Delinea Secret Server vs One Identity Safeguard comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Delinea Secret Server
Ranking in Privileged Access Management (PAM)
2nd
Average Rating
8.2
Number of Reviews
47
Ranking in other categories
Enterprise Password Managers (6th)
One Identity Safeguard
Ranking in Privileged Access Management (PAM)
4th
Average Rating
8.2
Number of Reviews
39
Ranking in other categories
User Entity Behavior Analytics (UEBA) (6th)
 

Market share comparison

As of June 2024, in the Privileged Access Management (PAM) category, the market share of Delinea Secret Server is 11.6% and it decreased by 15.1% compared to the previous year. The market share of One Identity Safeguard is 6.9% and it increased by 25.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Privileged Access Management (PAM)
Unique Categories:
Enterprise Password Managers
3.5%
User Entity Behavior Analytics (UEBA)
1.6%
 

Q&A Highlights

AG
Aug 14, 2023
 

Featured Reviews

SI
Jul 29, 2022
Good for multi-platform support, easy to use and scale
Delinea Secret Server is good for multi-platform support and hybrid cloud environment, it supports a mix of Linux and Windows programs The secret template, password rotation, and recording sessions are the most valuable. They could improve the container platform and SPO. The cloud database…
Daniel Pettersson - PeerSpot reviewer
Jun 28, 2023
Provides us with centralized storage of secrets and credentials, and visibility into the use of privileged access
Safeguard, the way I see it, has two different parts: vaulting and sessions. And those two are running on different platforms. The vault itself is a locked-down Windows box, which isn't really causing any trouble. The session part is on a Linux box. They sell them separately, but together, they need to be more unified, at least from a UI perspective when you're using it as an administrator. There are some "legacy-level" menus and ways of using it that I don't really appreciate. We are using it completely web-based, not through a fat client. The browser experience of administrating SPS (Safeguard for Privileged Sessions) needs a lot of attention from an administrative perspective to make it easier. The readability of the system itself is quite poor. A user never really engages with that part. It's only the administrator, and maybe an auditor, who are subjected to using those menus and tools. So the SPS could be a lot easier to administrate and the parts should be unified, from a design perspective, so that I can recognize the systems as being part of the same package. They feel like they have been forced together.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Support is helpful."
"I find it really easy and computer confident, and the experience with the product is really good. Additionally, customizations are easy."
"It is able to manage storage and use of personal passwords."
"I like that it is Windows-based. It is good that primarily, it is not an appliance. Some of the other applications in the space, such as a Quest Software CPAM or a Safeguard, are appliances, so you can't deploy the ends of them. With Thycotic, you can either install your Temporal Protection module physically in the VM host, or you can use BouncyCastle for high-security module capabilities."
"The GUI interface is well-designed and user-friendly."
"I have found most valuable the automatic scheduled password rotation and remote desktop monitoring. Additionally, the documentation is readily available and easy to find and the dashboard is straightforward."
"We implemented the product for our privileged identities. We have configured them in check-in/check-out rotation. Delinea Secret Server rotates the password each time a privileged identity is checked in, making the password valid only for some time."
"The privileged access management module is the most reliable feature."
"It is generally easy-to-use and install."
"It has greatly helped improve our security posture. Safeguard has an option where it will reset passwords on service accounts, then go out to those servers where that service account is running as a service and update the password on it. That makes password changes very easy. We can regularly change passwords now and are planning on making it an annual activity, where all the people who own service accounts will go in and make sure all their passwords get changed, updated, and reset."
"The transparent mode for privileged sessions is a very good solution."
"It is easy to manage. There is a very logical, clear user interface. Also, the integration of scripts is thoughtfully implemented. Overall, it's a nice product to manage."
"It's a good solution for managing identities under OneFile for authorization."
"We don't need to use VPN for remote access."
"The solution's most valuable features are the efficiency and the quality of the recording."
"One of the most important things is that it is very easy to use and install. It is also agentless, so all of the operations happen more smoothly than any other product."
 

Cons

"The initial setup and deployment can be cumbersome. It's not an easy process."
"As I am partial to CyberArk, I rate Thycotic Password Reset Server as a nine out of ten, owing to the minor glitches I mentioned."
"I would like to see the shadowing of ongoing terminal sessions (Remote Desktop Mirroring)."
"We find the documentation hard to understand."
"We could definitely use some help with API tokenization. If we had a way to store tokens that would be fabulous."
"We always ask for partner enablement, which is more like a soft requirement rather than a product requirement. It would be great if they can provide us deeper knowledge of their products for integration."
"In terms of what could be improved, the whole thing with distributed engines, et cetera, is a little bit tricky."
"The initial setup and deployment can be cumbersome."
"The interface is better now, but it still could be improved a lot. It needs more organization, menus, automatic refresh of information, and Web 2.0."
"Transparent mode was too cumbersome, so I don't foresee us being able to use it. On paper when we were initially talking about it, it was definitely going to be the preferred method until we realized the burden it would be on our network guys. Then, we had to step back and reevaluate what we wanted to do. That's when we changed our approach to use the RD Gateway feature."
"The Transparent Mode could be somewhat easier to use."
"Monitoring of the platform should be easier and more functional so that you can have a clear picture of the running service."
"The high availability function of the box requires a long time to switch over from one appliance to another."
"We've had issues managing accounts and access to some data saved on the servers. Accounts are granted a new working certificate daily. We have an account to do it on APIs online and sync it with that. If the path changes at some point or someone changes the password, I don't know if it's from the Active Directory or what."
"I would like to see an adjustment with more enterprise architecture. You can buy multiple appliances but you can not fully separate different functions, so scaling might be a bit more complicated."
"The automated change of the passwords, which is now integrated, could be improved to be more flexible regarding different systems."
 

Pricing and Cost Advice

"It is very expensive, and its price should be lower."
"The price of this solution is good."
"The pricing is standard in this business and we have no complaints about it."
"I would give the price a four on a scale from one to ten, with one being the cheapest and ten being the most expensive. We pay for the license on a yearly basis, and we paid for three years. It costs around 5000 a year."
"There is an annual license needed to use Delinea Secret Server."
"There is an annual license fee per user and the price is fair."
"Pricing is comparable to competing products."
"Most customers opt for a yearly license."
"The pricing depends on our perspective, our budget, and, of course, the competitors we are taking into account."
"Setup cost, pricing and licensing are all very expensive."
"One Identity Safeguard is expensive and the cost goes up as we scale."
"The license is very expensive for us, partly due to inflation and partly because of the exchange rate between the Dollar and the Iranian Rial. We purchased a perpetual license that we've been using up until now, but I believe that we are not going to update it in the future. Instead, we plan to find another third-party to support us with the license, in the sense that we would have access to their license as a shared agreement."
"The pricing is about $80,000 per 100 servers. There are few elective costs."
"They have comparable pricing. All identity products are essentially priced in a similar way. It's a per-user base."
"We have a yearly license. The cost depends on how much a company wants to invest in technology. In our organization, we believe in modern digitization and automation processes so we found it affordable. One Identity was not that much less than other solutions and it is not a cheap solution. There were number of cheaper solutions. However, it's the most effective, according to our evaluation."
"Our licensing costs are on a yearly basis."
report
Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.
787,061 professionals have used our research since 2012.
 

Answers from the Community

AG
Aug 14, 2023
Aug 14, 2023
Based on your extensive list of requirements, CyberArk Privileged Access Manager appears to align well with your needs due to its comprehensive feature set, strong security controls, integration capabilities, and advanced analytics for privileged access. However, it's important to conduct in-depth evaluations, demos, and discussions with each vendor to ensure that the chosen tool meets all your...
See 2 answers
Nurlan Temirbulatov - PeerSpot reviewer
Dec 7, 2022
Hello Avinash, it all depends on the timeline and urgency of the project. If you need to deploy a PAM tool that focuses on standing privileges, stopping lateral movement, and incorporating Zero Standing Privileges as part of Zero Trust, then please consider looking at Remediant. I've worked for BeyondTrust and have gone up against the other big players such as Delinea, Centrify, CyberArk, and HashiCorp. They more or less all offer similar solutions, but looking at your current requirements, Remediant really excels in delivering a simple, yet very effective tool in a matter of days and weeks, not months and years. 
DN
Aug 14, 2023
Based on your extensive list of requirements, CyberArk Privileged Access Manager appears to align well with your needs due to its comprehensive feature set, strong security controls, integration capabilities, and advanced analytics for privileged access. However, it's important to conduct in-depth evaluations, demos, and discussions with each vendor to ensure that the chosen tool meets all your specific needs and integrates seamlessly into your existing infrastructure. However, I recommend visiting the official website of Broadcom (the company that acquired Symantec's enterprise security business) or contacting their sales representatives to get the most up-to-date information about their PAM solutions, including any rebranding or changes that may have occurred. When evaluating any PAM solution, it's essential to consider factors such as security, integration capabilities, ease of use, vendor support, scalability, and alignment with your organization's specific needs and compliance requirements. It's also a good practice to request demonstrations, proofs of concept, and references from vendors to ensure that the solution meets your expectations. Remember to involve key stakeholders, such as IT, security, compliance, and management teams, in the decision-making process to ensure alignment with organizational goals and requirements.
 

Top Industries

By visitors reading reviews
Educational Organization
32%
Computer Software Company
13%
Financial Services Firm
8%
Government
7%
Computer Software Company
21%
Financial Services Firm
13%
Manufacturing Company
7%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Looking for recommendations and a pros/cons template for software to detect insider threats
This is an inside-out --- outside-in --- inside-in question, as an insider can be an outsider as well. There is no short answer other than a blend of a PAM tool with Behavioral Analytics and Endpo...
What do you like most about Delinea Secret Server?
The privileged access management module is the most reliable feature.
What is your experience regarding pricing and costs for Delinea Secret Server?
If you're requesting licenses or pricing, then you have to fill out a questionnaire that they try to gain insight into what your environment is like, what you're trying to discover, and what you're...
What do you like most about One Identity Safeguard?
The identity discovery is good, and the performance is pretty good value.
What is your experience regarding pricing and costs for One Identity Safeguard?
They have comparable pricing. All identity products are essentially priced in a similar way. It's a per-user base. Usually, they start at one price, and when you start pricing the competition, you ...
What needs improvement with One Identity Safeguard?
Something for One Identity to look at is having integration guidelines for how to logically group accounts. This is always something you need people to do. It would be especially helpful when you h...
 

Also Known As

Thycotic Secret Server, Delinea Password Reset Server
No data available
 

Overview

 

Sample Customers

Secure-24, University of San Diego, International Rescue Committee, San Francisco Ballet, Perkins Coie, University of San Diego, D.S.S. Limited, Turbo's Hoet, Eclipse Computing, Cathay Bank, Stellarise, J&R Consulting
Cavium
Find out what your peers are saying about Delinea Secret Server vs. One Identity Safeguard and other solutions. Updated: May 2024.
787,061 professionals have used our research since 2012.