Privileged Access Management (PAM)
Thycotic and Centrify are now Delinea
The Privileged Access Management (PAM) market is booming and is one of the fastest growing areas of cybersecurity today. According to KuppingerCole analysts, PAM sales will double from $2.2 billion to $5.4 billion by 2025.
There was also an innovation in the provider market with the merger of Thycotic and Centrify last year. After a transitional period, the company has now announced its new brand name Delinea.
We talked about the rebranding, the technical strengths of Thycotic and Centrify and the future of the PAM market with Stefan Schweizer, Vice President Sales DACH of Delinea .
ThycoticCentrify recently became Delinea. What is the significance of the new brand name?
Stefan Schweizer, Vice President Sales DACH of Delinea
Delinea alludes to the English word delineate, which means “to delimit or set boundaries from each other”. This is exactly where we support our customers: they should be able to meaningfully determine what individual users or user groups may have access to and which accesses must be prevented for security reasons. Our products enable you to set these limits by implementing effective least privilege and zero trust strategies – seamlessly. This means that users are neither hindered in their work nor reduced in their productivity.
Both Thycotic and Centrify were market leaders in the PAM sector. How did the merger of the two portfolios affect the offer in the course of the merger?
Both companies were strong PAM providers, but each with its own strengths. Those who took a closer look at the portfolios could see that they did not overlap so much as complemented each other in a meaningful way. The strengths of Thycotic lay in the administration and protection of privileged credentials and identities. The flagship product was Secret Server, which makes it possible to keep passwords separate from Active Directory. This proven product accounted for about 97 percent of sales worldwide. In recent years, however, Thycotic has further expanded its offering to also meet new PAM use cases and to cover new infrastructures, applications and users. This enabled Thycotic to continue to grow and remain competitive.
Centrify, on the other hand, focused primarily on the use of Active Directory and the ability to manage and control privileges in Linux and Unix environments from Active Directory. This gave IT managers the ability to control access to Unix and Linux environments and their permissions through their internal directory. This Active Directory bridging accounted for about 95 percent of Centrify’s revenue.
In the course of the merger last spring, these two strengths have now been merged. The result is a unique platform that offers both user-friendly vault technology and powerful Active Directory bridging.
What is the future of the PAM market? What requirements do your customers have and how does Delinea meet them?
Managing and securing privileges and identities across all environments – be it in the various infrastructures, Linux and Unix servers, cloud deployments or DevOps environments – is what our customers want. Because that’s exactly what sustainable PAM is. Delinea combines all these functions in a single platform, which is also easy to use and quick to implement and is also provided via the cloud. Both Thycotic and Centrify were early adopters when it came to SaaS deployment of their products. PAM will continue to develop in this direction.
Their claim is “seamless access security”. What exactly do you mean by that?
PAM products are traditionally based on sophisticated and complex technologies, for the use of which a lot of expertise is required. For a long time, PAM was therefore an issue, especially for large, resource-intensive companies. Although the field of application has been broader for some time, many customers still lack the know-how to use the products to their full extent and benefit from all the advantages. If security measures are to be implemented correctly and accepted by everyone, they must not hinder employees in any way in carrying out their work, but must fit seamlessly into the processes. At Delinea, we therefore continue to invest in products that run in the background and with which even laymen can interact. Regardless of whether employees change jobs, change their position or temporarily take on new tasks, they always get the access they need, because the interface is intuitive.
They say the future is in the cloud and SaaS, but some companies are still cloud skeptics. Do they also belong to the target group of Delinea?
Both Thycotic and Centrify started in the PAM business about 20 years ago, i.e. our origins lie in on-premises deployment. And a not insignificant part of our customer base still works with a local infrastructure. Some of them will continue to rely on on-site deployment in the future, others will soon make the transition to the cloud. It is important to keep in mind that cloud products have specific functions that cannot be replicated on site. That is why the market is increasingly adopting this new model. Of course, we will continue to support our customers regardless of their infrastructure, but we are convinced that customers who work locally miss the unique advantages of the cloud. Every company is different and must make this transition at its own pace. We help you by building a bridge from on-premises PAM to cloud PAM.
And what exactly does this bridge look like?
On the one hand, we offer our customers a single management interface with which they can manage both cloud and on-premises implementations. Because in the platform we provide, it is possible to have part of the infrastructure in the cloud and part on-site and manage it in one place with common policies. On the other hand, technical tools are available to customers that allow them to conveniently transfer passwords from an on-prem interface to the cloud interface.
Another point is licensing: For existing customers, the transition of licenses from the on-prem to the cloud product is quite seamless. That is, there is no need to buy one local infrastructure first, and then another in the cloud. How long the migration takes is completely irrelevant, since it is possible to have on-prem and cloud licenses in parallel.