Devolutions
Bootstrapped Quebec-based vendor of privileged access management, password vaulting, and remote-connection tools built for SMB and mid-market IT teams.
Visit Website ↗ + Add to CompareOverview
Devolutions is a bootstrapped, Quebec-based software company that sells privileged access management (PAM), password vaulting, and remote-connection management tools built specifically for small and mid-sized IT teams — a segment largely underserved by enterprise-focused PAM vendors like CyberArk and Delinea, whose pricing and complexity assume a dedicated identity security team.
Its core products — Remote Desktop Manager, Devolutions Server, Devolutions Password Hub, and a dedicated Devolutions PAM module — cover secure credential vaulting, automated password rotation, just-in-time privilege elevation, session recording, and role-based access control, deployable either self-hosted or via Devolutions Cloud. The PAM module specifically targets the SMB/IT-generalist gap: enterprise-grade privileged account controls without the deployment overhead or headcount typically required.
Founded in 2010 in Lavaltrie, Quebec, Devolutions has grown to roughly 230 employees and reports 2024 annual recurring revenue of about .9 million, up from .4 million in 2023, entirely without outside venture funding. The company says it serves over 800,000 users across 140+ countries, a figure driven substantially by its long-established, widely adopted Remote Desktop Manager product rather than the newer PAM line specifically.
Innovation Matrix Assessment
Devolutions ships regular versioned releases of its PAM and Server products (documented release notes through 2026.1), consistent with an actively maintained, multi-product platform rather than a single static tool.
Offering both self-hosted and fully managed Devolutions Cloud deployment options lowers the barrier for SMB IT teams that lack dedicated identity-security staff, which is a genuine operational fit for its target market.
Reported 2024 ARR of .9M, up roughly 79% from .4M in 2023, achieved without outside funding, is a strong, independently reported growth signal (via Latka) for a bootstrapped company of this size.
Devolutions doesn't introduce a novel PAM architecture; it repackages established PAM capabilities (vaulting, rotation, JIT elevation, session recording) at a price point and complexity level accessible to SMBs, which is a market disruption rather than a technical one.
Independent scale indicators (800,000+ reported users, 140+ countries, multi-year revenue growth, SoftwareReviews/G2 customer ratings) support real-world adoption, though there is no independent third-party security test of the PAM module's protection efficacy specifically.
Privileged credential compromise remains one of the top breach vectors, and Devolutions addresses a real gap: most PAM vendors ignore the SMB/mid-market segment, making this directly relevant to CISOs and IT leads at smaller organizations.
Why CISOs Should Care
CISOs and IT managers at organizations too small for enterprise PAM budgets get credential vaulting, rotation, and privileged session controls without needing a dedicated identity security team.
What Makes It Different
Devolutions differentiates on accessibility and integration with its widely used Remote Desktop Manager ecosystem, rather than competing head-on with CyberArk/Delinea on enterprise-scale feature depth.
The Matrix Verdict
63/100 — INCREMENTAL INNOVATOR
A financially healthy, steadily growing PAM vendor that fills a real gap for SMB and mid-market IT teams; a sound choice for organizations that need privileged access controls without enterprise PAM complexity or cost.
Editorial Note: Claims vs. Verified Findings
Revenue growth figures (.4M to .9M ARR) and employee counts are independently reported by Latka and Tracxn rather than sourced solely from company marketing. The 800,000-user and 140-country figures are company-published and were not independently cross-verified.
Sources
Alternatives to Devolutions
Teleport
An identity-based infrastructure access platform issuing short-lived cryptographic identities for humans, machines, and AI agents in place of…
SpecterOps
Identity attack-path security specialist behind BloodHound, the widely used open-source tool for mapping Active Directory and Entra ID…
Astrix Security
Non-human identity security platform that discovers and governs API keys, OAuth tokens, service accounts, and AI-agent credentials across…
Socure
AI-driven identity verification and fraud platform used by banks, fintechs, and government agencies to validate identities during digital…
Keyfactor
Machine identity and PKI management platform helping enterprises secure certificates, keys, and post-quantum cryptography readiness at scale.
Veza
Identity security platform built around an authorization graph that maps who and what can actually access data and…