Idira Identity Security Platform Reviews & Product Details

Idira offers a single solution to a range of access-related challenges. There are always situations where you need to grant access to certain resources or restrict it, depending on the user and the context. Software testing and automation, in particular, require a strong approach to access control and privileged access, especially when you’re working across multiple groups, applications, and environments.

What stands out to me most about Idira is its Privileged Access Management, Just-In-Time Access, and Identity Governance. The idea of removing standing privileged access for users, while still being able to monitor what they’re doing, is a big plus. I also like that it supports machine identities, and I think the focus on AI agents will only keep growing over time. Review collected by and hosted on G2.com.

Because Idira covers so many facets of identity security, it can take some time to get used to. The reporting could be improved to better pinpoint issues and make it clearer what needs attention most urgently. It would also help to have a more straightforward, simplified approach when onboarding into new environments. Review collected by and hosted on G2.com.

One thing that caught my eye about Idira was they allow you to manage various identities on their platform. Not only do they manage identities for employees and admins but machines, apps and AI agents as well. They have also implemented features that allow for least privilege access and just-in-time access which I think is great. Privileged Access Management, Identity Governance and Access Security all combined on one platform is something that can benefit many businesses. It also allows you to see who/what has access to your business assets in one place. Review collected by and hosted on G2.com.

There are many features to learn about when it comes to identity management with this product. It may be overwhelming if your company is not used to these types of products. Transitioning to this product from other security products may also take some time. I would like to know more about pricing and how easy it is to set up. Also more examples on how each integration will work. More information on how fast it will perform and how to get started. Review collected by and hosted on G2.com.

Idira centralizes governance across traditional human accounts, service accounts, and API keys within a single control plane. Eliminating separate, siloed tools for user access governance and secrets vaulting saves significant administrative time when onboarding or reviewing hybrid workloads. Review collected by and hosted on G2.com.

Following recent UI updates and space reorganizations, navigating between core platform tools—such as switching from secrets vaulting to access governance policy management—can feel fragmented and unintuitive. New administrators face a steeper learning curve when trying to locate specific policy settings or audit logs, which occasionally leads to configuration errors or delayed administrative updates. Review collected by and hosted on G2.com.

To be completely honest, what I like best about Idira is how it finally stops treating "human users" and "machine bots" like they live on two different planets. If you've ever had to manage identities in a modern tech stack, you know the absolute nightmare of juggling regular employee passwords in one tool, developer SSH keys in another, and cloud service accounts in a third. Idira loops all of that—including those new AI agents everyone is spinning up—into one actual home base. It shifts the goalposts from "let's store these passwords safely" to "let's make sure no one has permanent admin access to anything." Here is my unfiltered take on how it actually holds up day-to-day:

The Real-World Breakdown

What You're Looking At The Good Stuff The Annoying Stuff UI / UX The web extension and mobile apps are surprisingly clean. For regular employees logging into their daily apps, it just works without getting in the way. The main admin dashboard is massive. Because it inherited so much heavy enterprise DNA from CyberArk, finding specific configuration toggles can feel like a scavenger hunt. Integrations It hooks into almost anything you throw at it out of the box—AWS, Azure, Kubernetes, Jira. You don't have to spend weeks writing custom code just to get your tech stack talking to it. If you have weird, home-grown legacy software from ten years ago, getting the APIs to map cleanly without your developers trying to bypass the system takes real work. Performance The session recording and credential rotations happen smoothly in the background. It doesn't noticeably drag down the user experience when you're just trying to get into a server. Every now and then, when the system is dynamically spinning up an access right on the fly (Just-In-Time access), you might hit a brief, annoying lag before you're let in. Pricing / ROI Your insurance premiums and compliance audits (like SOC2 or ISO) become a breeze. It blocks the kind of identity-based attacks that land companies on the news, which saves millions. It is definitively an enterprise tool with an enterprise price tag. The licensing can feel complex and pricey if you are a mid-sized company trying to buy only what you need. Support & Onboarding Moving to their cloud-hosted version is infinitely easier than the old days of setting up physical, on-prem security vaults. The documentation is thorough. It’s not a "plug-and-play" tool. The real headache isn't the software—it’s convincing your senior engineers to give up their permanent domain admin rights and adopt new habits. AI / Intelligence It is incredibly smart at hunting down "shadow" credentials—like an API key a developer accidentally left exposed or an AI tool that has way too much access to company data. Keeping up with the sheer speed of AI workflows is tough; configuring the guardrails so the security system doesn't accidentally break a legitimate automated process takes constant tweaking. Review collected by and hosted on G2.com.

If we're being completely real, the biggest headache with the Idira Identity Security Platform comes down to its inheritance. Because Palo Alto Networks built Idira by acquiring and rebranding CyberArk, it dragged a massive mountain of complex enterprise legacy architecture into a modern cloud world. It’s a security powerhouse, but using it daily can feel like driving a tank to a grocery store—it's over-engineered for simple tasks, incredibly heavy, and demands a steep learning curve. Here is the unfiltered truth about where the platform falls short and frustrates engineering and security teams:

The Real-World Friction Points

Where It Bothers You The Day-to-Day Reality UI / UX Complexity The admin side is still an overwhelming maze. Finding specific settings or trying to change a basic user baseline feels like navigating a 2000s-era database. The Idira Identity Mobile App also frequently takes flak from users for slow notification loads, clunky multi-step MFA prompts, and a glitchy Apple Watch app. Integration Headaches While it hooks into standard platforms like AWS or Kubernetes out of the box, trying to map custom enterprise apps or legacy on-prem directories is a slog. For example, configuring advanced integrations—like deploying AWS Secure Cloud Access through a delegated admin account—forces you out of the main interface entirely, requiring you to use Terraform or programmatic connections. Provisioning Latency When you transition to a Just-In-Time (JIT) access model, users don't have permanent access. When a developer desperately needs to jump into a server to fix a production bug, the background discovery, risk check, and dynamic account creation loop can hit noticeable lag spikes before letting them in. Pricing & Licensing Bloat It is aggressively expensive. The platform chunks features out into separate modules (PAM, Secrets Hub, Endpoint Privilege Manager, IGA). If you are a mid-market company, buying the comprehensive "Identity Control Plane" bundle results in serious sticker shock for capabilities you might not even fully use yet. Onboarding & Cultural Friction Onboarding is a heavy lifting project. Because it enforces Zero Standing Privilege (ZSP), you aren't just installing software; you are actively fighting your engineering and dev teams who will complain about the new friction introduced into their workflows. AI / Intelligence Over-Alerting While the AI engine is great at hunting down rogue API keys and tracking autonomous AI agents, it is highly sensitive. Until you spend weeks fine-tuning your behavioral baselines, it will trigger false positives and break legitimate automated CI/CD pipelines because a script performed an unexpected action.

Are these end-user friction points (like MFA lags) a dealbreaker for your team, or are you more worried about the admin complexity and setup time? Let me know what you're trying to avoid, and I can give you a better sense of how to mitigate it. Review collected by and hosted on G2.com.

I like how Idira Identity Security Platform brings human privileged access management, machine identities, and AI agent security together in one comprehensive control panel. It also covers secrets management, and those combined capabilities reduce the attack surface by eliminating hidden blind spots across human admin accounts, automated workloads, and autonomous AI agents. I found the initial setup extremely easy. Review collected by and hosted on G2.com.

Even though I found the initial setup extremely easy, I found the initial deployment complex. The configuration has a steep learning curve, and the heavy administrative overhead can slow adoption and create friction for engineering teams. Review collected by and hosted on G2.com.

I like the way the platform seamlessly integrates modern privilege access management (PAM), machine and agentic identity security capabilities allowing my team to see all important info at a glance. Review collected by and hosted on G2.com.

Sometimes it takes just too long to load up all the graphics and info, and that info can be confusing sometimes leading to the need of a more technical person to read into them Review collected by and hosted on G2.com.

What I like best is how invisible it feels, it stops hackers from stealing passwords without making employees type in 20-character codes all day. It keeps the company safe while letting regular people just do their jobs in peace. Review collected by and hosted on G2.com.

My biggest gripe is that it is incredibly complex and expensive to set up. If a company changes its systems, updating Idira requires specialized tech skills, meaning things can easily break for employees if the IT team isn't careful. Review collected by and hosted on G2.com.

It stops treating human employees, machine bots, developer SSH keys, cloud service accounts, and new AI agents as separate management nightmares. It shifts security goals away from just storing static passwords safely toward ensuring no user or workload has permanent, always-on admin access. Access is instead granted just-in-time and removed when no longer needed. Consolidating legacy privileged access management (PAM) and independent components into a single centralized control plane makes management and deployment much easier for enterprise teams. Review collected by and hosted on G2.com.

Users report that installing and upgrading the platform is complex and frequently requires direct vendor engagement. The administrative console is often described as an overwhelming maze where finding specific settings or modifying user baselines feels outdated. The Idira Identity Mobile App receives complaints for slow notification loads, multi-step MFA prompts, and a glitchy Apple Watch experience. Review collected by and hosted on G2.com.

I like that Idira Identity Security Platform is a complete package with a lot of integrations and capabilities. It supports human and non-human identities, and I can integrate it with Active Directory, access management and identity governance tools, security tools, and ServiceNow or other ticketing solutions. I value the automated provisioning and deprovisioning, which handles identity access around when someone joins or leaves, along with the joiner, mover, and leaver processes. Certificate reviews and attestations are covered too. The professional services and support are really good, and I found the documentation useful for configuring the platform. Review collected by and hosted on G2.com.

I think there’s a lot to improve around AI agents. Organizational tools need to be modified to meet agent standards, with guardrails to prevent non-human identities from compromising or leaking into the environment. Setup also took some time—about one to two months because of configuration and prerequisites—and I needed proper technical support to do the integration. Review collected by and hosted on G2.com.

I find Idira Identity Security Platform reliable and safe to use. I like the way it manages servers because it keeps things organized. I also like the LLM-powered channels, where I can get feedback on my work or other subjects related to my company. It’s like an AI assistant tailored to a company, and it’s a really great feature. I found the setup very easy, and it was more stable than Teams when Teams was having issues on the phone. Review collected by and hosted on G2.com.

I don't like that the Slack app, once installed on Android, downloads or unpacks all the sound files it uses on my device. When I'm listening to music, my music app detects those files and eventually plays them, which ruins my listening experience. Review collected by and hosted on G2.com.