G2

Arun V.

Lead InfoSec Engineer

Enterprise (> 1000 emp.)

10/23/2026

"Idira Unifies Human, Bot, and AI Identities with Powerful Zero Standing Privilege"

4/5

What do you like best about Idira Identity Security Platform?

To be completely honest, what I like best about Idira is how it finally stops treating "human users" and "machine bots" like they live on two different planets. If you've ever had to manage identities in a modern tech stack, you know the absolute nightmare of juggling regular employee passwords in one tool, developer SSH keys in another, and cloud service accounts in a third. Idira loops all of that—including those new AI agents everyone is spinning up—into one actual home base. It shifts the goalposts from "let's store these passwords safely" to "let's make sure no one has permanent admin access to anything." Here is my unfiltered take on how it actually holds up day-to-day:

The Real-World Breakdown

What You're Looking At The Good Stuff The Annoying Stuff UI / UX The web extension and mobile apps are surprisingly clean. For regular employees logging into their daily apps, it just works without getting in the way. The main admin dashboard is massive. Because it inherited so much heavy enterprise DNA from CyberArk, finding specific configuration toggles can feel like a scavenger hunt. Integrations It hooks into almost anything you throw at it out of the box—AWS, Azure, Kubernetes, Jira. You don't have to spend weeks writing custom code just to get your tech stack talking to it. If you have weird, home-grown legacy software from ten years ago, getting the APIs to map cleanly without your developers trying to bypass the system takes real work. Performance The session recording and credential rotations happen smoothly in the background. It doesn't noticeably drag down the user experience when you're just trying to get into a server. Every now and then, when the system is dynamically spinning up an access right on the fly (Just-In-Time access), you might hit a brief, annoying lag before you're let in. Pricing / ROI Your insurance premiums and compliance audits (like SOC2 or ISO) become a breeze. It blocks the kind of identity-based attacks that land companies on the news, which saves millions. It is definitively an enterprise tool with an enterprise price tag. The licensing can feel complex and pricey if you are a mid-sized company trying to buy only what you need. Support & Onboarding Moving to their cloud-hosted version is infinitely easier than the old days of setting up physical, on-prem security vaults. The documentation is thorough. It’s not a "plug-and-play" tool. The real headache isn't the software—it’s convincing your senior engineers to give up their permanent domain admin rights and adopt new habits. AI / Intelligence It is incredibly smart at hunting down "shadow" credentials—like an API key a developer accidentally left exposed or an AI tool that has way too much access to company data. Keeping up with the sheer speed of AI workflows is tough; configuring the guardrails so the security system doesn't accidentally break a legitimate automated process takes constant tweaking. Review collected by and hosted on G2.com.

What do you dislike about Idira Identity Security Platform?

If we're being completely real, the biggest headache with the Idira Identity Security Platform comes down to its inheritance. Because Palo Alto Networks built Idira by acquiring and rebranding CyberArk, it dragged a massive mountain of complex enterprise legacy architecture into a modern cloud world. It’s a security powerhouse, but using it daily can feel like driving a tank to a grocery store—it's over-engineered for simple tasks, incredibly heavy, and demands a steep learning curve. Here is the unfiltered truth about where the platform falls short and frustrates engineering and security teams:

The Real-World Friction Points

Where It Bothers You The Day-to-Day Reality UI / UX Complexity The admin side is still an overwhelming maze. Finding specific settings or trying to change a basic user baseline feels like navigating a 2000s-era database. The Idira Identity Mobile App also frequently takes flak from users for slow notification loads, clunky multi-step MFA prompts, and a glitchy Apple Watch app. Integration Headaches While it hooks into standard platforms like AWS or Kubernetes out of the box, trying to map custom enterprise apps or legacy on-prem directories is a slog. For example, configuring advanced integrations—like deploying AWS Secure Cloud Access through a delegated admin account—forces you out of the main interface entirely, requiring you to use Terraform or programmatic connections. Provisioning Latency When you transition to a Just-In-Time (JIT) access model, users don't have permanent access. When a developer desperately needs to jump into a server to fix a production bug, the background discovery, risk check, and dynamic account creation loop can hit noticeable lag spikes before letting them in. Pricing & Licensing Bloat It is aggressively expensive. The platform chunks features out into separate modules (PAM, Secrets Hub, Endpoint Privilege Manager, IGA). If you are a mid-market company, buying the comprehensive "Identity Control Plane" bundle results in serious sticker shock for capabilities you might not even fully use yet. Onboarding & Cultural Friction Onboarding is a heavy lifting project. Because it enforces Zero Standing Privilege (ZSP), you aren't just installing software; you are actively fighting your engineering and dev teams who will complain about the new friction introduced into their workflows. AI / Intelligence Over-Alerting While the AI engine is great at hunting down rogue API keys and tracking autonomous AI agents, it is highly sensitive. Until you spend weeks fine-tuning your behavioral baselines, it will trigger false positives and break legitimate automated CI/CD pipelines because a script performed an unexpected action.

Are these end-user friction points (like MFA lags) a dealbreaker for your team, or are you more worried about the admin complexity and setup time? Let me know what you're trying to avoid, and I can give you a better sense of how to mitigate it. Review collected by and hosted on G2.com.

What problems is Idira Identity Security Platform solving and how is that benefiting you?

At its core, Idira is trying to solve the "identity sprawl" crisis. In modern infrastructure, you don't just have human employees logging into email anymore; you have thousands of microservices, cloud containers, CI/CD pipelines, and autonomous AI agents all talking to each other using API keys, passwords, and secret tokens. If a hacker steals just one of those unmanaged machine keys, they can pivot through your entire network. Idira attempts to solve this by pulling every human and machine identity into one room and stripping away permanent, "always-on" administrative access. Here is a look at the exact operational pain points Idira tackles and how those solutions translate into real-world benefits for security teams and businesses:

Problems Solved vs. Practical Benefits

The Concrete Security Problem How Idira Solves It The Direct Business Benefit The "Standing Privilege" Target Attackers look for admin accounts that hold permanent, 24/7 access to servers. It enforces Zero Standing Privileges (ZSP), dynamically spinning up access only when a task requires it and destroying it immediately afterward. Shadow AI & Machine Secrets Developers and teams spin up AI agents or automation scripts that use hardcoded API keys left completely unmonitored. It uses continuous behavioral AI to automatically hunt down, map, and secure autonomous machine and AI agent identities. Audit & Compliance Nightmares Pulling access logs across AWS, Azure, on-prem servers, and SaaS apps for auditors takes weeks of manual labor. It acts as a single centralized ledger, keeping an immutable, real-time audit trail of who or what accessed which asset. Creds Sprawled in Source Code Engineers frequently save database credentials directly inside GitHub or local configuration files out of convenience. It provides a native Secrets Hub that injects credentials dynamically into code pipelines at runtime, eliminating the need to save them. Fragmented Identity Management Security operations teams have to manage passwords in one tool, developer SSH keys in a second, and cloud permissions in a third. It consolidates Privileged Access Management (PAM), Identity Governance (IGA), and Secrets Management into one unified Identity Control Plane. Review collected by and hosted on G2.com.