# Idira

> Privileged access management for human, machine and AI identities with threat detection.

Idira is an enterprise privileged access management platform from Palo Alto Networks (formerly CyberArk), covering human identity security, machine secrets management, and agentic identity controls with threat detection and identity governance. Listing updated 6 September 2026. Checked by MSP Software 6 September 2026.

- Page: https://mspsoftware.net/software/idira
- Vendor: Palo Alto Networks, https://mspsoftware.net/vendors/palo-alto-networks, website https://www.paloaltonetworks.com/idira
- Categories: Identity and access (primary)
- Free version: no.
- Deployment: cloud, on-premises and hybrid. Platforms: web, Windows and Linux. HQ: United States. Founded: 1999.
- Support: phone and help desk. Training: documentation, videos and webinars.

## From the vendor

Idira is an enterprise privileged access management platform from Palo Alto Networks, built on the legacy of CyberArk and designed to secure human, machine and agentic identities across hybrid and cloud environments. It covers human identity security with privilege controls and governance, machine identity secrets management for CI/CD workflows and automated workloads, and agentic identity governance for AI agent access and control. The platform enforces least privilege access with continuous visibility, AI-driven risk analytics, identity threat detection and response capabilities, and automated session monitoring across all identity types. Idira addresses enterprise requirements for comprehensive privileged access governance, endpoint privilege management with application execution controls, identity governance from first access through session termination, and unified secrets vault management across infrastructure and workloads. The product integrates over 300 out-of-the-box connectors and supports native CI/CD pipeline integration for DevOps and infrastructure automation workflows. Deployment runs on cloud, on-premises, or hybrid infrastructure with web console access and platform agents on Windows and Linux endpoints. Idira is designed for larger organisations with 200 or more users, particularly those with complex hybrid infrastructure, high-security compliance requirements, significant machine identity and automation workloads, or regulated industries requiring comprehensive audit trails and compliance evidence. The product suits enterprises that already manage substantial privileged access complexity and have budget for enterprise licensing and ongoing professional services. Pricing is quote-only based on deployment scope, number of identities managed, and enterprise licensing agreements; organisations should request evaluation licenses directly from Palo Alto Networks to assess specific use cases.

## Our take

Idira (formerly CyberArk) is the established enterprise PAM benchmark for large organisations with complex privilege governance needs, particularly those running hybrid cloud infrastructure or requiring AI and agentic identity security. It suits enterprises needing comprehensive human, machine and agentic identity control rather than mid-market MSPs or smaller deployments. Before evaluating, confirm your use case qualifies for enterprise PAM licensing and compare against Okta, BeyondTrust, or One Identity Safeguard in the same category. Pricing is quote-only with no published tiers; request an evaluation license to assess feature coverage and integration requirements with your specific infrastructure and DevOps platforms.

## Pricing

Idira does not publish a list price.

## Features

| Feature | Supported | Note |
| --- | --- | --- |
| Conditional access and device trust | yes | Risk-driven conditional access decisions with AI-driven analytics and dynamic privilege controls |
| Privileged access management | yes | Core capability; privileged access management for humans, machines and AI agents with least privilege enforcement |
| Session and risk monitoring | yes | Identity threat detection and response with continuous discovery and AI-driven threat monitoring |
| Admin audit log | yes | Audit trails for agent activities and session governance documented; comprehensive logging implied for compliance |

## Integrations

- Palo Alto Networks Cortex, https://www.paloaltonetworks.com/products/platform/cortex
- Microsoft 365, https://www.microsoft.com/en-us/microsoft-365
- ServiceNow, https://www.servicenow.com
- Jenkins, https://www.jenkins.io
- Kubernetes, https://kubernetes.io
- HashiCorp Vault, https://www.vaultproject.io

Listed products that integrate with Idira: Cybereason Defense Platform and Tenable Vulnerability Management.

## Alternatives

- Huntress: Managed detection and response for MSPs, priced per endpoint from $7.99 a month direct. https://mspsoftware.net/software/huntress
- Bitwarden: Open-source password manager with a free tier and published, low-cost business pricing. https://mspsoftware.net/software/bitwarden
- Devolutions Password Manager: Password vault and PAM module from Devolutions, priced per user from $3 a month in a bundled package. https://mspsoftware.net/software/devolutions-password-manager
- Cisco Duo: Multi-factor authentication and device trust for logins and VPNs. https://mspsoftware.net/software/duo

## FAQ

### How much does Idira cost?

Idira does not publish a list price. No MSP price reports have been approved yet.

### Does Idira offer a free trial?

There is no free version.

### What does Idira integrate with?

Idira lists integrations with Palo Alto Networks Cortex, Microsoft 365, ServiceNow, Jenkins, Kubernetes and HashiCorp Vault.

### What integrates with Idira?

Cybereason Defense Platform and Tenable Vulnerability Management list an integration with Idira.

### Is Idira cloud or on-premises?

Idira can be run in the cloud or on-premises. Idira supports a hybrid deployment.

### Who is Idira for?

MSPs report using Idira at sizes of 200+ technicians.

### What is Idira and how does it relate to CyberArk?

Idira is the rebranded identity security platform built on CyberArk's legacy and now powered by Palo Alto Networks. Existing CyberArk customers continue using the same platform with updated branding and logo; the underlying product architecture remains based on CyberArk's proven privileged access management foundation. Over time, Idira customers gain access to expanded capabilities across the Palo Alto Networks security ecosystem, including integration with Cortex and other Palo Alto Networks solutions.

### Is Idira suitable for mid-market MSPs or smaller organisations?

Idira is positioned as an enterprise solution designed for larger organisations with complex infrastructure, high-security compliance requirements, and significant machine identity and automation workloads. It requires custom deployment and ongoing professional services support. Mid-market MSPs and smaller organisations typically evaluate alternatives with published per-endpoint or per-user pricing and easier self-service deployment models rather than enterprise-only, quote-based licensing.

### Does Idira publish pricing or do I need to contact sales?

Idira pricing is quote-only; Palo Alto Networks does not publish tiered pricing plans on their website. Pricing varies based on the number of identities managed, deployment scope (human, machine and agentic), and enterprise licensing agreements. Organisations evaluating Idira should contact Palo Alto Networks sales directly to discuss evaluation licenses, proof-of-concept terms, and custom pricing for their specific use case.

### What identity types does Idira manage?

Idira manages three categories of identity: human identities with privilege controls and governance for users and administrators, machine identities including secrets management for CI/CD pipelines and cloud workloads, and agentic identities for AI agent discovery and access governance. This multi-identity approach supports modern hybrid cloud environments where both humans and automated systems require privilege access controls and comprehensive audit trails.

### What integrations does Idira offer?

Idira documents over 300 out-of-the-box integrations and 200+ alliance partners. Integration coverage includes modern CI/CD platforms, cloud providers, identity systems, security tools and DevOps platforms. The platform features native integration with Palo Alto Networks Cortex and supports modern CI/CD pipeline workflows. Organisations should confirm integration availability for their specific tool stack during evaluation and proof-of-concept testing.