Idira Identity Platform (formerly from CyberArk)

Idira Identity Platform is an identity security platform from Palo Alto Networks that controls and monitors privileged and workforce access, and it extends to machine identities and AI agents. The vendor describes it as one platform for human, machine, and agentic identities. The human offering covers privileged access management (PAM), identity and access management (IAM), endpoint privilege management, identity governance, and workforce password management.

Key Capabilities

• Privileged Access Management: Provides vaulting and credential rotation, zero standing privileges, and just-in-time access. It also supports agentless brokered access to AWS, Azure, Google Cloud, and Kubernetes through native command-line tools and consoles, session isolation and recording, identity threat detection and response, local admin removal, and vendor access without a virtual private network (VPN).
• Identity and Access Management: Provides device access with local admin removal and multifactor authentication (MFA) on endpoints, password management, single sign-on (SSO) across cloud, SaaS, and legacy applications, adaptive MFA, passwordless authentication through biometrics, passkeys, and device-bound credentials, and session management.
• Endpoint Privilege Manager: Provides local admin rights removal, policy-based elevation, application control and ringfencing, just-in-time admin access, and MFA before privilege elevation. It also provides Linux sudo management and Active Directory bridging, and it exports events to security information and event management (SIEM) tools. It supports Windows, Windows Server, macOS, and Linux and is delivered as software as a service (SaaS).
• Identity governance and workforce password management: Both are named as part of the human offering. I did not read their pages.
• Machine identity: Secrets Hub connects to AWS Secrets Manager, Azure Key Vault, Google Cloud Secret Manager, and HashiCorp Vault through native APIs. The platform also provides secrets governance, credential providers for legacy applications that need no code changes, and short-lived workload identity.
• Agentic identity: The vendor states that Idira Secure AI Agents scans SaaS, cloud, and developer environments to find agents, adds ownership and permission context, and grants task-scoped access with an audit trail.
• Palo Alto Networks integration: The Endpoint Privilege Manager acts as an identity- and privilege-based enforcement engine for Palo Alto Networks products such as Cortex XDR and XSOAR. The vendor states that cross-platform capabilities across its portfolio will be added over time.
• Integrations: The vendor lists more than 300 out-of-the-box integrations.
• Pricing: I found none. The pages offer demo requests and contact forms.

Audience & Use Cases

• Audience: Security teams, IT administrators, cloud engineers, DevOps teams and developers, and the vendors and contractors who need access to systems.
• Use Case: Removing standing administrative access and granting it just in time with session recording.
• Use Case: Removing local administrator rights from endpoints while allowing policy-based elevation.
• Use Case: Providing SSO and adaptive MFA for workforce access.
• Use Case: Governing secrets and credentials used by applications and workloads.
• Use Case: Discovering AI agents and limiting what they can access.

Technical Specifications

• Endpoint platforms: Windows, Windows Server, macOS, and Linux.
• Cloud access: AWS, Azure, Google Cloud, and Kubernetes.
• Delivery: The Endpoint Privilege Manager is delivered as SaaS. A PAM resource refers to moving from self-hosted to SaaS, which suggests self-hosted deployments exist, but I could not confirm this for each module.

Acquisition and Rebrand

Palo Alto Networks completed its acquisition of CyberArk on February 11, 2026. The company had announced its intent to acquire CyberArk in July 2025, and CyberArk shareholders were entitled to $45.00 in cash and 2.2005 shares of Palo Alto Networks common stock for each CyberArk ordinary share. CyberArk's identity security products are now offered under the Idira brand, which Palo Alto Networks describes as built on CyberArk's legacy and powered by Palo Alto Networks. The vendor states that existing customers can continue to use the platform and will notice a new logo and design. The completion press release still used the name CyberArk Identity Security Platform. Product names that include CyberArk in older documentation, listings, and reviews therefore refer to this platform's predecessor products.