New identity security platform introduces AI-driven governance and dynamic privilege controls to help organizations secure the expanding AI-powered enterprise ecosystem
Palo Alto Networks has unveiled Idira, a next-generation identity security platform designed to help enterprises discover, control, and govern human, machine, and agentic AI identities from a unified environment. The launch marks the company’s latest move to address the rapidly growing identity attack surface created by AI adoption and autonomous systems.
The platform aims to modernize privileged access management (PAM) by extending dynamic privilege controls across all identities rather than limiting protection to a small group of privileged users. According to Palo Alto Networks, organizations are increasingly vulnerable as AI agents, machine identities, and automated workloads gain broader access to enterprise systems and sensitive data.
“Identity has become the new battleground of the AI enterprise,” said Peretz Regev. “With adversaries now logging in rather than breaking in, every identity has become a target. Idira transforms how enterprises secure this critical asset by evolving beyond traditional PAM and integrating machine identity security to deliver comprehensive agentic identity protection.”
“Identity has become the new battleground of the AI enterprise, where every human, machine, and agentic identity is now a potential target,” said Peretz Regev.
Palo Alto Networks noted that machine and AI identities now outnumber human identities by 109 to one, while a majority of privileged access requests still rely on standing privileges, increasing exposure to identity-related attacks. The company cited research indicating that nine out of ten organizations experienced at least one identity-related breach in the past year.
Idira introduces AI-powered identity discovery, automated governance, and zero standing privilege enforcement to help organizations reduce risk and improve visibility across increasingly autonomous enterprise environments. The platform also enables just-in-time privilege access and automated policy enforcement to support compliance and governance requirements.
The announcement further expands capabilities for existing CyberArk SaaS customers, allowing them to integrate traditional PAM, workforce access, machine identity security, and AI-driven controls within the Idira platform.
CyberArk customers will gain access to enhanced discovery, governance, and privilege management capabilities, with additional protections for agentic and machine identities available through new licensing options.
Industry analyst Will Townsend said the enterprise identity landscape has evolved significantly beyond traditional vault-based security models, requiring a broader operational approach to identity governance.
Idira is generally available globally, with additional capabilities expected later this year.