Delinea Secret Server Reviews

Our primary use case is for password management. 

Before this solution, people had their own passwords stored in different areas and when something was needed we could not find the right person that had the right password, which meant quite a lot in migrations scenarios. With this solution, everyone knew what tools to use and where to put the password and who gives access to that password and then we could have reports on who has access to different passwords so that we could do audits. 

The ability to give some groups access to different kinds of databases with the storage of a password is the most valuable feature. 

I don't know what kind of a cryptographic it uses to encrypt the password but it should be one of the stronger ones. Some of the cryptos have been accessed by hackers. The encryption algorithm that they use is weak and could be hacked.

The scalability is pretty good. It was always accessible. 

It was pretty scalable.

I would rate it a nine out of ten. It provides most of the features we need. I like the way that you could easily administer who would get access to what kind of a database.

• Heart beats – it tells me when passwords on file are no longer working. This could be an oversight, but could also be a sign of hacker activity.
• Secret Expiry – reports on passwords that haven’t been changed and may be out of policy.
• Remote Password Changing – along with Secret Expiry, this enables me to stay compliant with password change policies.
• Network Discovery – scans networked machines for accounts, bringing machines in to password policy compliance, and uncovering unknown or backdoor accounts. It also enables the discovery of the total reach of an account, i.e. a service account for which you dare not change the password as you don’t fully know the implications of missing an instance of the account that could fail critical operations.

We previously had a very lax password policy, and passwords were stored in Excel spreadsheets. Passwords were often not documented, or the documented password was not updated if changed. We now have a much stricter, safer password policy. Secret Server has improved security, productivity and helped achieve a much higher state of compliance.

Session recording could offer more control and block certain actions or commands.

I have experience of other products that focus on session recording, so I’m aware of what advanced functionality can be achieved.
Specifically, I’m referring to:

* blacklisting and/or whitelisting certain commands
* OCR capabilities

Now I know these aren’t currently supported, but they may be available in future releases.

We have used this solution for more than three years.

Very occasionally indexes won’t contain all the search results expected.

We have not encountered any scalability issues as this is a highly scalable product.

Technical support is good. Online and offline documentation is clear and well written. Support technicians are punctual and friendly.

I have worked with customers of other solutions. They found it hard to separate accounts assigned to the same asset for different teams. For example, a server has SQL and database accounts. These credentials would all be visible to anyone with access to the server asset which isn’t a desirable situation. DBA has access to a local administrator account. Server admin has access to the payroll DB account!

Based entirely on the Microsoft stack (IIS, MS-SQL), installation is quick and easy.

Pricing is very flexible. Download the free trial version. You can downgrade to the free version (it’s free for life!) or pay for the exact feature set you require.

We evaluated LastPass Enterprise, RoboForm, Password Manager Pro, Kaspersky Password Manager and CyberArk.

I’d recommend you engage a reseller to discuss your requirements, and download the free trial version.

Password checkout and the ability to change a password after checkin are the most valuable features.

• Removes the risk of passwords sitting in files on admins' desktops
• Also provides a secure portal to share passwords with the team

I would like to be able to create service accounts and set generated AD passwords from the web interface.

I have used it for 3+ years.

I have not encountered any deployment issues.

I have not encountered any stability issues.

I have not encountered any scalability issues. I was able to deploy over multiple domains.

Customer service is 10/10.

Technical support is 10/10.

We did not previously use a different solution.

The more features you add, the more complicated you can make it. Basic password storage deployment is straightforward.

It was an in-house implementation.

Before choosing this product, we did not evaluate other options.

• Ease of installation
• Folders
• Secret attachments
• Custom templates and password policies
• Custom reporting and scheduling
• Discovery service
• Too many great features to list here

• Better adoption of PAM

Referring to Secret Server v10, we want the ability to add subfolders to the "\Personal Folders" container. We had to rename it to "\Personal Secrets" to avoid confusion. Otherwise, you can create as many top-level folders and subfolders as you like. A minor annoyance for an otherwise awesome product.

I have used it for 2+ years.

No issues during deployment: Get your SQL cluster deployed, check your prerequisites, run the installer. Log in and start configuring. That was really it.

We have not encountered any stability issues; been rock solid since production deployment.

We have not encountered any scalability issues. Performance issues with a few hundred users and thousands of secrets has been negligible; running on hardware.

Customer service is excellent. Customer relations and tech support have both been quick to respond and knowledgeable.

I rate technical support 8/10. There's always room for improvement when it comes to tech support, but compared to other big name companies, Thycotic tech support stands out among the top.

We had another product before switching. Secret Server crushed the old solution.

Initial setup was very straightforward compared to the competition.

We implemented it ourselves; it was pretty straightforward.

Look at their edition/feature comparison chart and decide which version suits you best. Note that clustering requires the Enterprise Plus edition. You're also allowed to install a lab and QA environment with your license which will help with pre-prod testing.

Before choosing, we looked at other vendors such as LastPass, 1Password, CyberArk, PasswordManager, PasswordState, BeyondTrust, Quest, CA, etc. In the end, the cost, features, and ease of deployment simply beat the competition.

An enterprise-class PAM system will always have complexities to deal with. However, some competitive products literally require a professional services engineer to come onsite if you want it done properly. Secret Server was comparatively easy to setup and get running on our own.

Thycotic Secret Server is an excellent product; we're very happy with it!

It works for us, and the administration part, while functional, seems less straightforward, especially during upgrades. That's what I've noticed.  

We use Delinea Secret Server, but not to its full capacity. We are still exploring other products due to company policies. At this stage, we're not actively looking at such products. My main objective was to get some initial information and update my knowledge for future projects. 

We faced some upgrade issues, especially during the management and administration parts. 

I found it less straightforward than on many other platforms, even outside password managers.  

I have experience with this solution. We have a small footprint of Delinea in my company.

I've worked with both Delinea and BeyondTrust. Basically, we're just trying to understand the possibilities and plan for future projects. But it's not serious at this stage due to budget and priorities. However, I might look at them in the future. In the meantime, I am familiar with some password manager solutions.

I've only used some basic password vaults, nothing major.

It works for what it's designed for. So, I would rate it a seven out of ten, because I can't compare it to other programs due to limited experience. However, it's not a bad product.