Delinea Secret Server Reviews

We intend to replace our pairing password management solution with something more enterprise-friendly.

We are currently conducting a demonstration with Thycotic Secret Server.

I've only used this solution a few times as a demo and haven't explored everything it has to offer, but I have experience integrating it with our Active Directory and setting up the server.

I like the one-way hash, as well as the ability to store it in the cloud and access it from anywhere.

I like the fact that you don't have to have separate databases for each department in your organization. 

They have one central location, that they all go to it. 

They all go to the same central location. If they leave, we can disable their account, reset their password, and integrate it with our Active Directory.

At this early stage, and based on my demo experience over the last two weeks, it appears to have more features than we require, but we can grow into it.

It's a great product. It seems that you could do your privileged access and things like that where you do the IEM. You could also make it so that those individuals have access for a set period of time to do their administration. These are the types of features we haven't really used, but I can see them being very useful. I can also see where they're going with this product, which is an all-in-one solution. 

It appears to be well-developed.

Although the password policy was interesting, the default setting was inadequate. As a result, we had to change it to be 20 characters with symbols. It was an odd process, but it was relatively simple to adjust.

I have been using the latest version of Thycotic Secret Server for a couple of weeks.

Thycotic Secret Server is a stable solution. We didn't encounter any bugs or glitches.

It appears to be pretty easy to scale.

We have fewer than ten people to test the demo in our organization.

We may decide to use this solution, and we are attempting to budget for it. We must sell the features and show that the extra cost is justified.

I have not contacted technical support. We had our representative involved, and he brought in a technical person to assist with the build, as well as being available to answer questions.

We are working with Jira.

The initial setup was fairly simple.

We are going from a free product, which isn't necessarily a fair comparison because it brings many things to the table, but it appears to be reasonably priced.

It would be beneficial if it were reduced.

I haven't tested many other products, but this one appears to be quite good. I believe it is comparable in the industry.

I haven't used this solution a lot, just in a demo capacity. I haven't explored all that it can office. I have worked on the integration with our Active Directory, and we set up the server.

I would rate Thycotic Secret Server an eight out of ten.

We primarily use this product for password cycling.

What I like best about this product is the interface.

I think that the main interface should integrate better with non-standard applications and clients, to connect with other systems. This would help to create a safe connection with non-standard systems.

I would like the capability to assign rights directly to the target system. This is a different topic because, at this point, it only handles credentials. However, the goal is to be able to create the account and assign the correct access rights on an application or a system.

I have been working with Thycotic Secret Server for one year.

We have experienced no issues in terms of stability.

It is quite scalable. We are not a big company and we had no issues with scalability.

Technical support helps us regularly. We have not had any big issues, so overall, no problems.

We did not use another solution before this one. It was the first of this type.

I would say that the initial setup is complex because it most requires modifying the company, and it took two years to deploy. The issue in this case is not the product. Rather, it is more the company.

The pricing is standard in this business and we have no complaints about it.

This is a product that I recommend. My advice for anybody who is implementing it is to have full management support and to do good internal marketing so that the solution is accepted by everyone.

I would rate this solution an eight out of ten.

• Heart beats – it tells me when passwords on file are no longer working. This could be an oversight, but could also be a sign of hacker activity.
• Secret Expiry – reports on passwords that haven’t been changed and may be out of policy.
• Remote Password Changing – along with Secret Expiry, this enables me to stay compliant with password change policies.
• Network Discovery – scans networked machines for accounts, bringing machines in to password policy compliance, and uncovering unknown or backdoor accounts. It also enables the discovery of the total reach of an account, i.e. a service account for which you dare not change the password as you don’t fully know the implications of missing an instance of the account that could fail critical operations.

We previously had a very lax password policy, and passwords were stored in Excel spreadsheets. Passwords were often not documented, or the documented password was not updated if changed. We now have a much stricter, safer password policy. Secret Server has improved security, productivity and helped achieve a much higher state of compliance.

Session recording could offer more control and block certain actions or commands.

I have experience of other products that focus on session recording, so I’m aware of what advanced functionality can be achieved.
Specifically, I’m referring to:

* blacklisting and/or whitelisting certain commands
* OCR capabilities

Now I know these aren’t currently supported, but they may be available in future releases.

We have used this solution for more than three years.

Very occasionally indexes won’t contain all the search results expected.

We have not encountered any scalability issues as this is a highly scalable product.

Technical support is good. Online and offline documentation is clear and well written. Support technicians are punctual and friendly.

I have worked with customers of other solutions. They found it hard to separate accounts assigned to the same asset for different teams. For example, a server has SQL and database accounts. These credentials would all be visible to anyone with access to the server asset which isn’t a desirable situation. DBA has access to a local administrator account. Server admin has access to the payroll DB account!

Based entirely on the Microsoft stack (IIS, MS-SQL), installation is quick and easy.

Pricing is very flexible. Download the free trial version. You can downgrade to the free version (it’s free for life!) or pay for the exact feature set you require.

We evaluated LastPass Enterprise, RoboForm, Password Manager Pro, Kaspersky Password Manager and CyberArk.

I’d recommend you engage a reseller to discuss your requirements, and download the free trial version.

• Ease of installation
• Folders
• Secret attachments
• Custom templates and password policies
• Custom reporting and scheduling
• Discovery service
• Too many great features to list here

• Better adoption of PAM

Referring to Secret Server v10, we want the ability to add subfolders to the "\Personal Folders" container. We had to rename it to "\Personal Secrets" to avoid confusion. Otherwise, you can create as many top-level folders and subfolders as you like. A minor annoyance for an otherwise awesome product.

I have used it for 2+ years.

No issues during deployment: Get your SQL cluster deployed, check your prerequisites, run the installer. Log in and start configuring. That was really it.

We have not encountered any stability issues; been rock solid since production deployment.

We have not encountered any scalability issues. Performance issues with a few hundred users and thousands of secrets has been negligible; running on hardware.

Customer service is excellent. Customer relations and tech support have both been quick to respond and knowledgeable.

I rate technical support 8/10. There's always room for improvement when it comes to tech support, but compared to other big name companies, Thycotic tech support stands out among the top.

We had another product before switching. Secret Server crushed the old solution.

Initial setup was very straightforward compared to the competition.

We implemented it ourselves; it was pretty straightforward.

Look at their edition/feature comparison chart and decide which version suits you best. Note that clustering requires the Enterprise Plus edition. You're also allowed to install a lab and QA environment with your license which will help with pre-prod testing.

Before choosing, we looked at other vendors such as LastPass, 1Password, CyberArk, PasswordManager, PasswordState, BeyondTrust, Quest, CA, etc. In the end, the cost, features, and ease of deployment simply beat the competition.

An enterprise-class PAM system will always have complexities to deal with. However, some competitive products literally require a professional services engineer to come onsite if you want it done properly. Secret Server was comparatively easy to setup and get running on our own.

Thycotic Secret Server is an excellent product; we're very happy with it!

One valuable feature is that it will support a dedicated database. Delinea provides multiple features, like reporting and remote password changes.

The UI needs improvement because the interface is a little clumsy.

I've been using it for almost two years.

It's stable.

It is scalable and is better than other solutions. We have 400 users in our company.

We can't say that technical support is good because they respond according to their time zone, and we are not in the same time zone. I would give them a six out of ten.

Neutral

The deployment was not difficult and took one and a half months.

We have an enterprise license as well as a user license and a support license.

I can recommend this solution and will rate it at eight on a scale from one to ten.

It works for us, and the administration part, while functional, seems less straightforward, especially during upgrades. That's what I've noticed.  

We use Delinea Secret Server, but not to its full capacity. We are still exploring other products due to company policies. At this stage, we're not actively looking at such products. My main objective was to get some initial information and update my knowledge for future projects. 

We faced some upgrade issues, especially during the management and administration parts. 

I found it less straightforward than on many other platforms, even outside password managers.  

I have experience with this solution. We have a small footprint of Delinea in my company.

I've worked with both Delinea and BeyondTrust. Basically, we're just trying to understand the possibilities and plan for future projects. But it's not serious at this stage due to budget and priorities. However, I might look at them in the future. In the meantime, I am familiar with some password manager solutions.

I've only used some basic password vaults, nothing major.

It works for what it's designed for. So, I would rate it a seven out of ten, because I can't compare it to other programs due to limited experience. However, it's not a bad product.

We use Delinea Secret Server for password rotations for end-point access.

The most valuable feature of Delinea Secret Server is secret password management.

Delinea Secret Server can improve by extending the monitoring policies and making the performance better.

I have been using Delinea Secret Server for approximately six months.

The stability of the Delinea Secret Server is okay, but other solutions are better, such as BeyondTrust.

Delinea Secret Server is scalable.

We have approximately 1,000 end-users using this solution.

I have not contacted the support from Delinea Secret Server.

The initial setup of the Delinea Secret Server is easy. The installation and other processes take approximately three to four hours.

There is an annual license needed to use Delinea Secret Server.

My company decided to use this solution because of its privileged access management.

I recommend this solution to others.

I rate Delinea Secret Server a ten out of ten.

It's a password vault.

We use it to search for service accounts across the network. It has significantly helped with staff productivity because it's a less manual process now.

Our security program is about two years old so we're relatively immature, but this was a tremendous step towards being able to securely store passwords.

The most valuable feature of this solution is the random changing of passwords.

We could definitely use some help with API tokenization. If we had a way to store tokens that would be fabulous.

The stability is pretty good, we like it.

The scalability is pretty good.

We haven't used technical support.

We didn't use anything previously, we just knew we needed a vault. We went with Thycotic based on ease of use and we thought their feature set was a little more robust.

I don't remember the initial setup being very complex.

We used a consultant for the deployment, Alcom. Our experience with them was positive.

It isn't terribly expensive.

CyberArk was on our shortlist.

Just get it. It works well.

I would rate this solution at nine out of ten. It does everything we knew it would, but it would be nice if they added some additional features.