Idira Secrets Manager (formerly CyberArk Conjur)

Overview

Idira Secrets Manager (formerly CyberArk Conjur) is the secrets management product of Idira, the brand Palo Alto Networks gave the CyberArk portfolio on 12 May 2026, with customer-visible changes from 31 May. Conjur Cloud and Conjur Enterprise are now sold as Idira Secrets Manager, in SaaS and self-hosted editions, while the open-source core keeps the name Conjur Open Source. It provides policy-as-code secrets for applications, containers, and CI/CD pipelines, and it integrates tightly with Idira Privileged Access Manager. In the secrets management category it is the enterprise, governance-heavy option, most compelling for organizations already standardized on Idira (CyberArk) for human privileged access who want to extend the same controls to machine and application identities. Idira Secrets Hub is a separate product that syncs secrets into cloud-native vaults.

What it is good at

The policy model is the differentiator: secrets, roles, and access rules are defined as declarative, version-controlled policy, which suits teams that treat security configuration like code. Authorization is granular, and audit and governance are strong, with detailed logging that satisfies demanding compliance regimes. Integration with the broader Idira platform means privileged human access and machine secrets sit under one governance umbrella. Kubernetes, OpenShift, and CI/CD integrations are mature, and the open-source core lets teams evaluate before committing.

Where it falls short

Idira Secrets Manager is heavier to operate than newer developer-first tools. The policy-as-code approach has a learning curve, and standing up and running the enterprise edition takes real platform investment. Its value is highest inside the Idira (formerly CyberArk) ecosystem; standalone, lighter-weight needs are over-served. Developer experience, while solid, is less frictionless than tools built SaaS-first.

Pricing

Conjur Open Source is free to self-operate. Idira Secrets Manager, SaaS and self-hosted, is quote-based: the product page routes to a demo request, and it is typically licensed alongside the wider Idira platform. No public list pricing. Model it against a managed alternative with the TCO calculator.

Best for, and who should look elsewhere

Choose Idira Secrets Manager when you are an Idira (formerly CyberArk) customer extending privileged access to applications and DevOps, or you want policy-driven secrets with strong audit. If you want lighter, developer-first secrets, see Doppler or Infisical; for cloud-native AWS, AWS Secrets Manager. Compare directly via HashiCorp Vault vs CyberArk Conjur.

Bottom line

A strong, governance-heavy enterprise secrets engine, most compelling for organizations already invested in Idira, formerly CyberArk.