Idira Privileged Access Manager
The PAM product formerly sold under the CyberArk name, now part of Palo Alto Networks' Idira identity platform following the February 2026 acquisition. It vaults and rotates privileged credentials, records sessions, and supports just-in-time access in SaaS and self-hosted deployments.
- Product type
- Software
- Deployment
- SaaSOn-prem
- Organization size
- Mid-marketEnterprise
- Pricing tier
- $$$
Capability checklist
PAMHow Idira Privileged Access Manager measures up against the full Privileged Access Management taxonomy.
- Privileged credential vaulting — supported
- Stores and rotates admin passwords and keys in an encrypted vault.
- Session recording & monitoring — supported
- Records and can live-monitor privileged sessions for audit and investigation.
- Just-in-time access — supported
- Grants elevated access for a limited time window instead of standing privilege.
- Least-privilege elevation — supported
- Allows temporary privilege elevation for a specific task rather than full admin rights.
- Secrets management — not supported
- Manages API keys, certificates, and application secrets alongside human credentials.
- Service account management — supported
- Discovers and rotates credentials for non-human, machine-to-machine accounts.
Alternatives
Other Privileged Access Management tools with overlapping capabilities, sized for similar teams.
Appears in stacks
Real-world stacks that include Idira Privileged Access Manager.