One Delinea Privileged Access Management vault. Every credential owned, every session recorded.
How a 340-seat Pune NBFC found a shared domain admin password with no record of who had used it, three weeks before an RBI IT audit review. Eleven people had the login. The vault went live nineteen days later, before the auditor arrived. Story below.
Delinea Privileged Access Management at a glance
Why Delinea anchors most Indian privileged access management estates.
- OEM
- Delinea Inc., majority owned by TPG Capital. Formed in 2021 from TPG’s merger of Thycotic and Centrify, and rebranded Delinea in 2022. Independent identity-security vendor, not a module bolted onto a bigger security suite.
- Platform
- The Delinea Platform unifies a password and secrets vault (Secret Server), endpoint least-privilege (Privilege Manager) and server session control for Linux, Unix and Windows (Server PAM, the Centrify heritage line) under one console.
- Recognition
- Named a Leader in the Gartner Magic Quadrant for Privileged Access Management and the Forrester Wave for Privileged Identity Management, with 950+ five-star Gartner Peer Insights reviews. Thycotic alone served 12,500-plus organisations at the time of the 2021 merger, so the underlying vault technology is not new.
- Deployment speed
- Secret Server is built to be vaulting real credentials in weeks, not months. Generally simpler and cheaper to stand up than CyberArk at mid-market-to-enterprise scale.
- Sirius Star’s role
- We are an authorized reseller. We run the credential audit, size the platform to your estate, handle deployment, and stay on for the AMC. Not the OEM, your local accountable vendor.
- Best fit
- NBFCs, brokerages, IT services and manufacturing firms with 5 or more admins sharing credentials today, especially anyone facing an RBI, SEBI or DPDP-linked audit that asks who touched a privileged account and when. We have seen the same gap in almost every first audit: the password works, but nobody owns it.
The Delinea Privileged Access Management ranges Sirius Star supplies
Pick the range that matches the use case. We size the mix in the free 30-minute review.
Secret Server
The vault. Every admin, service and application password lives here, rotated on a schedule, checked out with an approval trail instead of a sticky note.
- Session recording on privileged logins
- Automatic password rotation and check-in/check-out
- Plugs into your AD and SSO instead of replacing it
Privilege Manager
Removes standing local admin rights from laptops and desktops, then elevates only the specific application that needs it, for the minute it needs it.
- Cuts local-admin-rights malware and ransomware paths
- Application-level elevation, not blanket admin access
- Rolls out silently through your existing endpoint tools
Server PAM (Centrify heritage)
Session control and MFA at the server layer itself, for Linux, Unix and Windows estates where the vault alone does not reach.
- Brings AD-style identity to Linux and Unix servers
- MFA enforced at the server, not just the jump box
- Fits estates already carrying the Centrify name on paper
Delinea Platform
The console that ties the vault, endpoint privilege and governance together once you are running more than one of the above.
- One dashboard instead of three logins
- Governance (Fastpath) and threat detection (Authomize) plug in here
- Sized in only when the estate has outgrown a single vault
Delinea Privileged Access Management vs CyberArk, BeyondTrust, ARCON
All four are honest choices. Most Indian buyers land on the first option for service depth and ecosystem fit.
| Brand | Where it wins | Best fit |
|---|---|---|
| Delinea | Faster time to a live vault (weeks, not months) and a lower total cost than CyberArk at mid-market-to-enterprise scale, without giving up Gartner Leader-tier coverage. | NBFCs, brokerages and IT services firms of 200 to 2,000 seats who need a working vault before the next audit, not a two-year rollout. |
| CyberArk | The broadest edge-case coverage anywhere in PAM, and the deepest bench of India system integrators who have deployed it before. | The largest, most regulated enterprises and PSU banks that already standardise on CyberArk elsewhere in the group. |
| BeyondTrust | Vaulting and vendor remote-support access bundled under one brand and one console. | Businesses that give outside vendors and MSPs privileged access as often as they give it to their own staff. |
| ARCON | India data residency by default and pricing built for Indian PSU and government tenders. | Public sector and government-linked buyers where an India-headquartered PAM vendor is a tender requirement, not a preference. |
How a Sirius Star Delinea procurement runs
Free 30 minute review first. Then a written quote in 24 working hours.
Credential and access audit
Free, on a call or on your site. We map every shared admin login, service account and who actually holds each password today.
Platform sizing
Vault, endpoint privilege or server PAM, whichever modules earn their licence. Not the full suite by default.
Deployment and vaulting
Delinea engineers rotate and vault the credentials, wire up MFA and session recording, and test against a live admin login, not a demo account.
Handover and AMC
Your team gets a walkthrough. Ours stays on call. Written quote lands in 24 working hours of the audit.
Buying Delinea PAM in India, a field guide
The deeper read for IT and security leads scoping a PAM rollout, not just buying a licence.
- The full Pune NBFC audit story
- An 8-point checklist before you sign
- Delinea vs CyberArk vs BeyondTrust vs ARCON, honestly
- What a credential audit actually finds
Delinea Privileged Access Management India FAQ
Common questions about this brand for Indian buyers. Hover any underlined term for a plain-English definition.
What does Delinea actually do that a password spreadsheet does not?
A spreadsheet stores a password. It does not rotate it, record who checked it out, or prove any of that to an auditor. Delinea’s Secret Server vaults the credential, rotates it on a schedule, and logs every check-out with a session recording attached. The difference shows up the day an auditor asks who used the domain admin account on a specific date, not before.
Is Delinea the same company as Thycotic or Centrify?
Yes. TPG Capital merged Thycotic and Centrify in 2021, ran the combined company as ThycoticCentrify for about a year, then rebranded it Delinea in 2022. Secret Server is the Thycotic-heritage vault. Server PAM carries the Centrify heritage for Linux, Unix and Windows server access.
How does Delinea compare with CyberArk for an Indian business?
Both are recognised Leaders in the Gartner Magic Quadrant for PAM. CyberArk carries the deepest edge-case coverage and the largest India systems-integrator bench, which suits the biggest regulated enterprises. Delinea’s Secret Server is generally faster to stand up and cheaper to run at mid-market-to-enterprise scale, we have seen it live within weeks where a CyberArk rollout was still in scoping.
What does a Delinea PAM rollout cost in India?
It is sized to your estate, not a shelf price. Cost depends on how many privileged accounts and endpoints are in scope and which modules, vault, endpoint privilege or server PAM, you actually need. Send us your admin and service-account count and a sized, written quote lands in 24 working hours.
We already use MFA everywhere. Do we still need a PAM vault?
MFA proves who logged in. It does not prove which password they used, whether that password was shared, or what they did with it once inside. A PAM vault answers the second question, and that is usually the one the auditor asks.
Can Delinea replace ARCON for a government or PSU tender?
Not always. Some Indian PSU and government tenders specifically require an India-headquartered PAM vendor, which favours ARCON on paper regardless of feature fit. For everything outside that specific tender requirement, Delinea competes on deployment speed and Gartner-recognised coverage.
How long does the credential audit actually take?
For a business with 5 to 20 shared admin or service accounts, a day or two of interviews and log review, usually done over calls, not a week of on-site consulting. The output is a plain list: which accounts exist, who can use them today, and which ones nobody can explain. That list alone is often the first thing an auditor accepts on sight.
Ready for a written Delinea PAM quote?
Send your admin and service-account count and which systems need covering. A sized quote lands in 24 working hours.
Pair this on one PO
What buyers typically add to a Sirius Star order. Each link is a live page on the Sirius Star site.
Related reading from the Sirius Star blog
Long-form context from our team. Each link is a live post on siriusstar.in.