Predictika · Privileged access management subscription quotes

An AI sales agent's Delinea PAM subscription quote, checked before it goes out

An AI sales agent prepares a Delinea privileged access management quote: Secret Server in the Vault, Professional or Platinum edition, in the Cloud or on-premises, with the Connection Manager, Resilient Secrets and Remote Access Service add-ons, the Delinea Platform, Privilege Manager client, server and support licenses, Server Suite Standard Edition, a support plan and implementation services, for a term of one, two or three years. Before it goes out, the agent sends it to Predictika, which checks it against a declarative model of the editions, limits and dependencies in Delinea's public documentation and returns a verdict, every reason, a line-item quote and the figures it computed.

Scope: Delinea PAM subscription quotes: Secret Server (Vault, Professional, Platinum; Cloud or on-premises) with Connection Manager, Resilient Secrets and Remote Access Service, Delinea Platform, Privilege Manager, Server Suite Standard Edition, support plans and implementation services, on a 1-, 2- or 3-year term. See everything this validator covers

This validator models Delinea PAM subscription quotes as described in Delinea's public documentation, not just the scenarios shown below.

  • Secret Server — the Vault (25 users), Professional and Platinum editions, in the Cloud or on-premises, with session recording, SSH key management, service account governance, high availability and disaster recovery requirements checked against the edition; the Connection Manager, Resilient Secrets (disaster recovery) and Remote Access Service add-ons.
  • Platform and endpoints — the Delinea Platform subscription; Privilege Manager client, server and support licenses, in the Cloud or on-premises, against the workstations and servers in scope; Server Suite Standard Edition against the systems in scope, Active Directory and supported operating systems.
  • Service and commercial terms — the support plan against how critical the deployment is, implementation services against the size of the deployment, FedRAMP-authorized hosting requirements, the term, the discount and the stated term total.
  • What the validator checks — that each add-on sits on the edition that offers it, that the edition covers what the customer requires, that the licenses cover the workstations, servers and systems in scope, that the Platform, support licenses and Active Directory that a product depends on are quoted, that a cloud service is not sold to a customer that needs FedRAMP-authorized hosting, that the support plan and services fit the deployment, that the term and discount are allowed, and that the stated term total matches the computed one.
  • Approvals — a discount above 10 percent of list annual charges (and up to 25 percent), the Mission Critical support plan and a term total above $20 million go to a person; a discount above 25 percent is blocked, and a discount above 10 percent on a 1-year term is blocked.

Any Delinea PAM subscription quote that touches these products, editions and limits is in scope — not only the scenarios pictured here. Not covered: Account Lifecycle Manager, DevOps Secrets Vault, Privileged Behavior Analytics, Cloud Suite, other Server Suite editions, StrongDM, FastPath, taxes and regional price lists. Delinea does not publish most prices, so every price on this page is illustrative.

The AI sales agentBuilds the Delinea PAM subscription quote from the conversation with the customer and says it is ready.
Predictika validatorChecks every rule at once and returns the verdict, each finding, and the computed figures.

7 scenarios in 3 groups · each group runs from the agent’s first attempt to the outcome · click one to switch

What the agent proposes

The AI sales agent says

Illustrative agent statement. The validator receives the structured request below.

Proposing agent: AI sales agent (scripted)

Before sending, the agent must call Recorded run

Predictika validator


      
Waiting for the call.

Where rules-based CPQ gets it wrong

Click to expand

Our assessment of what a typical rules-based CPQ (product rules, price rules and validation rules, as in Salesforce CPQ) does with the same cases. It is a judgment about effort and reliability, not a claim that nothing can be built.

What the validator caughtTypical rules-based CPQPredictika
Features and limits that depend on the editionOnly with care
Session recording stops at 50 secrets on Professional, SSH key management, service account governance and clustering are Platinum features, and Vault stops at 25 users. A product rule can hold each one, but every limit has to be kept for every edition and for Cloud and on-premises separately.
Edition, deployment and what the customer requires are inputs, and each requirement is checked against the edition in one pass.
Add-ons that need a particular editionOnly with care
Connection Manager, Resilient Secrets and Remote Access Service are Platinum add-ons, and Connection Manager cannot cover more users than Secret Server has. A dependency rule can hide the add-ons on other editions, but not compare their quantities with the user count.
Add-on quantities are compared with the edition and with the user count on every call.
Customer requirements that are not product optionsOnly with workarounds
High availability, disaster recovery, FedRAMP-authorized hosting and a business-critical deployment are facts about the customer, not lines on the quote. A CPQ has nowhere to hold them, so a person compares them with the edition, the add-ons, the hosting and the support plan.
Each requirement is an input and is checked against the edition, hosting, add-ons and support plan.
Licenses that must cover what is in scopeOnly with workarounds
Privilege Manager client licenses do not cover servers, every license needs a support license, and Server Suite licenses must cover the systems in scope. The quote holds license counts; the workstations, servers and systems in scope are separate facts that someone has to keep in step.
Licenses and the endpoints in scope are separate inputs and are compared on every call.
Products that depend on other servicesOnly with care
Privilege Manager Cloud needs the Delinea Platform, and Server Suite needs Active Directory and a supported operating system. Each dependency is a product rule, but they interact with the quantities and have to be maintained one by one.
Platform, Active Directory and supported systems are checked together with the licenses in one pass.
A stated total that has to agree with the quoteOnly with workarounds
Thousands of users and endpoints across several products, a discount and implementation services make a total that can drift from what is typed on the quote without anyone noticing.
The total is computed from the choices and compared with the total the quote states.
Every problem returned in one answerOnly with workarounds
Rules tend to fire as the quote is saved or a step is completed, so a person often fixes one error and meets the next.
All findings come back together, whatever order the choices arrived in.

What this validator catches: findings from its test cases

Click to expand

Every rule is checked on every call, in any order the choices arrive; one problem never hides another. Blocking findings stop the quote; approval findings need a person to sign off; everything else is computed.

1The quote has a term of 4 years; the subscriptions are quoted for 1, 2 or 3 years.
2The quote includes no Delinea product, so there is nothing to price.
3The quote includes 400 Secret Server users with no edition chosen.
4The quote includes Connection Manager for 150 users, and Connection Manager is an add-on to the Platinum edition only.
5The quote includes 2 Remote Access Service instances, and Remote Access Service is an add-on to the Platinum edition only.
6The customer requires SSH key management, which is included only in the Platinum edition.
7The customer requires service account governance, which is included only in the Platinum edition.
8The quote puts 26 users on Secret Server Vault, which includes 25 users.
9The quote has Secret Server Vault on-premises for a new customer; Vault is on-premises for current customers and Cloud for new customers.
10The quote has Connection Manager for 401 users but only 400 Secret Server users.
11The quote includes Resilient Secrets disaster recovery at 1 sites, and it is an add-on to the Platinum edition only.
12The customer requires disaster recovery for an on-premises Secret Server, and the quote has no Resilient Secrets site.
13The customer requires high availability for an on-premises Secret Server, and clustering is included only in the Platinum edition.
14The customer requires session recording on 120 secrets; Vault has no session recording and Professional records up to 50 secrets, so more needs Platinum.
15The quote includes 3,500 Privilege Manager Cloud licenses and no Delinea Platform subscription.
16The quote includes 3,500 Privilege Manager licenses and no support license; without a support license the customer cannot upgrade.
17The customer has 3,001 workstations in scope for Privilege Manager and the quote has 3,000 client licenses.
18The customer has 501 servers in scope for Privilege Manager and the quote has 500 server licenses; client licenses do not cover server machines.
19The customer has 601 systems in scope for Server Suite and the quote has 600 licenses.
20The quote includes Server Suite for 600 systems and Active Directory is not confirmed; Server Suite zones are stored in Active Directory.
2112 of the systems in scope for Server Suite run an operating system that has no Server Suite agent.
22The customer requires FedRAMP-authorized hosting, and this validator does not treat the Delinea cloud services as FedRAMP-authorized, so Secret Server and Privilege Manager must be on-premises and the Platform cannot be quoted.
23The deployment is business critical and the quote has the Standard support plan; business-critical deployments need Premium or Mission Critical support.
24The quote includes the Mission Critical support plan, a long service commitment, so a person should confirm.
25The deployment covers 5,001 users, endpoints and systems; deployments above 5,000 need the Full Deployment implementation services.
26The quote takes an annual discount of $79,731 against $797,300 of list annual charges, above the 10 percent that needs a sales director.

Scenarios and results

Click to expand

The recorded result of the validator for each scenario on this page: the request the AI agent sent, the verdict, and every finding, in the order they appear above.

1. Northgate Financial Group, 3 years: A quote for a bank holding company: Secret Server, the Platform, Privilege Manager across thousands of endpoints, and Server Suite

The agent's request. Please quote Secret Server Professional in the Cloud for 2,400 users, with Connection Manager for 900 users. The customer requires session recording on 600 secrets, SSH key management, service account governance and high availability. Privilege Manager in the Cloud with 18,000 client licenses and 3,200 server licenses for 21,000 workstations and 3,200 servers. Server Suite Standard Edition with 2,600 licenses. This is a business-critical deployment. The support plan is Standard. Implementation services are Jump Start. The term is 3 years. The annual discount is $600,000. The quote states $8,085,600 over the term. It is ready to send.

Verdict: Blocked.

  • Connection Manager needs Platinum. The quote includes Connection Manager for 900 users, and Connection Manager is an add-on to the Platinum edition only.
  • Session recording beyond the edition limit. The customer requires session recording on 600 secrets; Vault has no session recording and Professional records up to 50 secrets, so more needs Platinum.
  • SSH key management needs Platinum. The customer requires SSH key management, which is included only in the Platinum edition.
  • Service account governance needs Platinum. The customer requires service account governance, which is included only in the Platinum edition.
  • Privilege Manager Cloud needs the Platform. The quote includes 21,200 Privilege Manager Cloud licenses and no Delinea Platform subscription.
  • Privilege Manager support license missing. The quote includes 21,200 Privilege Manager licenses and no support license; without a support license the customer cannot upgrade.
  • Client licenses below workstations in scope. The customer has 21,000 workstations in scope for Privilege Manager and the quote has 18,000 client licenses.
  • Server Suite needs Active Directory. The quote includes Server Suite for 2,600 systems and Active Directory is not confirmed; Server Suite zones are stored in Active Directory.
  • Systems on an unsupported operating system. 140 of the systems in scope for Server Suite run an operating system that has no Server Suite agent.
  • Critical deployment on the Standard support plan. The deployment is business critical and the quote has the Standard support plan; business-critical deployments need Premium or Mission Critical support.
  • Large deployment needs full implementation services. The deployment covers 29,200 users, endpoints and systems; deployments above 5,000 need the Full Deployment implementation services.
  • Stated total does not match. The quote states a term total of $8,085,600; the prices give $7,298,200.
  • Discount above 10 percent. The quote takes an annual discount of $600,000 against $3,024,400 of list annual charges, above the 10 percent that needs a sales director.

2. Northgate Financial Group, 3 years: The agent resubmits after fixing the errors

The agent's request. Please quote Secret Server Platinum in the Cloud for 2,400 users, with Connection Manager for 900 users. The customer requires session recording on 600 secrets, SSH key management, service account governance and high availability. Include the Delinea Platform subscription. Privilege Manager in the Cloud with 21,000 client licenses and 3,200 server licenses for 21,000 workstations and 3,200 servers, and the support license for each. Server Suite Standard Edition with 2,460 licenses. This is a business-critical deployment. The support plan is Premium. Implementation services are Full Deployment. The term is 3 years. The annual discount is $600,000. The quote states $12,008,340 over the term. It is ready to send.

Verdict: Needs approval.

  • Discount above 10 percent. The quote takes an annual discount of $600,000 against $4,562,780 of list annual charges, above the 10 percent that needs a sales director.
  • Quote summary. One-time implementation services of $120,000, annual subscription of $3,962,780 and a term total of $12,008,340.

3. Northgate Financial Group, 3 years: The agent resubmits after fixing the errors

The agent's request. Please quote Secret Server Platinum in the Cloud for 2,400 users, with Connection Manager for 900 users. The customer requires session recording on 600 secrets, SSH key management, service account governance and high availability. Include the Delinea Platform subscription. Privilege Manager in the Cloud with 21,000 client licenses and 3,200 server licenses for 21,000 workstations and 3,200 servers, and the support license for each. Server Suite Standard Edition with 2,460 licenses. This is a business-critical deployment. The support plan is Premium. Implementation services are Full Deployment. The term is 3 years. The annual discount is $450,000. The quote states $12,458,340 over the term. It is ready to send.

Verdict: Allowed.

  • Quote summary. One-time implementation services of $120,000, annual subscription of $4,112,780 and a term total of $12,458,340.

4. Cascade State Revenue Agency: A quote for a state revenue agency: cloud Secret Server, Privilege Manager and the Platform

The agent's request. Please quote Secret Server Professional in the Cloud for 1,100 users. The customer requires session recording on 300 secrets, SSH key management, high availability, disaster recovery and FedRAMP-authorized hosting. Include the Delinea Platform subscription. Privilege Manager in the Cloud with 9,000 client licenses and 800 server licenses for 9,000 workstations and 800 servers, and the support license for each. Server Suite Standard Edition with 700 licenses. This is a business-critical deployment. The support plan is Standard. Implementation services are Full Deployment. The term is 3 years. The quote states $4,271,100 over the term. It is ready to send.

Verdict: Blocked.

  • Session recording beyond the edition limit. The customer requires session recording on 300 secrets; Vault has no session recording and Professional records up to 50 secrets, so more needs Platinum.
  • SSH key management needs Platinum. The customer requires SSH key management, which is included only in the Platinum edition.
  • Cloud service for a FedRAMP customer. The customer requires FedRAMP-authorized hosting, and this validator does not treat the Delinea cloud services as FedRAMP-authorized, so Secret Server and Privilege Manager must be on-premises and the Platform cannot be quoted.
  • Critical deployment on the Standard support plan. The deployment is business critical and the quote has the Standard support plan; business-critical deployments need Premium or Mission Critical support.
  • Stated total does not match. The quote states a term total of $4,271,100; the prices give $4,226,100.

5. Cascade State Revenue Agency: The agent resubmits after fixing the errors

The agent's request. Please quote Secret Server Platinum on-premises for 1,100 users, with Resilient Secrets at 1 site. The customer requires session recording on 300 secrets, SSH key management, high availability, disaster recovery and FedRAMP-authorized hosting. Privilege Manager on-premises with 9,000 client licenses and 800 server licenses for 9,000 workstations and 800 servers, and the support license for each. Server Suite Standard Edition with 700 licenses. This is a business-critical deployment. The support plan is Premium. Implementation services are Full Deployment. The term is 3 years. The quote states $4,806,900 over the term. It is ready to send.

Verdict: Allowed.

  • Quote summary. One-time implementation services of $120,000, annual subscription of $1,562,300 and a term total of $4,806,900.

6. Lakeshore Dental Group: A quote for a small dental group: Secret Server Vault on-premises with Privilege Manager

The agent's request. Please quote Secret Server Vault on-premises for 40 users. The customer requires session recording on 10 secrets. Include the Delinea Platform subscription. Privilege Manager in the Cloud with 250 client licenses for 250 workstations. The support plan is Standard. The term is 1 year. The quote states $18,700 over the term. It is ready to send.

Verdict: Blocked.

  • Vault is limited to 25 users. The quote puts 40 users on Secret Server Vault, which includes 25 users.
  • Vault on-premises is for current customers only. The quote has Secret Server Vault on-premises for a new customer; Vault is on-premises for current customers and Cloud for new customers.
  • Session recording beyond the edition limit. The customer requires session recording on 10 secrets; Vault has no session recording and Professional records up to 50 secrets, so more needs Platinum.
  • Privilege Manager support license missing. The quote includes 250 Privilege Manager licenses and no support license; without a support license the customer cannot upgrade.
  • Stated total does not match. The quote states a term total of $18,700; the prices give $33,700.

7. Lakeshore Dental Group: The agent resubmits after fixing the errors

The agent's request. Please quote Secret Server Professional in the Cloud for 40 users. The customer requires session recording on 10 secrets. Include the Delinea Platform subscription. Privilege Manager in the Cloud with 250 client licenses for 250 workstations, and the support license for each. The support plan is Standard. The term is 1 year. The quote states $52,750 over the term. It is ready to send.

Verdict: Allowed.

  • Quote summary. Annual subscription of $52,750 and a term total of $52,750.

Narration transcript

Click to expand

The text of the narrated walkthrough, step by step.

  1. Welcome to a demo of Predictika's Validator. An AI sales agent prepares a Delinea privileged access management quote: Secret Server in the Vault, Professional or Platinum edition, in the Cloud or on-premises. Before it goes out, the agent sends it to Predictika, which checks it against a declarative model of the editions, limits and dependencies in Delinea's public documentation and returns a verdict, every reason, a line-item quote and the figures it computed.
  2. I will start with the first request by the agent.
  3. The agent says. Please quote Secret Server Professional in the Cloud for 2,400 users, with Connection Manager for 900 users. The customer requires session recording on 600 secrets, SSH key management, service account governance and high availability. The rest of the request is on screen. The quote states $8,085,600 over the term.
  4. Before it goes out, the agent calls the validator.
  5. Blocked, with twelve findings and one approval, all in one answer. The quote includes Connection Manager for 900 users, and Connection Manager is an add-on to the Platinum edition only. The customer requires session recording on 600 secrets; Vault has no session recording and Professional records up to 50 secrets, so more needs Platinum. The customer requires SSH key management, which is included only in the Platinum edition. The other nine are on screen.
  6. The validator returned twelve blocking findings and one approval in one answer, led by Connection Manager needs Platinum and session recording beyond the edition limit, among others. A check that reads one product or one field at a time would pass most of this; it shows only when editions, add-ons, licenses, customer requirements and the stated total are checked against each other.
  7. What this shows: for features and limits that depend on the edition, a rules-based CPQ is error-prone for this.
  8. Now the agent resubmits.
  9. The corrected request. It changes the Secret Server edition to platinum, the client licenses to 21,000, the Privilege Manager support license to included and the stated term total to $12,008,340. It sets the Delinea Platform subscriptions to 1. Five more changes are on screen. It removes the systems on an unsupported operating system.
  10. It calls the validator again.
  11. Not blocked, but held for a person.
  12. The validator also returns the line-item quote. It starts with Secret Server Platinum and Connection Manager add-on; the other eight lines are on screen.
  13. The twelve blocking findings are cleared; one approval remains for a person: discount above 10 percent.
  14. The agent resubmits once more.
  15. The revised request. It changes the annual discount to $450,000 and the stated term total to $12,458,340.
  16. It calls the validator once more.
  17. This time the validator clears it.
  18. The validator also returns the line-item quote. It starts with Secret Server Platinum and Connection Manager add-on; the other eight lines are on screen.
  19. The earlier finding is cleared, and the validator's total, $12,458,340, matches the quote.
  20. Thirteen problems caught in one call, fixed in two passes, and a clean $12,458,340 quote. That is the value of Predictika's validator: catching mistakes before they reach the customer. Now you can try the other scenarios yourself.