Agent identity & access
The agentic module of Idira, Palo Alto Networks' identity security platform built on acquired CyberArk technology. It scans SaaS, cloud and developer environments for active agents, enriches them with ownership and permission context, brokers task-scoped access through an agent identity broker and logs agent actions for audit.
commercial · generally available · Research snapshot 2026-09-06
Visit the official product source ↗Agent identity & access · Agent discovery & inventory · Runtime authorization & controls
Useful conversation with: CISO, PAM administrator, IAM manager.
Show me agents discovered across our SaaS and cloud estate with owner and permission context, then a task-scoped grant issued and revoked by the agent identity broker.
Support labels reflect the supplied research. Documentation and vendor claims are not independent product tests. “Not established” means the researcher did not find support; it does not prove a capability is absent.
Vendor claim
Idira Secure AI Agents scans SaaS, cloud and developer environments to identify active agents and enriches them with ownership, purpose, status and permission level.
Limit: Product page does not name scanned platforms or detection methods.
Vendor claim
A dedicated agent identity broker acts as a dynamic enforcement point granting agents access only for the duration of a task and revoking permissions when the job is complete.
Limit: Supported target systems for brokered access are not listed.
Independently corroborated
Idira launched as a generally available identity security platform extending CyberArk privileged access controls to machine and AI agent identities, with further features slated for later in the year.
Limit: Trade press report; feature-level GA status per module is not broken out.
Listing does not imply partnership, supplier status, a working DutyGraph integration, or a compliance certification.
Suggest a correction