Delinea Secret Server Reviews

We use the solution to store the password for critical server applications.

Our customer wanted a tool which can fulfill their requirements on a low budget. Delinea Secret Server is a cost-effective solution.

When Delinea upgrades the tool, it rejects our password, saying that it is not compliant and strong. Earlier, we used ten-character passwords which were strong and compliant. It is very difficult to change the password.

If we use a service account, most people are unsure where we use those accounts. If we reset the password to make it compliant, we are not sure what the impact will be. Either it should sync with the application automatically, or it has to inform us so that we can easily track and make it compliant with a strong password. This is the only feature that needs to be improved.

We use a mobile authenticator. Whenever we reset the account of a user who lost his password, it asks for a recovery code or key. When we generate it for the first time, it provides the recovery key. We have to save that key to reset it. If we do not save it, the end user cannot automatically change it.

He has to raise a ticket for the administrator, and the administrator has to reset it from the console side. It has to be made simple so that the end user can easily change his recovery key.

I have been using Delinea Secret Server for the last three months.

I rate the solution’s stability a nine out of ten.

Delinea Secret Server is mainly suitable for medium and large companies.

I rate the solution’s scalability a nine out of ten.

The solution's initial setup is very simple. Recently, I upgraded the tool from 11.2 to 11.7. It's very simple to configure and upgrade the solution.

I would recommend the solution to other users because it is easy, and the console is very comfortable.

Overall, I rate the solution an eight out of ten.

Hybrid Cloud

We use Delinea Secret Server for pharmacy equipment management. We use a secret vault. We use it as a temporary hold, and we use it for password rotation.

I like that you can change the password remotely.

It would be better if they had a Linux version of the secret server.

I have been using Delinea Secret Server for about a year.

Delinea Secret Server is a stable solution.

On a scale from one to ten, I would give stability a nine.

Delinea Secret Server is very scalable. We have about 20 users using this solution.

On a scale from one to ten, I would give scalability an eight.

The initial setup is straightforward. It took us about a day to deploy this solution.

On a scale from one to ten, I would give the initial setup an eight.

We implemented this solution. You need a team of three professionals to deploy this solution. Two people can maintain this solution.

We have seen a return on investment.

I would give the price a four on a scale from one to ten, with one being the cheapest and ten being the most expensive. We pay for the license on a yearly basis, and we paid for three years. It costs around 5000 a year.

I would tell potential users to keep customization flexible using the power shell. This is a good one.

On a scale from one to ten, I would give Delinea Secret Server a nine.

Hybrid Cloud

It provides holistic Secret management for PAM solutions. We can have control over our network secrets and be sure that access to your critical servers isn't gained haphazardly by anyone on your network. It also helps with compliance with security standards for privileged devices. It offers a safer, more secure environment for reporting and implementation of secrets. When it comes to managing critical servers and sandboxes, like Ascentia access, you can easily manage them and put proper identity governance across all of them. This applies to both internal and external users, including third-party vendors.

It's a good, very good, superb even product, but the challenge for me with Delinea is that I may not be able to pitch it to an account with a low budget for PAM. Delinea is a good technical solution, but those with experience, especially in Thycotic, will find it easy to use Delinea.

I've known Delinea for about two or three years now. I've had personal interactions with stakeholders in the organization, both at the sales and technical levels.

It is a stable solution.

It is a scalable solution.

I'm familiar with three main PAM solutions: Delinea, BeyondTrust, and WALLIX. I had the opportunity to work with them last year. However, the issue with Delinea is the cost. It's quite expensive compared to the others. And that's all. So, the pricing could be improved.

It's not difficult to set up. It should be able to be done within two days without any issues. It's a very large enterprise solution, so the exact setup time will depend on the company and the environment where it's being installed. But it shouldn't take more than two to three days at most.

Delinea has a good technical team that can handle deployment and maintenance. They also have well-trained partners who can do it. So deployment and maintenance are not an issue at all.

It's very expensive. In the Nigerian market, the adoption of Delinea depends largely on an organization's budget. If they have the financial capacity, they might consider Delinea as a viable option.

Delinea Secret Server is a top-notch solution. The only reason some organizations don't go for it is because of the cost. It's priced in dollars, and with the foreign exchange rate in Nigeria, it becomes very expensive. If an organization sees a solution that works just as well at a lower cost, they'll likely go with the more affordable option.

The licensing costs are on a yearly basis.

Delinea is good, and I would recommend it to financial organizations or those in similar industries. It really depends on their budget. If they have a larger budget, then Delinea is worth considering. Moreover, I would suggest that you just need to be familiar with the solution. It's a bit technical, so you need to know your way around it. If you're familiar with it, it'll be easier for them to integrate it. It's a very good solution, especially for the financial industry, but if you're not familiar with it, you might find it difficult. That's just my take on it. Overall, I would rate the solution an eight out of ten.

Hybrid Cloud

We are selling this solution. Different customers have different use cases for it, which vary from our own. We do not use it for our organization; rather, we deploy and configure it for our customers to whom we sell it.

I have large-scale clients.

The most valuable feature is the user experience. The platform offers a native user experience, which means that users don't have to change their behavior or install any additional software or agents.

Moreover, Delinea manages the secrets, not the assets.

An area for improvement in Delinea Secret Server is its integration with ICAP servers. This integration would help in scanning for transfers and determining if they are one-way or not, and whether they contain values. Additionally, there is a need to enforce the copy-based policy across all secrets in the Delinea Secret Server platform, instead of having it as a personal configuration.

I have been using this solution for seven years. I am currently working with the latest version.

I would rate stability an eight out of ten.

I would rate scalability a ten out of ten.

The customer service and support was really good. 

Positive

The initial setup is really easy. I would rate it a ten out of ten.

It took one month to deploy. The process was straightforward and only one person was required to deploy the solution.

The pricing model is within the market average. I would rate it a three out of ten, where ten is the most expensive, and zero is very cheap.

I would advise people to use cloud-version because it has more features.

Overall, I would rate the solution a ten out of ten.

Hybrid Cloud

Microsoft Azure

In my company, Delinea Secret Server was primarily used for accessing websites with credentials that were shared among the team.

Guaranteeing that the passwords were kept up to date and not known to the users increased the security around the solution and the infrastructure.

The ease of granting access to a secret without having to share the actual password and the password rotation were the main features I found effective for password management.

Cybersecurity is constantly evolving, so there will be features needed in the future. There is space to use AI in several aspects of the solution, however, I can't pinpoint which ones.

I was using Delinea Secret Server for six years.

The stability of the solution was good.

For small companies, the complexity of the solution may be heavy. I would recommend it for medium to large companies due to its complexity versus the rewards.

The technical support by Delinea was good.

Positive

The initial setup was fairly straightforward and easy to deploy.

I did not take part in the deployment, so I can't provide details on the implementation team.

The pricing was fair, and maintenance or support was included in the subscription.

I was also looking into Keeper to compare features and see how they differ.

I would recommend Delinea Secret Server to medium to large companies, however, for smaller ones, there are likely easier solutions to use.

I'd rate the solution nine out of ten.

On-premises

I use it for laboratory practice before implementing it for end-users. Specifically, I use the Linux server to discover related accounts in our domain, pull them into the solution, manage their passwords, carry out session monitoring, and practice workflow, which allows for leading access to better-trained individuals when needed. I also make presentations to clients concerning this type of solution.

One of the features I find most valuable is workflow, which allows you to configure the solution to have multiple approvals. For example, if one person approves something, it can be set up so that others must confirm it as well.

In terms of the user interface, it's good. However, installation can sometimes be difficult, depending on the environment. We are deploying it in our own private laboratory, not as a secret server cloud. 

Additionally, CyberArk has a more robust site and development team compared to Delinea. They also provide more educational resources on recent happenings in cybersecurity, the latest attacks, newsletters that educate people in the field, and how to create two opportunities. Delinea could improve in research and development and educate the public on recent trends in the industry.

I have been using Delinea Secret Server for a year now. 

It is a stable solution. I would rate it an eight out of ten. 

For scalability, I would rate it a nine out of ten. Secret Server or Delinea comes with a range of product suites that can complement each other in terms of work. You have Secret Server; you have Business Behavior Analysis; you have Account Spectrum Manager, and all of them work hand in hand. I can say that it's a bit scalable, and, yeah, it's very much scalable.

I had issues with the discovery of a particular service account with a particular dependency during a proof of concept with a client in the past. I had to contact email support for that, but upon further investigation, we discovered that it was an issue with UPS at support dot net, and I think that was what caused the problem.

If you're installing Secret Server, you could pay it up to anything, say, 40 to 60 minutes later.

If you're requesting licenses or pricing, then you have to fill out a questionnaire that they try to gain insight into what your environment is like, what you're trying to discover, and what you're trying to manage. I like this approach. 

So I have a client currently using CyberArk and trying to switch to Secret Server. So, according to them, CyberArk is a bit expensive compared to Secret Server.

However, in my personal opinion, Delinea's technology can be costly. Delinea Secret Server is a relatively expensive product due to its advanced capabilities compared to more basic solutions like ManageEngine PAM360, considered a lower-priced option in the industry.

I haven't used comparable solutions to know if there is any other one better than Delinea Secret Server. But it's a nice solution I'm comfortable with, and I can always give it an eight, which is fair enough because I wouldn't say ten, as I have not used cyber activities or a couple of products to be able to say, yeah, I prefer this about this. It's a nice solution. It can give you what you want and meet compliance requirements.

However, I would recommend using the solution because there is not much of a learning curve with Delinea. 

On-premises

We are a Thycotic partner. We use Thycotic extensively, and we also do a lot of implementations for them. Generally, it is for privilege access management and session recording capabilities. 

A few clients have used it as a proxy capability, and the functionality there is that the privileged accounts have access from their workstations to the servers. In order to get access, they have to be basically proxied through Thycotic for an SSH or RDP connection, and then you have a control capability for auditing and session recording.

We have used pretty much every version since 2018, including the latest version. We have deployed it to AWS and on-prem.

I like that it is Windows-based. It is good that primarily, it is not an appliance. Some of the other applications in the space, such as a Quest Software CPAM or a Safeguard, are appliances, so you can't deploy the ends of them. With Thycotic, you can either install your Temporal Protection module physically in the VM host, or you can use BouncyCastle for high-security module capabilities.

One thing that I wish they would do is to have a Kubernetes or container-based deployment supported, but they're not quite there yet. Containerization or support for containerization would be fantastic.

I have been using this solution since 2018.

There is nothing major. There were minor things that were really edge cases. We've had an issue in 2019 where if you went through the web interface to change your password, the agent that actually did the password change on the backend would go and make the change to the main controller or the active directory domain controller. After that, without waiting long enough for the change to finish committing, meaning waiting for zero nanoseconds, it would go and check to see if the change had been accomplished. So, they introduced a slight delay of two to three milliseconds, and that fixed the problem. It was really straightforward, but it took a little while to demonstrate what the actual problem was.

With our latest versions, the scalability is very good. They have a scale-out and scale-up capability depending on what your needs are and how distributed you want the capabilities to be. I don't know any other products on the market that are better at scaling.

We have deployed it to small organizations with 10,000 users. Our largest organization has 10 million users.

I would rate them a nine out of 10. You get forwarded around a bit, but you actually get somebody who can really help and solve the problem for you.

It is very straightforward. We generally do an automated deployment by using a script-based capability that we've created. It works out really well. 

It is a kind of self-serving advice, but I would advise getting a partner to deploy it for you. There are a lot of really good partners out there, not just us.

In terms of the maturity of their product, there are a lot of Enterprise capabilities that they haven't yet brought into the market, but after it has been called out to them that there is a customer who needs a capability, they're very quick and responsive around doing development to get that capability in, which is something I like. There was an Enterprise scalability capability where you have high availability and multi-site failover. One of the versions that they had back in the 2018 and 2019 timeframe did not support that capability. We called out some recommendations to them, and they had it in the product in the next major revision.

I would rate Thycotic Secret Server a 10 out of 10 because I am not familiar with any products that are capable of going on-prem and have a superior function set.

I use Delinea Secret Server for demonstration purposes while talking to clients, for internet access management, and user monitoring.

I like that it's user-friendly.

Support could be better. I have heard about a lot of problems in the Bangladesh market. People are saying that there are support issues. So, Delinea should focus on support and services.

I have been using Delinea Secret Server for one or two months.

Delinea Secret Server is a stable solution.

Delinea Secret Server is a scalable solution.

Technical support could be better. The support centers can't solve the issues.

On a scale from one to five, I will give technical support a two.

Neutral

The initial setup is straightforward. For demonstration purposes, it does not take much time. But it takes up to four months to go into production.

I would tell potential users that they should focus on local partners with a local support team. This is becasue Delinea can't resolve the issues these days. I have seen a lot of cases in Bangladesh where the OEM can't resolve the issues. The application server is full of logs, and sometimes it needs to clear all the logs and files because it can become slow. 

On a scale from one to ten, I would give Delinea Secret Server a six.

On-premises