Palo Alto Networks has introduced Idira, a next-generation identity security platform designed to help enterprises discover, control, and govern human, machine, and AI-driven identities across increasingly complex digital environments.
The company said the platform is designed to address modern identity security challenges driven by the rapid adoption of AI, in which autonomous systems, machine identities, and agentic workflows now operate alongside human users who have access to sensitive enterprise systems.
According to Palo Alto Networks, Idira expands beyond traditional privileged access management (PAM) approaches by applying dynamic privilege controls across all identity types rather than limiting elevated access management to select users.
Identity security for the AI era
Palo Alto Networks cited growing enterprise exposure to identity-based attacks as one of the key drivers behind the launch. The company noted that identity-related breaches affected nine out of 10 organizations over the past year.
The rise of machine and AI identities is also significantly reshaping enterprise security environments. According to the company, machine and AI identities now outnumber human users by 109 to 1, while many organizations still rely on standing privileges rather than dynamic or just-in-time access controls.
Idira aims to address these issues through AI-driven visibility, automated governance, and dynamic privilege management.
Core platform capabilities
Palo Alto Networks said Idira focuses on three core areas: identity risk discovery, privilege control, and governance automation.
The platform uses AI to continuously identify identities, entitlements, and access paths across enterprise environments. It also introduces zero standing privilege (ZSP) controls and just-in-time enforcement to reduce persistent access risks.
In addition, Idira automates governance workflows using AI-powered policy enforcement designed to streamline identity lifecycle management and compliance processes.
Expanded support for CyberArk customers
The company also confirmed that existing CyberArk SaaS customers will gain access to several new Idira capabilities depending on their subscription tier.
Customers using Traditional PAM, Modern PAM, Workforce Access, and Machine and AI Identity Security offerings will receive varying levels of expanded discovery tools, user experience enhancements, and optional zero standing privilege and agentic identity protections.
Industry perspective and availability
Peretz Regev, chief product and technology officer for Idira at Palo Alto Networks, said identity has become a primary battleground for AI-driven cyber threats.
“Identity has become the new battleground of the AI enterprise. With adversaries now logging in rather than breaking in, every identity has become a target,” Regev said.
Will Townsend, chief analyst at LoneStar Advisory & Research, added that identity security now requires broader operational visibility across both human and machine ecosystems.
Idira is now generally available, with additional capabilities expected to roll out later this year.