Sallyport and Delinea
The closest description of our shape, sold the way enterprise software is sold.
Delinea announced Runtime Authorization for AI Agents in July 2026 with a sentence that could be ours. The agent never holds a credential, and a human is pulled in before it executes. They cover databases, SSH, Kubernetes and MCP on top of a mature privileged access platform.
| Them | Sallyport | |
|---|---|---|
| Server-side injection | Yes | Yes |
| Per-call human approval | Yes | Yes |
| Public price | Contact sales | $0, $19, $99, on the page |
| Self-serve start | No | A call approved from your phone on day one |
| Tamper-evident journal | Enterprise logging | Hash-chained, sealed, with an open verifier |
| Per-client workspaces | Not a product shape they sell | A vault, an approver and a journal per client |
Where they are ahead
Everything an established privileged-access vendor is ahead on: compliance paperwork, enterprise integrations, a support organisation and a decade of deployments. If you are already a Delinea shop, their answer arrives with the account team you have.
Where the difference is
You can start here in an afternoon, on your own, for nothing, and read the price on a web page. And the journal claim is checkable: an open tool, your export, none of our keys.