Sallyport and Delinea
The closest to Sallyport, sold through sales calls and contracts.
Delinea announced Runtime Authorization for AI Agents in July 2026 with a sentence that could be ours. The agent never holds a credential, and a human is pulled in before it executes. They cover databases, SSH, Kubernetes and MCP on top of a mature privileged access platform.
| Them | Sallyport | |
|---|---|---|
| Server-side injection | Yes | Yes |
| Per-call human approval | Yes | Yes |
| Public price | Contact sales | $5, $19, $79, $99, on the page |
| Self-serve start | No | A call approved in the console on day one, from any phone |
| Tamper-evident journal | Enterprise logging | Hash-chained, signed per entry, keys published |
| Per-client workspaces | Not a product shape they sell | A workspace, guest approvers and a monthly report per client |
Where they are ahead
Everything an established privileged-access vendor is ahead on: compliance paperwork, enterprise integrations, a support organisation and a decade of deployments. If you are already a Delinea shop, their answer arrives with the account team you have.
Where the difference is
You can start here in an afternoon, on your own, with seven days free, and read the price on a web page. And the journal claim is checkable: your export and our published public keys, none of our secrets.