Delinea Secret Server Reviews

We've used it for auto-discovery, and password management on mainframes, networks, applications, and firewalls. We've also used it for password rotation.

We use it for credential management, including rotation for both human and non-human accounts, as well as session monitoring.

Delinea Secret Server supports our remote access needs.

For remote access needs, we have implemented MFA (Multi-Factor Authentication) and SSO (Single Sign-On) across various applications. We use third-party tools like Ping and SailPoint to integrate with the PAM tools.

Moreover, password rotation has been effective in our environment. We weren't rotating many application passwords before, but an audit from the OCC (Office of the Comptroller of the Currency) triggered a change. 

We now rotate all non-human accounts except for Active Directory and local accounts. It's a best practice, so we set a 30-day rotation for some applications like mainframes and applications that support direct password changes. For others, we set it to 8 hours.

Initially, the application teams struggled to adapt to the PAM culture. It's an organizational-wide change, so it took some time. We guided the application owners and platform teams on setting password rotation policies and initial password guidelines. 

This helped minimize the impact of breaches, especially in Linux and Windows environments. We also have continuous monitoring with Splunk. We integrated the Delinea Secret Server logs into Splunk for centralized log management.

The "App to App" feature has been most impactful. It allows secure communication between applications without requiring direct user access, which is crucial for several applications. 

Additionally, working in the finance department, we are heavily focused on enhancing audit reporting and compliance. So, the GRC (Governance, Risk & Compliance) capabilities of Delinea Secret Server have also been crucial for us.

We implemented a custom reporting system that can automatically send reports to auditors daily, weekly, or according to your organization's needs. We also upgraded the audit role within Secret Server, allowing auditors to access and analyze the reports directly. 

Additionally, Secret Server provides comprehensive logging capabilities. Auditors can see what data users access, their access levels, and their activities, including check-in and check-out times.

Furthermore, Secret Server helped us manage privileged, elevated access, which we call "K2K." As the lead for this project, I could identify users with the highest access levels and implement specific policies to monitor their activity on servers.

In many PAM tools, when users request a password checkout, they need to provide justification. However, in my experience across four organizations, nobody actually reads the justifications. Users can simply type anything and get the password. This becomes a risk and compliance issue. 

There needs to be continuous improvement in this area, focusing on problem identification and mitigation strategies.

I've been working with Thycotic Secret Server since 2018. My experience with Delinea Secret Server specifically started around the end of 2022, which is when our organization purchased it.

I would rate the stability a nine out of ten. It is a stable product. 

I would rate the scalability an eight out of ten. We have 300 applications. And they're spread across various platforms, including many high-risk and complex ones. Over 200 of them are SOX applications, which require high-security compliance.

We have close to 10,000 users currently using the product. We do plan to increase the further usage and shift to the cloud. 

Delinea's technical support was excellent. They responded to our tickets on the same day and provided access to their portal for direct communication. Even after our support contract ended, they responded within three days. Compared to other PAM solutions, I'd rate them a nine out of ten.

I have more experience with IAM and PAM. I've worked with products like SailPoint, and Ping Identity. In the PAM space, I've used CyberArk, Broadcom, Accellion, and Thycotic Secret Server (now Delinea Secret Server).

One major difference is that CyberArk has several separate modules, while Delinea offers a more unified experience with integrated features like auto-discovery for secret keys and API keys. 

CyberArk requires additional integration with other applications to achieve these functionalities. Similarly, based on my knowledge, other tools may also require integrations. 

Since Delinea (formerly Thycotic) is a relatively newer solution, it comes with pre-built components and focuses on continuous improvement. In contrast, older vendors might lack some built-in features. 

Additionally, Delinea allows us to create custom rules and manage all access (Unix, Linux, Windows) for password management within the same platform. However, with CyberArk, managing passwords might require opening additional ports.

Another key difference is privileged account discovery management. In Delinea, we can directly access the admin console to discover accounts. With CyberArk, this might involve integrating with additional tools. These are just some of the differences, and there might be others.

I would rate my experience with the initial setup an eight out of ten. The Delinea team was very helpful.

The initial deployment in the test phase took around three to four weeks.

For ongoing maintenance, after all applications were migrated to Delinea, only five people are needed to support it. That's for around 300 applications.

So, we have a team of five people for maintenance that includes one architect, one lead, and three analysts.

We took assistance from the Delinea vendors.

We already had a CentOS environment, which offered us a discount when migrating to Delinea (formerly Thycotic). Most accounts were simply migrated from one system to another. 

Only accounts outside the platform needed direct migration to Delinea, which took some time. We prioritized SOX applications due to their higher-risk compliance requirements. 

Overall, the process wasn't too difficult, as we had vendor documentation to guide us.

The migration process begins by having a server dedicated to storing all the data. From there, we access the configuration administrative menu. If the data contains secrets, we need to decrypt them and use specific APIs to import them into Delinea Secret Server. 

We use a master account, also known as the "Server account," to facilitate this. Then, we set up folders within Delinea Secret Server, which they might call "parts" or something similar. There might be some naming differences, but the overall process is the same. 

Finally, we configure the Delinea Secret Server, and provide account information, and users can then log in and directly feed data into it.

The vendor primarily assisted us. We did have around ten people internally who helped with the process.

There were two architects involved. The remaining group consisted of one lead, two lead security analysts, and several security analysts.

If you are planning it to use for more than five years, then it is worth it. 

I would rate the pricing a six out of ten, with ten being a high price. 

There are additional costs if you want to move to cloud. 

We previously used Centrify, which is now part of Delinea. We conducted technology assessments and spoke with various vendors like CyberArk, BeyondTrust, and One Identity. Ultimately, our management decided to go with Delinea for two main reasons.

Firstly, budget played a significant role. Secondly, from a technical standpoint, since we were already using Centrify, Delinea offered a clear and step-by-step migration process with ongoing support. This impressed our leadership team.

Overall, I would rate the solution an eight out of ten. 

Delinea offers several deployment options beyond the cloud-based solution. They have CAM and PaaS. 

CAM focuses on Identity and Access Management (IAM) features like Active Directory Bridging. This allows users, for example, a Linux or Unix administrator with access to 10,000 servers, to access all servers using a single ID and password. This is achieved by Centrify, one of the products under the Delinea umbrella. Other PAM solutions might not have this functionality. 

Additionally, Delinea offers "PAMSight" for PaaS, which integrates with Delinea Secret Server. So, if an organization aims for a combined solution, Delinea can potentially save them money.

However, I would recommend Delinea Secret Server for mid to large-scale organizations, not necessarily for smaller ones. Organizations with less than 5,000 employees likely wouldn't benefit from extensive single sign-on features. They might be better served by simpler IAM tools like Ping or SailPoint.

With the rise of remote work, Privileged Access Management (PAM) solutions have become essential for organizations to effectively control and secure access to critical systems and data.
PAM solutions help ensure that employees working outside the corporate network can only access resources they are authorized to use, reducing the risk of credential theft, unauthorized access, and potential system intrusions. By enforcing granular access controls, session monitoring, and real-time threat detection, PAM plays a vital role in safeguarding sensitive environments against evolving cyber threats in distributed work settings.

Credentials Vault & Password Manager - Centralized, encrypted storage and automated password management reduce human error and improve security hygiene.

Discovery & Inventory - Automatically identifying privileged accounts helps organizations maintain visibility and control over access points.

Access Control & MFA - These features ensure only authorized users can access sensitive credentials, reducing insider threats and external breaches.

Auditing, Reporting & Compliance - Enables forensic analysis, compliance with regulations, and visibility into privileged activity.

Certain features like the Remote Access Service (RAS) Engine and syncing with directory services may still have bugs or limitations, especially in newer platform versions.

I have been dealing with Delinea Secret Server for more than two years.

Delinea Secret Server can be considered as a stable and reliable for most enterprise use cases, especially in vaulting and privileged access management. However, like any complex PAM solution, it has occasional performance hiccups and integration challenges that should be monitored, especially in cloud environments.

Responsive, knowledgeable, and professional

Positive

Private Cloud

Microsoft Azure

My clients, who are mostly North American clients like SpartanNash and CFI, use Delinea Secret Server for maintaining privileged passwords for their service accounts. Delinea also includes privileged session monitoring and keystroke logging, which is similar to CyberArk.

People are moving towards Delinea Secret Server to store their passwords due to its cheaper cost compared to CyberArk. It provides session monitoring and keystroke logging, which help in maintaining security.

Delinea Secret Server offers features similar to CyberArk and BeyondTrust, such as maintaining and securing privileged passwords and session monitoring. The cost-effectiveness of the solution is a significant benefit.

Delinea Secret Server can improve in areas like statistics and notifications, and risk scoring, especially for highly privileged accounts where financial transactions occur. Additionally, complex management features similar to BeyondTrust's PMUL for Unix and Linux might be an area for improvement.

I have been working with Delinea Secret Server for more than two years.

Delinea Secret Server is very stable. I would rate it a ten out of ten for stability.

I rate the scalability of Delinea Secret Server at 9.7 out of ten. It's suitable for large enterprises that understand the importance of privileged access management.

While Delinea technical support is quite good, I am giving them a 9.7 instead of a ten due to the time it takes for processes to complete.

Positive

I have worked with CyberArk and BeyondTrust before. CyberArk remains my preferred solution due to its functionality.

The initial setup process for Delinea Secret Server is straightforward and not complex.

Delinea Secret Server is medium-priced. I would rate it at 60%, or three out of five.

CyberArk and BeyondTrust are the main competitors for Delinea Secret Server.

I would recommend Delinea Secret Server to other users. I'd rate the solution nine out of ten.

On-premises

We use the solution to store the password for critical server applications.

Our customer wanted a tool which can fulfill their requirements on a low budget. Delinea Secret Server is a cost-effective solution.

When Delinea upgrades the tool, it rejects our password, saying that it is not compliant and strong. Earlier, we used ten-character passwords which were strong and compliant. It is very difficult to change the password.

If we use a service account, most people are unsure where we use those accounts. If we reset the password to make it compliant, we are not sure what the impact will be. Either it should sync with the application automatically, or it has to inform us so that we can easily track and make it compliant with a strong password. This is the only feature that needs to be improved.

We use a mobile authenticator. Whenever we reset the account of a user who lost his password, it asks for a recovery code or key. When we generate it for the first time, it provides the recovery key. We have to save that key to reset it. If we do not save it, the end user cannot automatically change it.

He has to raise a ticket for the administrator, and the administrator has to reset it from the console side. It has to be made simple so that the end user can easily change his recovery key.

I have been using Delinea Secret Server for the last three months.

I rate the solution’s stability a nine out of ten.

Delinea Secret Server is mainly suitable for medium and large companies.

I rate the solution’s scalability a nine out of ten.

The solution's initial setup is very simple. Recently, I upgraded the tool from 11.2 to 11.7. It's very simple to configure and upgrade the solution.

I would recommend the solution to other users because it is easy, and the console is very comfortable.

Overall, I rate the solution an eight out of ten.

Hybrid Cloud

It provides holistic Secret management for PAM solutions. We can have control over our network secrets and be sure that access to your critical servers isn't gained haphazardly by anyone on your network. It also helps with compliance with security standards for privileged devices. It offers a safer, more secure environment for reporting and implementation of secrets. When it comes to managing critical servers and sandboxes, like Ascentia access, you can easily manage them and put proper identity governance across all of them. This applies to both internal and external users, including third-party vendors.

It's a good, very good, superb even product, but the challenge for me with Delinea is that I may not be able to pitch it to an account with a low budget for PAM. Delinea is a good technical solution, but those with experience, especially in Thycotic, will find it easy to use Delinea.

I've known Delinea for about two or three years now. I've had personal interactions with stakeholders in the organization, both at the sales and technical levels.

It is a stable solution.

It is a scalable solution.

I'm familiar with three main PAM solutions: Delinea, BeyondTrust, and WALLIX. I had the opportunity to work with them last year. However, the issue with Delinea is the cost. It's quite expensive compared to the others. And that's all. So, the pricing could be improved.

It's not difficult to set up. It should be able to be done within two days without any issues. It's a very large enterprise solution, so the exact setup time will depend on the company and the environment where it's being installed. But it shouldn't take more than two to three days at most.

Delinea has a good technical team that can handle deployment and maintenance. They also have well-trained partners who can do it. So deployment and maintenance are not an issue at all.

It's very expensive. In the Nigerian market, the adoption of Delinea depends largely on an organization's budget. If they have the financial capacity, they might consider Delinea as a viable option.

Delinea Secret Server is a top-notch solution. The only reason some organizations don't go for it is because of the cost. It's priced in dollars, and with the foreign exchange rate in Nigeria, it becomes very expensive. If an organization sees a solution that works just as well at a lower cost, they'll likely go with the more affordable option.

The licensing costs are on a yearly basis.

Delinea is good, and I would recommend it to financial organizations or those in similar industries. It really depends on their budget. If they have a larger budget, then Delinea is worth considering. Moreover, I would suggest that you just need to be familiar with the solution. It's a bit technical, so you need to know your way around it. If you're familiar with it, it'll be easier for them to integrate it. It's a very good solution, especially for the financial industry, but if you're not familiar with it, you might find it difficult. That's just my take on it. Overall, I would rate the solution an eight out of ten.

Hybrid Cloud

We primarily use the solution for privileged access management. 

Delinea Secret Server is like a vault for the users to store their device passwords and is also used for auditing sessions monitoring password production, et cetera.

The most valuable feature is the subscription on offer.

We like the policies that can be put in place. The password duration backup part and even the pipeline are useful. 

The solution offers useful APIs as well. 

We find the initial setup to be simple. 

It's scalable. 

The stability is great. 

The pricing is good.

Support is helpful.

Account discovery and asset discovery is easier in Delinea than in other solutions.

Occasionally, the proxy does not work so well. For example, when the custom client application is integrated with a Teams solution.

The server integration needs improvement. 

We find the documentation hard to understand. 

Support can sometimes be slow. 

I've been working with the solution for the last two years. 

The solution is stable. It's reliable. There are no bugs or glitches. It doesn't crash or freeze. 

The solution would work well for medium to large organizations. The solution can scale. 

While support is good, sometimes the documentation, especially for newer features, is not. That can be a challenge. 

The support team can sometimes take a while to solve issues. While they do tend to solve problems, it does take time. 

Positive

We previously used BeyondTrust and WALLIX.

I found the licensing simpler with Delinea. BeyondTrust, for example, required the purchase of different licenses. WALLIX similarly needed more complex licensing. 

It is pretty easy to set up the product. It's been straightforward, according to my experience. 

I can deploy the solution in eight hours. However, it takes five to six days for the full implementation. 

In terms of maintenance, if the team is good, it can be handled in-house. We have three people working on the solution currently.

I handled the implementation myself. However, it depends on the organization's policy. If there's a team in place that understands the solution, it can be done internally. Otherwise, it should be handled by a vendor, for example. 

While I cannot speak to the exact pricing, it is a bit cheaper than other options. 

I'd rate the affordability a five out of five. 

We are the partner of Delinea. We are a reseller, and we have deployed for six clients already in Bangladesh there are many more POC contacts in the works for different customers.

I am working with the latest update of the solution. 

I'd recommend the solution. I'd rate it eight out of ten.

On-premises

We use Delinea Secret Server as a PAM solution. It helps us to check, rotate, and store passwords. 

We implemented the product for our privileged identities. We have configured them in check-in/check-out rotation. Delinea Secret Server rotates the password each time a privileged identity is checked in, making the password valid only for some time. 

The tool's most valuable feature is robust audit logging. 

Delinea Secret Server needs to improve its reporting. 

I have been working with the product for three years. 

I rate Delinea Secret Server's stability a nine out of ten. 

I rate the tool's scalability a seven out of ten. 

I have had limited exposure to CyberArk. 

We can see ROI when we use the product to its full capacity. 

The tool's pricing is expensive. 

Delinea Secret Server is superior to CyberArk. I rate it an eight out of ten. 

I need to look at using their tool's true multi-tenancy capability to cater to multiple customers within a single platform architecture without compromising security. Information security is key, and an MSP model's objective is to have a privileged access management solution.

Secret Server is called a secret server for a reason. You can create multiple secret servers underneath the parent for every secret server. Every "parent" will be considered as one customer, secret server #1, secret server #2, etc. Under every secret server, you can create multiple secret servers. Those secrets will belong to customers A, B, and C, respectively. If I want to access a customer's Windows environment under a secret server, I will create a secret group called "Windows." This group will be onboarded with customer A's Windows environments within their secret server. We have a logically separated environment as an MSP model.

The privileged access management module is the most reliable feature, along with the password manager.

The integration with the ticketing system ServiceNow is complex. That can be enabled with an API-based out-of-the-box consumption. We have customized it, and the features cannot be used without customization. Ideally, there should be a direct mapping between our ticketing system to Delinea instead of having to do custom development.

I have been working with Delinea Secret Server for almost a year, and I'm the platform's chief architect, responsible for leveraging Delinea for a managed service provider model.

Every update goes through rigorous testing and gets updated into SaaS periodically, and they are also patching in the backend without even impacting the services. I rate the solution's stability a ten out of ten. We have not seen any downtime so far.

We have not seen any scalability issues so far because they are managing a 30 or 15-K environment within a single instance of Secret Server, so it is horizontally and vertically auto-scalable based on the volume you're bringing in. Since it is Saas, we don't worry about the infra. I rate the solution's scalability a nine out of ten.

Though I consume SaaS with platinum support, the support is not too great. By the time they resolve an issue or get into details on what to resolve, I might have resolved the issue already.

Neutral

The initial setup is seamless. I have not seen any environments or services like ServiceNow, for example, get impacted. Delinea is one of these services where you can spin up the environment within five to three minutes, and your environment is ready for consumption.

After enablement, your environment is ready for consumption in five minutes, but we have to onboard, customize, and use cases, so deploying the solution takes at least two weeks. We have integrated Delinea Secret Server with Azure AD on the MFA authentication front and Delinea with ServiceNow. All these customizations took very long. It will take two to three weeks to complete with a dedicated effort.

Delinea has a distributed engine deployed on the customer's premises, communicating securely over a CTP protocol. Every customer communication will be enabled to secret servers through this distributed engine or a remote access solution engine. Without this deployed on the customer's premises, access to the customer enrollment will not work seamlessly, or it might not be available.

We expect the solution API-based, but even if it's API-based, it will go through custom scripts.

A key highlight is that Delinea is nothing but Thycotic and Centrify combined as a ready-to-market adoption. Delinea is ISO 2700 and CSA Star certified.

If you want a ready-to-market adoption with security and compliance in place, you are good to go with Delinea. And any customization for ticketing integration needs a detailed working session with a professional servicer. I rate Delinea Secret Server a nine out of ten.

Public Cloud

We use Delinea Secret Server for pharmacy equipment management. We use a secret vault. We use it as a temporary hold, and we use it for password rotation.

I like that you can change the password remotely.

It would be better if they had a Linux version of the secret server.

I have been using Delinea Secret Server for about a year.

Delinea Secret Server is a stable solution.

On a scale from one to ten, I would give stability a nine.

Delinea Secret Server is very scalable. We have about 20 users using this solution.

On a scale from one to ten, I would give scalability an eight.

The initial setup is straightforward. It took us about a day to deploy this solution.

On a scale from one to ten, I would give the initial setup an eight.

We implemented this solution. You need a team of three professionals to deploy this solution. Two people can maintain this solution.

We have seen a return on investment.

I would give the price a four on a scale from one to ten, with one being the cheapest and ten being the most expensive. We pay for the license on a yearly basis, and we paid for three years. It costs around 5000 a year.

I would tell potential users to keep customization flexible using the power shell. This is a good one.

On a scale from one to ten, I would give Delinea Secret Server a nine.

Hybrid Cloud

The primary use case for Delinea Secret Server is to sort the privileged passwords. It can also change passwords after a set period or revoke passwords when someone leaves the company. Delinea needs to be on-premises because Turkish regulations do not allow cloud-based security solutions for some sectors. 

Delinea's network integration is the most useful. For example, I use a Check Point firewall connect to SmartConsole, so I need to do a lot of configuration in Delinea Secret Server. Native integration with Check Point is valuable. You can also go download whatever API you need from the cloud, whether you're using Check Point, Palo Alto, etc.  Enriched discovery is another good feature. If you are dealing with several kinds of systems, you can see which system requires privileged access to my network.

I formerly used only one service: the remote server. For example, I connected to the Active Directory user and the computer's console. But now, I need to do a remote connection to the domain controller. Maybe it only connects to that tool, the Active Directory users, and the computer management console, but not to the domain controller. Another thing Delinea could add is multi-factor authentication.

I've been using Delinea Secret Server for five years.

Delinea is highly stable.

It's incredibly easy to scale up Delinea. You can install a new vendor server and deploy the Delinea Secret Server application if you have performance issues. We have 120 admin users and around 5,000 privileged passwords stored in the vault on the Secret Server.

I rate Delinea support 10 out of 10. It's good, but I don't need it often. Sometimes I need help with configuration. If you need a custom configuration, you can pay for professional services, but it's expensive.

I've also used CyberArk. CyberArk has more features, but they are minor. Some customers may need them, but others don't. The main difference is pricing. CyberArk is more expensive. 

A Delinea license costs about a dollar per admin, whereas it's $5 for CyberArk.

The installation is pretty basic, and it doesn't require advanced knowledge. It takes a day to install and configure CyberArk, but Delinea is done in an hour. But you need an escrow database. I requested a cluster system from the customer site.

After deployment, the solution doesn't require much maintenance because the Delinea is stable. I sometimes have a connection problem due to configuration, but I never have an issue with the database. You don't need to spend much time on maintenance or have a lot of technical knowledge.

We deployed Delinea in-house. 

I would rate Delinea 10 out of 10 for affordability.

I rate Delinea Secret Server 10 out of 10. If your customer uses a privileged access solution, they need to sort all the passwords. They should do a session recording and change the password, then do workflow delegation. Delinea can do it all, so I strongly recommend it.