TPG Capital to buy privileged access management vendor Thycotic and merge Thycotic with its recently acquired competitor Centrify; report values deal at $1.4B
The combined company will be led recently-appointed Centrify CEO and former Symantec Enterprise Head Art Gilliland, while James Legg …
Context & Ripple Effects
TPG is running the same private equity playbook its rival Thoma Bravo has used across cybersecurity: buy two adjacent vendors, merge them, and build toward a strategic exit. Thoma Bravo took a $1.15B majority stake in machine identity firm Venafi in late 2020 and closed the $3.9B Sophos acquisition weeks earlier, while TPG itself was on the other side of that pattern when Thoma Bravo explored buying McAfee out of the TPG-Intel ownership.
The Thycotic-Centrify combination puts privileged access management — one of the few remaining unconsolidated corners of identity security — under Art Gilliland, who joined Centrify from Symantec Enterprise shortly before the deal. The template for how this ends already exists: Thoma Bravo's Venafi stake became a $1.54B sale to CyberArk four years later.
First-order effects
- Centrify and Thycotic customers now face a single merged PAM vendor under Gilliland, with overlapping product lines likely rationalized into one roadmap.
- Competing privileged access management vendors immediately confront a larger, PE-funded rival with combined scale of roughly $1.4B in deal value.
Second-order effects
- The merger squeezes other mid-market identity security vendors, who must either consolidate themselves or differentiate against a better-capitalized combined sales force.
- TPG's success here would validate the buy-two-and-merge structure for other fragmented security categories, drawing more PE capital into sub-$2B vendor deals.
Third-order effects
- If the pattern holds, mid-market security vendors increasingly mature inside PE portfolios rather than public markets, with strategics like CyberArk and Thales as the designated exit buyers.
- Identity security consolidates from a field of point products toward platform suites, narrowing customer choice but raising the bar for standalone vendors to stay independent.
The trend: Private equity firms are rolling up mid-market identity and security vendors through paired acquisitions, positioning them for eventual sales to strategic buyers.