Snapshot 12628
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Trust Center
Overview
Delinea's cloud-native identity security platform serves as the central control plane for managing access across human, machine, third-party, and AI identities. By continuously discovering identities, assessing risk, and enforcing least-privilege access in real time, Delinea transforms identity from an organization's greatest vulnerability into its strongest line of defense.
Security is built into everything we do. Delinea maintains a comprehensive Information Security Program aligned to industry-recognized frameworks and designed to protect the confidentiality, integrity, and availability of our systems and customer data. Delinea implements a robust security program that embeds security controls and continuous quality assurance at every stage of the development lifecycle. The safeguards encompass intrusion detection, DDoS prevention, vulnerability management, behavioral analytics, continuous monitoring, cryptographic protections, network security, and configuration management, ensuring our platform remains resilient against evolving threats.
Compliance
EU-US DPF
SOC 1 Type 2
CCPA
DESC Cloud Service Provider
GDPR
ISO/IEC 27001:2022
PCI DSS v4.0.1
SOC 2 Type 2
Documents
DOCUMENTS2026 CAIQ
DOCUMENTS2026 SIG LITE
DOCUMENTSBC/DR Attestation Letters
DOCUMENTSPenetration Tests
DOCUMENTSProcess for requesting a Penetration Test or Performance/Load Test on Customer Tenant
COMPLIANCEDESC Cloud Service Provider
COMPLIANCEISO/IEC 27001:2022
COMPLIANCEPCI DSS v4.0.1
COMPLIANCESOC 1 Type 2
COMPLIANCESOC 2 Type 2
PRIVACYTransfer Impact Assessments (TIA)
TECHNOLOGY DEVELOPMENT AND ACQUISITIONA Shared Responsibility Model for SaaS
Privacy
Data Processing Addendum (DPA)
EU – US Data Privacy Framework (DPF)
Privacy Policy
View more
Data Security
Encryption at Rest
Encryption in Motion
Key Management
View more
Technology Development and Acquisition
A Shared Responsibility Model for SaaS
Cloud Service Provider Responsibilities
Customer’s Responsibilities
View more
Artificial Intelligence
Responsible AI Statement
Legal
Sub-Processors
Code of Conduct
Master Subscription and License Agreement
View more
Identity and Authentication
Statement on Access Control and Monitoring
Infrastructure
Infrastructure Security
Network Defenses
Statement on Backups
View more
Asset Management
Cloud Hosting
Endpoint Security
Infrastructure Architecture
Security Operations
Application Logs
Audit trails
Log integrity
View more
Cyber Security
Access Monitoring
Access Reviews
Cyber Risk Management
View more
Policies
Responsible Disclosure
Security Advisories
CVE disclosures
Trust Center Updates
Delinea Secret Server on-prem FIDO2 credential registration authentication bypass vulnerability - CVE- 2026-19117
Vulnerabilities
Vulnerability Description - Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as that user. This issue affects on-premises deployments only.
Affected product and version
Delinea Secret Server on-prem
10.6.0 through 11.7.61
11.8.0 through 11.8.1
11.9.0 through 11.9.47
12.0.0 through 12.0.22
12.1.0 through 12.1.2
Resolution
Upgrade to secret server version 12.2.7 or later, or upgrade to one of the following hotfixes: 12.1.3, 12.0.23, 11.9.48, 11.8.2, or 11.7.62.
Customers on versions prior to 11.7 should upgrade to a supported version to address this vulnerability
CVE Details
CVE ID - CVE-2026-19117
Published Date: September 2, 2026
Vulnerability Type: Authentication bypass by spoofing
CWE: 290
CVSS V3 Score: 9.8
CVSS V3 Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References: (https://docs.delinea.com/online-help/secret-server/release-notes/ssvr-onprem-rn.htm)
Security Advisory: Klue Vulnerability Incident
Vulnerabilities
Delinea does not use the Klue market intelligence platform and has no integrations with it, therefore Delinea is not impacted by the Klue incident disclosed on June 12, 2026.
Please subscribe to the Delinea Trust Center for future security and other important announcements.
Notice regarding the recent geopolitical developments in the Middle East
General
Delinea is aware of the current situation in the Middle East and the associated escalation in cyber threat activity targeting technology sector infrastructure. Delinea does not own or operate data centers in the impacted regions but does deliver services via third-party cloud infrastructure providers that might be impacted based on the current threat landscape.
To date, Delinea services in the region have not been impacted, and we continue to actively monitor the situation. Further updates will be provided if and as soon as our impact assessment changes.
If you have further questions, please contact your Customer Success Manager, Engagement Manager, or Partner Manager. Please subscribe to the Delinea Trust Center for future security and other important announcements.
Delinea Cloud Suite on-prem argument injection vulnerability - CVE-2026-2409
Vulnerabilities
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Delinea Cloud Suite allows Argument Injection.
Affected Product and Version
Cloud Suite before 25.2 HF1
Resolution
Upgrade to Cloud Suite version 25.2 HF1 or later
CVE Details
CVE ID: CVE-2026-2409
Vulnerability Type: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE: 89
CVSS v4.0 Score: 9.3
CVSS v4.0 Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N
Credit: Jess Parker (Reporter), Radu Enachi (Reporter)
References: Release Notes
Delinea Cloud Suite and Privileged Access Service – HTTP Request Smuggling vulnerability - CVE-2025-12811
Vulnerabilities
Improper Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in Delinea Inc. Cloud Suite and Privileged Access Service.
If you're not using the latest Server Suite agents, this fix requires that you upgrade to Server Suite 2023.1 (agent 6.0.1) or later. If you cannot upgrade to Release 2023.1 (agent version 6.0.1) or later, you can choose one of the following versions: Server Suite release 2023.0.5 (agent version 6.0.0-158), or Server Suite release 2022.1.10 (agent version 5.9.1-337).
Affected Product and Version
Delinea Cloud Suite and Privileged Access Service version 25.1 HF4 and earlier
Resolution
Upgrade to version 25.1 HF5 or later
CVE Details
CVE ID: CVE-2025-12811
Published Date: Februrary 18, 2026
Vulnerability Type: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
CWE: 444
CVSS v4.0 Score: 6.9
CVSS v4.0 Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
If you need help using this Trust Center, please contact us.
Contact support
If you think you may have discovered a vulnerability, please send us a note.
Report issue