Delinea (Thycotic + Centrify)
Cloud-first PAM Leader with the fastest time-to-value in the Gartner MQ — built for mid-market velocity
Delinea is the cloud-first PAM Leader formed by the Thycotic and Centrify merger. Secret Server vaulting, Privilege Manager (PEDM), Connection Manager and Server Suite cover the full privileged-identity surface for mid-market and upper-mid-market UAE buyers. The platform's headline advantage is operational simplicity: modern UX, fast time-to-value, and Leader-quadrant capability without the operational depth that CyberArk-tier deployments require.
Gartner position
Leader (Gartner Magic Quadrant)
Heritage
Thycotic + Centrify merger, now Delinea
Deployment
Cloud-first SaaS with on-prem options
Sweet spot
Mid-market and upper-mid-market PAM
Why it wins
What makes Delinea (Thycotic + Centrify) a serious option
Modern, cloud-first credential vaulting
Secret Server delivers vaulting, rotation, session brokering and audit in a SaaS-first architecture with a UX widely cited as the easiest to operate in the Leaders quadrant. Fast onboarding for the first 100-1,000 vaulted credentials.
Endpoint privilege management without CyberArk effort
Privilege Manager removes local admin and applies policy-based elevation across Windows and macOS, with simpler ruleset authoring than CyberArk EPM. Strong fit when local-admin removal is in scope but not the dominant pain point.
AD-integrated server privilege management
Centrify Server Suite delivers AD-integrated authentication, role-based access and audit for Linux and Unix servers. Removes the need for parallel /etc/passwd identity stores and centralises Linux privilege under Active Directory.
RDP, SSH and database session brokering
Connection Manager brokers privileged sessions (RDP, SSH, database) with recording and command-level audit. Tight integration with Secret Server makes session launch and credential rotation a single workflow.
Fastest TTV in the Leaders quadrant
Delinea is consistently cited by Gartner Peer Insights for the fastest deployment time among PAM Leaders. Mid-market estates can be in production with vaulting and PEDM within 8-12 weeks.
DevOps Secrets Vault for CI/CD and machines
DevOps Secrets Vault delivers machine and CI/CD pipeline secret management for development and platform teams. Lighter-touch than CyberArk Conjur but sufficient for most mid-market machine-identity scope.
Who should put Delinea (Thycotic + Centrify) on the shortlist
UAE mid-market and upper-mid-market enterprises under 1,000 privileged users
Buyers prioritising operational simplicity and fast time-to-value over depth
Cloud-first estates without sovereign on-prem PAM mandate
Customers needing Leader-quadrant PAM without CyberArk-tier deployment effort
Lean security teams running PAM without a dedicated PAM operations function
Estates where Active Directory is the canonical identity source
Buyers consolidating multiple legacy vault tools onto a modern cloud-first platform
Product portfolio
Modules we deploy and manage
Picking the right SKU is as important as picking the right vendor. We size by privileged-user count, machine-identity surface, audit obligations and sovereignty posture, not by brochure tier.
What to consider
The honest watch-outs
Every platform has trade-offs. We would rather raise these now than have you discover them three months into a deployment.
Less depth than CyberArk on the heaviest estates
For ministry-scale audit posture, the largest non-human identity estates and central-bank mandates that name CyberArk by reference, Delinea trails. Choose Delinea for mid-market velocity rather than ministry-scale audit depth.
Sovereign / air-gap less established than CyberArk Self-Hosted
Delinea supports on-prem deployment, but CyberArk Self-Hosted has the deeper reference footprint for fully sovereign and air-gap-capable UAE FSI and defence customers.
Why Artiflex IT
Delivering Delinea (Thycotic + Centrify) across the UAE
Artiflex IT delivers Delinea across UAE mid-market and upper-mid-market customers needing Leader-quadrant PAM without CyberArk-tier operational depth. Our team has hands-on experience with Secret Server, Privilege Manager, Server Suite and Connection Manager deployments. Vendor-neutral sizing is our default starting point — we will tell you when CyberArk is the better fit for ministry / FSI scale or sovereign residency, and when BeyondTrust is stronger for workstation privilege as the dominant pain.
Frequently asked
Delinea (Thycotic + Centrify) questions we hear from UAE buyers
CyberArk leads on breadth — sovereign on-prem, the largest non-human identity estates, ministry-scale audit posture. Delinea leads on time-to-value and operational simplicity. For mid-market estates under 1,000 privileged users without sovereign on-prem mandate, Delinea typically delivers Leader-quadrant PAM at materially lower licence cost and lower deployment effort.
Cloud-first SaaS is the recommended starting point for almost all mid-market UAE buyers. On-prem remains supported but the cloud-first architecture is where Delinea invests most heavily, and where time-to-value is fastest.
Yes via DevOps Secrets Vault. Sufficient for most mid-market machine-identity scope. For the largest CI/CD pipeline estates and agentic AI workloads, CyberArk Conjur remains the deeper specialist.
Ready to evaluate Delinea (Thycotic + Centrify)?
Free PAM assessment, vendor-neutral sizing, and a written recommendation. We will tell you when another vendor is the better fit.