Delinea Review 2026
Verdict
Delinea (formerly Thycotic + Centrify) delivers the fastest time-to-value among the Big 3 PAM vendors. Its SaaS-first architecture gets teams operational in days, not weeks, without requiring PAM-specific certifications. Secret Server handles vaulting, Server Suite bridges AD to UNIX/Linux, and the 2026 StrongDM acquisition adds zero-trust infrastructure access. The overlapping product suite from the Thycotic/Centrify merger can confuse buyers, but for organizations wanting enterprise PAM without CyberArk’s complexity, Delinea is the pragmatic choice.
Key features
- Secret Server — password vaulting and automated rotation
- Server Suite — AD bridging and privilege elevation on UNIX/Linux
- Privilege Manager — endpoint least-privilege enforcement
- Connection Manager — session management and recording
- Account Lifecycle Manager for privileged account governance
- DevOps Secrets Vault for CI/CD pipeline secrets
- Cloud Suite for dynamic cloud workloads
- Strong Active Directory integration across all products
Pros
- Fastest time-to-value among Big 3 — SaaS-first, operational in days
- Does not require PAM-specific certification to administer
- StrongDM acquisition (2026) adds zero-trust infrastructure access
- Strong Active Directory integration for Windows-centric environments
- DevOps Secrets Vault bridges traditional PAM and modern CI/CD
- SaaS-first with self-hosted and hybrid options available
Cons
- Overlapping product suite (Secret Server, Server Suite, Cloud Suite) creates confusion
- Service account management less mature than CyberArk
- Hidden costs and pricing escalation reported by users
- StrongDM acquisition integration still in progress — roadmap uncertainty
- Pricing reportedly ~26% above market average
Pricing breakdown
| Tier | Price | What’s included |
|---|---|---|
| SaaS subscription | Custom quote | Core PAM — vault, rotation, session management |
| Enterprise | Custom | Full suite + advanced features |
| Note | ~26% above market avg | Faster ROI offsets premium (per Heimdal) |
Who should use Delinea
- Mid-market to large enterprises wanting faster PAM deployment than CyberArk
- Teams without dedicated PAM specialists who need simpler administration
- Windows/AD-centric environments leveraging strong directory integration
- Organizations adding cloud-native infrastructure access via the StrongDM path
- DevOps teams needing secrets management alongside traditional PAM
Who should NOT use Delinea
- Enterprises requiring the deepest audit trails — CyberArk is more comprehensive
- UNIX/Linux-heavy shops wanting best-in-class EPM — BeyondTrust leads here
- SMBs seeking transparent pricing — Keeper PAM is more accessible
- Teams wanting a fully integrated product — the overlapping suite can confuse
Read our full Best PAM Solutions comparison for head-to-head rankings.
Frequently Asked Questions
How much does Delinea cost?
Delinea uses custom SaaS subscription pricing, reported to be approximately 26% above market average per Heimdal analysis. However, faster ROI due to rapid deployment offsets the premium. Contact sales for a custom quote.
What is Delinea best for?
Delinea is the SaaS-first, fastest time-to-value option among the Big 3 PAM vendors. It is operational in days versus weeks, and does not require PAM-specific certification. The 2026 StrongDM acquisition adds zero-trust infrastructure access.
What are Delinea's main weaknesses?
Overlapping product suite creates confusion (legacy of Thycotic + Centrify merger), service account management is less mature than CyberArk, hidden costs and pricing escalation reported by users, and the StrongDM integration is still in progress.