- BFSIBanking, Financial Services & Insurance
- HealthcareComing soon
- ManufacturingComing soon
- Retail & E-CommerceComing soon
Delinea
Identity security built on privileged access — every human, machine and AI identity authorised from one platform, with Delinea Iris AI— from the Secret Server vault and endpoint and server privilege to StrongDM, Fastpath, threat detection and cloud entitlements, and how each one is licensed. This hub covers twelve Delinea products.
Buy through TechBag
Same software. Better outcome — at a lower cost.
The company, at a glance
Quick answer
Twelve intel pages. Privileged access, endpoint and server privilege, secrets, remote access, access governance, identity threat detection and cloud entitlements.
Delinea’s line, product by product — every card is a full intel page, from Secret Server, Privilege Manager and Server PAM through StrongDM and the secrets vault to Fastpath, threat detection and cloud entitlements.
Delinea Secret Server
The vault for privileged accounts, in weeks.
Discovery, rotation, approvals and recording; full recording needs on-prem Platinum, and on-prem installs need 12.2.7 or later.
Delinea Privilege Manager
Takes local admin rights away from laptops.
Allow, deny and sandbox rules, with approval and MFA on elevation, for Windows and macOS machines, from the cloud or on-premises.
Delinea Server PAM
One AD identity and MFA at sudo on each server.
Privilege Control for Servers, Cloud Suite or on-prem Server Suite: AD bridging, MFA at elevation and host session recording.
Delinea Privileged Remote Access
A browser path in for vendors and remote admins.
Time-bound browser sessions with vault credentials injected, live monitoring and Iris AI auditing of recordings; vault sold apart.
Delinea DevOps Secrets Vault
Keeps keys and tokens out of code and pipelines.
A CLI and REST API for apps, CI/CD tools and services, plus dynamic database and cloud credentials that expire by themselves.
Delinea Credential Manager
Moves staff logins out of spreadsheets.
A vault for business users with browser extension, mobile app, MFA and role-based sharing; it sits beside PAM, not in its place.
StrongDM
Brokered access to databases, Kubernetes, cloud.
SaaS control plane, gateways you host: access approved in Slack or Teams, revoked automatically, credentials never shown.
Delinea Fastpath
Segregation of duties inside the ERP.
Access Control, Access Review, Access Provisioning and Change Tracking for 50+ business systems, SAP and Oracle among them.
Delinea Identity Threat Protection
Spots identity attacks across IdPs and SaaS.
Watches federated and local identities, SaaS and cloud for risky access and recommends fixes; detection only, not an identity provider.
Privilege Control for Cloud Entitlements
Cuts back excess permissions in three clouds.
Continuous Identity Discovery finds shadow admins, stale accounts and over-privileged human, machine and AI identities in three clouds.
Delinea Connection Manager
Many remote sessions in one tabbed window.
A desktop app holding RDP and SSH sessions in tabs, with credentials filled from Secret Server; built for admins, not remote support.
Delinea Account Lifecycle Manager
Service accounts from request to retirement.
Approval workflows and automated provisioning and decommissioning of service accounts in AD and Entra ID, vaulted in Secret Server.
Delinea Platform bundles
Platform & engineEssentials, Standard and Enterprise package the products above in the cloud with set allowances: Essentials has 15 admins, 15 business users and 2 TB; Standard adds server privilege with 15 servers and 4 TB; Enterprise doubles seats to 30 and adds workstations, service account governance and 6 TB. All are quote-only, so TechBag covers them here rather than on a page of their own
Delinea Iris AI
Platform & engineThe AI engine inside the Delinea Platform, launched on 5 August 2025. It is a feature, not a SKU: on the Privileged Remote Access page it audits recorded sessions, and Delinea describes the platform as powered by it
Continuous Identity Discovery
Platform & engineA feature of Privilege Control for Cloud Entitlements that inventories human, machine and AI identities, shadow admins and stale accounts. It is covered on that product’s page rather than paged on its own
IBM Verify Privileged Identity
Platform & engineIBM resells Delinea technology under its own name: IBM’s page says the line is powered by Delinea, and lists Privilege Vault (formerly IBM Secret Server), Privilege Manager, Privilege Server Suite, DevOps Vault and Account Lifecycle Manager. It is not a separate IBM PAM, so compare it against the Delinea pages here
Delinea sells 9 of the products TechBag carries in Identity & Access. The Identity & Access guide shows how the category splits and which part is yours. →
Also sold in Endpoint Management (1 product) · Security (1 product).
Why “authorise every identity, not just vault it” is the whole story
Most PAM purchases start as a vault for admin passwords and stop there. Delinea sells the vault, but alsoendpoint and server elevation, runtime just-in-time access through StrongDM, machine secrets and cloud entitlements, all authorised from one platform, so the same policy can cover an administrator, a pipeline and an AI agent. The catch for Indian buyers: there is no India hosting region, so the choice is Singapore, the UAE or running it yourself.
Delinea Platform
One cloud tenant for vaulting, elevation, remote access and discovery, stored in the geography chosen at provisioning; there is no India geography.
Engines
Essentials allows up to four engines; Standard and Enterprise remove the limit on engines and sites, which suits estates spread across many locations.
Self-hosted editions
Secret Server, Server Suite and Privilege Manager can be installed on-premises, which is how an Indian buyer keeps the vault inside India.
StrongDM gateways
StrongDM pairs a SaaS control plane with gateways you host; targets need no agent, and the gateway brokers credentials so users never see them.
Start with the gap the auditor found — vault, laptops, servers or suppliers — then decide between a Platform bundle and single products.
Peer & market recognition
Every claim on this hub traces to one of these public signals.
Leader, PAM Magic Quadrant 2025
published 13 October 2025; Delinea calls it a seventh consecutive time, counting Thycotic and Centrify years
Overall Leader, PAM Compass 2026
also named a Product, Innovation and Market Leader, announced on 10 June 2026
Leader, PIM Wave Q3 2025
the Forrester Wave for Privileged Identity Management, as Delinea stated it in August 2025
4.7/5 from 132 reviews
Gartner Peer Insights for the 12 months to 14 October 2025; a review score, not an analyst placement
Passed $400M in ARR
with the majority of it from SaaS, as Delinea announced on 12 August 2025
Completed the StrongDM deal
closed on 5 March 2026 with terms undisclosed; StrongDM is still sold under its own name
Launched Delinea Iris AI
the AI engine across the Delinea Platform, introduced on 5 August 2025
Four critical Secret Server CVEs
on-premises advisories in September 2026, up to CVSS 9.8; Delinea’s fix line is 12.2.7 or later
The company in six figures
See the platform, hear the pitch
Delinea Privileged Access Management Explained
A November 2023 primer on how Delinea approaches privileged access, recorded before Iris AI and the StrongDM deal.
Nothing Happening is Everything in Identity Security
A March 2026 brand spot on identity security; a short film, not a product demo.
IBM & Delinea on Identity Security, Agentic AI and PAM Challenges | RSAC 2026
A May 2026 conversation from RSAC between IBM and Delinea, whose technology IBM resells as Verify Privileged Identity.
Where Delinea sits — the grids
Two company-level views you won’t find on any vendor site — tap any dot for the rationale. The category-level grid lives on the product page.
Delinea Across Its Solution Areas
Each dot is a Delinea solution area: competitive position vs category momentum.
Secret Server, on-premises or as Secret Server Cloud, is the product behind the 2025 Gartner Leader placement and the 2026 KuppingerCole Overall Leader title.
Privileged-Access Breadth × India Footprint
How many privileged-access lines each vendor sells vs how much it documents in India: office, hosting region, rupee pricing.
Twelve products from the vault to runtime access and CIEM, but no Indian office or hosting region: SaaS tenants sit in Singapore or the UAE at the nearest.
Positions are TechBag’s illustrative synthesis of public review-platform standings and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
New to this? Learn it properly.
Zero-jargon starting points, in reading order. Each links into the deep education on the product page.
Where should you start with Delinea?
Answer three questions; we’ll point you at the right starting product. No email required — this isn’t that kind of quiz.
1. What problem is forcing the decision?
2. Where must it run?
3. Who will own it?
Twelve products, one platform
Vault, endpoint, server, remote access, secrets, StrongDM, Fastpath, ITDR and CIEM can be bought alone or as Delinea Platform bundles.
Read →Vault, laptop or server first?
Secret Server stores and rotates admin passwords, Privilege Manager limits laptops, and Server PAM controls who can be root. Start with your gap.
Read →Names that changed
Thycotic and Centrify became Delinea in 2022, older papers still say Privileged Access Service, and StrongDM keeps its own name and website.
Read →Bundle or single product?
Essentials, Standard and Enterprise bundle seats, servers and storage in the cloud; on-premises Secret Server comes as Vault, Professional or Platinum.
Read →Hosting and patch levels
No tenant can live in India, so choose Singapore, the UAE or on-premises; then keep Secret Server at 12.2.7+ and Cloud Suite at 25.2 HF1+.
Read →Where Delinea fits
The Identity & Access category compares privileged access, governance and sign-in tools, the market where nine of Delinea’s twelve products compete.
Read →The acronym decoder
Every term on these pages, in one place- PAM
- Privileged access management: vaulting, brokering and recording the accounts that run IT.
- PEDM
- Privilege elevation and delegation: granting admin rights to one app, not the whole user.
- Vault
- An encrypted store that holds privileged passwords and keys, and rotates them on a schedule.
- JIT access
- Just-in-time access: rights granted for one task and removed automatically afterwards.
- Zero standing privilege
- No account keeps admin rights by default; every elevation is requested and time-bound.
- AD bridging
- Joining Linux and Unix servers to Active Directory so one identity works everywhere.
- Dynamic secret
- A credential created on request that expires by itself, so nothing long-lived leaks.
- SoD
- Segregation of duties: no one person can both create and approve the same transaction.
- ITDR
- Identity threat detection and response: spotting attacks that abuse identities and access.
- CIEM
- Cloud infrastructure entitlement management: finding and trimming excess cloud permissions.
- Service account
- A non-human account that applications and scheduled jobs use to log in to systems.
- Delinea Iris AI
- The AI engine across the Delinea Platform, used for tasks such as auditing session recordings.
Buy it like you’ve done this before
The procurement playbook TechBag runs with IT buyers — steps, licensing cheat-sheet, and the pitfalls that cost quarters.
Name the privilege gap
Vault, laptops, servers, suppliers, pipelines or cloud roles: each is a different Delinea product. Pick the one or two that match the audit finding first.
Choose bundle or single products
The Platform bundles fix admin, business-user, server and storage allowances; single products suit a narrower start. Compare both quotes.
Pick where the tenant lives
No Delinea geography is in India. Choose Singapore or the UAE for SaaS, or run Secret Server, Server Suite and Privilege Manager on your own servers.
Check the edition for recording
On-premises Secret Server records sessions in full only in Platinum; Professional stops at 50 secrets. Name the edition in the order.
Patch before go-live
Run on-premises Secret Server at 12.2.7 or later after September 2026’s critical advisories, and Cloud Suite at 25.2 HF1 or later.
Get it priced in rupees
Every Delinea product is quote-only, and StrongDM is quoted per user. TechBag scopes the products, seats and hosting, then quotes the total in INR with GST.
The licensing cheat-sheet
| Product | Licensing model | How you enter | Best for |
|---|---|---|---|
| Secret Server | On-premises in Vault, Professional or Platinum editions · or Secret Server Cloud in a Platform bundle | Quote · 30-day trial | Privileged password vault |
| Privilege Manager | Cloud or on-premises · licence unit not published | Quote · 30-day trial | Local admin removal |
| Server PAM | Privilege Control for Servers or Cloud Suite (SaaS) · Server Suite (on-premises) | Quote · trial | Linux, Unix and Windows servers |
| Privileged Remote Access | SaaS on the Delinea Platform · works with the vault | Quote · demo | Supplier and remote admin access |
| DevOps Secrets Vault | SaaS · CLI and REST API for machine secrets | Quote · free trial | Pipeline and app secrets |
| Credential Manager | Business-user vault · deployment and unit not stated | Quote · free trial | Staff password sharing |
| StrongDM | One per-user SKU with every feature · SaaS with self-hosted gateways | Quote per user | JIT database and Kubernetes access |
| Fastpath | Four modules for ERP and business systems | Quote · free trial | ERP segregation of duties |
| Identity Threat Protection | SaaS on the Delinea Platform | Quote · 30-day trial | Identity threat detection |
| Cloud Entitlements | SaaS CIEM for AWS, Azure and GCP | Quote · 30-day trial | Cloud permission clean-up |
| Connection Manager | Desktop app, licensed separately | Quote · trial | RDP and SSH session juggling |
| Account Lifecycle Manager | SaaS · Active Directory and Entra ID | Quote · 30-day trial | Service account governance |
Delinea publishes no price for any product or Platform bundle: everything is quoted, most products come with a free 30-day trial, and StrongDM is one per-user SKU with every feature. TechBag gets the quote itemised in INR with GST.
Five pitfalls that cost buyers quarters
Expecting recording on every edition
On-premises Secret Server Professional records sessions for only 50 secrets and Vault records none. Full recording is a Platinum feature.
Running an unpatched vault
Four critical Secret Server advisories landed in September 2026. Anything below 12.2.7 on-premises, or Cloud Suite below 25.2 HF1, needs work.
Assuming an India region exists
Delinea Platform tenants stay in the geography picked at set-up, and India is not one of them. Self-host in India or settle it in the contract.
Treating online prices as list prices
Delinea publishes no price for any product or bundle. Per-user figures on third-party sites are estimates, not Delinea’s list.
Buying the same PAM twice
IBM Verify Privileged Identity runs on Delinea technology. If you already hold it, check what you own before adding Delinea licences.
Reading Fastpath as full IGA
Fastpath governs access inside ERP and business apps. Directory-wide joiner-mover-leaver and role mining need a separate governance tool.
The evaluation kit
Each intel page carries an 8-question vendor checklist and a value calculator:
Skip the homework entirely
Bring your requirements and current tool bills — a TechBag advisor models the whole decision for you.
Book a discovery call →The forces shaping this market
Four trends with momentum scores (TechBag’s read of analyst and market signals) — and what each means for your next decision.
Category momentum — estimated market growth
Illustrative CAGR synthesis**TechBag’s illustrative estimate, not a quoted analyst figure. The takeaway: buyers are adding identity threat detection and cloud entitlements on top of the classic vault — which is why Delinea now sells ITDR, CIEM and runtime access alongside Secret Server.
Authorisation at runtime
Delinea closed the StrongDM deal in March 2026 to check access continuously during a session, not only at login.
What it means for you
Ask whether a PAM tool can cut a session off mid-way, not just open it.
AI agents as privileged identities
StrongDM brokers access for AI agents and MCP clients, and Continuous Identity Discovery reports AI usage beside human accounts.
What it means for you
Count your AI agents as identities before you size a PAM licence.
Zero standing privilege
In July 2026 Delinea published videos on zero standing privilege for the vault, endpoints and traditional infrastructure.
What it means for you
Measure how many accounts still hold admin rights all day.
PAM moving to SaaS
Delinea said in August 2025 that most of its $400M+ ARR now comes from SaaS, while the on-premises editions remain on sale.
What it means for you
Weigh SaaS convenience against where your vault is allowed to live.
Questions buyers ask about Delinea
Ready to shortlist Delinea?
Open any of the twelve intel pages for the deep dive, or let a TechBag advisor build the case with you — the products and seats to license, a Platform bundle or single products, and whether to self-host in India or use Singapore or the UAE, quotes, trials, GST invoicing and lifecycle support included.
Stats, positions and figures are illustrative syntheses of public materials; verify before purchase.