Cybersecurity · head to head
Delinea vs Signicat
Delinea
Cybersecurity
Privileged access management from the merged Thycotic and Centrify
- From
- On request
- Rated
- -
Signicat
Cybersecurity
European digital identity hub connecting national eID schemes
- From
- On request
- Rated
- -
The short version
- Each has a real cost: Delinea the Thycotic and Centrify lineages are integrated unevenly, so buying the full portfolio means running consoles and agents that do not share one administrative model as cleanly as the marketing suggests.; Signicat national eID scheme fees are passed through on top of Signicat's own charge, so a single-country business almost always pays less by integrating with the scheme directly.
- They diverge on capability: Delinea covers Secret Server, Signicat covers eID scheme brokering.
- Prices and features above were last checked on 1 September 2026.
Where they differ
Only the attributes on which Delinea and Signicat actually diverge.
Identical on both: starting price (On request), pricing model (quote), free tier (No), user rating (Not yet rated), category (Cybersecurity).
What each one covers
Drawn from each product's published feature list. An absence here means we hold no record of it - not that the product lacks it.
Only in Delinea
- Secret Server
- Privileged session recording
- Privilege Manager
- Server PAM
- Discovery
- DevOps secrets
- Behaviour analytics
Only in Signicat
- eID scheme brokering
- Qualified electronic signatures
- Document verification
- AML screening
- Authentication
- Digital onboarding flows
- eIDAS compliance
What people use each for
The jobs each tool is most often brought in to do.
Delinea
- An organisation whose cyber insurer now requires privileged credentials to be vaulted and rotatednot Signicat
- A mid-market IT team that abandoned a heavier PAM rollout and needs a vault that can be in production in weeksnot Signicat
- A company removing local administrator rights from every workstation after a ransomware incidentnot Signicat
- An audit finding that shared service account passwords are stored in a spreadsheet and used by contractorsnot Signicat
Signicat
- A lender expanding from Norway into Sweden, Denmark and the Netherlands without four separate eID integrationsnot Delinea
- An insurer needing eIDAS qualified signatures on policy documents that will hold up in a European courtnot Delinea
- A bank that wants customers to onboard with their existing national bank ID rather than photographing a passportnot Delinea
- A public sector body needing cross-border recognition of notified eID schemes under eIDASnot Delinea
Where each one falls short
Documented limitations, not opinions. Every one is a constraint you would hit in normal use.
Delinea
- The Thycotic and Centrify lineages are integrated unevenly, so buying the full portfolio means running consoles and agents that do not share one administrative model as cleanly as the marketing suggests.
- Modules are licensed separately by different units, per privileged user for the vault and per endpoint for privilege management, which makes total cost hard to model and easy to underestimate at scale.
- Delinea does not publish rates, so buyers benchmark against third party and public sector listings; expect list prices to be negotiable by a wide margin, which means the first quote is not the price.
- Thoma Bravo ownership since 2021 has coincided with firmer renewal pricing, and buyers with a single-vendor PAM estate have little leverage once credentials are inside the vault.
- Migrating out of a privileged access vault is a genuinely hard project because every automated process that fetches a secret has to be repointed, so the switching cost is real and the vendor knows it.
Signicat
- National eID scheme fees are passed through on top of Signicat's own charge, so a single-country business almost always pays less by integrating with the scheme directly.
- Value is concentrated in Northern and Western Europe, and coverage in Southern and Eastern Europe is thinner, so a pan-European rollout still hits gaps requiring document fallback.
- Pricing is per transaction and quoted, and because scheme rates vary by country the cost per onboarded customer differs materially between markets in ways that complicate unit economics.
- Each eID scheme connection typically carries its own setup fee and approval process, so adding a country is a project with a lead time rather than a configuration change.
- Availability is tied to the national schemes, meaning an outage at BankID or MitID stops your onboarding entirely and there is no vendor-side mitigation for it.
Pricing, plan by plan
Delinea
On request- Secret Server$undefined/year
- Priced per privileged user, tiered by edition
- Cloud or on premises deployment
- Session recording in higher editions
- Privilege Manager$undefined/year
- Priced per endpoint
- Local admin rights removal and application elevation
- Licensed separately from Secret Server
- Server PAM$undefined/year
- Priced per managed server or per privileged user
- Just-in-time server access
- Licensed separately
Signicat
On request- Signicat Platform$undefined/year
- Priced per transaction with national scheme fees passed through
- Signature and verification products licensed separately
- Setup fee per eID scheme connected
Which should you pick?
Choose Delinea if
- You need secret server.
- You work on Web, Windows, Linux, macOS.
- You also want privileged session recording.
Choose Signicat if
- You need eid scheme brokering.
- You work on Web, iOS, Android.
- You also want qualified electronic signatures.
Questions people ask
- Is Delinea or Signicat better?
- Neither clearly leads. Delinea starts at On request and Signicat at On request, and user ratings are close enough to be indistinguishable. Choose on capability and platform support.
- Which is cheaper, Delinea or Signicat?
- Delinea starts at On request and Signicat at On request.
- Does Delinea or Signicat run on more platforms?
- Delinea runs on Web, Windows, Linux, macOS. Signicat runs on Web, iOS, Android.
- What is Delinea best used for?
- Delinea is most often used for an organisation whose cyber insurer now requires privileged credentials to be vaulted and rotated, a mid-market it team that abandoned a heavier pam rollout and needs a vault that can be in production in weeks, a company removing local administrator rights from every workstation after a ransomware incident, an audit finding that shared service account passwords are stored in a spreadsheet and used by contractors. Of those, an organisation whose cyber insurer now requires privileged credentials to be vaulted and rotated and a mid-market it team that abandoned a heavier pam rollout and needs a vault that can be in production in weeks are not what Signicat is typically brought in for.
- What can Delinea do that Signicat cannot?
- Delinea covers Secret Server, Privileged session recording, Privilege Manager, Server PAM. Signicat covers eID scheme brokering, Qualified electronic signatures, Document verification, AML screening.
Answered from the vendors’ own pages
Delinea: Is Delinea the same as Thycotic?
Delinea is the merged company formed from Thycotic and Centrify in 2021. Secret Server is the former Thycotic product; the server access products come from Centrify.
Signicat: Is this an alternative to a document verification vendor?
Only where national eID exists. In markets with a mature bank ID scheme it is better; elsewhere you fall back to document checks, which Signicat also provides.
Delinea: Is pricing published?
Not by Delinea. Public sector frameworks have listed Secret Server Cloud around 348 GBP per user per year, which is a reference point, not a quote.
Signicat: Do we still pay the eID schemes?
Yes. Scheme fees are passed through in addition to Signicat charges. Ask for the split when comparing to a direct integration.
Delinea: Does one licence cover endpoints and servers?
No. Secret Server, Privilege Manager and Server PAM are separately licensed on different units. Scope all three if your requirement spans them.
Signicat: Are signatures legally qualified?
Signicat supports eIDAS qualified electronic signatures, which carry the highest legal standing in the EU, as well as advanced signatures.
Related pages
Other head to heads
- Delinea vs One Identity
- Delinea vs Saviynt
- Delinea vs HashiCorp Vault
- Delinea vs 1Password
- Delinea vs BeyondTrust
- Delinea vs Infisical
- Delinea vs HashiCorp Boundary
- Delinea vs Akeyless
- Delinea vs Keeper Password Manager
- Delinea vs Legit Security
- Delinea vs Teleport
- Delinea vs Doppler
- Delinea vs ProtonVPN
- Delinea vs Resolver
- Delinea vs Securiti
- Delinea vs Sigstore
- Delinea vs Speakeasy
- Delinea vs Jumio
- Delinea vs Sumsub
- Delinea vs IDnow
- Delinea vs Trulioo
- Delinea vs Veriff
- Delinea vs iDenfy
- Delinea vs Yoti
- Delinea vs Shufti Pro
- Delinea vs Socure
- Delinea vs March Networks
- Delinea vs Featurespace ARIC Risk Hub
- Delinea vs Semperis
- Delinea vs MetricStream
- Delinea vs Microsoft Defender
- Delinea vs Mimecast
- Delinea vs Motorola Vigilant
- Delinea vs Nessus
- Delinea vs Microsoft Sentinel
- Signicat vs One Identity
- Signicat vs Saviynt
- Signicat vs HashiCorp Vault
- Signicat vs 1Password
- Signicat vs BeyondTrust
- Signicat vs Infisical
- Signicat vs HashiCorp Boundary
- Signicat vs Akeyless
- Signicat vs Keeper Password Manager
- Signicat vs Legit Security
- Signicat vs Teleport
- Signicat vs Doppler
- Signicat vs ProtonVPN
- Signicat vs Resolver
- Signicat vs Securiti
- Signicat vs Sigstore
- Signicat vs Speakeasy
- Signicat vs Jumio
- Signicat vs Sumsub
- Signicat vs IDnow
- Signicat vs Trulioo
- Signicat vs Veriff
- Signicat vs iDenfy
- Signicat vs Yoti
- Signicat vs Shufti Pro
- Signicat vs Socure
- Signicat vs March Networks
- Signicat vs Featurespace ARIC Risk Hub
- Signicat vs Semperis
- Signicat vs MetricStream
- Signicat vs Microsoft Defender
- Signicat vs Mimecast
- Signicat vs Motorola Vigilant
- Signicat vs Nessus
- Signicat vs Microsoft Sentinel