Delinea

Delinea started as two of the oldest names in privileged access management, Thycotic and Centrify, stitched together by private equity in 2021 and rebranded a year later. The name comes from delineate, to draw a clear line, which is a tidy way to describe what the company sells: deciding which identity gets access to what, and for how long.

The pitch now is that login-time checks are not enough. Delinea wants to authorize every session and action continuously, not just at the door, and it is aiming that same machinery at the identities nobody staffed for: service accounts, DevOps secrets, and AI agents that request access and call APIs in milliseconds. It is a decades-old category trying to prove it still owns the problem as the problem changes shape.

Delinea runs a cloud-native identity security platform that treats access as a live decision instead of a one-time grant. It discovers every identity across cloud, on-prem, SaaS, and endpoints, scores the risk each one carries, then authorizes what happens next with policy-based, audited decisions. The engine underneath is Delinea Iris AI, which classifies account risk and automates access calls in real time.

The headline mechanic is Zero Standing Privilege: grant access only when a task needs it, revoke it the moment the task is done. That is the difference between a vault full of standing admin rights and a system that hands out privilege just in time and takes it back.

The problem Delinea keeps returning to is that identity sprawl has outrun the tools built to manage it. Machine identities already outnumber human ones and mostly go unmanaged, standing privileges pile up across dev environments, and AI agents now act autonomously at machine speed. Any one of those is an unwatched door.

Delinea's answer is continuous discovery plus real-time authorization, so credentials get vaulted and rotated, sessions get recorded, and every action leaves a defensible audit trail. The company claims 33 percent fewer security incidents and a 44 percent drop in unauthorized remote access, though those are its own figures.

This is enterprise security software, sold to the people who own privileged access: CISOs, security operations teams, IT admins, and the DevOps and platform engineers who have to move fast without leaving credentials lying around. The Centrify lineage brought a customer base that once included more than half the Fortune 100.

The buyers skew regulated and large. Delinea leans hard into compliance-heavy shops, government via its FedRAMP work, financial services, and any organization drowning in service accounts, secrets, and now AI agents it never formally onboarded.

The flagship is the Delinea Platform, the identity control plane that ties discovery, credential vaulting, just-in-time access, and segregation-of-duties into one system, all driven by Iris AI. Around it sit the pieces the company grew or bought: Secret Server for classic PAM, Cloud Suite and Server Suite for multi-cloud and on-prem access, DevOps Secrets Vault for machine-to-machine secrets, Identity Threat Protection for detection, and Fastpath for compliant provisioning.

The product line reads like the merger history it came from, which is both the strength and the seams: broad coverage, but assembled from several code bases rather than built as one.

Delinea sells subscription software to enterprises, with a heavy sales-led motion: enterprise account executives, deal desks, renewals that start 120 days out, and channel partners. Free 30-day trials and interactive demos pull buyers in, but the real pricing lives behind a quote.

There is no public price list. The pricing and plans pages are gone, and every product routes to a contact-sales or request-a-quote form, which is standard for PAM sold into large regulated accounts but means cost is a conversation, not a checkout.

Delinea sits squarely against CyberArk and BeyondTrust in privileged access management, with newer entrants like StrongDM (which it just bought) reshaping the developer-first end of the market. Its own job postings name CyberArk, BeyondTrust, Okta, Ping, ForgeRock, and Centrify as the competitive landscape its sales teams work in.

The edge Delinea presses is that it governs AI and machine identities without bolting new controls onto twenty-year-old architecture, plus a long analyst track record. The risk is the same one every incumbent faces: a category it helped define is being redrawn around continuous, runtime authorization, and it has to prove it can lead that shift rather than defend the old one.

Delinea's marquee stats are operational: 99.995 percent uptime it calls the highest in the industry, 500-plus integrations, over a million identities secured daily, and a claimed 2.2 million dollars in average annual ROI per customer. It says 94 percent of customers have consolidated onto its platform.

The outside validation is real and recurring. Delinea has been named a Leader in Gartner's Magic Quadrant for PAM seven times running, a Leader in the Forrester Wave for Privileged Identity Management, and an Overall Leader in KuppingerCole's 2026 Leadership Compass, plus a spot in Frost Radar 2026.

Across review sites, Secret Server earns steady praise for automated password rotation, network discovery, session monitoring, and being genuinely usable, with reviewers calling out remote password change and account discovery as the standout wins. It is the workhorse reputation you would want in a PAM product.

The recurring gripes are just as consistent: technical support that feels thin and slow, documentation that lags around connectors and integrations, friction integrating with Azure Active Directory, and a licensing model users find convoluted, especially adding seats outside the annual renewal.

Delinea is private equity's, not a startup's. TPG built it by acquiring Centrify from Thoma Bravo and then buying Thycotic in a 1.4 billion dollar deal, merging the two in April 2021 as ThycoticCentrify before the 2022 rebrand. Minority backers include Insight Partners, Thoma Bravo, and Canada's PSP Investments.

TPG remains the majority owner, and by 2025 the company was reportedly weighing an IPO. It has kept buying, adding Authomize, Fastpath, and StrongDM to fill out the platform rather than raising venture rounds to fund growth.

Delinea is led by CEO Art Gilliland, who took over in 2021 after running Centrify and, before that, enterprise security at Symantec. The company is genuinely global, with offices across roughly 40 countries and hubs in San Francisco, Bellevue, Lehi, London, Tel Aviv, Singapore, Munich, Manila, and a new Mexico City engineering site.

Internally it runs on a values acronym, STRONG: Spirited, Trust, Respect, Ownership, Nimble, Global. Job postings lean on a fast-moving, challenge-the-status-quo tone, and the engineering culture is Scrum-based and security-first, with recent roles pushing AI-assisted development and tooling.

Delinea offers a standard enterprise-software package: competitive base, a meaningful bonus program, and equity, with sales roles carrying commission and quota-driven upside. Benefits include paid family leave, flexible time off, and a 401(k) match in the US.

Very few of its open roles publish a salary band, so there is not enough disclosed data to draw reliable ranges, and the couple that do appear span different countries and currencies. Treat comp here as negotiated, with the whole-package pieces (equity, bonus, commission) doing much of the work.

The registered entity is Delinea Inc., headquartered in San Francisco, and the privacy program is unusually transparent for the category. Delinea publishes a full subprocessor list, honors opt-out preference signals, and spells out data-sale opt-outs for California, Virginia, Utah, Colorado, and Connecticut consumers.

The named vendor stack tells you how the platform runs: AWS and Microsoft Azure for hosting, Imperva as web application firewall, Datadog for observability, Salesforce and Atlassian for support, Twilio and AWS SES for messaging, and Orca for vulnerability scanning. Fastpath and StrongDM carry their own separate subprocessor pages after the acquisitions.

The biggest recent story is the StrongDM acquisition, announced in January 2026 and closed that March, which pushes Delinea deeper into just-in-time runtime authorization for AI-driven environments. Around it, the company has been loud on the agentic-AI security theme, including a Cyera integration and CEO Art Gilliland's press appearances on securing AI agents.

The rest of the coverage is the analyst and awards circuit: leader placements in Gartner, KuppingerCole, Forrester, and Frost, plus workplace recognitions. It is the news profile of an established vendor defending its lane, not a company chasing a launch.