Delinea Secret Server Reviews

Delinea Secret Server is robust, and the solution provides value-added security for sensitive credentials. Automatic rotation is one of the key features I appreciate for this particular functionality. Access control is also one of the key features, particularly role-based access control and checkout workflows, including temporary access logs and detailed session tracking, which simplifies the reporting process. I particularly appreciate the deployment speed, as it is generally faster and less cumbersome to deploy compared to heavier legacy systems such as CyberArk.

Built-in automation features, such as password rotation and check-in, check-out workflows, impact operational efficiency and compliance posture significantly. The core built-in capabilities include Active Directory integration that allows joining Unix, Linux, or Windows systems directly into Active Directory without needing complex third-party LDAP synchronization tools. Privilege elevation is another feature that highlights built-in commands, granting specific users or groups temporary administrative rights without sharing a root password. Centralized auditing records user logins, file access, and privileged command executions to satisfy compliance tracking such as PCI DSS, HIPAA, and SOX. RBAC, the granular role-based access controls, is provided to show individuals only the specific server and command access required for their job duties.

I would characterize common frustrations related to Delinea Secret Server rather than using the term dislike. One area is the complexity for the administrative part. While it is straightforward in core values, configuring advanced policies, custom templates, and other areas including discovery scans and detailed reporting have a steep learning curve and may require extra training.

The user interface and terminology present another challenge. Some users feel that the user interface can feel dated or overly complex, with terminology around secrets and folder structures taking time to master. Pricing perception is another point where some costs are mixed, while many others find Delinea Secret Server more affordable and flexible than tier one competitors. However, smaller teams still view enterprise licensing as a significant investment.

I have observed poor technical support, particularly in multiple reviews. The support can be slow, limited, and sometimes unhelpful when troubleshooting complex configurations or stability issues. Aggressive or untransparent sales practices also present a concern. Some customers on G2 have cited frustrations with hidden costs, such as unexpected EC2 instance fees and core features being unbundled or oversold during contract negotiation.

Complex implementation and setup is another significant challenge. The initial configuration, deployment, and managing advanced policies or connectors requires specialized expertise that most organizations do not have, and the steep learning curve compounds this issue. Users transitioning to the cloud-hosted version frequently complain that the updated interface and permissions structure feel slow and problematic compared to the legacy on-premise setup.

Integration and API challenges represent the final area of concern. The platform points out challenges with API tokenization and external system integration, and the lack of documentation is one of the key points I would highlight. This limitation affects the ability to integrate with external systems effectively.

I have been using Delinea Secret Server for one to two years.

Delinea Secret Server offers 24/7 IT support available, which addresses hidden security gaps and operational risks when validating backups, recovery, and system health, providing clear recommendations and direct communication. They also provide IT free consultations or services and cover several areas including IT security and server management, cybersecurity, and cloud software. They provide 24/7 on-site and remote technical support, and they also offer email and phone technical support globally.

They have recently started third-party partnerships, such as server Omega network integrations. From my experience, they provide technical support coverage and documentation, though I did not have much time to explore them thoroughly. They allow customers to access upgrades and new releases, revisiting new features and providing feedback.

Regarding technical support, the contact process requires gathering several pieces of information before opening a case, including contact and account information, an email account already associated, company name, technical contact name, phone number, and product name. Relevant details should also include technical content. For problem descriptions, I include a concise explanation, full text or error messages, what users were doing when the problem occurred, and other specifics such as timestamps, the number of users, and various IDs. It is crucial to highlight product and environmental versions, SQL high availability or replication configurations, and server specifications, including CPU and RAM. Issues often relate to authentication, licensing, or environmental complexities.

The first step is to gather the mentioned information and then acquire the mandatory support PIN from the Delinea Secret Server main page. If using the ticketing system for support, leaving the browser tab open while returning to a different one is recommended. In the case of Secret Server Cloud, logging on to the cloud manager dashboard, clicking to generate technical support PIN, and recording it is necessary. The support method is then selected, going through Delinea customer support via phone, email, or ticketing. Phone support is delivered worldwide, and for email, the PIN must be provided.

When discussing the initial deployment of Delinea Secret Server, the first step is to select the type of deployment. Delinea Secret Server on-premise is installed locally on a domain-joined Windows virtual machine using Microsoft IIS or Microsoft SQL database, and it includes automatic installation and advanced manual installation. Secret Server Cloud (SSC) is a multi-tenant platform managed by Delinea, with one portal requiring a lightweight distributed engine for local Active Directory and network communication. The first step for initial deployment is to choose the deployment type, whether Secret Server on-premises (SSOP) or Secret Server Cloud (SSC).

The second step is to prepare the prerequisites, including the server and the OS, whether it is Windows Server 2026 or newer Microsoft IIS. Microsoft SQL Server with an assigned account processing and permissions is also required. The third prerequisite is messaging such as RabbitMQ. The third step is to run setup and configuration. For run setup, I generally run a setup.exe file as an administrator on the host server or provision that cloud tenant via a portal.

The API security note is one of the key points to consider. The latest version 12.1 or later has API authentication enabled by default, which blocks direct script and interactive user username and password calls until reconfiguration. For run setup and configuration, I connect directory and secret by setting up Active Directory sync and configuring a backup called the break the glass admin account and running initial heartbeat test to configure remote password changing (RPC) functionality.

In summary, the first step for initial deployment is to choose the deployment type, whether SSC or SSOP. The second step is to prepare prerequisites such as the server and OS. The third step is to run setup and configuration, executing the setup.exe file means running the installer, then addressing the API with modern version 12.1 or later, and finally connecting the directory and secret components.

Alternative solutions to Delinea Secret Server include PAM security solutions. Secure-done is one of the PAM enterprise software options. Other key alternatives include CyberArk Privilege Access Manager, Keeper PAM, Manage Engine PAM 360, and PAM 360.

I have integrated components of Delinea Secret Server, such as local IIS processing. This runs the scan directly onto the web server hosting Delinea Secret Server instead of using a remote engine, though it is generally not recommended for restricted or segmented networks due to port and firewall limitations. Another option is deploying a distributed engine, which is a recommended alternative that scales out and groups into specific sites to handle network isolated segments, balance scanning loads, or perform local password changing and heartbeating.

I also use a custom PowerShell scanner, which is a script written inside Delinea Secret Server and serves as an extensible discovery source for querying non-standard systems or third-party environments not supported by the out-of-the-box scanner. Third-party integration uses external asset discovery platforms such as BMC Helix to map or sync assets directly with Delinea Secret Server environment instead of relying strictly on the native engine. Additionally, Delinea provides a free privilege account discovery tool that uses a standard standalone utility for local network scanning and additional account visibility before importing findings into Delinea Secret Server.

Regarding comprehensive discovery capabilities, Delinea Secret Server is designed to automatically scan the IT environment to find unmanaged privileged accounts, servers, and hidden dependencies. Core capabilities include automated network scanning that searches Active Directory, local Windows systems, Unix, Linux hosts, and VMs within ESX or ESXi environments. Cloud and multi-cloud visibility is also significant, as it tracks access and identities across AWS, Google Cloud Platform (GCP), and Microsoft Entra ID. Dependency mapping identifies linked Windows services, scheduled tasks, and IIS application pools to prevent service outages during password rotations. Extensible discovery is achievable using custom PowerShell scripts to build specialized scans for unique or non-standard infrastructure. Privilege control for the server automatically detects server premises to enforce centralized MFA, session recording, and access policies.

Regarding centralized management of all privileged accounts and credentials within Delinea Secret Server, I do not believe it contributes to reducing blind spots. I would rate this review an eight out of ten overall.

My main use cases for Delinea Secret Server revolve around implementing it for our Privileged Access Management, specifically for our privileged access accounts, privileged accounts such as service accounts, admin accounts, and all these things.

The features of Delinea Secret Server that I find most useful and effective include using the discovery feature for discovering many types of accounts in our organization which are unmanaged, making the items manageable throughout the organization.

I am using the access auditing feature, and I am also making use of storing in the shared folder. The access auditing feature helps me in terms of compliance; if there are any issues related to who accessed a particular account a long time ago for maintaining compliance, I use the access audit tool as well.

Role-based access is beneficial in Secret Server as role-based access management is critical in security systems. We are implementing the zero-trust model as well as least privilege access, and what happens is, whenever there is least privileged access, there is less proneness to the theft of credentials. Nobody has much opportunity to steal the credentials or hack the systems with the help of credentials. I make use of role-based access management in Delinea Secret Server for holding my credentials in a safe and secure way.

The biggest benefit of Delinea Secret Server would be the remote password change and discovery, which are a major help for the management of the accounts.

I have not faced any significant issues with Delinea Secret Server during this period of time, but we had a problem with a web password filler, which is a template used for accessing a web URL using Secret Server, where we faced some session management issues since session management is not applicable for the web password filler. This should be the improvement that we require from Delinea Secret Server.

The session management is not applicable in this case; we can manage the session and have session management inside the remote systems within the organization. However, when it comes to web-related access, we can access directly through Delinea Secret Server. We can access any URL through Secret Server, but the problem is that the session cannot be managed on the web URL due to it having multiple systems.

I do not have any other recommendations regarding the improvement of Delinea Secret Server at this time.

I have been working with Delinea Secret Server for four years.

We normally record the sessions and do not face any drawbacks; we do not have any issues regarding stability.

Delinea Secret Server is scalable and easy to scale.

I have contacted Delinea support for an issue where Secret Server logs off when the IP address is not secure, and I received a great response from the service. I would rate the support a 10.

Positive

I have not worked with any other tools on PAM before Delinea or simultaneously.

My company has not seen ROI or return on investment with Delinea Secret Server, but it is a good tool that we can use to manage our systems.

I think the price for Secret Server is reasonable.

We manage the passwords through remote password change, which is the automatic password change, and we are very familiar with this remote password change for applying it to many of the accounts in our organization. It has helped us in maintaining the overall security throughout the organization.

We make use of a 90-day report for users who have not logged in for 90 days in order to manage the accounts and save our licenses, and with that, we recheck the licenses. If they did not access for 90 days, we revoke their access from Secret Server; we manage accounts through this report as well.

I can give Secret Server's password management feature an eight out of 10 in supporting security protocols.

I recommend that those considering Delinea Secret Server go with it because for companies with moderate strength, between 5,000 and 10,000 employees, it is suitable for small enterprises. I have worked for small enterprises, so I can say that you can definitely go with Delinea Secret Server.

Overall, I would rate Delinea Secret Server an 8 out of 10; it's a good product that we can use.

Public Cloud

Microsoft Azure

The built-in automation features of Delinea Secret Server, such as password rotation and check-in/check-out workflows, significantly help with operational efficiency, reducing the workload by approximately 60 to 70 percent. Although there are some challenges due to RPC issues with certain secrets causing them to get stuck, it is still effective in reducing operational overhead.

Session monitoring has definitely helped me gain actionable insights, particularly for audit and tracing purposes. Every client I have worked with has not experienced breaches; instead, the monitoring process is smooth and allows video downloads for review. The discovery feature is quite helpful in listing privileged accounts and service accounts, which previously lacked options for downloading results but now I believe they have added that option.

The centralized management of all privileged accounts through Delinea Secret Server indeed reduces blind spots and administrative overhead by approximately 80 to 90 percent.

What I like the most about Delinea Secret Server is how it is designed, especially the new interface in version 12; it is very easy, straightforward, and user-friendly, making it enjoyable to navigate and configure. From an admin's perspective, I find it quite approachable for new users and beginners, who can understand it well during their first and second training sessions compared to other PAM solutions I have seen. Additionally, I appreciate the ease and straightforwardness of secret policy configurations, templates, password changers, and onboarding secrets.

While I would not classify my thoughts as dislikes, I believe there should be improvements in accessing secrets associated with web application URLs, as many users find it challenging, leading to password credential failures such as RPC issues with those secrets. When I reached out to support for this, the response did not meet my expectations, especially compared to my previous experiences with Delinea support. Furthermore, I find that configuring Unix secrets, particularly for onboarding root or admin secrets, is not as self-explanatory as it could be, making it difficult for admins to configure. Even the custom password changers for Unix without SSH keys require more clarity in description and functionality.

Delinea does need to improve its licensing complexity, as that can be confusing.

I have been using Delinea Secret Server since the end of 2015, which is when it was known as Thycotic.

Regarding stability, I find that the on-premise deployment of Delinea Secret Server tends to be more unstable compared to the cloud version. As a SaaS solution, the cloud option experiences less downtime and fewer issues during maintenance or upgrades. However, on-premise clients often encounter infrastructural challenges, particularly with RabbitMQ connectors, site connectors, and distributed engines, making the management of the SQL database quite difficult without a dedicated database team.

In terms of scalability, I find it somewhat challenging on-premise, whereas with the SaaS version, there are no worries, which I would give a 10 out of 10. However, Delinea could certainly provide some help regarding the on-premise scalability issues.

For technical support, I would score them a six, as I was initially considering a seven but decided to reduce it by one due to the concerns I previously mentioned regarding support quality.

I have worked with several alternatives to Delinea Secret Server, including CyberArk, BeyondTrust, and an Indian-origin PAM solution called Sectona, which I used while working with one of my Indian clients.

The initial deployment of Delinea Secret Server is easy, especially when compared to other PAM solutions; it is straightforward with no complications.

If I were to compare Delinea to CyberArk, I prefer neither over the other since every PAM solution has its own pros and cons; I can list various cons for both CyberArk and BeyondTrust. However, for a user-friendly interface, I would lean towards Delinea, while for flexibility of options and features, I would choose CyberArk. For a cost-effective option, I would suggest Sectona as the lightweight PAM solution, which is cheaper than the others.

I have only experienced Delinea Secret Server component and have not integrated any other components from the suite, such as Privilege Manager or the DevOps Secret Vault. Overall, I would give Delinea Secret Server a score of seven.

My main use case for Delinea Secret Server is for privileged access management and identity management.

A specific example of how I use Delinea Secret Server for privileged access or identity management is that we keep all of our administrator accounts in Delinea, allowing us to check out the access for a period of time, and then turn it back in when we're done.

That is the main way we're using Delinea Secret Server now.

The best features Delinea Secret Server offers include rotating the passwords and not requiring somebody to have access on their phone or through another way, so it keeps everything a little bit safer for us and gives us the ability to check things in and out as needed.

The password rotation and the check-in, check-out feature in Delinea Secret Server have changed my team's daily workflow and security posture by making things easier. We faced some challenges along the way of setting it up because we had poor processes, but now those things have improved.

Delinea Secret Server has positively impacted my organization by making me, as the Chief Technology Officer, feel that we have better processes around our administrator account access.

I don't have enough experience right now with Delinea Secret Server to offer any improvements.

On a scale of one to ten, I would rate Delinea Secret Server an eight. Everything seems to be working really well, and I don't believe it would be the perfect solution, but I don't believe there is a perfect solution either.

At this point, I don't know what it would take to move Delinea Secret Server closer to a ten.

I have been using Delinea Secret Server for just over a year.

Delinea Secret Server is stable.

So far, we have seen Delinea Secret Server's scalability to be very excellent. We've added things over time but haven't reached our limit yet.

Customer support for Delinea Secret Server has been terrific. Every time we've had an issue, we were able to reach out and get our issue resolved.

This was our first foray into a PAM solution, so we did not have a previous solution.

I would rate the customer support of Delinea Secret Server on a scale of one to ten as a nine.

On a scale of one to ten, I would rate Delinea Secret Server an eight. Everything seems to be working really well, and I don't believe it would be the perfect solution, but I don't believe there is a perfect solution either.

My experience with pricing, setup cost, and licensing in Delinea Secret Server was very straightforward and easy to work with.

We evaluated other options before choosing Delinea Secret Server, but I cannot provide that detail.

My advice to others looking into using Delinea Secret Server is to build a test environment and test each application in that environment before actually deploying it.

Regarding Delinea Secret Server's AI capabilities, we haven't explored them as of yet other than for password rotation, and for that, I believe the governance and security around it are top-notch.

Concerning Delinea Secret Server's AI capabilities, we have not had any instances that were not self-inflicted issues with password rotation. We did have an account where things were out of sync; however, once we were able to get that in sync with where Delinea Secret Server was, everything worked perfectly.

We have not started using the comprehensive discovery and advanced session monitoring capabilities of Delinea Secret Server yet. We've been going through our setup and getting everything in place, which has taken quite a while. Now that we have approximately ninety-eight percent of our applications set up, we will start using the discovery tools to see if there's anything else out there that we need.

The centralized management of all privileged account credentials within Delinea Secret Server helps me ensure that the individuals logging into different applications and servers should be logging into them rather than individuals who should not have access to those areas.

The automation and session analysis features of Delinea Secret Server contribute to my risk management strategy for privileged access by providing the logs necessary for compliance surrounding privileged access.

The potential for vendor consolidation played a role in my selection of Delinea Secret Server as part of a broader identity security platform rather than standalone PAM solutions. Since we had no vendor to begin with, we wanted to find a vendor that we could start small and grow from there rather than bringing in individual pieces, seeking a solution that would allow us to start where we needed to.

Private Cloud

Amazon Web Services (AWS)

I use Delinea Secret Server for secrets management and credential storage. I also use it for password rotation for service accounts and partially for privileged access management. During sessions, they are recorded and tunneled through Delinea Secret Server.

I have integrated the connection manager for RDP and the Chrome add-in for the web password filler. I have not used third-party integrations and only use Delinea Secret Server without additional tools.

Delinea Secret Server's ability to manage diverse privileged identities, including human, machine, AI, and developer accounts, works well for my IT system landscape. I do not use it for AI or agent technology purposes yet, but I use it for both human and service accounts as well as automation.

My favorite feature of Delinea Secret Server is secrets management and the API access that it provides, allowing me to programmatically retrieve these values.

The built-in automation features for password rotation, check-in, check-out, and workflows within Delinea Secret Server have definitely helped my operational efficiency and compliance posture, especially for service accounts and SQL accounts. Previously, I had to go in manually or have some process to rotate the passwords. Now I get to access the secret and also have the ability to rotate the password within the same tool, which has been useful and definitely helps with compliance.

Delinea Secret Server has helped me reduce administrative overhead in my environment because I can add someone to an AD group and they get access to a secret without having to worry about break-glass accounts. A developer might need break-glass access to make a change, so I can keep them added to the group and they check out a secret, someone from my team approves it, and it is all done during an incident.

Delinea Secret Server's automation and session analysis features help with compliance purposes. I have a mandate to make sure the sessions are being recorded to comply with my risk management policy set by corporate.

One thing I think Delinea Secret Server can do better in the future is the RDP launcher. The launchers they have require me to have administrative privileges on the local workstation. If they could change that, it would be great.

I have been working with Delinea Secret Server for ten or eleven years.

I have not seen any lagging, crashing, or downtime with Delinea Secret Server. It has been stable.

Delinea Secret Server has proven to be scalable. I used it heavily, and though I do not use it that heavily now due to some other reasons, it works well for my purposes at an enterprise level.

I have contacted Delinea Secret Server's technical support a few times to get some of my other team members access to the portal, but not for any technical problems.

The quality and speed of Delinea Secret Server support, based on the handful of times I have interacted with them, has been good. If I were to put Delinea Secret Server support on a scale from one to ten, I would say an eight. This was long ago, so things might have changed now.

I have used an alternative to Delinea in the form of Symantec PAM.

I prefer Delinea Secret Server more compared to Symantec PAM. Symantec PAM is not very user-friendly and is stuck in the past, which is why I prefer Delinea Secret Server.

The initial deployment of Delinea Secret Server has always been easy for me. Deployment has been easy.

The last time I deployed Delinea Secret Server was ten or eleven years ago, and I have always upgraded it from time to time. The upgrades have been relatively easy. I do not run into any issues with the upgrades and I regularly upgrade it. However, I have not done a net new deployment in a very long time.

Delinea Secret Server requires maintenance on my end because it is on-premises and self-hosted. I do update it regularly.

Regarding pricing for Delinea Secret Server, I did something related to pricing long ago, but now it is out of my hands. I am not the right person to ask about that.

I am not familiar with the feature called Resilient Secrets in Delinea Secret Server, which ensures credential accessibility during various operational challenges, nor have I used it.

I would give Delinea Secret Server an overall score of eight. The only sticking point is the launcher they have, as I need admin privileges on my workstation to be able to launch the RDP launcher. Otherwise, I would have given them a nine.

On-premises

We are using Delinea Secret Server applications in KFH Participation Bank. It is a useful application. By the way, we use a different connection manager, an alternative connection manager, but I think Delinea Secret Server is more useful than other applications and it is stable. However, I cannot manage it because I am not on the security team. I am on a different team, but I am using Delinea Secret Server.

I do not manage Delinea Secret Server, but I use it.

What I appreciate the most about Delinea Secret Server is that it is stable. First, I can connect fast, and the vault architecture is useful. I can connect to Delinea Secret Server remote servers on the application or web UI. I prefer Delinea Secret Server desktop application. I connect many times in a working day for remote connections to Delinea Secret Server web application. There are no problems.

It is stable and does not disconnect or get disturbed. Because I connect to many servers every day for management or support, Delinea Secret Server is useful. It is sufficient for me.

What I dislike about Delinea Secret Server is that every time I open it, it asks for the password. Every time I open it, I must enter my password. I can log into the local computer and the laptops, so I do not understand why I have to enter it every time I open the application. I do not prefer that it asks every time. Additionally, the remote desktop connections resolutions are very high. I do not prefer that. I have to change it because it takes time to configure. That is sufficient for us.

I have been working with Delinea Secret Server for two years. I am a user of Delinea Secret Server for two years, but I have used different applications for several years. I have been working for thirty years in the IT sector.

I think there is no lagging, crashing, or downtime with Delinea Secret Server. There is no downtime. I do not remember it being disturbed for a long time or losing connectivity. We are using Delinea Secret Server.

I have never contacted the technical support of Delinea Secret Server. Sometimes we need Delinea Secret Server for the vault, for example, adding a new account or new personnel to the vault. We create a case for the internal security team. They easily create an account for permission on Delinea Secret Server, but I do not create a case for the global support for Delinea Secret Server.

For alternative solutions to Delinea Secret Server, we use alternative solutions, but our security team manages them. For example, we are using CyberArk in the company as an alternative.

I prefer Delinea Secret Server more, but we are using the two applications for different purposes. For example, CyberArk for custom servers or applications, and Delinea Secret Server for different site access.

I cannot answer how easy or difficult it was to learn how to use Delinea Secret Server when I first started using it because I do not manage this application.

If I am familiar with the pricing, I do not know because I do not know the user license prices.

I use it. I cannot answer how easy or difficult it was to learn how to use Delinea Secret Server when I first started using it because I do not manage this application.

I do not know if Delinea Secret Server requires any maintenance on my end. Sometimes, the security teams require a snapshot related to these servers. We take the snapshot, but we do not know what they do.

My review rating for this product is 9.

My main use case for Delinea Secret Server is that we needed a PAM. A quick specific example of how I use Delinea Secret Server as a PAM in my daily work is that we automate the password change of administrative accounts. We also use it as a vault for all our secrets.

In my opinion, the best feature Delinea Secret Server offers is the ability to audit administrative accounts. The auditing feature helps us identify when administrative access is being used.

Delinea Secret Server has positively impacted my organization as it helps us with our security and hardening. It helps with security and hardening by giving us the ability to go granular with the administrative accesses that we give. The built-in automation features for password rotation and check-in/out workflows within Delinea Secret Server have made us more compliant when we have to answer audits.

I leverage the discovery and session monitoring capabilities of Delinea Secret Server every day to gain actionable insights for risk reduction or compliance reporting. The centralized management of all privileged account credentials within Delinea Secret Server helps us identify accounts that have administrative access, thus reducing blind spots and administrative overhead in our environment.

Delinea Secret Server can be improved as we find some bugs and it sometimes takes a little bit of time for them to get resolved when we go to support. Some tickets take longer to resolve, so we have experienced some issues with support.

I have been using Delinea Secret Server for three years.

Delinea Secret Server is stable.

Delinea Secret Server's scalability is good as it grows with our security needs and as we add users or consultants to the platform.

We did not use a previous solution.

My experience with pricing, setup cost, and licensing went well.

Before choosing Delinea Secret Server, we evaluated BeyondTrust.

I would rate Delinea Secret Server overall an eight on a scale of one to ten. I gave it an eight because no software is a ten; there are always bugs. I would not like to add anything else about the features. My overall review rating for this product is eight.

Hybrid Cloud

Other

With the rise of remote work, Privileged Access Management (PAM) solutions have become essential for organizations to effectively control and secure access to critical systems and data.
PAM solutions help ensure that employees working outside the corporate network can only access resources they are authorized to use, reducing the risk of credential theft, unauthorized access, and potential system intrusions. By enforcing granular access controls, session monitoring, and real-time threat detection, PAM plays a vital role in safeguarding sensitive environments against evolving cyber threats in distributed work settings.

Credentials Vault & Password Manager - Centralized, encrypted storage and automated password management reduce human error and improve security hygiene.

Discovery & Inventory - Automatically identifying privileged accounts helps organizations maintain visibility and control over access points.

Access Control & MFA - These features ensure only authorized users can access sensitive credentials, reducing insider threats and external breaches.

Auditing, Reporting & Compliance - Enables forensic analysis, compliance with regulations, and visibility into privileged activity.

Certain features like the Remote Access Service (RAS) Engine and syncing with directory services may still have bugs or limitations, especially in newer platform versions.

I have been dealing with Delinea Secret Server for more than two years.

Delinea Secret Server can be considered as a stable and reliable for most enterprise use cases, especially in vaulting and privileged access management. However, like any complex PAM solution, it has occasional performance hiccups and integration challenges that should be monitored, especially in cloud environments.

Responsive, knowledgeable, and professional

Positive

Private Cloud

Microsoft Azure

I am using Delinea Secret Server for privileged access management.

We use the automated password rotation feature in Delinea Secret Server.

The best advantages of Delinea Secret Server are that it is easy to set up, it is integrated with the Windows system, and it has a customize feature for the scripting feature.

The customization and scripting features are good, and it offers web-based access.

It is helpful; we use it to rotate the password on a schedule base, and after a user checks out, it triggers another RPC remote change.

Session monitoring capabilities help to improve compliance and reduce security incidents.

The preset report in Delinea Secret Server would be sufficient for compliance and governance.

The benefits and positive impacts I have seen from Delinea Secret Server on my company include having centralized secret management, log monitoring, an audit log on the command execution on the system, and it has programmable API customization.

One pain point is that it requires Windows Server to run Secret Server. I am not sure if it has the container version already.

It should be more lightweight and containerized because nowadays when we deploy on the cloud, it should be containerized and able to run native support on Linux, on Kubernetes.

The main concern is that Delinea Secret Server is not suitable for modern technology.

I have used Delinea Secret Server at my past company for almost 10 years.

Delinea Secret Server is stable.

Because it is a Windows system on a VM base, Delinea Secret Server is suitable to scale up, but for scaling out, it is still a manual process to scale the system.

Technical support from Delinea is good. I used the professional service at the beginning, and so far, there have been no more requests to the support.

Positive

The main difference between Delinea and CyberArk is pricing; Delinea is cheaper, but I also see some technical differences. The technical difference is that it is an easier deployment—CyberArk requires a lot of components to set up. It is traditional technology.

I see ROI in Delinea Secret Server because it saves time for managing this password, and also the cost is very flexible. It has an admin user and a normal business user that can use this solution.

I am not sure how to calculate the ROI, but I think for this, I bought it for about three years, and it is only 10% of another platform. If I were to go for CyberArk, it would cost a lot more.

Delinea Secret Server has a reasonable price; it is cheaper than another product CyberArk, and I think that Secret Server is affordable. It is affordable and has advanced features compared to another top-tier product.

Secret Server is acceptable, but now it should be something more modern that is suitable for a cloud-native environment.

On a scale of 1-10, I rate Delinea Secret Server a 9.

On-premises

Other

Our customers who require an active-active mode, rather than active-passive, tend to go for Delinea Secret Server.

After working on several PAM solutions, I've noticed that Delinea Secret Server doesn't offer any exceptional features; most solutions have similar capabilities such as automatic password rotation, activity log monitoring, and activity log auditing.

Whenever an update is applied to Secret Server, it requires downtime. Most of the time, the solution tends to fail, necessitating the need to pull data from backup servers. This is quite annoying and is an area where improvements are needed.

I have been using Delinea Secret Server for about one year.

The stability is less than ideal since it updates to our console can take around six to ten hours. As a development partner, this is frustrating and leads me to recommend other solutions like BeyondTrust that don't require as much time for updates.

I would rate the scalability of Delinea Secret Server as seven on a scale of one to ten.

I would rate customer service and support from Delinea at four out of ten. When I faced issues integrating custom applications with Delinea Secret Server, the support from their deployment partner was inadequate. They were expensive and didn't guide me properly to resolve the issue.

Neutral

The initial setup of Delinea Secret Server is straightforward and easy for development purposes.

We have not seen a return on investment since this is a more expensive solution compared to others.

The price of Delinea Secret Server is okay, however, the solution is considered expensive when compared to others.

I generally recommend other solutions like BeyondTrust.

Overall, I would rate Delinea Secret Server as six out of ten. As a senior cybersecurity engineer, I prioritize solutions that don't require excessive update times and provide reliable stability.

On-premises