What is Idira best at?

Its highest area score is lifecycle, at 8 out of 10. It creates, rotates and renews credentials under zero standing privilege.

Where are the gaps in Idira?

Its lowest area is approval, at 2 out of 10. Human approval was not found. Controls not found in its public material: 20 of 24.

Idira: governance profile

Launched by Palo Alto Networks on 12 May 2026, after its CyberArk acquisition completed on 11 February 2026. Rank 10, total 5.50.

In short: Idira, from Palo Alto Networks, ranks tenth at 5.50 out of 10. It creates, rotates and renews credentials under zero standing privilege and gives full audit visibility in managed mode. Owner mapping and human approval were not found in the material we read, and its policy semantics are not published.

1No. 10

How does Idira score in each area?

Scores 0 to 10. Total 5.50 = sum of score times weight, divided by 100.
Area	Weight	Score	Reason	Source
A1 Inventory and discovery	15	6	It runs continuous identity discovery, but agent-specific sources were not found.	Source: Palo Alto Networks introduces Idira, read 2026-11-03
A2 Ownership and accountability	20	5	Owner mapping was not found.	Source: Palo Alto Networks introduces Idira; CyberArk Secure AI architecture docs, read 2026-11-03
A3 Policy authoring and enforcement	20	6	It describes AI-powered policy, but the semantics are not published.	Source: Palo Alto Networks introduces Idira, read 2026-11-03
A4 Human approval and escalation	15	2	Human approval was not found.	Source: CyberArk Secure AI architecture docs, read 2026-11-03
A5 Audit evidence	15	7	It gives full audit visibility in managed mode.	Source: CyberArk Secure AI architecture docs, read 2026-11-03
A6 Lifecycle and revocation	10	8	It creates, rotates and renews credentials under zero standing privilege.	Source: CyberArk Secure AI architecture docs, read 2026-11-03
A7 Buying clarity	5	5	It is sold as add-on licences.	Source: Palo Alto Networks introduces Idira, read 2026-11-03

Which of the 24 controls does Idira document?

Not found means we did not find the control described in the sources listed. It does not mean the product lacks it.

GOV-01Agent inventory: partly documentedSource: Palo Alto Networks introduces Idira, read 2026-11-03
GOV-02Named accountable owner: not found in public materialChecked: Palo Alto Networks introduces Idira; CyberArk Secure AI architecture docs; Palo Alto Networks completes CyberArk acquisition, read 2026-11-03
GOV-03Documented purpose: not found in public materialChecked: Palo Alto Networks introduces Idira; CyberArk Secure AI architecture docs; Palo Alto Networks completes CyberArk acquisition, read 2026-11-03
GOV-04Least privilege at creation: not found in public materialChecked: Palo Alto Networks introduces Idira; CyberArk Secure AI architecture docs; Palo Alto Networks completes CyberArk acquisition, read 2026-11-03
GOV-05Short-lived credentials: documentedSource: CyberArk Secure AI architecture docs, read 2026-11-03
GOV-06Per-action policy: partly documentedSource: CyberArk Secure AI architecture docs, read 2026-11-03
GOV-07Human approval for high-risk actions: not found in public materialChecked: Palo Alto Networks introduces Idira; CyberArk Secure AI architecture docs; Palo Alto Networks completes CyberArk acquisition, read 2026-11-03
GOV-08No self-approval: not found in public materialChecked: Palo Alto Networks introduces Idira; CyberArk Secure AI architecture docs; Palo Alto Networks completes CyberArk acquisition, read 2026-11-03
GOV-09Policy testing before go-live: not found in public materialChecked: Palo Alto Networks introduces Idira; CyberArk Secure AI architecture docs; Palo Alto Networks completes CyberArk acquisition, read 2026-11-03
GOV-10Tool allow-listing and hiding: not found in public materialChecked: Palo Alto Networks introduces Idira; CyberArk Secure AI architecture docs; Palo Alto Networks completes CyberArk acquisition, read 2026-11-03
GOV-11Revocation and kill switch: not found in public materialChecked: Palo Alto Networks introduces Idira; CyberArk Secure AI architecture docs; Palo Alto Networks completes CyberArk acquisition, read 2026-11-03
GOV-12Decommission at task end: not found in public materialChecked: Palo Alto Networks introduces Idira; CyberArk Secure AI architecture docs; Palo Alto Networks completes CyberArk acquisition, read 2026-11-03
GOV-13Per-action audit log tied to a person: partly documentedSource: CyberArk Secure AI architecture docs, read 2026-11-03
GOV-14SIEM export: not found in public materialChecked: Palo Alto Networks introduces Idira; CyberArk Secure AI architecture docs; Palo Alto Networks completes CyberArk acquisition, read 2026-11-03
GOV-15Periodic access review: not found in public materialChecked: Palo Alto Networks introduces Idira; CyberArk Secure AI architecture docs; Palo Alto Networks completes CyberArk acquisition, read 2026-11-03
GOV-16Shadow agent detection: not found in public materialChecked: Palo Alto Networks introduces Idira; CyberArk Secure AI architecture docs; Palo Alto Networks completes CyberArk acquisition, read 2026-11-03
GOV-17MCP server registry: not found in public materialChecked: Palo Alto Networks introduces Idira; CyberArk Secure AI architecture docs; Palo Alto Networks completes CyberArk acquisition, read 2026-11-03
GOV-18Delegation bounded by the person's permissions: not found in public materialChecked: Palo Alto Networks introduces Idira; CyberArk Secure AI architecture docs; Palo Alto Networks completes CyberArk acquisition, read 2026-11-03
GOV-19Agent incident response: not found in public materialChecked: Palo Alto Networks introduces Idira; CyberArk Secure AI architecture docs; Palo Alto Networks completes CyberArk acquisition, read 2026-11-03
GOV-20Change management for agent permissions: not found in public materialChecked: Palo Alto Networks introduces Idira; CyberArk Secure AI architecture docs; Palo Alto Networks completes CyberArk acquisition, read 2026-11-03
GOV-21Third-party agent onboarding: not found in public materialChecked: Palo Alto Networks introduces Idira; CyberArk Secure AI architecture docs; Palo Alto Networks completes CyberArk acquisition, read 2026-11-03
GOV-22Data access boundaries: not found in public materialChecked: Palo Alto Networks introduces Idira; CyberArk Secure AI architecture docs; Palo Alto Networks completes CyberArk acquisition, read 2026-11-03
GOV-23Evidence retention: not found in public materialChecked: Palo Alto Networks introduces Idira; CyberArk Secure AI architecture docs; Palo Alto Networks completes CyberArk acquisition, read 2026-11-03
GOV-24Board reporting: not found in public materialChecked: Palo Alto Networks introduces Idira; CyberArk Secure AI architecture docs; Palo Alto Networks completes CyberArk acquisition, read 2026-11-03

What does Idira cost?

Sold as add-on licences. No price is published.

Does Idira work alongside your identity provider?

Not stated in the material we read. Its Identity Broker sits as a proxy between the agent and its tools.

A governance layer runs alongside your identity provider, never instead of it.

How does Idira rank for specific buyer needs?

Tenth at 5.50Best for regulated industries
Tenth at 4.55Best for human oversight
Tenth at 5.70Best for shadow agent inventory
Tenth at 5.90Best for audit evidence
Tenth at 5.35Best for a small team's fast start
Tenth at 6.20Best for lifecycle and revocation

Head-to-head comparisons

NewCore vs Idira

Frequently asked questions

6.1 What is Idira best at?: Its highest area score is lifecycle, at 8 out of 10. It creates, rotates and renews credentials under zero standing privilege.
6.2 Where are the gaps in Idira?: Its lowest area is approval, at 2 out of 10. Human approval was not found. Controls not found in its public material: 20 of 24.
6.3 How is Idira priced?: Sold as add-on licences. No price is published.

Reviewed 2026-11-03 by The Register desk