Cybersecurity · head to head
Delinea vs Microsoft Sentinel
Delinea
Cybersecurity
Privileged access management from the merged Thycotic and Centrify
- From
- On request
- Rated
- -
The short version
- Only Microsoft Sentinel has a free tier, so it costs nothing to try first.
- Each has a real cost: Delinea the Thycotic and Centrify lineages are integrated unevenly, so buying the full portfolio means running consoles and agents that do not share one administrative model as cleanly as the marketing suggests.; Microsoft Sentinel billing is driven by the volume of log data ingested per day, so cost scales with log noise rather than with users or protected assets
- They diverge on capability: Delinea covers Secret Server, Microsoft Sentinel covers AI-powered analytics.
- Prices and features above were last checked on 1 September 2026.
Where they differ
Only the attributes on which Delinea and Microsoft Sentinel actually diverge.
| Attribute | Delinea | Microsoft Sentinel |
|---|---|---|
| Starting price | On request | Free |
| Pricing model | quote | usage-based |
| Free tier | No | Yes |
| Platforms | Web, Windows, Linux, macOS | Web, Api |
| Founded | Unknown | 1975 |
Identical on both: user rating (Not yet rated), category (Cybersecurity).
What each one covers
Drawn from each product's published feature list. An absence here means we hold no record of it - not that the product lacks it.
Only in Delinea
- Secret Server
- Privileged session recording
- Privilege Manager
- Server PAM
- Discovery
- DevOps secrets
- Behaviour analytics
Only in Microsoft Sentinel
- AI-powered analytics
- Fusion detection
- UEBA
- Automated response playbooks
- Threat intelligence
- Hunting queries
- Workbooks
- Incident management
What people use each for
The jobs each tool is most often brought in to do.
Delinea
- An organisation whose cyber insurer now requires privileged credentials to be vaulted and rotatednot Microsoft Sentinel
- A mid-market IT team that abandoned a heavier PAM rollout and needs a vault that can be in production in weeksnot Microsoft Sentinel
- A company removing local administrator rights from every workstation after a ransomware incidentnot Microsoft Sentinel
- An audit finding that shared service account passwords are stored in a spreadsheet and used by contractorsnot Microsoft Sentinel
Microsoft Sentinel
- Cloud-based security information and event management (SIEM)not Delinea
- Extended detection and response (XDR) across enterprise infrastructurenot Delinea
- Data ingestion and long-term security analyticsnot Delinea
Where each one falls short
Documented limitations, not opinions. Every one is a constraint you would hit in normal use.
Delinea
- The Thycotic and Centrify lineages are integrated unevenly, so buying the full portfolio means running consoles and agents that do not share one administrative model as cleanly as the marketing suggests.
- Modules are licensed separately by different units, per privileged user for the vault and per endpoint for privilege management, which makes total cost hard to model and easy to underestimate at scale.
- Delinea does not publish rates, so buyers benchmark against third party and public sector listings; expect list prices to be negotiable by a wide margin, which means the first quote is not the price.
- Thoma Bravo ownership since 2021 has coincided with firmer renewal pricing, and buyers with a single-vendor PAM estate have little leverage once credentials are inside the vault.
- Migrating out of a privileged access vault is a genuinely hard project because every automated process that fetches a secret has to be repointed, so the switching cost is real and the vendor knows it.
Microsoft Sentinel
- Billing is driven by the volume of log data ingested per day, so cost scales with log noise rather than with users or protected assets
- Commitment tier discounts require reserving daily ingestion capacity in advance, and a tier cannot be downgraded until 31 days have passed
- Commitment tiers start at 100 GB per day, above what smaller estates ingest
- Charges for Log Analytics, Logic Apps and Machine Learning are billed separately on top of Sentinel itself
- The free allowance is only up to 5 MB per user per day for selected Microsoft 365 security logs
- Promotional commitment pricing is time limited and locks in only until a stated end date
Pricing, plan by plan
Delinea
On request- Secret Server$undefined/year
- Priced per privileged user, tiered by edition
- Cloud or on premises deployment
- Session recording in higher editions
- Privilege Manager$undefined/year
- Priced per endpoint
- Local admin rights removal and application elevation
- Licensed separately from Secret Server
- Server PAM$undefined/year
- Priced per managed server or per privileged user
- Just-in-time server access
- Licensed separately
Microsoft Sentinel
Free- Pay-As-You-Go$2.46/day
- Per GB ingested
- 90-day retention
- First 31 days free for new workspaces
- Commitment TiersFree
- 100GB to 50TB tiers
- Up to 65% discount
- Predictable billing
- Microsoft 365 E5Free
- Free data ingestion for M365 logs
- Bundled with E5 license
Which should you pick?
Choose Delinea if
- You need secret server.
- You work on Web, Windows, Linux, macOS.
- You also want privileged session recording.
Choose Microsoft Sentinel if
- You need ai-powered analytics.
- You want to start without paying.
- You work on Web, Api.
- You also want fusion detection.
Questions people ask
- Is Delinea or Microsoft Sentinel better?
- Neither clearly leads. Delinea starts at On request and Microsoft Sentinel at Free, and user ratings are close enough to be indistinguishable. Choose on capability and platform support.
- Which is cheaper, Delinea or Microsoft Sentinel?
- Microsoft Sentinel has a free tier; the other does not. Paid plans start at On request for Delinea and Free for Microsoft Sentinel.
- Does Delinea or Microsoft Sentinel run on more platforms?
- Delinea runs on Web, Windows, Linux, macOS. Microsoft Sentinel runs on Web, Api.
- Can I use Microsoft Sentinel for free?
- Yes. Microsoft Sentinel has a free tier, so you can try it without paying. Delinea starts at On request.
- What is Delinea best used for?
- Delinea is most often used for an organisation whose cyber insurer now requires privileged credentials to be vaulted and rotated, a mid-market it team that abandoned a heavier pam rollout and needs a vault that can be in production in weeks, a company removing local administrator rights from every workstation after a ransomware incident, an audit finding that shared service account passwords are stored in a spreadsheet and used by contractors. Of those, an organisation whose cyber insurer now requires privileged credentials to be vaulted and rotated and a mid-market it team that abandoned a heavier pam rollout and needs a vault that can be in production in weeks are not what Microsoft Sentinel is typically brought in for.
- What can Delinea do that Microsoft Sentinel cannot?
- Delinea covers Secret Server, Privileged session recording, Privilege Manager, Server PAM. Microsoft Sentinel covers AI-powered analytics, Fusion detection, UEBA, Automated response playbooks.
Answered from the vendors’ own pages
Delinea: Is Delinea the same as Thycotic?
Delinea is the merged company formed from Thycotic and Centrify in 2021. Secret Server is the former Thycotic product; the server access products come from Centrify.
Microsoft Sentinel: How is Microsoft Sentinel pricing calculated?
Microsoft Sentinel uses a pay-as-you-go usage-based model where you pay only for data ingested, stored, and consumed. Flexible commitment tiers are available to reduce total cost of ownership, with specific rates not published on the public pricing page. Source: https://www.microsoft.com/security/business/siem-and-xdr/microsoft-sentinel/
SourceDelinea: Is pricing published?
Not by Delinea. Public sector frameworks have listed Secret Server Cloud around 348 GBP per user per year, which is a reference point, not a quote.
Microsoft Sentinel: Does Microsoft Sentinel require an Azure subscription?
Yes, Microsoft Sentinel requires a Microsoft Azure subscription to operate. Pricing is handled through Azure and varies based on data consumption and the commitment tier you select. Source: https://www.microsoft.com/security/business/siem-and-xdr/microsoft-sentinel/
SourceDelinea: Does one licence cover endpoints and servers?
No. Secret Server, Privilege Manager and Server PAM are separately licensed on different units. Scope all three if your requirement spans them.
Related pages
More on Microsoft Sentinel
Other head to heads
- Delinea vs One Identity
- Delinea vs Saviynt
- Delinea vs HashiCorp Vault
- Delinea vs 1Password
- Delinea vs BeyondTrust
- Delinea vs Infisical
- Delinea vs HashiCorp Boundary
- Delinea vs Akeyless
- Delinea vs Keeper Password Manager
- Delinea vs Legit Security
- Delinea vs Teleport
- Delinea vs Doppler
- Delinea vs ProtonVPN
- Delinea vs Resolver
- Delinea vs Securiti
- Delinea vs Sigstore
- Delinea vs Speakeasy
- Delinea vs Bitdefender Total Security
- Delinea vs Norton 360
- Delinea vs LastPass
- Delinea vs LogRhythm SIEM
- Delinea vs IBM QRadar
- Delinea vs CrowdStrike Falcon
- Delinea vs Splunk Enterprise Security
- Delinea vs SentinelOne Singularity
- Delinea vs Sysdig
- Delinea vs Endor Labs
- Delinea vs Proton Mail
- Delinea vs Veriff
- Delinea vs Brave Browser
- Delinea vs March Networks
- Delinea vs Salient CompleteView
- Delinea vs Sumsub
- Microsoft Sentinel vs One Identity
- Microsoft Sentinel vs Saviynt
- Microsoft Sentinel vs HashiCorp Vault
- Microsoft Sentinel vs 1Password
- Microsoft Sentinel vs BeyondTrust
- Microsoft Sentinel vs Infisical
- Microsoft Sentinel vs HashiCorp Boundary
- Microsoft Sentinel vs Akeyless
- Microsoft Sentinel vs Keeper Password Manager
- Microsoft Sentinel vs Legit Security
- Microsoft Sentinel vs Teleport
- Microsoft Sentinel vs Doppler
- Microsoft Sentinel vs ProtonVPN
- Microsoft Sentinel vs Resolver
- Microsoft Sentinel vs Securiti
- Microsoft Sentinel vs Sigstore
- Microsoft Sentinel vs Speakeasy
- Microsoft Sentinel vs Bitdefender Total Security
- Microsoft Sentinel vs Norton 360
- Microsoft Sentinel vs LastPass
- Microsoft Sentinel vs LogRhythm SIEM
- Microsoft Sentinel vs IBM QRadar
- Microsoft Sentinel vs CrowdStrike Falcon
- Microsoft Sentinel vs Splunk Enterprise Security
- Microsoft Sentinel vs SentinelOne Singularity
- Microsoft Sentinel vs Sysdig
- Microsoft Sentinel vs Endor Labs
- Microsoft Sentinel vs Proton Mail
- Microsoft Sentinel vs Veriff
- Microsoft Sentinel vs Brave Browser
- Microsoft Sentinel vs March Networks
- Microsoft Sentinel vs Salient CompleteView
- Microsoft Sentinel vs Sumsub