrative part. While it is straightforward in core values, configuring advanced policies, custom templates, and other areas including discovery scans and detailed reporting have a steep learning curve and may require extra training.

The user interface and terminology present another challenge. Some users feel that the user interface can feel dated or overly complex, with terminology around secrets and folder structures taking time to master. Pricing perception is another point where some costs are mixed, while many others find Delinea Secret Server more affordable and flexible than tier one competitors. However, smaller teams still view enterprise licensing as a significant investment.

I have observed poor technical support, particularly in multiple reviews. The support can be slow, limited, and sometimes unhelpful when troubleshooting complex configurations or stability issues. Aggressive or untransparent sales practices also present a concern. Some customers on G2 have cited frustrations with hidden costs, such as unexpected EC2 instance fees and core features being unbundled or oversold during contract negotiation.

Complex implementation and setup is another significant challenge. The initial configuration, deployment, and managing advanced policies or connectors requires specialized expertise that most organizations do not have, and the steep learning curve compounds this issue. Users transitioning to the cloud-hosted version frequently complain that the updated interface and permissions structure feel slow and problematic compared to the legacy on-premise setup.

Integration and API challenges represent the final area of concern. The platform points out challenges with API tokenization and external system integration, and the lack of documentation is one of the key points I would highlight. This limitation affects the ability to integrate with external systems effectively.

I have been using Delinea Secret Server for one to two years.

Delinea Secret Server offers 24/7 IT support available, which addresses hidden security gaps and operational risks when validating backups, recovery, and system health, providing clear recommendations and direct communication. They also provide IT free consultations or services and cover several areas including IT security and server management, cybersecurity, and cloud software. They provide 24/7 on-site and remote technical support, and they also offer email and phone technical support globally.

They have recently started third-party partnerships, such as server Omega network integrations. From my experience, they provide technical support coverage and documentation, though I did not have much time to explore them thoroughly. They allow customers to access upgrades and new releases, revisiting new features and providing feedback.

Regarding technical support, the contact process requires gathering several pieces of information before opening a case, including contact and account information, an email account already associated, company name, technical contact name, phone number, and product name. Relevant details should also include technical content. For problem descriptions, I include a concise explanation, full text or error messages, what users were doing when the problem occurred, and other specifics such as timestamps, the number of users, and various IDs. It is crucial to highlight product and environmental versions, SQL high availability or replication configurations, and server specifications, including CPU and RAM. Issues often relate to authentication, licensing, or environmental complexities.

The first step is to gather the mentioned information and then acquire the mandatory support PIN from the Delinea Secret Server main page. If using the ticketing system for support, leaving the browser tab open while returning to a different one is recommended. In the case of Secret Server Cloud, logging on to the cloud manager dashboard, clicking to generate technical support PIN, and recording it is necessary. The support method is then selected, going through Delinea customer support via phone, email, or ticketing. Phone support is delivered worldwide, and for email, the PIN must be provided.

When discussing the initial deployment of Delinea Secret Server, the first step is to select the type of deployment. Delinea Secret Server on-premise is installed locally on a domain-joined Windows virtual machine using Microsoft IIS or Microsoft SQL database, and it includes automatic installation and advanced manual installation. Secret Server Cloud (SSC) is a multi-tenant platform managed by Delinea, with one portal requiring a lightweight distributed engine for local Active Directory and network communication. The first step for initial deployment is to choose the deployment type, whether Secret Server on-premises (SSOP) or Secret Server Cloud (SSC).

The second step is to prepare the prerequisites, including the server and the OS, whether it is Windows Server 2026 or newer Microsoft IIS. Microsoft SQL Server with an assigned account processing and permissions is also required. The third prerequisite is messaging such as RabbitMQ. The third step is to run setup and configuration. For run setup, I generally run a setup.exe file as an administrator on the host server or provision that cloud tenant via a portal.

The API security note is one of the key points to consider. The latest version 12.1 or later has API authentication enabled by default, which blocks direct script and interactive user username and password calls until reconfiguration. For run setup and configuration, I connect directory and secret by setting up Active Directory sync and configuring a backup called the break the glass admin account and running initial heartbeat test to configure remote password changing (RPC) functionality.

In summary, the first step for initial deployment is to choose the deployment type, whether SSC or SSOP. The second step is to prepare prerequisites such as the server and OS. The third step is to run setup and configuration, executing the setup.exe file means running the installer, then addressing the API with modern version 12.1 or later, and finally connecting the directory and secret components.

Alternative solutions to Delinea Secret Server include PAM security solutions. Secure-done is one of the PAM enterprise software options. Other key alternatives include CyberArk Privilege Access Manager, Keeper PAM, Manage Engine PAM 360, and PAM 360.

I have integrated components of Delinea Secret Server, such as local IIS processing. This runs the scan directly onto the web server hosting Delinea Secret Server instead of using a remote engine, though it is generally not recommended for restricted or segmented networks due to port and firewall limitations. Another option is deploying a distributed engine, which is a recommended alternative that scales out and groups into specific sites to handle network isolated segments, balance scanning loads, or perform local password changing and heartbeating.

I also use a custom PowerShell scanner, which is a script written inside Delinea Secret Server and serves as an extensible discovery source for querying non-standard systems or third-party environments not supported by the out-of-the-box scanner. Third-party integration uses external asset discovery platforms such as BMC Helix to map or sync assets directly with Delinea Secret Server environment instead of relying strictly on the native engine. Additionally, Delinea provides a free privilege account discovery tool that uses a standard standalone utility for local network scanning and additional account visibility before importing findings into Delinea Secret Server.

Regarding comprehensive discovery capabilities, Delinea Secret Server is designed to automatically scan the IT environment to find unmanaged privileged accounts, servers, and hidden dependencies. Core capabilities include automated network scanning that searches Active Directory, local Windows systems, Unix, Linux hosts, and VMs within ESX or ESXi environments. Cloud and multi-cloud visibility is also significant, as it tracks access and identities across AWS, Google Cloud Platform (GCP), and Microsoft Entra ID. Dependency mapping identifies linked Windows services, scheduled tasks, and IIS application pools to prevent service outages during password rotations. Extensible discovery is achievable using custom PowerShell scripts to build specialized scans for unique or non-standard infrastructure. Privilege control for the server automatically detects server premises to enforce centralized MFA, session recording, and access policies.

Regarding centralized management of all privileged accounts and credentials within Delinea Secret Server, I do not believe it contributes to reducing blind spots. I would rate this review an eight out of ten overall.

My main use cases for Delinea Secret Server revolve around implementing it for our Privileged Access Management, specifically for our privileged access accounts, privileged accounts such as service accounts, admin accounts, and all these things.

The features of Delinea Secret Server that I find most useful and effective include using the discovery feature for discovering many types of accounts in our organization which are unmanaged, making the items manageable throughout the organization.

I am using the access auditing feature, and I am also making use of storing in the shared folder. The access auditing feature helps me in terms of compliance; if there are any issues related to who accessed a particular account a long time ago for maintaining compliance, I use the access audit tool as well.

Role-based access is beneficial in Secret Server as role-based access management is critical in security systems. We are implementing the zero-trust model as well as least privilege access, and what happens is, whenever there is least privileged access, there is less proneness to the theft of credentials. Nobody has much opportunity to steal the credentials or hack the systems with the help of credentials. I make use of role-based access management in Delinea Secret Server for holding my credentials in a safe and secure way.

The biggest benefit of Delinea Secret Server would be the remote password change and discovery, which are a major help for the management of the accounts.

I have not faced any significant issues with Delinea Secret Server during this period of time, but we had a problem with a web password filler, which is a template used for accessing a web URL using Secret Server, where we faced some session management issues since session management is not applicable for the web password filler. This should be the improvement that we require from Delinea Secret Server.

The session management is not applicable in this case; we can manage the session and have session management inside the remote systems within the organization. However, when it comes to web-related access, we can access directly through Delinea Secret Server. We can access any URL through Secret Server, but the problem is that the session cannot be managed on the web URL due to it having multiple systems.

I do not have any other recommendations regarding the improvement of Delinea Secret Server at this time.

I have been working with Delinea Secret Server for four years.

We normally record the sessions and do not face any drawbacks; we do not have any issues regarding stability.

Delinea Secret Server is scalable and easy to scale.

I have contacted Delinea support for an issue where Secret Server logs off when the IP address is not secure, and I received a great response from the service. I would rate the support a 10.

Positive

I have not worked with any other tools on PAM before Delinea or simultaneously.

My company has not seen ROI or return on investment with Delinea Secret Server, but it is a good tool that we can use to manage our systems.

I think the price for Secret Server is reasonable.

We manage the passwords through remote password change, which is the automatic password change, and we are very familiar with this remote password change for applying it to many of the accounts in our organization. It has helped us in maintaining the overall security throughout the organization.

We make use of a 90-day report for users who have not logged in for 90 days in order to manage the accounts and save our licenses, and with that, we recheck the licenses. If they did not access for 90 days, we revoke their access from Secret Server; we manage accounts through this report as well.

I can give Secret Server's password management feature an eight out of 10 in supporting security protocols.

I recommend that those considering Delinea Secret Server go with it because for companies with moderate strength, between 5,000 and 10,000 employees, it is suitable for small enterprises. I have worked for small enterprises, so I can say that you can definitely go with Delinea Secret Server.

Overall, I would rate Delinea Secret Server an 8 out of 10; it's a good product that we can use.

Public Cloud

Microsoft Azure

My main use case for Delinea Secret Server is that we needed a PAM. A quick specific example of how I use Delinea Secret Server as a PAM in my daily work is that we automate the password change of administrative accounts. We also use it as a vault for all our secrets.

In my opinion, the best feature Delinea Secret Server offers is the ability to audit administrative accounts. The auditing feature helps us identify when administrative access is being used.

Delinea Secret Server has positively impacted my organization as it helps us with our security and hardening. It helps with security and hardening by giving us the ability to go granular with the administrative accesses that we give. The built-in automation features for password rotation and check-in/out workflows within Delinea Secret Server have made us more compliant when we have to answer audits.

I leverage the discovery and session monitoring capabilities of Delinea Secret Server every day to gain actionable insights for risk reduction or compliance reporting. The centralized management of all privileged account credentials within Delinea Secret Server helps us identify accounts that have administrative access, thus reducing blind spots and administrative overhead in our environment.

Delinea Secret Server can be improved as we find some bugs and it sometimes takes a little bit of time for them to get resolved when we go to support. Some tickets take longer to resolve, so we have experienced some issues with support.

I have been using Delinea Secret Server for three years.

Delinea Secret Server is stable.

Delinea Secret Server's scalability is good as it grows with our security needs and as we add users or consultants to the platform.

We did not use a previous solution.

My experience with pricing, setup cost, and licensing went well.

Before choosing Delinea Secret Server, we evaluated BeyondTrust.

I would rate Delinea Secret Server overall an eight on a scale of one to ten. I gave it an eight because no software is a ten; there are always bugs. I would not like to add anything else about the features. My overall review rating for this product is eight.

Hybrid Cloud

Other

With the rise of remote work, Privileged Access Management (PAM) solutions have become essential for organizations to effectively control and secure access to critical systems and data.
PAM solutions help ensure that employees working outside the corporate network can only access resources they are authorized to use, reducing the risk of credential theft, unauthorized access, and potential system intrusions. By enforcing granular access controls, session monitoring, and real-time threat detection, PAM plays a vital role in safeguarding sensitive environments against evolving cyber threats in distributed work settings.

Credentials Vault & Password Manager - Centralized, encrypted storage and automated password management reduce human error and improve security hygiene.

Discovery & Inventory - Automatically identifying privileged accounts helps organizations maintain visibility and control over access points.

Access Control & MFA - These features ensure only authorized users can access sensitive credentials, reducing insider threats and external breaches.

Auditing, Reporting & Compliance - Enables forensic analysis, compliance with regulations, and visibility into privileged activity.

Certain features like the Remote Access Service (RAS) Engine and syncing with directory services may still have bugs or limitations, especially in newer platform versions.

I have been dealing with Delinea Secret Server for more than two years.

Delinea Secret Server can be considered as a stable and reliable for most enterprise use cases, especially in vaulting and privileged access management. However, like any complex PAM solution, it has occasional performance hiccups and integration challenges that should be monitored, especially in cloud environments.

Responsive, knowledgeable, and professional

Positive

Private Cloud

Microsoft Azure

I am using Delinea Secret Server for privileged access management.

We use the automated password rotation feature in Delinea Secret Server.

The best advantages of Delinea Secret Server are that it is easy to set up, it is integrated with the Windows system, and it has a customize feature for the scripting feature.

The customization and scripting features are good, and it offers web-based access.

It is helpful; we use it to rotate the password on a schedule base, and after a user checks out, it triggers another RPC remote change.

Session monitoring capabilities help to improve compliance and reduce security incidents.

The preset report in Delinea Secret Server would be sufficient for compliance and governance.

The benefits and positive impacts I have seen from Delinea Secret Server on my company include having centralized secret management, log monitoring, an audit log on the command execution on the system, and it has programmable API customization.

One pain point is that it requires Windows Server to run Secret Server. I am not sure if it has the container version already.

It should be more lightweight and containerized because nowadays when we deploy on the cloud, it should be containerized and able to run native support on Linux, on Kubernetes.

The main concern is that Delinea Secret Server is not suitable for modern technology.

I have used Delinea Secret Server at my past company for almost 10 years.

Delinea Secret Server is stable.

Because it is a Windows system on a VM base, Delinea Secret Server is suitable to scale up, but for scaling out, it is still a manual process to scale the system.

Technical support from Delinea is good. I used the professional service at the beginning, and so far, there have been no more requests to the support.

Positive

The main difference between Delinea and CyberArk is pricing; Delinea is cheaper, but I also see some technical differences. The technical difference is that it is an easier deployment—CyberArk requires a lot of components to set up. It is traditional technology.

I see ROI in Delinea Secret Server because it saves time for managing this password, and also the cost is very flexible. It has an admin user and a normal business user that can use this solution.

I am not sure how to calculate the ROI, but I think for this, I bought it for about three years, and it is only 10% of another platform. If I were to go for CyberArk, it would cost a lot more.

Delinea Secret Server has a reasonable price; it is cheaper than another product CyberArk, and I think that Secret Server is affordable. It is affordable and has advanced features compared to another top-tier product.

Secret Server is acceptable, but now it should be something more modern that is suitable for a cloud-native environment.

On a scale of 1-10, I rate Delinea Secret Server a 9.

On-premises

Other

Our customers who require an active-active mode, rather than active-passive, tend to go for Delinea Secret Server.

After working on several PAM solutions, I've noticed that Delinea Secret Server doesn't offer any exceptional features; most solutions have similar capabilities such as automatic password rotation, activity log monitoring, and activity log auditing.

Whenever an update is applied to Secret Server, it requires downtime. Most of the time, the solution tends to fail, necessitating the need to pull data from backup servers. This is quite annoying and is an area where improvements are needed.

I have been using Delinea Secret Server for about one year.

The stability is less than ideal since it updates to our console can take around six to ten hours. As a development partner, this is frustrating and leads me to recommend other solutions like BeyondTrust that don't require as much time for updates.

I would rate the scalability of Delinea Secret Server as seven on a scale of one to ten.

I would rate customer service and support from Delinea at four out of ten. When I faced issues integrating custom applications with Delinea Secret Server, the support from their deployment partner was inadequate. They were expensive and didn't guide me properly to resolve the issue.

Neutral

The initial setup of Delinea Secret Server is straightforward and easy for development purposes.

We have not seen a return on investment since this is a more expensive solution compared to others.

The price of Delinea Secret Server is okay, however, the solution is considered expensive when compared to others.

I generally recommend other solutions like BeyondTrust.

Overall, I would rate Delinea Secret Server as six out of ten. As a senior cybersecurity engineer, I prioritize solutions that don't require excessive update times and provide reliable stability.

On-premises

We've used it for auto-discovery, and password management on mainframes, networks, applications, and firewalls. We've also used it for password rotation.

We use it for credential management, including rotation for both human and non-human accounts, as well as session monitoring.

Delinea Secret Server supports our remote access needs.

For remote access needs, we have implemented MFA (Multi-Factor Authentication) and SSO (Single Sign-On) across various applications. We use third-party tools like Ping and SailPoint to integrate with the PAM tools.

Moreover, password rotation has been effective in our environment. We weren't rotating many application passwords before, but an audit from the OCC (Office of the Comptroller of the Currency) triggered a change. 

We now rotate all non-human accounts except for Active Directory and local accounts. It's a best practice, so we set a 30-day rotation for some applications like mainframes and applications that support direct password changes. For others, we set it to 8 hours.

Initially, the application teams struggled to adapt to the PAM culture. It's an organizational-wide change, so it took some time. We guided the application owners and platform teams on setting password rotation policies and initial password guidelines. 

This helped minimize the impact of breaches, especially in Linux and Windows environments. We also have continuous monitoring with Splunk. We integrated the Delinea Secret Server logs into Splunk for centralized log management.

The "App to App" feature has been most impactful. It allows secure communication between applications without requiring direct user access, which is crucial for several applications. 

Additionally, working in the finance department, we are heavily focused on enhancing audit reporting and compliance. So, the GRC (Governance, Risk & Compliance) capabilities of Delinea Secret Server have also been crucial for us.

We implemented a custom reporting system that can automatically send reports to auditors daily, weekly, or according to your organization's needs. We also upgraded the audit role within Secret Server, allowing auditors to access and analyze the reports directly. 

Additionally, Secret Server provides comprehensive logging capabilities. Auditors can see what data users access, their access levels, and their activities, including check-in and check-out times.

Furthermore, Secret Server helped us manage privileged, elevated access, which we call "K2K." As the lead for this project, I could identify users with the highest access levels and implement specific policies to monitor their activity on servers.

In many PAM tools, when users request a password checkout, they need to provide justification. However, in my experience across four organizations, nobody actually reads the justifications. Users can simply type anything and get the password. This becomes a risk and compliance issue. 

There needs to be continuous improvement in this area, focusing on problem identification and mitigation strategies.

I've been working with Thycotic Secret Server since 2018. My experience with Delinea Secret Server specifically started around the end of 2022, which is when our organization purchased it.

I would rate the stability a nine out of ten. It is a stable product. 

I would rate the scalability an eight out of ten. We have 300 applications. And they're spread across various platforms, including many high-risk and complex ones. Over 200 of them are SOX applications, which require high-security compliance.

We have close to 10,000 users currently using the product. We do plan to increase the further usage and shift to the cloud. 

Delinea's technical support was excellent. They responded to our tickets on the same day and provided access to their portal for direct communication. Even after our support contract ended, they responded within three days. Compared to other PAM solutions, I'd rate them a nine out of ten.

I have more experience with IAM and PAM. I've worked with products like SailPoint, and Ping Identity. In the PAM space, I've used CyberArk, Broadcom, Accellion, and Thycotic Secret Server (now Delinea Secret Server).

One major difference is that CyberArk has several separate modules, while Delinea offers a more unified experience with integrated features like auto-discovery for secret keys and API keys. 

CyberArk requires additional integration with other applications to achieve these functionalities. Similarly, based on my knowledge, other tools may also require integrations. 

Since Delinea (formerly Thycotic) is a relatively newer solution, it comes with pre-built components and focuses on continuous improvement. In contrast, older vendors might lack some built-in features. 

Additionally, Delinea allows us to create custom rules and manage all access (Unix, Linux, Windows) for password management within the same platform. However, with CyberArk, managing passwords might require opening additional ports.

Another key difference is privileged account discovery management. In Delinea, we can directly access the admin console to discover accounts. With CyberArk, this might involve integrating with additional tools. These are just some of the differences, and there might be others.

I would rate my experience with the initial setup an eight out of ten. The Delinea team was very helpful.

The initial deployment in the test phase took around three to four weeks.

For ongoing maintenance, after all applications were migrated to Delinea, only five people are needed to support it. That's for around 300 applications.

So, we have a team of five people for maintenance that includes one architect, one lead, and three analysts.

We took assistance from the Delinea vendors.

We already had a CentOS environment, which offered us a discount when migrating to Delinea (formerly Thycotic). Most accounts were simply migrated from one system to another. 

Only accounts outside the platform needed direct migration to Delinea, which took some time. We prioritized SOX applications due to their higher-risk compliance requirements. 

Overall, the process wasn't too difficult, as we had vendor documentation to guide us.

The migration process begins by having a server dedicated to storing all the data. From there, we access the configuration administrative menu. If the data contains secrets, we need to decrypt them and use specific APIs to import them into Delinea Secret Server. 

We use a master account, also known as the "Server account," to facilitate this. Then, we set up folders within Delinea Secret Server, which they might call "parts" or something similar. There might be some naming differences, but the overall process is the same. 

Finally, we configure the Delinea Secret Server, and provide account information, and users can then log in and directly feed data into it.

The vendor primarily assisted us. We did have around ten people internally who helped with the process.

There were two architects involved. The remaining group consisted of one lead, two lead security analysts, and several security analysts.

If you are planning it to use for more than five years, then it is worth it. 

I would rate the pricing a six out of ten, with ten being a high price. 

There are additional costs if you want to move to cloud. 

We previously used Centrify, which is now part of Delinea. We conducted technology assessments and spoke with various vendors like CyberArk, BeyondTrust, and One Identity. Ultimately, our management decided to go with Delinea for two main reasons.

Firstly, budget played a significant role. Secondly, from a technical standpoint, since we were already using Centrify, Delinea offered a clear and step-by-step migration process with ongoing support. This impressed our leadership team.

Overall, I would rate the solution an eight out of ten. 

Delinea offers several deployment options beyond the cloud-based solution. They have CAM and PaaS. 

CAM focuses on Identity and Access Management (IAM) features like Active Directory Bridging. This allows users, for example, a Linux or Unix administrator with access to 10,000 servers, to access all servers using a single ID and password. This is achieved by Centrify, one of the products under the Delinea umbrella. Other PAM solutions might not have this functionality. 

Additionally, Delinea offers "PAMSight" for PaaS, which integrates with Delinea Secret Server. So, if an organization aims for a combined solution, Delinea can potentially save them money.

However, I would recommend Delinea Secret Server for mid to large-scale organizations, not necessarily for smaller ones. Organizations with less than 5,000 employees likely wouldn't benefit from extensive single sign-on features. They might be better served by simpler IAM tools like Ping or SailPoint.

My clients, who are mostly North American clients like SpartanNash and CFI, use Delinea Secret Server for maintaining privileged passwords for their service accounts. Delinea also includes privileged session monitoring and keystroke logging, which is similar to CyberArk.

People are moving towards Delinea Secret Server to store their passwords due to its cheaper cost compared to CyberArk. It provides session monitoring and keystroke logging, which help in maintaining security.

Delinea Secret Server offers features similar to CyberArk and BeyondTrust, such as maintaining and securing privileged passwords and session monitoring. The cost-effectiveness of the solution is a significant benefit.

Delinea Secret Server can improve in areas like statistics and notifications, and risk scoring, especially for highly privileged accounts where financial transactions occur. Additionally, complex management features similar to BeyondTrust's PMUL for Unix and Linux might be an area for improvement.

I have been working with Delinea Secret Server for more than two years.

Delinea Secret Server is very stable. I would rate it a ten out of ten for stability.

I rate the scalability of Delinea Secret Server at 9.7 out of ten. It's suitable for large enterprises that understand the importance of privileged access management.

While Delinea technical support is quite good, I am giving them a 9.7 instead of a ten due to the time it takes for processes to complete.

Positive

I have worked with CyberArk and BeyondTrust before. CyberArk remains my preferred solution due to its functionality.

The initial setup process for Delinea Secret Server is straightforward and not complex.

Delinea Secret Server is medium-priced. I would rate it at 60%, or three out of five.

CyberArk and BeyondTrust are the main competitors for Delinea Secret Server.

I would recommend Delinea Secret Server to other users. I'd rate the solution nine out of ten.

On-premises

We use the solution to store the password for critical server applications.

Our customer wanted a tool which can fulfill their requirements on a low budget. Delinea Secret Server is a cost-effective solution.

When Delinea upgrades the tool, it rejects our password, saying that it is not compliant and strong. Earlier, we used ten-character passwords which were strong and compliant. It is very difficult to change the password.

If we use a service account, most people are unsure where we use those accounts. If we reset the password to make it compliant, we are not sure what the impact will be. Either it should sync with the application automatically, or it has to inform us so that we can easily track and make it compliant with a strong password. This is the only feature that needs to be improved.

We use a mobile authenticator. Whenever we reset the account of a user who lost his password, it asks for a recovery code or key. When we generate it for the first time, it provides the recovery key. We have to save that key to reset it. If we do not save it, the end user cannot automatically change it.

He has to raise a ticket for the administrator, and the administrator has to reset it from the console side. It has to be made simple so that the end user can easily change his recovery key.

I have been using Delinea Secret Server for the last three months.

I rate the solution’s stability a nine out of ten.

Delinea Secret Server is mainly suitable for medium and large companies.

I rate the solution’s scalability a nine out of ten.

The solution's initial setup is very simple. Recently, I upgraded the tool from 11.2 to 11.7. It's very simple to configure and upgrade the solution.

I would recommend the solution to other users because it is easy, and the console is very comfortable.

Overall, I rate the solution an eight out of ten.

Hybrid Cloud

It provides holistic Secret management for PAM solutions. We can have control over our network secrets and be sure that access to your critical servers isn't gained haphazardly by anyone on your network. It also helps with compliance with security standards for privileged devices. It offers a safer, more secure environment for reporting and implementation of secrets. When it comes to managing critical servers and sandboxes, like Ascentia access, you can easily manage them and put proper identity governance across all of them. This applies to both internal and external users, including third-party vendors.

It's a good, very good, superb even product, but the challenge for me with Delinea is that I may not be able to pitch it to an account with a low budget for PAM. Delinea is a good technical solution, but those with experience, especially in Thycotic, will find it easy to use Delinea.

I've known Delinea for about two or three years now. I've had personal interactions with stakeholders in the organization, both at the sales and technical levels.

It is a stable solution.

It is a scalable solution.

I'm familiar with three main PAM solutions: Delinea, BeyondTrust, and WALLIX. I had the opportunity to work with them last year. However, the issue with Delinea is the cost. It's quite expensive compared to the others. And that's all. So, the pricing could be improved.

It's not difficult to set up. It should be able to be done within two days without any issues. It's a very large enterprise solution, so the exact setup time will depend on the company and the environment where it's being installed. But it shouldn't take more than two to three days at most.

Delinea has a good technical team that can handle deployment and maintenance. They also have well-trained partners who can do it. So deployment and maintenance are not an issue at all.

It's very expensive. In the Nigerian market, the adoption of Delinea depends largely on an organization's budget. If they have the financial capacity, they might consider Delinea as a viable option.

Delinea Secret Server is a top-notch solution. The only reason some organizations don't go for it is because of the cost. It's priced in dollars, and with the foreign exchange rate in Nigeria, it becomes very expensive. If an organization sees a solution that works just as well at a lower cost, they'll likely go with the more affordable option.

The licensing costs are on a yearly basis.

Delinea is good, and I would recommend it to financial organizations or those in similar industries. It really depends on their budget. If they have a larger budget, then Delinea is worth considering. Moreover, I would suggest that you just need to be familiar with the solution. It's a bit technical, so you need to know your way around it. If you're familiar with it, it'll be easier for them to integrate it. It's a very good solution, especially for the financial industry, but if you're not familiar with it, you might find it difficult. That's just my take on it. Overall, I would rate the solution an eight out of ten.

Hybrid Cloud