Overview
Delinea Secret Server is the credential vault at the centre of the Delinea Platform, the company formed when Thycotic and Centrify merged in 2021 under TPG Capital. The product provides enterprise-grade credential storage, automated password rotation, session recording, and access workflows. Delinea positions Secret Server as the operationally simpler alternative to CyberArk Privileged Access Manager, particularly for mid-market and lower-enterprise estates.
Delinea has been recognised as a Leader in the Gartner Magic Quadrant for Privileged Access Management alongside CyberArk and BeyondTrust. The platform includes Secret Server (vault), Privilege Manager (endpoint privilege management), Privileged Behavior Analytics, DevOps Secrets Vault, and the Delinea Platform unified console launched in 2023. Customers typically choose Delinea when CyberArk's complexity or cost is prohibitive but when JumpCloud or Entra-native solutions lack the depth required for serious privileged-account programmes.
Key Features
- Enterprise credential vault with AES-256 encryption
- Automated password rotation with discovery scanning
- Session recording with searchable transcripts
- Privileged session launching via web, RDP, and SSH proxies
- Multi-factor authentication for vault access
- Workflow-driven access requests with approval routing
- Discovery scanning for local admin and service accounts
- REST API and PowerShell SDK for automation
- DevOps Secrets Vault for CI/CD pipelines
- Connection Manager for jump-host-style access
- Privilege Manager endpoint agent for least-privilege
- Delinea Platform unified console for vault, EPM, and analytics
Pricing
| Edition | Model | Typical Cost |
|---|---|---|
| Secret Server Cloud Premium | Per privileged account / month | From $12 |
| Secret Server Cloud Platinum | Per privileged account / month | From $18 |
| Secret Server Self-Hosted | Annual subscription | Custom quote |
| Privilege Manager (EPM) | Per endpoint / year | Custom quote |
Pricing verified from reseller catalogues May 2026. Buyers commonly negotiate 20–40% below list with multi-year terms. Self-hosted licensing is structured around accounts under management and chosen modules.
Strengths
- Significantly faster initial deployment than CyberArk; many customers go live in 4–8 weeks
- Easier daily administration; the UI is broadly considered the most accessible in the PAM market
- Strong PowerShell and REST coverage for DevOps and automation use cases
- Cloud and self-hosted parity is genuine; few features are cloud-only
- Recognised Leader in the Gartner MQ for PAM
Limitations
- Cloud entitlements management is less mature than CyberArk Cloud Entitlements Manager
- Advanced session recording analytics require the Platinum tier
- DevOps Secrets Vault adoption is lower than CyberArk Conjur or HashiCorp Vault
- Customer reports of inconsistent post-merger support during the 2022–2023 period have lingered in analyst reports
- Enterprise deployments above 20,000 privileged accounts often hit administrative scaling limits