Zilla Security

Overview

Zilla Security delivers cloud-native identity governance (IGA) and provisioning with automated access reviews. Founded in 2019, it built a reputation for fast deployment and low-friction certifications. CyberArk acquired Zilla in February 2025, reportedly for 165 million dollars plus an earn-out, to add modern IGA to its identity security platform. Palo Alto Networks retired the CyberArk brand on 12 May 2026, relaunching the portfolio as Idira, with customer-visible changes from 31 May. Zilla's trajectory now runs through Palo Alto Networks: zillasecurity.com redirects to Palo Alto's Idira Identity Governance page, which sells the product as Idira Identity Governance (Idira IGA) and does not mention Zilla by name (checked 2026-11-05).

What it is good at

Speed is the theme. Zilla automatically collects entitlements across cloud and SaaS applications, builds a clear picture of who has access to what, and turns certifications into a low-friction, largely automated process, a sharp contrast to the slow rollouts of legacy IGA. The modern, API-driven approach makes it quick to stand up and easy for reviewers, which is why it gained traction before the acquisition.

Where it falls short

The CyberArk acquisition reshapes the decision. Zilla's roadmap is converging with the Idira platform (formerly CyberArk), so it is increasingly attractive to existing CyberArk customers and less so to buyers wanting a fully independent vendor. Legacy on-premises connector depth is lighter than the incumbent suites, and authentication and MFA are out of scope.

Pricing

Subscription, increasingly sold within the Idira platform. Compare with standalone IGA using the TCO calculator.

Best for, and who should look elsewhere

Choose Zilla if you are on or moving to Idira (formerly CyberArk) and want modern governance and fast certifications. For independent enterprise suites, see SailPoint vs Saviynt; for other modern options, see ConductorOne vs Lumos.

Bottom line

A modern, fast-to-deploy governance layer with strong automated certifications, now most attractive to organizations on or moving to Idira (formerly CyberArk).