Delinea has appointed former Dropbox CFO Timothy Regan as chief financial officer as the identity-security company expands its focus on controlling access for AI agents, humans and machines. Regan joins after more than two decades in technology finance, including helping guide Dropbox through its 2018 IPO, as Delinea reports more than $500 million in annual recurring revenue and over 9,000 customers.
Delinea has appointed Timothy Regan, CPA, as chief financial officer, adding a veteran technology finance executive as the identity-security company positions access control as a critical layer for enterprises deploying AI agents.
Regan joins Delinea after serving as CFO of Dropbox from 2020 through 2025 and subsequently advising the company through early 2026. He originally joined Dropbox in 2016 as chief accounting officer and helped guide the cloud-storage company through its 2018 initial public offering. Earlier roles included finance leadership positions at Pandora Media, Dolby Laboratories and Ernst & Young.
At Delinea, Regan will oversee the global finance organization while working with the leadership team on commercial and operational discipline as the company scales.
The appointment comes as enterprise identity management is expanding beyond human users. AI agents and other machine identities can increasingly access applications, data and infrastructure autonomously, creating a requirement for organizations to determine not only who or what receives access, but what actions can be taken, under which conditions and for how long.
Delinea says it surpassed $500 million in annual recurring revenue in 2025 and now serves more than 9,000 customers worldwide, including more than two-thirds of the Fortune 100. Those figures are company-reported and indicate the scale of the installed customer base the company is bringing into the emerging market for AI-agent identity controls.
The shift matters for financial institutions in particular. Banks, insurers and fintech companies increasingly use AI systems across customer service, fraud detection, software development, compliance, finance and operations. An agent that can execute a workflow rather than merely generate text may require access to payment systems, customer records, financial applications or internal databases.
That changes the traditional identity-security model.
Conventional identity and access management was largely designed around human users, applications and relatively persistent permissions. Agentic systems can instead require temporary, task-specific access that changes as the agent executes a workflow.
Gartner’s 2026 research identifies this as a significant evolution for identity architects, arguing that IAM programs need to adapt to the distinct characteristics of AI agents and establish accountability for their actions.
Gartner has also highlighted the growing importance of workload identities and centralized governance as enterprises manage AI agents and other machine workloads. Its research recommends architectures that bring together workload identity providers, secrets management, PKI and identity-management capabilities.
For Delinea, that environment puts privileged access management directly into the emerging AI security stack.
The company’s positioning centers on continuously controlling what AI agents, humans and machines can do after they receive access. In practical terms, that can involve restricting privileges, limiting access duration and monitoring activity rather than relying solely on an initial authentication decision.
The distinction is increasingly important because authentication does not necessarily establish that every subsequent action is legitimate. An authenticated AI agent could potentially use excessive privileges, interact with an unintended system or expose information through a compromised workflow.
McKinsey’s 2026 research on agentic AI security describes the resulting shift as an expansion of the enterprise attack surface. Its research found that nearly two-thirds of surveyed organizations identified security and risk concerns as the leading barrier to fully scaling agentic AI.
McKinsey also estimates that spending on AI-related cybersecurity solutions could rise to 15% of enterprise cybersecurity budgets over the next three years, from roughly 4%, with identity, governance and data security among the areas affected by the shift.
For fintech companies, this creates a particularly relevant connection between AI adoption and financial infrastructure.
An autonomous finance agent might reconcile accounts, prepare reports, interact with enterprise-resource-planning systems or initiate other controlled workflows. Giving such an agent broad standing credentials could create unnecessary exposure, while overly restrictive access could eliminate much of the productivity benefit that motivates deployment in the first place.
That tension is creating demand for more granular authorization and runtime controls.
Delinea’s executive appointment therefore arrives against a market shift rather than simply as a corporate leadership change. As AI agents move from experimental tools toward operational systems, identity becomes part of the infrastructure required to deploy them safely.
Regan’s background also aligns with Delinea’s stated emphasis on scaling its commercial and operational foundation. His experience at Dropbox included the transition from private technology company to public-market reporting, while his earlier accounting and finance roles span technology businesses and professional services.
The company has not disclosed additional financial targets alongside the appointment. Its reported $500 million-plus ARR milestone nevertheless establishes the scale at which Delinea is entering the next phase of identity security for AI-driven enterprises.
For financial technology providers, the emerging category extends beyond conventional cybersecurity. Identity controls for AI agents intersect with fraud prevention, compliance, data governance, privileged access, cloud security and auditability.
As autonomous software takes on more authority inside enterprise systems, the ability to continuously constrain that authority may become as important as authenticating the identity behind it.
Market Landscape
The expansion of AI agents is changing the role of identity security from a primarily human-access function into a broader control layer for humans, machines and autonomous software.
Gartner’s 2026 research emphasizes that AI agents require differentiated IAM strategies and stronger accountability for machine actions. McKinsey estimates the cybersecurity market at approximately $220 billion and says identity, detection and security operations are being reshaped to govern autonomous systems.
For financial institutions, this creates demand for just-in-time access, ephemeral credentials, workload identity management, privileged-access controls and continuous authorization. The opportunity extends across banking technology, fintech infrastructure and enterprise cybersecurity as AI agents gain access to increasingly sensitive systems.
Top Insights
- Delinea appointed former Dropbox CFO Timothy Regan as CFO as the company expands identity controls for AI agents and machine workloads.
- Delinea reported more than $500 million in annual recurring revenue in 2025 and over 9,000 customers globally.
- Gartner research highlights the need for IAM architectures that address AI agents’ distinct identity, access and accountability requirements.
- McKinsey says security and risk concerns are the leading barrier to fully scaling agentic AI among surveyed organizations.
- AI-agent identity controls increasingly intersect with fintech security, fraud prevention, compliance, privileged access and financial-data governance.
Get in touch with our fintech expert
