Identity & Access Management

Now pick what to compare Delinea Secret Server against.

Delinea Secret Server clear

Open a name for its full profile

Okta Workforce Identity
Capabilities only
Okta · Commercial · 5 capabilities in this domain
Compare →
Microsoft Entra ID
Capabilities only
Microsoft · Freemium · 4 capabilities in this domain
Compare →
Cisco Duo
Capabilities only
Cisco · Freemium · 3 capabilities in this domain
Compare →
CrowdStrike Falcon Identity Protection
Capabilities only
CrowdStrike · Commercial · 3 capabilities in this domain
Compare →
PingOne
Capabilities only
Ping Identity · Commercial · 3 capabilities in this domain
Compare →
CyberArk Privileged Access Manager
Capabilities only
CyberArk · Commercial · 2 capabilities in this domain
Compare →
Microsoft Defender for Identity
Capabilities only
Microsoft · Commercial · 2 capabilities in this domain
Compare →
Microsoft Entra ID Governance
Capabilities only
Microsoft · Commercial · 2 capabilities in this domain
Compare →
Silverfort
Capabilities only
Silverfort · Commercial · 2 capabilities in this domain
Compare →
StrongDM
Capabilities only
StrongDM · Commercial · 2 capabilities in this domain
Compare →
Teleport
Capabilities only
Teleport · Freemium · 2 capabilities in this domain
Compare →
BeyondTrust Password Safe
Capabilities only
BeyondTrust · Commercial · 1 capabilities in this domain
Compare →
BloodHound Enterprise
Capabilities only
SpecterOps · Freemium · 1 capabilities in this domain
Compare →
Delinea Secret Server
Capabilities only
Delinea · Commercial · 1 capabilities in this domain
selected
SailPoint Identity Security Cloud
Capabilities only
SailPoint · Commercial · 1 capabilities in this domain
Compare →
YubiKey
Capabilities only
Yubico · Commercial · 1 capabilities in this domain
Compare →

In Identity & Access Management

Teleport

Teleport · Identity & Access Management

Close ×

FreemiumCompany

Teleport issues certificates bound to SSO identity, enforces just-in-time access requests and records sessions; Machine ID issues short-lived credentials to automation.

What it does4 capabilities · 4 at full coverage

4 of 4 at full coverage.

Just-in-Time Access ElevationFullIAM · level 3 · 5 providers
Privileged Access ManagementFullIAM · level 3 · 5 providers
Dynamic Short-Lived CredentialsFullSECRETS · level 3 · 8 providers
Machine Identity ManagementFullSECRETS · level 4 · 9 providers

What it proves10 controls across 6 frameworks

Satisfied through its capabilities, not claimed by the vendor.

CSF 2.03 / 106PR.AA-01 PR.AA-03 PR.AA-05
CI/CD Top 102 / 10CICD-SEC-2 CICD-SEC-6
CIS Controls2 / 18CIS 5 CIS 6
AICM1 / 18IAM
CNAS Top 101 / 10CNAS-5
SP 800-204D1 / 11204D-CD-SECRETS

What it stops5 techniques · 2 risks

5 techniques countered, 5 of them common

Leaked Secret AbuseVery Common
OS Credential DumpingT1003Very Common
Valid AccountsT1078Very Common
Account ManipulationT1098Common
Steal Application Access TokenT1528Common

2 risks reduced

Leaked credential enables unauthorized accessCritical
Excessive standing privilege in engineering platformsHigh

Where it runs3 phases · 2 ways to deploy

Capabilities per lifecycle phase

Build1
Deploy2
Operate4

How it is delivered

SaaSSelf-hosted

What it unlocks3 activities · reaches level 5

Program activities its capabilities support, reaching level 5. Supporting an activity is not completing it.

Level 3

Phishing-resistant MFA and just-in-time privilegeMedium effort
Replace static CI credentials with OIDC federationMedium effort

Level 5

Secretless workload identity everywhereHigh effort

How it holds up

Not assessed yet: no strengths, limits or evaluation scores. 47 of 340 products carry an assessment and 29 are scored.

What it costsOpen core or freemium · free tier

LicensingOpen core or freemium

Priced perfree tier plus paid tiers

BillingSubscription

Scales withFeature tier, users or usage beyond the free tier

Total cost

Start free; enterprise needs such as SSO, audit logs and policy often require the paid tier.

What it takes to run

No staffing, rollout time or operational commitment recorded.

What it works with

No supported language, standard, integration or named feature recorded.

What else to look at

No alternative, competitor or family sibling is modeled for it.

What backs this up

No measurement, incident or pipeline using it.

Gantry 7.1.0 · OFF.12 · OFF.13