Delinea Privilege Manager (formerly Thycotic Privilege Manager) is an endpoint privileged access management tool that enables users to mitigate malware and modern security threats from exploiting applications by removing local administrative rights from endpoints via a cloud-based solution. It is also available via an on-premise version.
N/A
Delinea Secret Server
Score 9.0 out of 10
N/A
Secret Server (originally from Thycotic, now from Delinea since the 2021 Thycotic merger with Centrify) is an enterprise password management application, which is available with either a cloud-based or on-premise deployment which emphasizes fast deployment, scalability, and simplicity.
The more endpoints I managed with Delinea Privilege Manager, the less reliable it became. When initially pilot testing the platform with just a small number of PCs, it worked reliably, but as we added more and more endpoints it became very inconsistent as to how accurately endpoints would receive updated rules and configs.
Great for managing access to secrets and servers and is more secure than storing passwords in a browser. The browser plugin to autofill passwords works well. Being able to schedule access ahead of time is a big plus for me as I can be forgetful. If you want a lightweight password vault, however, it may not be the best choice.
The sharing functionality NEEDS improvement. We share most passwords at a group level, but then it becomes impossible to share them with a dynamic group and one or two one-off people as well. This is a major shortcoming.
I don't love the interface. I feel like there is an attempt at a dashboard, but it is really not effective.
I've heard, but never seen, that the software can actually change passwords in the target systems. If this is part of its deliverable, I do not know how to use it, and I don't know how you would do that. Seems like a great feature for password management.
There were too many times over the years where something would be setup properly, but still not work correctly. Even after Delinea support would work on it, they still couldn't get it to work. Often times the solution involved me digging through source files or XML config files and editing them manually to get certain things to work and then passing the solution on to their support.
My rating is purely based on the configurational activities, as feature-wise delineation has all the features that are very beneficial for customers, though the implementation is a bit more manual work, which can be reduced with a low-code platform. Along with that, we can have a better UI to have intuitiveness and can manage the platform for shared customers in a better way. Overall, it is a very good tool for PAM.
CyberArk's solution is about on par with Delinea's. We currently are using a lesser known product called AutoElevate by CyberFox. It is easier to manage on the backend and more reliable.
We explored Jum Cloud and ManageEngine. Delinea is comparable in terms of features; however, the implementation of these tools differs. Delinea is a bit more manual than the other two. However, the licensing and overall ROI are better for Delinea, as it provides almost all market-ready solutions and has a robust licensing mechanism, resulting in a better ROI.
The best return on investment is that all of our passwords are now up to date and usable by everyone in the department. The old way could only be accessed by one person at a time, and it was frequently wrong.
We save a lot of time in IT by having the passwords easily accessible. We also meet our security audit objectives by using this app instead of, say, an Excel spreadsheet or an old application that is no longer supported, as was the case at a previous workplace.
With the size of our department, we don't have enough passwords to go beyond the free version. It's fully functional, but it costs nothing (except some resources on a VM). ROI on free can't be beat.