Idira (formerly CyberArk)

Idira (formerly CyberArk): frequently asked questions

How does Idira (formerly CyberArk) compare in a privileged access management evaluation?

It remains the reference PAM platform. Palo Alto Networks says Idira was named a Leader in the 2026 Gartner Magic Quadrant for Privileged Access Management, published 21 October 2026, for the eighth consecutive time (counting CyberArk's earlier placements), and positioned furthest on Completeness of Vision. Vaulting, rotation, session isolation and recording, endpoint privilege, and secrets coverage are the deepest in the category. Its trade-offs are weight, premium unpublished pricing, and loss of vendor neutrality since the February 2026 acquisition. Delinea and BeyondTrust are the usual head-to-head comparisons.

What should I check in a CyberArk identity security or identity and access management evaluation?

Treat it as a platform bundle and test each piece you will actually license. The Idira Identity Security Platform spans privileged access management (SaaS as Privilege Cloud, or self-hosted), Endpoint Privilege Manager, workforce access and password management, identity governance from the Zilla acquisition, Secrets Manager and Secrets Hub, Certificate Manager from Venafi, and Secure AI Agents. Check which modules share one console and policy, how zero standing privileges and just-in-time cloud entitlements work in your clouds, and how far workforce SSO and MFA compare with a dedicated access management vendor.

Is Idira (formerly CyberArk) an identity fabric?

Palo Alto Networks does not use the term. It markets Idira as a unified identity security platform and control plane for human, machine, and AI agent identities, which overlaps with what analysts call an identity fabric. In practice it covers the privileged, secrets, certificate, and endpoint layers of a fabric very well, while workforce identity and governance are newer and less proven than at specialists. If an identity fabric evaluation is your goal, pair Idira with your existing IdP and governance tools and test the integrations, rather than assuming one vendor covers every layer.

Is CyberArk still called CyberArk?

No. Palo Alto Networks completed its acquisition of CyberArk on 11 February 2026, paying 45 dollars in cash plus 2.2005 Palo Alto shares per CyberArk share, then relaunched the portfolio as Idira on 12 May 2026. cyberark.com pages now redirect to Palo Alto Networks, and products carry Idira names, for example Idira Privileged Access Manager, Idira Secrets Manager (formerly Conjur commercial editions), and Idira Endpoint Privilege Manager. Palo Alto says existing customers keep using the same platform with new branding. We keep this profile under the CyberArk URL because buyers still search for that name.

How much does CyberArk cost?

Quote-based; no list prices published (checked 2026-11-05). The old cyberark.com pricing page now redirects to the Idira product page, which carries no figures and routes to a demo or contact request. Dollar figures circulating online come from procurement aggregators with no disclosed methodology. Expect a modular, premium deal, and budget separately for implementation services and partner time.

Is CyberArk FedRAMP authorized?

Yes, under the Idira name. On 3 June 2026 Palo Alto Networks announced that the Idira Identity Security Platform achieved FedRAMP High authorization, adding SaaS privileged access management to the FedRAMP Marketplace alongside Endpoint Privilege Manager and Workforce Identity, which were already authorized at High (CyberArk first announced those in March 2024). On 13 August 2026 it added GovRAMP High authorization for state and local government, through reciprocity with FedRAMP High. Confirm the exact services in scope on the marketplace listing.

Are there known CyberArk security vulnerabilities?

Yes, including critical ones, though none is known to be exploited. CVE-2025-49831 (CVSS 9.8 on NVD) allowed an IAM authenticator bypass in Conjur and Secrets Manager Self-Hosted, part of a July 2025 set with CVE-2025-49827 to CVE-2025-49830. In June 2026 three landed against Idira products: CVE-2026-45177 (9.1, Secrets Manager SaaS Edge before 1.8), CVE-2026-45176 (Endpoint Privilege Manager agent before 26.5), and CVE-2026-45178 (Secrets Manager Self-Hosted 13.8.0 and lower). No CyberArk or Idira entry appears in the CISA KEV catalog (checked 2026-11-05).

What are the best CyberArk alternatives for privileged access management?

Delinea is the closest like-for-like and now the largest independent PAM leader, with a lighter operational footprint and FedRAMP High for Secret Server. BeyondTrust competes across a similar enterprise range with stronger remote access and endpoint privilege. WALLIX suits European and OT buyers. Teleport is the specialist choice if modern cloud infrastructure access is the actual requirement. Buyers who chose CyberArk for vendor neutrality no longer have it, since the platform sits inside Palo Alto Networks, which is pushing some renewals toward Delinea and BeyondTrust.