We use the solution to store all of our secrets. For example, passwords, usernames, and other credentials. These credentials can be from many places, such as service accounts, bank accounts, and key pairs. It also has the functionality if, for example, a contractor requests to log into a specific server, they would use the Secret Server to log in to the server session that is monitored and he or she would be logging in without the actual real credentials. It is also on a rotating password system.
Senior Security Engineer at a insurance company with 10,001+ employees
Plenty of useful features, highly scalable, and readily available documentation
Pros and Cons
- "I have found most valuable the automatic scheduled password rotation and remote desktop monitoring. Additionally, the documentation is readily available and easy to find and the dashboard is straightforward."
- "The technical support needs improvement. For example, if you have any problems on the server configuring the IIS, they would provide you very limited details and they would tell you the problem is on your end."
What is our primary use case?
What is most valuable?
I have found most valuable the automatic scheduled password rotation and remote desktop monitoring. Additionally, the documentation is readily available and easy to find and the dashboard is straightforward.
What needs improvement?
I would like to see scheduled reports in a future release.
For how long have I used the solution?
I have been using this solution within the past 12 months.
Buyer's Guide
Delinea Secret Server
November 2025
Learn what your peers think about Delinea Secret Server. Get advice and tips from experienced pros sharing their opinions. Updated: November 2025.
872,869 professionals have used our research since 2012.
What do I think about the stability of the solution?
I have found the solution to be very stable.
What do I think about the scalability of the solution?
You can set up two different servers and the process is straightforward. The solution is scalable and we have 70 users using it in my organization.
We might increase usage in the future but it all depends because currently all of the operations teams have been provided for. If the operations team grows, there would be room for more usage.
How are customer service and support?
The technical support needs improvement. For example, if you have any problems on the server configuring the IIS, they would provide you very limited details and they would tell you the problem is on your end. They are limited to only supporting their application, even if you have the slightest problem assessing their application through IIS they will refer you to contact Microsoft.
Additionally, the sales team could be more friendly and helpful.
I would rate the technical support of Thycotic Secret Server a seven out of ten.
How was the initial setup?
The installation was straightforward.
What's my experience with pricing, setup cost, and licensing?
There is an annual license fee per user and the price is fair.
What other advice do I have?
I rate Thycotic Secret Server an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
BDM at Oberig-it
A stable and scalable solution with good licensing model
Pros and Cons
- "The tool has many models. The tool also has a good cloud version. Also, the customers need not control any components on the solution side. The product's licensing model is also good since customers can choose a price that is most useful for them. The solution also supports password management for the users in your organization."
- "The tool should integrate additional features like OCR."
What is most valuable?
The tool has many models. The tool also has a good cloud version. Also, the customers need not control any components on the solution side. The product's licensing model is also good since customers can choose a price that is most useful for them. The solution also supports password management for the users in your organization.
What needs improvement?
The tool should integrate additional features like OCR.
For how long have I used the solution?
I have been working with the tool for two years.
What do I think about the stability of the solution?
The product is stable.
What do I think about the scalability of the solution?
The product is scalable.
How are customer service and support?
The tool's product support is nice.
How was the initial setup?
The tool's setup is fast and simple. The product's deployment follows a step-by-step process.
What other advice do I have?
I would rate the tool a nine out of ten. I would recommend using the solution. It has many features like password management. You need to also evaluate the vendor before finalizing the product.
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Buyer's Guide
Delinea Secret Server
November 2025
Learn what your peers think about Delinea Secret Server. Get advice and tips from experienced pros sharing their opinions. Updated: November 2025.
872,869 professionals have used our research since 2012.
IT Governance, Risk & Compliance at a tech services company with 51-200 employees
Good solution for privileged access and password changing across different environments.
Pros and Cons
- "Its most valuable feature is its main purpose - the password changing and the Heartbeat so the user has access to only their SVN and does not have access to any other. Thycotic's access privileged management tool allows you to grant access to users for a specific period of time and with specific attributes and privileges."
- "In terms of what could be improved, the whole thing with distributed engines, et cetera, is a little bit tricky."
What is our primary use case?
We use Thycotic Secret Server for the lab environment. We have it as a vault for users and in a client project. We have set it as the users' mass login to the secret server so they have access to their SVN. It is for remote access, password changing, etc...
We use it on premise, mostly. I haven't used the cloud version, but we are discussing with the client about using the cloud deployment.
What is most valuable?
Its most valuables feature are its main purpose - the password changing and the Heartbeat so the user has access to only their SVN and does not have access to any other. Thycotic's access privileged management tool allows you to grant access to users for a specific period of time and with specific attributes and privileges.
What needs improvement?
In terms of what could be improved, the whole thing with distributed engines, et cetera, is a little bit tricky. Additionally, many clients wanted a more cloud version. I know there is a cloud version of Thycotic Secret Server, but a whole unified platform would be good, not like where you have to set up a connector with the distributed engine and then have the Thycotic Secret Server connect with all these. Making a simpler version of connecting different sites and synchronization of the groups that you already have. Then the secrets and folder templates would follow the current infrastructure pattern that the client has so you don't have to recreate new folders and secrets from scratch. In other words, more interoperability with other systems, for example if a user already has a Microsoft Azure subscription. So, the integration with Microsoft as well would be good.
For how long have I used the solution?
We have been using Thycotic Secret Server for about a year and a half.
What do I think about the stability of the solution?
In terms of stability, I would say, yes and no. We had some issues regarding the size of the disk space, which was a Thycotic side issue. There were many log files that they couldn't delete. And then we have another issue with the service account. We have to use another service account for Thycotic, and there was a mix-up with the database. All these issues were from the Thycotic side.
We're logging the tickets and I think there will be a resolution in the future.
What do I think about the scalability of the solution?
Scalability is okay.
We use it for lab environment uses. We have about 20 users, not too many.
It takes one person to deploy in our environment.
We do have plans to increase. We have a live contract and other client requests for Thycotic, including maybe the cloud deployment. I hope it is not as tricky as on premise. Maybe it's easier, I don't know.
How was the initial setup?
The initial setup depends on the client. That's why Isaid earlier that there should be a simpler version where we connect all the different sites, et cetera. Because for client installation and deployment, you have to set up two different servers for high availability, for example, and connect another through your site connectors for the distributed engines, and the client didn't have any load balancers. So, there were many issues and the Thycotic was a little bit tricky at that moment. It wasn't just a simple solution where you set up a server and you have it up and running.
The other thing is, and I think it's important, there is not much documentation on the internet. Besides the partner portal it would be nice if there was a blog or something that we could use. So for most cases, we have to open a ticket, either us as partners or on the client's side.
What's my experience with pricing, setup cost, and licensing?
Our license is yearly.
What other advice do I have?
Thycotic Secret Server is a good solution for what it does. We are happy for that, but maybe they can improve some features. Let's say the keystrokes function doesn't work. We have reported that to Thycotic, but they still have many improvements to do.
On a scale of one to ten, I think Thycotic Secret Server is an eight - maybe.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Principal Solutions Architect at a computer software company with 51-200 employees
Offers a good zero trust piece
Pros and Cons
- "I really like the zero trust piece."
- "The initial setup and deployment can be cumbersome."
What is our primary use case?
We use the most updated version.
One of our customers wanted automation in respect of the solution.
What is most valuable?
I really like the zero trust piece.
What needs improvement?
The initial setup and deployment can be cumbersome.
For how long have I used the solution?
I have been using Thycotic Password Reset Server for about a year.
How are customer service and technical support?
Nothing about technical support gave me room for pause.
How was the initial setup?
The initial setup and deployment could be simplified.
What's my experience with pricing, setup cost, and licensing?
I do not have knowledge about costs or fees.
Which other solutions did I evaluate?
When making a decision about which solution to purchase, it often comes down to a choice between Thycotic and CyberArk. The cost and features one gets with the latter provides a little more value and saves money in the process, although the former is somewhat easier to deploy and to get up and running.
What other advice do I have?
I rate Thycotic Password Reset Server as a nine out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. Reseller
Principal Solutions Architect at a computer software company with 51-200 employees
Helpful technical support with good automation and zero-trust PIN features
Pros and Cons
- "Technical support is pretty good."
- "The initial setup and deployment can be cumbersome. It's not an easy process."
What is our primary use case?
One of our clients primarily uses it for automation capabilities.
What is most valuable?
The zero-trust PIN is a great feature of the solution.
Technical support is pretty good.
The ability to automate is a good selling feature.
What needs improvement?
The initial setup and deployment can be cumbersome. It's not an easy process.
For how long have I used the solution?
I've been dealing with the solution for about a year.
How are customer service and technical support?
Technical support is okay. I've dealt with bad tech support services on other solutions, however, in the case of this product, nothing jumps out at me as being a negative experience. We're satisfied with the level of service they provide to us.
Which solution did I use previously and why did I switch?
I also have experience with CyberArk.
The difference between the two is basically that CyberArk gives you a bit more value for money.
How was the initial setup?
I have found the initial setup to be difficult. It's not exactly simple or straightforward. It's a downside to the solution.
What's my experience with pricing, setup cost, and licensing?
I can't speak to how much the solution costs a month. I don't deal with the licensing side of things.
What other advice do I have?
I'm a reseller.
We tend to deal with the most up-to-date versions of the solution.
When making a decision, it often comes down to Thycotic and CyberArk. What we found is that CyberArk, for the features and the cost, gives you a little bit more value and saves you money in the process. Between CyberArk and Thycotic, Thycotic is somewhat easier to deploy and get up and running. Essentially, with Thycotic, you get the value quicker.
I'd rate the solution at an eight out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. Reseller
Director at a tech services company with 1-10 employees
Good surveillance and easy to set up, but needs a better commercial model and better pricing
Pros and Cons
- "The surveillance is most valuable."
- "I'd prefer a better commercial model that includes partners and options for consulting around it. Where I've worked with my customers, we've only been able to use their professional services, and that has been a risk and constraint."
What is most valuable?
The surveillance is most valuable.
What needs improvement?
The discovery of accounts could be improved. It is also very expensive, and its price should be lower.
I'd prefer a better commercial model that includes partners and options for consulting around it. Where I've worked with my customers, we've only been able to use their professional services, and that has been a risk and constraint.
For how long have I used the solution?
I have been working with their products for 10 years.
How are customer service and technical support?
Their technical support is all right. Some of the open-source stuff isn't supported properly, but generally, it is pretty good.
How was the initial setup?
Its initial setup is easy.
What's my experience with pricing, setup cost, and licensing?
It is very expensive, and its price should be lower.
What other advice do I have?
I would rate Thycotic Secret Server a six out of 10.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
System Analyst at a computer software company with 5,001-10,000 employees
Secure, priced well, and has good support, but the integration could be improved
Pros and Cons
- "The most valuable feature of this solution is that it provides us with a secure way of managing passwords."
- "I would like to see improvement with the integration with Azure Active Directory. This would mean that we can have support on multiple platforms such as Windows, Linux, and Mac."
What is our primary use case?
I'm working in India in a private IT firm and we are working as a consultant for Thycotic, and Azure Development.
What is most valuable?
The most valuable feature of this solution is that it provides us with a secure way of managing passwords.
I also like the integration with the Active Directory of the Windows platform. It is really good.
Thycotic has a roadmap for moving to the cloud. The cloud version is also really good.
What needs improvement?
It would be helpful to have integration with various platforms, such as Azure Active Directory on multiple platforms. Adding this type of feature can add to Password Reset Server.
I would like to see improvement with the integration with Azure Active Directory. This would mean that we can have support on multiple platforms such as Windows, Linux, and Mac.
Currently, it is a standalone application, but if it could be combined with other Thycotic products, it would be a good on-premises, as one platform. It would be altogether a very good package.
For how long have I used the solution?
I have been working with Thycotic Password Reset Server for approximately one year.
What do I think about the stability of the solution?
This solution is stable.
How are customer service and technical support?
Technical support is very good.
How was the initial setup?
The initial setup is very easy.
What's my experience with pricing, setup cost, and licensing?
They are priced quite well.
What other advice do I have?
I would rate Thycotic Password Reset Server a seven out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
DevOps Lead at a computer software company with 1,001-5,000 employees
It performs its basic use case with no downtime but its API is no good
Pros and Cons
- "It is able to manage storage and use of personal passwords."
- "There has been no downtime this year."
- "The API is no good."
- "It is expensive compared to other solutions in this category and for what it does."
What is our primary use case?
The most common use case will be just for keeping personal passwords. There are other things that we use if for, but that is the most common use case.
What is most valuable?
The ability to manage personal passwords is what it was built for and that is what makes it most valuable.
What needs improvement?
The main part of the product that could be improved is the API (Application Programming Interface). The Thycotic API is not very good.
For how long have I used the solution?
I have been using Thycotic Secret Server for a couple of years. It could be as many as four.
What do I think about the stability of the solution?
I guess this should be considered a stable solution. There has been no downtime this year.
What do I think about the scalability of the solution?
There are about 1200 users that are using this product at our organization. We are going to continue to use it at least for a while, but we are looking for some alternative solutions because it is not that good and there are better products available that can do what we need better. It seems to be able to scale with our user base.
How are customer service and technical support?
I do not have any experience with technical support because I am not the person managing the product. We do have an internal IT crew that takes care of the application and they would be the ones who would be in contact with technical support if it were necessary.
Which solution did I use previously and why did I switch?
When I came to this company, Secret Server was already in place. I do not know if the company may have had something in place before this. There is a consensus at the corporate level that we will continue using Thycotic Secret Server.
How was the initial setup?
I do not think it is particularly straightforward if you do anything more than install it and turn it on. I do not have any feedback on the process of the installation itself because I did not install this product. as a DevOps, I find that modification is not straightforward.
What about the implementation team?
I believe it was implemented in house by the team. We have maybe two people on staff who take care of this application.
What's my experience with pricing, setup cost, and licensing?
I think that Secret Server is expensive when I compare the cost to some alternatives. There are different plans and additional licensing costs that can be added on, but I do not know the details exactly within our company.
What other advice do I have?
I would not recommend this product. I would not because the basic functionality is okay, but we need some API access to use KPI (Key Performance Indicator) properly. We also need to automate some stuff using this secure vault. Attempting to do that is almost impossible because of the low quality of the API.
Me, speaking as a lead DevOps, I would not recommend it for this office. It is not the best choice for what we need.
On a scale from one to ten (where one is the worst and ten is the best), I would rate this product differently depending on what level or type of user is using the product. For the DevOps purposes, my rating would be zero. Each year it is less competitive and it can not be justified for the price.
In general, for end-users, I do not know. They are not exposed to the development end so I think they might give it a five-out-of-ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Download our free Delinea Secret Server Report and get advice and tips from experienced pros
sharing their opinions.
Updated: November 2025
Popular Comparisons
CyberArk Privileged Access Manager
Azure Key Vault
AWS Secrets Manager
Okta Workforce Identity
HashiCorp Vault
CyberArk Endpoint Privilege Manager
BeyondTrust Endpoint Privilege Management
WALLIX Bastion
Keeper Enterprise Password Manager
One Identity Safeguard
Bitwarden
BeyondTrust Privileged Remote Access
BeyondTrust Password Safe
Silverfort
1Password Business
Buyer's Guide
Download our free Delinea Secret Server Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Which PAM tool do you prefer: CyberArk Privileged Access Manager, One Identity Safeguard, Delinea Secret Server, or BeyondTrust Privileged Remote A
- What are some best practices to implement for secure employee password management?
- What advice do you have for an enterprise user on Password Day 2021?
- When evaluating Enterprise Password Managers, what aspect do you think is the most important to look for?
- Why is Enterprise Password Managers important for companies?
- What should one take into account when selecting an enterprise password manager?













