IT Administrator / Architect at a government with 1,001-5,000 employees
Real User
Top 10
Oct 6, 2026
Honestly, there isn't anything that I dislike about Delinea Secret Server, and nothing really comes to mind at this point. I think Delinea Secret Server could do better by offering more granularity at the roles level. Being an administrator to the platform and being a user are the current options, but it would be nice to have further or more fine-tuned roles, such as out-of-the-box roles for a password reviewer or something that's not an all-or-nothing situation. There should be some options in between.
IT Manager at a construction company with 11-50 employees
Real User
Top 5
Oct 6, 2026
The biggest improvement needed for Delinea Secret Server is enhancing the mobile app integration into password managers on devices such as cell phones or iPads. The current process requires copying the password and manually entering the username, making it cumbersome. Additional knowledge on improving this process would also be beneficial. At this time, I don't have additional ideas for improving the mobile app, but I do feel that merging different systems onto the same platform, if possible, would enhance the overall experience. I cannot think of any other improvements needed that have not yet been discussed.
Chief Technology Officer at a government with 51-200 employees
Real User
Top 5
Sep 8, 2026
I don't have enough experience right now with Delinea Secret Server to offer any improvements. On a scale of one to ten, I would rate Delinea Secret Server an eight. Everything seems to be working really well, and I don't believe it would be the perfect solution, but I don't believe there is a perfect solution either. At this point, I don't know what it would take to move Delinea Secret Server closer to a ten.
Adjunct Assistant Professor at a university with 5,001-10,000 employees
Real User
Top 20
Sep 2, 2026
I would characterize common frustrations related to Delinea Secret Server rather than using the term dislike. One area is the complexity for the administrative part. While it is straightforward in core values, configuring advanced policies, custom templates, and other areas including discovery scans and detailed reporting have a steep learning curve and may require extra training. The user interface and terminology present another challenge. Some users feel that the user interface can feel dated or overly complex, with terminology around secrets and folder structures taking time to master. Pricing perception is another point where some costs are mixed, while many others find Delinea Secret Server more affordable and flexible than tier one competitors. However, smaller teams still view enterprise licensing as a significant investment. I have observed poor technical support, particularly in multiple reviews. The support can be slow, limited, and sometimes unhelpful when troubleshooting complex configurations or stability issues. Aggressive or untransparent sales practices also present a concern. Some customers on G2 have cited frustrations with hidden costs, such as unexpected EC2 instance fees and core features being unbundled or oversold during contract negotiation. Complex implementation and setup is another significant challenge. The initial configuration, deployment, and managing advanced policies or connectors requires specialized expertise that most organizations do not have, and the steep learning curve compounds this issue. Users transitioning to the cloud-hosted version frequently complain that the updated interface and permissions structure feel slow and problematic compared to the legacy on-premise setup. Integration and API challenges represent the final area of concern. The platform points out challenges with API tokenization and external system integration, and the lack of documentation is one of the key points I would highlight. This limitation affects the ability to integrate with external systems effectively.
System Network Coordinator at a aerospace/defense firm with 501-1,000 employees
Real User
Top 10
Sep 2, 2026
Delinea Secret Server can be improved as we find some bugs and it sometimes takes a little bit of time for them to get resolved when we go to support. Some tickets take longer to resolve, so we have experienced some issues with support.
I have not faced any significant issues with Delinea Secret Server during this period of time, but we had a problem with a web password filler, which is a template used for accessing a web URL using Secret Server, where we faced some session management issues since session management is not applicable for the web password filler. This should be the improvement that we require from Delinea Secret Server. The session management is not applicable in this case; we can manage the session and have session management inside the remote systems within the organization. However, when it comes to web-related access, we can access directly through Delinea Secret Server. We can access any URL through Secret Server, but the problem is that the session cannot be managed on the web URL due to it having multiple systems. I do not have any other recommendations regarding the improvement of Delinea Secret Server at this time.
Solutions Strategist at Connex Information Technologies
Reseller
Top 20
Sep 9, 2025
Certain features like the Remote Access Service (RAS) Engine and syncing with directory services may still have bugs or limitations, especially in newer platform versions.
One pain point is that it requires Windows Server to run Secret Server. I am not sure if it has the container version already. It should be more lightweight and containerized because nowadays when we deploy on the cloud, it should be containerized and able to run native support on Linux, on Kubernetes. The main concern is that Delinea Secret Server is not suitable for modern technology.
Whenever an update is applied to Secret Server, it requires downtime. Most of the time, the solution tends to fail, necessitating the need to pull data from backup servers. This is quite annoying and is an area where improvements are needed.
Delivery director at a tech services company with 51-200 employees
Real User
Sep 16, 2024
Delinea Secret Server can improve in areas like statistics and notifications, and risk scoring, especially for highly privileged accounts where financial transactions occur. Additionally, complex management features similar to BeyondTrust's PMUL for Unix and Linux might be an area for improvement.
Technical Lead at a tech vendor with 10,001+ employees
Real User
Aug 23, 2024
When Delinea upgrades the tool, it rejects our password, saying that it is not compliant and strong. Earlier, we used ten-character passwords which were strong and compliant. It is very difficult to change the password. If we use a service account, most people are unsure where we use those accounts. If we reset the password to make it compliant, we are not sure what the impact will be. Either it should sync with the application automatically, or it has to inform us so that we can easily track and make it compliant with a strong password. This is the only feature that needs to be improved. We use a mobile authenticator. Whenever we reset the account of a user who lost his password, it asks for a recovery code or key. When we generate it for the first time, it provides the recovery key. We have to save that key to reset it. If we do not save it, the end user cannot automatically change it. He has to raise a ticket for the administrator, and the administrator has to reset it from the console side. It has to be made simple so that the end user can easily change his recovery key.
One of the product areas that could be improved is the ease of handling SSL certificates within the application, as it currently requires manual command-line configurations.
Associate VP and Cyber Security Specialist at US Bank
Real User
Feb 1, 2024
In many PAM tools, when users request a password checkout, they need to provide justification. However, in my experience across four organizations, nobody actually reads the justifications. Users can simply type anything and get the password. This becomes a risk and compliance issue. There needs to be continuous improvement in this area, focusing on problem identification and mitigation strategies.
It's a good, very good, superb even product, but the challenge for me with Delinea is that I may not be able to pitch it to an account with a low budget for PAM. Delinea is a good technical solution, but those with experience, especially in Thycotic, will find it easy to use Delinea.
The integration with the ticketing system ServiceNow is complex. That can be enabled with an API-based out-of-the-box consumption. We have customized it, and the features cannot be used without customization. Ideally, there should be a direct mapping between our ticketing system to Delinea instead of having to do custom development.
In terms of the user interface, it's good. However, installation can sometimes be difficult, depending on the environment. We are deploying it in our own private laboratory, not as a secret server cloud. Additionally, CyberArk has a more robust site and development team compared to Delinea. They also provide more educational resources on recent happenings in cybersecurity, the latest attacks, newsletters that educate people in the field, and how to create two opportunities. Delinea could improve in research and development and educate the public on recent trends in the industry.
Senior System Analyst at a government with 1,001-5,000 employees
Reseller
Mar 24, 2023
An area for improvement in Delinea Secret Server is its integration with ICAP servers. This integration would help in scanning for transfers and determining if they are one-way or not, and whether they contain values. Additionally, there is a need to enforce the copy-based policy across all secrets in the Delinea Secret Server platform, instead of having it as a personal configuration.
Technical Account Manager (Information Security) at Trustaira
Reseller
Oct 3, 2022
Occasionally, the proxy does not work so well. For example, when the custom client application is integrated with a Teams solution. The server integration needs improvement. We find the documentation hard to understand. Support can sometimes be slow.
They could improve the container platform and SPO. The cloud database technologies should be improved. The web browser isolation recording could be improved. When you do anything from the web portal, it cannot record properly. You can only record via remote desktop or secure share. But when the admin performs by web access we cannot record the session.
Support could be better. I have heard about a lot of problems in the Bangladesh market. People are saying that there are support issues. So, Delinea should focus on support and services.
Senior Product Manager and Technology Consultant at Barikat
Reseller
May 25, 2022
I formerly used only one service: the remote server. For example, I connected to the Active Directory user and the computer's console. But now, I need to do a remote connection to the domain controller. Maybe it only connects to that tool, the Active Directory users, and the computer management console, but not to the domain controller. Another thing Delinea could add is multi-factor authentication.
Program Manager at a recruiting/HR firm with 5,001-10,000 employees
Real User
Jan 4, 2022
We recently had to do a global reset of every company password, something we are still in the process of doing. While we had a few glitches, this likely attributes itself to them not having fully deployed, even as they owned the solution for a while. Now that we have done so, we find ourselves to be learning as we go, especially as concerns the various international laws, such as the GDPR. This said, it works well for us. As I am partial to CyberArk, I rate Thycotic Password Reset Server as a nine out of ten, owing to the minor glitches I mentioned. The initial setup was very straightforward for us. However, as it would not deploy easily with our 2019 servers, we were forced to make a few code changes. It continued to deploy for 2012, something I found to be odd, but started working flawlessly only after I made a few code changes. My only negative thing to say about Thycotic would involve the servicing not having been written for 2019.
System Analyst at a computer software company with 5,001-10,000 employees
Real User
Jun 22, 2021
It would be helpful to have integration with various platforms, such as Azure Active Directory on multiple platforms. Adding this type of feature can add to Password Reset Server. I would like to see improvement with the integration with Azure Active Directory. This would mean that we can have support on multiple platforms such as Windows, Linux, and Mac. Currently, it is a standalone application, but if it could be combined with other Thycotic products, it would be a good on-premises, as one platform. It would be altogether a very good package.
Delinea Secret Server efficiently manages privileged access and passwords through robust features like a password vault, Active Directory integration, and remote desktop creation, ensuring enhanced security and compliance.Delinea Secret Server provides IT teams with essential governance and security capabilities, including automatic password rotation and session monitoring. Its integration options, along with APIs and discovery functionalities, support managing privileged accounts. Effective...
Honestly, there isn't anything that I dislike about Delinea Secret Server, and nothing really comes to mind at this point. I think Delinea Secret Server could do better by offering more granularity at the roles level. Being an administrator to the platform and being a user are the current options, but it would be nice to have further or more fine-tuned roles, such as out-of-the-box roles for a password reviewer or something that's not an all-or-nothing situation. There should be some options in between.
The biggest improvement needed for Delinea Secret Server is enhancing the mobile app integration into password managers on devices such as cell phones or iPads. The current process requires copying the password and manually entering the username, making it cumbersome. Additional knowledge on improving this process would also be beneficial. At this time, I don't have additional ideas for improving the mobile app, but I do feel that merging different systems onto the same platform, if possible, would enhance the overall experience. I cannot think of any other improvements needed that have not yet been discussed.
I don't have enough experience right now with Delinea Secret Server to offer any improvements. On a scale of one to ten, I would rate Delinea Secret Server an eight. Everything seems to be working really well, and I don't believe it would be the perfect solution, but I don't believe there is a perfect solution either. At this point, I don't know what it would take to move Delinea Secret Server closer to a ten.
I would characterize common frustrations related to Delinea Secret Server rather than using the term dislike. One area is the complexity for the administrative part. While it is straightforward in core values, configuring advanced policies, custom templates, and other areas including discovery scans and detailed reporting have a steep learning curve and may require extra training. The user interface and terminology present another challenge. Some users feel that the user interface can feel dated or overly complex, with terminology around secrets and folder structures taking time to master. Pricing perception is another point where some costs are mixed, while many others find Delinea Secret Server more affordable and flexible than tier one competitors. However, smaller teams still view enterprise licensing as a significant investment. I have observed poor technical support, particularly in multiple reviews. The support can be slow, limited, and sometimes unhelpful when troubleshooting complex configurations or stability issues. Aggressive or untransparent sales practices also present a concern. Some customers on G2 have cited frustrations with hidden costs, such as unexpected EC2 instance fees and core features being unbundled or oversold during contract negotiation. Complex implementation and setup is another significant challenge. The initial configuration, deployment, and managing advanced policies or connectors requires specialized expertise that most organizations do not have, and the steep learning curve compounds this issue. Users transitioning to the cloud-hosted version frequently complain that the updated interface and permissions structure feel slow and problematic compared to the legacy on-premise setup. Integration and API challenges represent the final area of concern. The platform points out challenges with API tokenization and external system integration, and the lack of documentation is one of the key points I would highlight. This limitation affects the ability to integrate with external systems effectively.
Delinea Secret Server can be improved as we find some bugs and it sometimes takes a little bit of time for them to get resolved when we go to support. Some tickets take longer to resolve, so we have experienced some issues with support.
I have not faced any significant issues with Delinea Secret Server during this period of time, but we had a problem with a web password filler, which is a template used for accessing a web URL using Secret Server, where we faced some session management issues since session management is not applicable for the web password filler. This should be the improvement that we require from Delinea Secret Server. The session management is not applicable in this case; we can manage the session and have session management inside the remote systems within the organization. However, when it comes to web-related access, we can access directly through Delinea Secret Server. We can access any URL through Secret Server, but the problem is that the session cannot be managed on the web URL due to it having multiple systems. I do not have any other recommendations regarding the improvement of Delinea Secret Server at this time.
Certain features like the Remote Access Service (RAS) Engine and syncing with directory services may still have bugs or limitations, especially in newer platform versions.
One pain point is that it requires Windows Server to run Secret Server. I am not sure if it has the container version already. It should be more lightweight and containerized because nowadays when we deploy on the cloud, it should be containerized and able to run native support on Linux, on Kubernetes. The main concern is that Delinea Secret Server is not suitable for modern technology.
Whenever an update is applied to Secret Server, it requires downtime. Most of the time, the solution tends to fail, necessitating the need to pull data from backup servers. This is quite annoying and is an area where improvements are needed.
Delinea Secret Server can improve in areas like statistics and notifications, and risk scoring, especially for highly privileged accounts where financial transactions occur. Additionally, complex management features similar to BeyondTrust's PMUL for Unix and Linux might be an area for improvement.
When Delinea upgrades the tool, it rejects our password, saying that it is not compliant and strong. Earlier, we used ten-character passwords which were strong and compliant. It is very difficult to change the password. If we use a service account, most people are unsure where we use those accounts. If we reset the password to make it compliant, we are not sure what the impact will be. Either it should sync with the application automatically, or it has to inform us so that we can easily track and make it compliant with a strong password. This is the only feature that needs to be improved. We use a mobile authenticator. Whenever we reset the account of a user who lost his password, it asks for a recovery code or key. When we generate it for the first time, it provides the recovery key. We have to save that key to reset it. If we do not save it, the end user cannot automatically change it. He has to raise a ticket for the administrator, and the administrator has to reset it from the console side. It has to be made simple so that the end user can easily change his recovery key.
One of the product areas that could be improved is the ease of handling SSL certificates within the application, as it currently requires manual command-line configurations.
In many PAM tools, when users request a password checkout, they need to provide justification. However, in my experience across four organizations, nobody actually reads the justifications. Users can simply type anything and get the password. This becomes a risk and compliance issue. There needs to be continuous improvement in this area, focusing on problem identification and mitigation strategies.
It's a good, very good, superb even product, but the challenge for me with Delinea is that I may not be able to pitch it to an account with a low budget for PAM. Delinea is a good technical solution, but those with experience, especially in Thycotic, will find it easy to use Delinea.
There's room for improvement regarding user interface and new functionality.
The integration with the ticketing system ServiceNow is complex. That can be enabled with an API-based out-of-the-box consumption. We have customized it, and the features cannot be used without customization. Ideally, there should be a direct mapping between our ticketing system to Delinea instead of having to do custom development.
The solution's remote support feature needs improvement.
In terms of the user interface, it's good. However, installation can sometimes be difficult, depending on the environment. We are deploying it in our own private laboratory, not as a secret server cloud. Additionally, CyberArk has a more robust site and development team compared to Delinea. They also provide more educational resources on recent happenings in cybersecurity, the latest attacks, newsletters that educate people in the field, and how to create two opportunities. Delinea could improve in research and development and educate the public on recent trends in the industry.
The tool should integrate additional features like OCR.
An area for improvement in Delinea Secret Server is its integration with ICAP servers. This integration would help in scanning for transfers and determining if they are one-way or not, and whether they contain values. Additionally, there is a need to enforce the copy-based policy across all secrets in the Delinea Secret Server platform, instead of having it as a personal configuration.
It would be better if they had a Linux version of the secret server.
The customer service and support team could be improved, and the solution could be more user-friendly.
The product can be improved by reducing the number of updates provided and limiting notifications to mainly major updates.
Occasionally, the proxy does not work so well. For example, when the custom client application is integrated with a Teams solution. The server integration needs improvement. We find the documentation hard to understand. Support can sometimes be slow.
Delinea Secret Server can improve by extending the monitoring policies and making the performance better.
They could improve the container platform and SPO. The cloud database technologies should be improved. The web browser isolation recording could be improved. When you do anything from the web portal, it cannot record properly. You can only record via remote desktop or secure share. But when the admin performs by web access we cannot record the session.
The setup for this solution is complex. I'm not going to lie, you need a specialized system security engineer to deploy it.
Support could be better. I have heard about a lot of problems in the Bangladesh market. People are saying that there are support issues. So, Delinea should focus on support and services.
The UI needs improvement because the interface is a little clumsy.
I formerly used only one service: the remote server. For example, I connected to the Active Directory user and the computer's console. But now, I need to do a remote connection to the domain controller. Maybe it only connects to that tool, the Active Directory users, and the computer management console, but not to the domain controller. Another thing Delinea could add is multi-factor authentication.
We recently had to do a global reset of every company password, something we are still in the process of doing. While we had a few glitches, this likely attributes itself to them not having fully deployed, even as they owned the solution for a while. Now that we have done so, we find ourselves to be learning as we go, especially as concerns the various international laws, such as the GDPR. This said, it works well for us. As I am partial to CyberArk, I rate Thycotic Password Reset Server as a nine out of ten, owing to the minor glitches I mentioned. The initial setup was very straightforward for us. However, as it would not deploy easily with our 2019 servers, we were forced to make a few code changes. It continued to deploy for 2012, something I found to be odd, but started working flawlessly only after I made a few code changes. My only negative thing to say about Thycotic would involve the servicing not having been written for 2019.
The initial setup and deployment can be cumbersome.
It would be helpful to have integration with various platforms, such as Azure Active Directory on multiple platforms. Adding this type of feature can add to Password Reset Server. I would like to see improvement with the integration with Azure Active Directory. This would mean that we can have support on multiple platforms such as Windows, Linux, and Mac. Currently, it is a standalone application, but if it could be combined with other Thycotic products, it would be a good on-premises, as one platform. It would be altogether a very good package.