Name: Delinea Secret Server
Brand: Delinea
Rating: 4.6 (1379 reviews)

Published Oct 9, 2026

01Common complaints

1) When only lightweight password management is required: For teams seeking a basic team password manager without PAM governance, alternatives focused on team password management may provide better end-user experience and simpler licensing. 2) When continuous, rock-solid 24/7 availability is a strict requirement and any intermittent reliability is unacceptable: Some review feedback describes reliability concerns; prospective buyers should request SLA details, incident history, and run a high-load pilot. 3) When SSO/SAML is a mandatory feature with no tolerance for additional charges: Community feedback indicates that some SSO capabilities may be packaged in higher tiers; confirm feature inclusion in procurement. 4) When the organization lacks scripting or automation resources but expects deep automation out of the box: Some administrators report needing custom scripts for extensive automation scenarios. 5) When specific proxy or remote-access workflows (for example, HTTPS proxy) are mandatory and the product lacks native support: Confirm proxy and remote-access capabilities during evaluation.

Deal disqualifiers (poor fit)

Organizations that only require a lightweight team password manager without PAM governance
Organizations that cannot tolerate variable support experience or potential vendor-side update disruptions
Organizations that require features not supported in the product (for example, HTTPS proxy workflows) without a validated workaround

Security vulnerability / patching requirement (risk history)

A critical authentication bypass in 2024 affecting the SOAP API required rapid mitigation and upgrades. On-premises installations should ensure they apply vendor patches and verify remediation.

Product limitations frequently mentioned by users

Lack of HTTPS proxy support in some deployments.
Mobile app quality and mobile UX concerns reported by some reviewers.
End-user interface and search performance issues, including session timeouts and navigation friction.
Discovery may not identify all service accounts in some environments; additional manual onboarding may be required.

Vendor-acknowledged hardening considerations

The vendor provides security hardening guidance covering areas such as cookie management, disk encryption, and configuration settings; secure posture depends on correct configuration and operational controls.

API and integration surface

The product includes APIs and scripting references to support automation and integrations.
Community and vendor tooling ecosystems exist, but specific community tools should be evaluated for suitability and vendor support status.

02Why they buy

Unique selling points supported by user feedback (not solely vendor claims)

- Dependency-aware rotation for service accounts: Several reviewers have referenced features that manage service-account rotation and dependency handling, which can facilitate adoption of automated rotation. - Audit visibility and session evidence: Reviewers commonly cite audit trails and session recording as practical compliance and investigative tools when configured. - Deployment flexibility: Availability of both cloud and on-premises deployment options is commonly noted.

Claims requiring verification

Vendor marketing statements about rapid time-to-value or market leadership should be validated through pilot testing, procurement references, and independent reviews.

Areas where competitors may have advantages

End-user experience, browser extension behavior, and mobile UX are areas where some alternatives may outperform Secret Server according to user feedback.
Pricing transparency: Some competitors publish clear pricing tables, which may be advantageous for procurement and budgeting.

Why customers chose Secret Server (recurring reasons)

Commonly cited reasons across review platforms and community feedback include:

Central vault with role-based access control
Audit trails and compliance reporting
Password rotation and dependency handling for service accounts
Session recording and remote access controls where configured

03Field reports

Aggregated themes from review platforms and community feedback

Positive themes: - Centralized secrets management and rotation capabilities. - Audit visibility and reporting that aids compliance efforts. - Session recording and remote access logging in environments where those are configured. Constructive and negative themes: - Variability in reliability and uptime in some customer reports. - Licensing complexity and perceived high costs in community discussions. - End-user experience issues reported by some customers, including search and workflow friction. - Implementation and automation gaps that may require additional scripting.

Representative remarks (paraphrased)

- Some analyst reviews note strong additions to security stacks, citing centralized secrets management, automated rotation, and audit visibility. - Other reviewers note periods of inconsistency in platform reliability that can be problematic for continuous operations. - Product review sites highlight multi-cloud coverage, modern GUI elements, and positive interactions with support and development for some customers; however, other reviewers describe licensing as complex and note friction in managing seats and renewals. - Other review communities commonly reference audit trails, remote session recording, RBAC, and compartmentalization as valuable features, while also noting UI layout and onboarding pain points. - Community forum discussions are polarized; some users report the product significantly improves governance compared with unmanaged approaches, while others report dissatisfaction with pricing, support responsiveness, and operational reliability.

Why some customers left or considered leaving (churn drivers)

Recurring themes for churn or vendor replacement decisions include:

Perception of additional charges for features such as SAML/SSO
Concerns about reliability for 24/7 operations
End-user UI and search frustrations
Support quality perceived as variable
Preference for simpler or lower-cost solutions when only basic vaulting is required

Partner case example: Commvault integration

An industry outlet described Commvault integrating Delinea Secret Server to centralize control of backup and recovery credentials as operations move to cloud environments.

Critical evaluation:

The article describes integration value but does not provide quantified outcomes such as reduced incidents, time saved, or measurable risk reduction. Treat this as evidence of ecosystem integration rather than proof of ROI.

Vendor datasheets and solution briefs

Vendor-authored datasheets and solution briefs describe capabilities such as vaulting, discovery, and remote access. These materials are useful for capability mapping but typically do not disclose independent methodology or benchmarked comparative performance; validate claims through pilots and independent references.

Security incident as a cautionary case

A recent authentication bypass incident highlights the importance of patch management, segmentation, and reducing exposed endpoints (for example, SOAP services) in PAM architectures. Operational controls and rapid remediation processes are essential risk mitigations.

04Best fit

Company sizes

Mid-market to enterprise organizations with multi-team IT operations, regulatory obligations, or formal audit requirements.

Industries

IT services and managed service providers
Regulated industries (financial services, healthcare, government) and other sectors with compliance obligations
Manufacturing, energy/utilities, and other operational technology environments where privileged access governance is required

Roles and personas

Decision makers: CISO, Director of Security, IAM/PAM program owner
Administrators and end users: system administrators, network administrators, SRE/DevOps, helpdesk staff performing privileged tasks, and third-party vendors requiring controlled access

Pain points addressed

Replace unmanaged credential stores (for example, spreadsheets) and reduce standing privileged access
Credential rotation for service accounts and applications
Compliance evidence via audit trails and session logs
Privileged access workflows and approval processes

Qualification criteria (good fit)

Organizations that require both a secrets vault and governance features (workflows, auditing) rather than a simple password manager
Organizations able to invest in rollout design (RBAC model, rotation policies, break-glass, onboarding automation) and ongoing administration resources

05The pitch

What the product does (objective core value proposition)

Delinea Secret Server is a Privileged Access Management (PAM) vault focused on securing, managing, rotating, and auditing privileged credentials (human admin accounts, service accounts, application secrets, API keys) across hybrid environments. Core capabilities include centralized credential storage, access workflows (request/approval, check-out/check-in), password rotation, discovery of privileged accounts, and session/connection controls (RDP/SSH via browser-based remote access add-ons).

Target market and positioning

The vendor positions Secret Server for mid-market through enterprise IT and security teams that require auditability and governance beyond basic shared password storage. The product is offered with both cloud and on-premises deployment options and with tiered capabilities; vendor messaging highlights usability and relatively short deployment timelines, but such claims should be validated during procurement.

Get a comprehensive analysis of Delinea Secret Server including market position, competitive landscape, adoption trends, and peer benchmarks.

Download full report →