Delinea Secret Server vs HashiCorp Vault comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Delinea Secret Server
Ranking in Enterprise Password Managers
6th
Average Rating
8.2
Number of Reviews
47
Ranking in other categories
Privileged Access Management (PAM) (2nd)
HashiCorp Vault
Ranking in Enterprise Password Managers
3rd
Average Rating
8.2
Number of Reviews
16
Ranking in other categories
No ranking in other categories
 

Market share comparison

As of June 2024, in the Enterprise Password Managers category, the market share of Delinea Secret Server is 3.5% and it decreased by 38.4% compared to the previous year. The market share of HashiCorp Vault is 17.0% and it increased by 6.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Enterprise Password Managers
Unique Categories:
Privileged Access Management (PAM)
11.6%
No other categories found
 

Featured Reviews

Rick-Nelson - PeerSpot reviewer
Nov 2, 2023
A PAM solution that helps to store, rotate and check passwords
We use Delinea Secret Server as a PAM solution. It helps us to check, rotate, and store passwords.  We implemented the product for our privileged identities. We have configured them in check-in/check-out rotation. Delinea Secret Server rotates the password each time a privileged identity is…
BP
Dec 18, 2023
Offers ability to store secret credentials and create policies using API calls, like allowing specific users to access certain data only after authentication
Before provisioning things in Azure, we use HashiCorp Vault to store service principal credentials—passwords and such. Then, we can identify if a user is authorized to provision resources. If not, the blueprint will throw an error saying the user isn't authorized to provision or spin up resources in Azure. Same thing with other components, except for the applications themselves. We don't store credentials for those. On the replication side, in a high-availability setup in multiple Vault instances, secret data is accessible by other resources. Each user or technical user has their own token, and there are different tokens for dev, test, QA, and product environments. It meets all three-point authentication, authorization, and access control requirements.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I like the one-way hash, as well as the ability to store it in the cloud and access it from anywhere."
"Provides us with the ability to control access [to secrets] by groups."
"The user interface is quite good. It's very straightforward."
"The surveillance is most valuable."
"Delinea's network integration is the most useful. For example, I use a Check Point firewall connect to SmartConsole, so I need to do a lot of configuration in Delinea Secret Server. Native integration with Check Point is valuable. You can also go download whatever API you need from the cloud, whether you're using Check Point, Palo Alto, etc. Enriched discovery is another good feature. If you are dealing with several kinds of systems, you can see which system requires privileged access to my network."
"I like that it's user-friendly."
"The solution's stability is flawless."
"I really like the zero trust piece."
"We were using it because we have compliance requirements around secret management. Having a secure vault and encrypting data was an additional requirement. When we looked at it first, we were just looking for a vault, like a lockbox. The greatest benefit of HashiCorp is its ability to manage encryption on the fly. It provides encryption of data at rest, in use, in transit, on the fly, and linked with applications, which was really attractive."
"The feature I find most beneficial in HashiCorp Vault is the secret engine. It integrates smoothly with many applications, making it easy to set up and implement quickly. This allows you to test it easily and see good results rapidly. When you integrate an internal API or application, it quickly manages that application's secrets."
"It's stable. I would rate the stability a nine out of ten."
"The product is free and easy to use. It is well documented with an easy implementation process."
"The tool's dynamic rotation of the password credentials is good."
"This solution is easy to use and to integrate."
"It is an added value for our customers to have a Secrets Management workflow available that is PaaS/CaaS/KaaS Platform agnostic."
"It can still be configured by a separate team other than developers. That's why I think it's more secure."
 

Cons

"The integration with the ticketing system ServiceNow is complex."
"The tool should integrate additional features like OCR."
"When working with larger enterprises Thycotic Secret Server becomes a little cumbersome to work with because they do not allow as much flexibility as some of the other competitors, such as CyberArk. Thycotic Secret Server could improve by being more flexible when it comes to customization, and increase the number of API integrations."
"I would like to see the shadowing of ongoing terminal sessions (Remote Desktop Mirroring)."
"I think that the main interface should integrate better with non-standard applications and clients, to connect with other systems."
"I don't know what kind of a cryptographic it uses to encrypt the password but it should be one of the stronger ones. Some of the cryptos have been accessed by hackers."
"This product is excellent in every way except minor details in handling extremely large environments."
"There are some things that I know are really important to include like A/B version features which are available in Windows. I would say that they should be included in the road map."
"It would be helpful to have more advanced features."
"In terms of features, the only thing that I found a little bit hinky was that there was no revocation or deletion on the model we were using. Once in a financial year, a client interacts, and you pay for that client for the year. So, there are just little things like that in the pricing. There should be more clarity around the end of the key. I know there is no system like this. They all are the same. I tested Microsoft, Google, and some others, and none of them really want you to delete a key, which makes sense. You delete a key, and you lose everything that it has wrapped or encrypted, but it's actually just a language. Deletion isn't really deletion. It's really revocation, but overall, HashiCorp Vault ticked all the boxes for us, and I couldn't fault it."
"I would rate the stability a six out of ten. There are some bugs and glitches. We are in touch with the vendor to resolve them."
"A drawback for some clients who have to be PCI compliant is that they still need to use and subscribe to an HSM (Hardware Security Module) solution."
"I don't think there are any major improvements required—so far, so good. However, I think that having more training materials, such as videos, and documentation available would be helpful. I would prefer to have more videos available either on the official site or on YouTube."
"The onboarding is a challenge. It should be more self-service, but it involves reviews and approvals."
"The product is complicated to install."
"The technical support was hard to get a hold of and lacking in service."
 

Pricing and Cost Advice

"When comparing the price of Thycotic Secret Server with other solutions it is reasonable."
"Its price is okay. We don't compete on pricing. We seldom use price to win over our competitors. We prefer it this way because if we can sustain the price, we make more margin as well. We don't want the price to go down to the bottom where despite the win, there's no margin at all."
"We have an enterprise license as well as a user license and a support license."
"In the Nigerian market, the adoption of Delinea depends largely on an organization's budget. If they have the financial capacity, they might consider Delinea as a viable option."
"Secret Server is expensive when compared to the cost to some alternatives."
"Most customers opt for a yearly license."
"The price of this solution is good."
"It isn't terribly expensive."
"It could do everything we wanted it to do and it is brilliant, but it is super pricey. To be fair to HashiCorp, we drove the price up with our requirements around resiliency. Because of the nature of our company, we don't really operate in the cloud."
"The AWS version is much cheaper than HashiCorp Vault."
"The product is expensive."
"In my case, the open-source version works well. It's advisable for small to medium-scale organizations, but for large-scale organizations, you should go with the enterprise version."
"I am using the open-source version of Vault and I would have to buy a license if I want to get support."
"The solution's cost is reasonable."
report
Use our free recommendation engine to learn which Enterprise Password Managers solutions are best for your needs.
787,061 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
32%
Computer Software Company
13%
Financial Services Firm
8%
Government
7%
Financial Services Firm
19%
Computer Software Company
16%
Manufacturing Company
8%
Healthcare Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Looking for recommendations and a pros/cons template for software to detect insider threats
This is an inside-out --- outside-in --- inside-in question, as an insider can be an outsider as well. There is no short answer other than a blend of a PAM tool with Behavioral Analytics and Endpo...
What do you like most about Delinea Secret Server?
The privileged access management module is the most reliable feature.
What is your experience regarding pricing and costs for Delinea Secret Server?
If you're requesting licenses or pricing, then you have to fill out a questionnaire that they try to gain insight into what your environment is like, what you're trying to discover, and what you're...
Which is better - HashiCorp Vault or AWS Secrets Manager?
HashiCorp Vault was designed with your needs in mind. One of the features that makes this evident is its ability to work as both a cloud-agnostic and a multi-cloud solution. As a cloud-agnostic sol...
What do you like most about HashiCorp Vault?
The feature I find most beneficial in HashiCorp Vault is the secret engine. It integrates smoothly with many applications, making it easy to set up and implement quickly. This allows you to test it...
What is your experience regarding pricing and costs for HashiCorp Vault?
The enterprise version would require considering factors like the level of support needed, the amount of secret data being stored, and replication needs. But in my case, the open-source version wor...
 

Also Known As

Thycotic Secret Server, Delinea Password Reset Server
No data available
 

Learn More

 

Overview

 

Sample Customers

Secure-24, University of San Diego, International Rescue Committee, San Francisco Ballet, Perkins Coie, University of San Diego, D.S.S. Limited, Turbo's Hoet, Eclipse Computing, Cathay Bank, Stellarise, J&R Consulting
Adobe, SAP Ariba, Citadel, Spaceflight, Cruise
Find out what your peers are saying about Delinea Secret Server vs. HashiCorp Vault and other solutions. Updated: May 2024.
787,061 professionals have used our research since 2012.