Delinea

Delinea: frequently asked questions

How does Delinea compare in a privileged access management evaluation?

Delinea is one of the three established enterprise PAM leaders, alongside Idira (formerly CyberArk) and BeyondTrust. Gartner named it a Leader in the 2026 Magic Quadrant for Privileged Access Management, published 21 October 2026, its eighth consecutive Leader placement. Idira still goes deeper for the largest regulated estates; Delinea is usually faster to deploy and easier for a normal-sized team to run. The structural difference in 2026: Idira sits inside Palo Alto Networks, while Delinea remains privately held by TPG, so buyers weighing platform consolidation against vendor neutrality have a real choice.

What should I check in a Delinea privileged password management evaluation?

Secret Server is the vault to test. It licenses per user, in Professional and Premium editions, and ships as Secret Server Cloud or on-premises; a 30-day trial covers both. Check discovery and rotation for your target systems, session launching and recording, approval workflows, and MFA options. Then check patch cadence: on 30 October 2026 Delinea disclosed three Secret Server flaws affecting on-premises and cloud versions 12.2.7 and earlier, fixed in 12.3.1, after four critical on-premises flaws in September. Ask how quickly cloud tenants were patched and how on-prem hotfixes are delivered.

What should I check in a Delinea identity security or identity fabric evaluation?

Delinea markets the Delinea Platform, with its Iris AI layer, as a unified identity security control plane rather than an identity fabric, so test how well the acquired pieces actually join up. StrongDM (closed 5 March 2026) adds just-in-time runtime authorization for human and machine identities, Fastpath (April 2024) adds identity governance and ERP segregation of duties, and Authomize (January 2024) adds identity threat detection. Ask which components share one policy model, console, and audit log today, and which still run as separate products with their own logins.

How much does Delinea cost?

Quote-based; no list prices published (checked 2026-11-05). The delinea.com/pricing URL returns a 404, and the buy-or-try page offers 30-day trials of Secret Server, Privilege Manager, Server PAM, DevOps Secrets Vault, and other products with no price figures. Secret Server documentation says licensing is per user, with Professional and Premium editions and support licenses that must match user licenses. Treat per-user figures published by procurement aggregators as unsourced.

Is Delinea FedRAMP authorized?

Yes. Delinea announced on 8 July 2026 that Secret Server received FedRAMP High authorization, with UberEther as the federal cloud partner and an independent 3PAO assessment, making it available to US federal agencies through the FedRAMP Marketplace. The authorization covers Secret Server; confirm on the marketplace listing whether other Delinea products you plan to buy are in scope before relying on it for a federal deployment.

Are there known Delinea security vulnerabilities?

Yes, several in 2026. In September Delinea disclosed four critical on-premises Secret Server flaws, including CVE-2026-19117 (CVSS 9.8, FIDO2 registration authentication bypass) and CVE-2026-15640 (9.5, SAML response manipulation), fixed in 12.2.7. On 30 October it disclosed CVE-2026-115829 (partial login bypass), CVE-2026-115830 (JWT issuance error), and CVE-2026-115828, affecting on-prem and cloud Secret Server up to 12.2.7, fixed in 12.3.1, plus CVE-2026-92744, an unauthenticated remote code execution in the Privilege Manager agent. None is in the CISA KEV catalog (checked 2026-11-05).

Did Delinea acquire StrongDM?

Yes. Delinea announced the deal on 15 January 2026 and completed it on 5 March 2026; terms were not disclosed. StrongDM brings just-in-time runtime authorization for human and non-human identities, which addresses Delinea's weakest historical area, developer-facing infrastructure access. Delinea says existing StrongDM deployments, logins, and support channels keep working, and strongdm.com now redirects to a Delinea page. Delinea also bought Authomize in January 2024 and Fastpath in April 2024.

What are the best Delinea alternatives?

Idira (formerly CyberArk) for the largest regulated estates, BeyondTrust for a comparable footprint with stronger remote access, and Keeper Security or ManageEngine PAM360 for cost-sensitive smaller deployments. WALLIX suits European and OT-heavy buyers. For purely cloud-native infrastructure access, Teleport is the main remaining independent specialist now that Delinea owns StrongDM.