Delinea Secret Server Reviews

We use the solution to store all of our secrets. For example, passwords, usernames, and other credentials. These credentials can be from many places, such as service accounts, bank accounts, and key pairs. It also has the functionality if, for example, a contractor requests to log into a specific server, they would use the Secret Server to log in to the server session that is monitored and he or she would be logging in without the actual real credentials. It is also on a rotating password system.

I have found most valuable the automatic scheduled password rotation and remote desktop monitoring. Additionally, the documentation is readily available and easy to find and the dashboard is straightforward.

I would like to see scheduled reports in a future release.

I have been using this solution within the past 12 months.

I have found the solution to be very stable.

You can set up two different servers and the process is straightforward. The solution is scalable and we have 70 users using it in my organization.

We might increase usage in the future but it all depends because currently all of the operations teams have been provided for. If the operations team grows, there would be room for more usage.

The technical support needs improvement. For example, if you have any problems on the server configuring the IIS, they would provide you very limited details and they would tell you the problem is on your end. They are limited to only supporting their application, even if you have the slightest problem assessing their application through IIS they will refer you to contact Microsoft.

Additionally, the sales team could be more friendly and helpful.

I would rate the technical support of Thycotic Secret Server a seven out of ten.

The installation was straightforward.

There is an annual license fee per user and the price is fair.

I rate Thycotic Secret Server an eight out of ten.

The product can be improved by reducing the number of updates provided and limiting notifications to mainly major updates.

I rate customer service and support as six out of ten.

Neutral

The initial setup was a bit complex. I rate the process as six out of ten.

The licensing costs are expensive for this solution. I rate it five out of ten.

I rate the solution seven out of ten. The solution is good but can be improved by reducing the number of updates provided and limiting notifications to mainly major updates.

We are a Thycotic partner. We use Thycotic extensively, and we also do a lot of implementations for them. Generally, it is for privilege access management and session recording capabilities. 

A few clients have used it as a proxy capability, and the functionality there is that the privileged accounts have access from their workstations to the servers. In order to get access, they have to be basically proxied through Thycotic for an SSH or RDP connection, and then you have a control capability for auditing and session recording.

We have used pretty much every version since 2018, including the latest version. We have deployed it to AWS and on-prem.

I like that it is Windows-based. It is good that primarily, it is not an appliance. Some of the other applications in the space, such as a Quest Software CPAM or a Safeguard, are appliances, so you can't deploy the ends of them. With Thycotic, you can either install your Temporal Protection module physically in the VM host, or you can use BouncyCastle for high-security module capabilities.

One thing that I wish they would do is to have a Kubernetes or container-based deployment supported, but they're not quite there yet. Containerization or support for containerization would be fantastic.

I have been using this solution since 2018.

There is nothing major. There were minor things that were really edge cases. We've had an issue in 2019 where if you went through the web interface to change your password, the agent that actually did the password change on the backend would go and make the change to the main controller or the active directory domain controller. After that, without waiting long enough for the change to finish committing, meaning waiting for zero nanoseconds, it would go and check to see if the change had been accomplished. So, they introduced a slight delay of two to three milliseconds, and that fixed the problem. It was really straightforward, but it took a little while to demonstrate what the actual problem was.

With our latest versions, the scalability is very good. They have a scale-out and scale-up capability depending on what your needs are and how distributed you want the capabilities to be. I don't know any other products on the market that are better at scaling.

We have deployed it to small organizations with 10,000 users. Our largest organization has 10 million users.

I would rate them a nine out of 10. You get forwarded around a bit, but you actually get somebody who can really help and solve the problem for you.

It is very straightforward. We generally do an automated deployment by using a script-based capability that we've created. It works out really well. 

It is a kind of self-serving advice, but I would advise getting a partner to deploy it for you. There are a lot of really good partners out there, not just us.

In terms of the maturity of their product, there are a lot of Enterprise capabilities that they haven't yet brought into the market, but after it has been called out to them that there is a customer who needs a capability, they're very quick and responsive around doing development to get that capability in, which is something I like. There was an Enterprise scalability capability where you have high availability and multi-site failover. One of the versions that they had back in the 2018 and 2019 timeframe did not support that capability. We called out some recommendations to them, and they had it in the product in the next major revision.

I would rate Thycotic Secret Server a 10 out of 10 because I am not familiar with any products that are capable of going on-prem and have a superior function set.

We primarily use this product for password cycling.

What I like best about this product is the interface.

I think that the main interface should integrate better with non-standard applications and clients, to connect with other systems. This would help to create a safe connection with non-standard systems.

I would like the capability to assign rights directly to the target system. This is a different topic because, at this point, it only handles credentials. However, the goal is to be able to create the account and assign the correct access rights on an application or a system.

I have been working with Thycotic Secret Server for one year.

We have experienced no issues in terms of stability.

It is quite scalable. We are not a big company and we had no issues with scalability.

Technical support helps us regularly. We have not had any big issues, so overall, no problems.

We did not use another solution before this one. It was the first of this type.

I would say that the initial setup is complex because it most requires modifying the company, and it took two years to deploy. The issue in this case is not the product. Rather, it is more the company.

The pricing is standard in this business and we have no complaints about it.

This is a product that I recommend. My advice for anybody who is implementing it is to have full management support and to do good internal marketing so that the solution is accepted by everyone.

I would rate this solution an eight out of ten.

It works for us, and the administration part, while functional, seems less straightforward, especially during upgrades. That's what I've noticed.  

We use Delinea Secret Server, but not to its full capacity. We are still exploring other products due to company policies. At this stage, we're not actively looking at such products. My main objective was to get some initial information and update my knowledge for future projects. 

We faced some upgrade issues, especially during the management and administration parts. 

I found it less straightforward than on many other platforms, even outside password managers.  

I have experience with this solution. We have a small footprint of Delinea in my company.

I've worked with both Delinea and BeyondTrust. Basically, we're just trying to understand the possibilities and plan for future projects. But it's not serious at this stage due to budget and priorities. However, I might look at them in the future. In the meantime, I am familiar with some password manager solutions.

I've only used some basic password vaults, nothing major.

It works for what it's designed for. So, I would rate it a seven out of ten, because I can't compare it to other programs due to limited experience. However, it's not a bad product.

We use the solution for automatic password rotation and managing system admin and database access.

The solution's most valuable feature is video recording. It is crucial for evidence and compliance purposes.

The solution's remote support feature needs improvement.

The solution is stable.

We have 30 solution users in our organization. They include system, network, and database administrators.

The solution's technical support is good.

Positive

The solution's initial setup process is easy.

The solution is low-cost than other vendors. We purchase a yearly subscription for it.

The solution has all the essential features to secure any environment. I rate it an eight.

We intend to replace our pairing password management solution with something more enterprise-friendly.

We are currently conducting a demonstration with Thycotic Secret Server.

I've only used this solution a few times as a demo and haven't explored everything it has to offer, but I have experience integrating it with our Active Directory and setting up the server.

I like the one-way hash, as well as the ability to store it in the cloud and access it from anywhere.

I like the fact that you don't have to have separate databases for each department in your organization. 

They have one central location, that they all go to it. 

They all go to the same central location. If they leave, we can disable their account, reset their password, and integrate it with our Active Directory.

At this early stage, and based on my demo experience over the last two weeks, it appears to have more features than we require, but we can grow into it.

It's a great product. It seems that you could do your privileged access and things like that where you do the IEM. You could also make it so that those individuals have access for a set period of time to do their administration. These are the types of features we haven't really used, but I can see them being very useful. I can also see where they're going with this product, which is an all-in-one solution. 

It appears to be well-developed.

Although the password policy was interesting, the default setting was inadequate. As a result, we had to change it to be 20 characters with symbols. It was an odd process, but it was relatively simple to adjust.

I have been using the latest version of Thycotic Secret Server for a couple of weeks.

Thycotic Secret Server is a stable solution. We didn't encounter any bugs or glitches.

It appears to be pretty easy to scale.

We have fewer than ten people to test the demo in our organization.

We may decide to use this solution, and we are attempting to budget for it. We must sell the features and show that the extra cost is justified.

I have not contacted technical support. We had our representative involved, and he brought in a technical person to assist with the build, as well as being available to answer questions.

We are working with Jira.

The initial setup was fairly simple.

We are going from a free product, which isn't necessarily a fair comparison because it brings many things to the table, but it appears to be reasonably priced.

It would be beneficial if it were reduced.

I haven't tested many other products, but this one appears to be quite good. I believe it is comparable in the industry.

I haven't used this solution a lot, just in a demo capacity. I haven't explored all that it can office. I have worked on the integration with our Active Directory, and we set up the server.

I would rate Thycotic Secret Server an eight out of ten.

It's a password vault.

We use it to search for service accounts across the network. It has significantly helped with staff productivity because it's a less manual process now.

Our security program is about two years old so we're relatively immature, but this was a tremendous step towards being able to securely store passwords.

The most valuable feature of this solution is the random changing of passwords.

We could definitely use some help with API tokenization. If we had a way to store tokens that would be fabulous.

The stability is pretty good, we like it.

The scalability is pretty good.

We haven't used technical support.

We didn't use anything previously, we just knew we needed a vault. We went with Thycotic based on ease of use and we thought their feature set was a little more robust.

I don't remember the initial setup being very complex.

We used a consultant for the deployment, Alcom. Our experience with them was positive.

It isn't terribly expensive.

CyberArk was on our shortlist.

Just get it. It works well.

I would rate this solution at nine out of ten. It does everything we knew it would, but it would be nice if they added some additional features.