WillItSurvive
Cybersecurity companies · subsidiary of Redstone Buyer LLC (RSA Group) · United States

RSA Security

Identity and access management vendor for regulated, high assurance enterprises.

Losing its protection
Assessed 21 July 2026 · Evidence as of 21 July 2026
The structural protection is eroding.
On the recordSince 21 July 2026 · Checkable from late 2026 · Every call on the record Checkpoint: Next Gartner Magic Quadrant for Access Management placement
The call

RSA still holds regulated accounts Microsoft can't easily touch, but a shrinking revenue base and a distressed debt load make the balance sheet the bigger question than the product.

RSA Security makes software that controls who can access company computers and data, especially for banks and government agencies that need extra-strong security. However, Microsoft is now bundling similar identity tools directly into its Office 365 software, and other security companies like Cisco and CrowdStrike are adding AI-powered identity features that could do what RSA does. The biggest threat to RSA right now is not that its product will be copied, but that the company took on too much debt in January 2026 and may need to restructure its finances or be sold off within the next year, which could wipe out shareholder value even if the product stays strong.

Why
01
AI pressure: Microsoft Security Copilot agents and Entra Agent ID. AI agents now provision and govern their own identities inside Entra, cutting the need for a separate RSA layer. Could AI do the core job? Only partly.
02
Bigger players: Microsoft (bundles Entra Agent ID and Security Copilot into M365 E5 licenses). Microsoft folds agentic identity governance into E5, so customers can drop standalone RSA licenses at renewal. Could a giant copy it? Probably.
03
What protects it. FIPS 140-3 hardware and compliance lock-in across 9,000+ regulated orgs and over 90% of the Fortune 100.
What would change this call
Whether RSA undergoes another debt exchange or liability-management event within 6-12 months. Would show the January 2026 uptier exchange failed to stabilize its capital structure.
RSA's placement (or absence) in the next Gartner Magic Quadrant for Access Management, late 2026. Would show whether analysts see RSA losing ground to Microsoft, Cisco, Okta, CyberArk.
Whether RSA reports two consecutive quarters of segment revenue growth in 2026. Would show whether the post-divestiture business has stopped shrinking.
Key numbers
  • Revenue fell to $458M in 2025 from $840M in 2020 (2025-12-31)
  • $135M new debt raised in Jan 2026 uptier exchange (2026-01-22)
  • Headcount down 13.1% to 2,654 since 2023 (2025-12-31)
Named risks
  • Capital structure widely viewed as oversized versus a shrunken ~$458M revenue base, raising sale/restructuring odds. Severity: high
  • Multiple well-funded incumbents (Microsoft, Cisco, CrowdStrike, Google/Wiz) shipping bundled agentic-identity features same window RSA funds its own AI pivot with distressed debt. Severity: high
  • Revenue nearly halved since 2020 buyout amid repeated business-unit divestitures. Severity: medium
  • New CEO (since Sept 2025) still executing turnaround with unclear early traction. Severity: medium
Rivals, as read in July 2026
RivalDirectionEvidence
Microsoftgaining onShipped Entra Agent ID and Security Copilot identity agents at Ignite, Nov 18 2025
Ciscogaining onLaunched Agentic IAM for Duo at RSAC 2026, March 23 to 26, 2026
CrowdStrikegaining onUnveiled Charlotte AI AgentWorks identity ecosystem at RSAC 2026, March 2026
Google Cloud/Wizgaining onLaunched 'Agentic SOC' identity tooling at RSAC 2026, March 2026
CyberArk, Okta, Ping IdentitycontestingListed as closest direct IAM peers competing for same enterprise accounts, 2026
Questions people ask
Is RSA Security in financial trouble in 2026?
Yes. RSA Group closed a distressed 'uptier exchange' debt refinancing on January 22, 2026, raising $135M new money and extending term-loan maturities. Trade press called its capital structure 'much too large' for a business now generating about $458M revenue, down from ~$840M in 2020.
Who owns RSA Security?
RSA is privately held. Symphony Technology Group (STG) led its $2.075B carve-out from Dell in February 2020 alongside Ontario Teachers' Pension Plan and AlpInvest. Clearlake Capital took an equal-partner equity stake in October 2022, making STG and Clearlake co-owners.
Could AI replace RSA Security's identity management products?
Password authentication and manual access reviews, RSA's traditional workflows, are being automated by rivals: Microsoft shipped Agent ID and Security Copilot identity agents in November 2025, and Cisco, CrowdStrike and Google/Wiz launched competing agentic-identity tools at RSAC 2026 in March 2026.
Is Microsoft a threat to RSA Security?
Yes. Microsoft bundles Entra, Agent ID (for AI agent identities) and Security Copilot into M365/E5 licenses at no extra cost, and shipped these identity features at Ignite on November 18, 2025, directly overlapping RSA's core access-management business.
What is RSA Security's revenue in 2025?
RSA Group's identity and Outseer fraud-intelligence segments generated approximately $458M combined revenue as of 2025, according to a July 1, 2026 restructuring analysis, down from roughly $840M in 2020 before several business unit divestitures.
Timeline
  • 2026-03-26Cisco, CrowdStrike, Google/Wiz launch competing agentic-identity products at RSAC 2026
  • 2026-01-22RSA Group closes $135M uptier debt exchange, extends term loan maturities
  • 2025-11-21RSA named to Gartner Magic Quadrant for Access Management, second year running
  • 2025-11-18Microsoft ships Agent ID and Security Copilot identity agents at Ignite 2025
  • 2025-09-15Greg Nelson becomes RSA CEO, succeeding Rohit Ghai
  • 2022-10-23Clearlake Capital takes equal-partner equity stake in RSA alongside STG
  • 2020-02-18Dell sells RSA Security to STG-led consortium for $2.075B
Revision history
21 July 2026
First assessed. Losing its protection. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources