Description
Idira is Palo Alto Networks' identity security platform. It succeeds CyberArk, the identity security company Palo Alto Networks acquired, and the product still carries CyberArk references throughout its marketing pages during the transition. Idira's pitch is "Human. Machine. AI. One identity security platform for all," aimed at security teams that need to control privilege across a growing mix of human employees, machine workloads and autonomous AI agents.
Read More
The platform runs on what Palo Alto Networks calls an identity security control plane: a unified layer that discovers every identity and entitlement across an organization, applies privilege dynamically, and governs access across its full lifecycle, from first login to session close. Idira frames this as a response to privilege sprawl, citing its own research that most human accounts carry more access than they need and that machine identities now vastly outnumber human ones.
Idira is organized around three identity categories. Human identity security covers privileged access management, workforce authentication, endpoint management and identity governance, including just-in-time access, session isolation and automated credential rotation. Machine identity security covers secrets management across cloud vaults (AWS, Azure and GCP), certificate management and workload identity, replacing static credentials with short-lived, verified identities. Agentic identity security is built for AI agents specifically: an agent registry that discovers active agents, an agent identity broker that grants and revokes task-scoped access automatically, an audit trail of agent actions, and a kill switch to shut an agent down. Palo Alto Networks also plans to integrate Idira with its Prisma AIRS AI security gateway.
Palo Alto Networks says its identity security platform (as CyberArk) was named a Leader in the 2025 Gartner Magic Quadrant for Privileged Access Management and in the Forrester Wave for Privileged Identity Management. Published customer case studies span manufacturing, healthcare, government and banking, generally describing better visibility into privileged-account use. Palo Alto Networks' own 2026 Identity Security Landscape report, cited on the site, states that 96% of human users hold more access than required and that machine identities outnumber human ones by roughly 109 to 1; these are the vendor's own figures rather than independently verified numbers.
Idira is sold to enterprise security, IT and identity teams rather than individual users. Pricing is not published, and Palo Alto Networks directs prospects to request a demo or a secrets maturity assessment.
- CategoryAI Cybersecurity Tools
- Pricing ModelContact for pricing
- DeploymentCloud
- PlatformsHybrid Cloud
Idira's Core Features
Unified identity security control plane covering human, machine and AI-agent identities in one platform.
Privileged access management with just-in-time access, session isolation, monitoring and automated credential rotation.
Secrets management and unified governance across AWS, Azure and GCP secrets stores.
Workload identity security that replaces static credentials with short-lived, verifiable machine identities.
Agent registry that discovers and inventories active AI agents across SaaS, cloud and developer environments.
Agent identity broker that grants agents access scoped to a single task and revokes it automatically when the task ends.
Audit and governance logging of every agent action for compliance review.
Passwordless authentication and phishing-resistant multi-factor authentication for workforce access.
Planned native integration with Palo Alto Networks' Prisma AIRS AI security gateway.
How to use Idira?
Request a demo: Contact Palo Alto Networks through the Idira site to scope a deployment for your organization.
Run a maturity assessment: Optionally start with a secrets maturity assessment to baseline current identity risk.
Discover identities: Idira scans your environment to inventory human, machine and agentic identities and entitlements.
Apply controls: Configure privilege, access and agent policies through the identity security control plane.
Govern continuously: Monitor, audit and adjust access as identities and risk change over time.
Idira's Use Cases
- Privileged access management
- Secrets and workload security
- AI agent governance
- Workforce access security
