Zilla Security (now Palo Alto Networks Identity Governance)
Modern identity governance and administration automating access reviews and entitlement lifecycle management, acquired by Palo Alto Networks and rebranded as Idira.
Visit Website ↗ + Add to CompareOverview
Zilla Security built a modern identity governance and administration (IGA) platform designed to replace the spreadsheet-driven, manual access review processes that plague most legacy IGA deployments. The platform automated access certification, discovered segregation-of-duties violations and orphaned accounts, and managed the full joiner-mover-leaver identity lifecycle with AI-driven recommendations, integrating with applications via APIs and robotic process automation to reach legacy systems without extensive custom integration work.
Founded in Boston in 2019, Zilla Security was acquired by Palo Alto Networks in 2024 and has since been rebranded as Idira, now operating as Palo Alto Networks’ identity governance product integrated with its broader identity security and privileged access management portfolio. The product maintains a single system of record for all entitlements with full change history, positioning itself as purpose-built for modern, hybrid enterprises rather than legacy, on-premises-first IGA tools.
Acquisition by Palo Alto Networks, one of the largest cybersecurity platform vendors, is a strong validation of Zilla’s modern IGA approach, and automating access reviews genuinely reduces both audit burden and access-related risk; as with any product now inside a much larger platform, its independent innovation trajectory has given way to Palo Alto Networks’ broader identity security roadmap.
Innovation Matrix Assessment
Built a modern, API-and-RPA-integrated IGA platform with AI-driven lifecycle recommendations before being acquired; further velocity now depends on Palo Alto Networks' roadmap.
Automates access certification and entitlement lifecycle management that most organizations still handle through manual, spreadsheet-driven processes, directly reducing audit burden and access risk.
Acquisition by Palo Alto Networks, a top-tier cybersecurity platform vendor, in 2024 is a strong, independently verifiable market validation event.
Automated, API-driven IGA is a genuine modernization of a historically manual category, but it is now folded into one of the largest security platforms, tempering its independent disruptive potential.
A multi-year operating history before acquisition and integration into Palo Alto Networks' identity security portfolio suggest real production validation, though independent benchmarks were not found.
Identity governance remains a persistent compliance and security need, and integration into a major platform vendor's roadmap should extend the technology's relevance and reach.
Why CISOs Should Care
Replaces manual, spreadsheet-driven access reviews with automated certification and entitlement lifecycle management, now backed by Palo Alto Networks' broader identity security platform.
What Makes It Different
API- and RPA-driven integration reaching even legacy applications without extensive custom work, combined with AI-driven lifecycle recommendations, purpose-built for modern hybrid enterprises.
The Matrix Verdict
63/100 — INCREMENTAL INNOVATOR
A genuinely modern IGA platform, validated by acquisition into Palo Alto Networks' identity security portfolio.
Editorial Note: Claims vs. Verified Findings
The Palo Alto Networks acquisition is independently confirmed via the product's redirect to paloaltonetworks.com; specific platform capability claims are vendor-published.
Sources
Alternatives to Zilla Security (now Palo Alto Networks Identity Governance)
Teleport
An identity-based infrastructure access platform issuing short-lived cryptographic identities for humans, machines, and AI agents in place of…
SpecterOps
Identity attack-path security specialist behind BloodHound, the widely used open-source tool for mapping Active Directory and Entra ID…
Socure
AI-driven identity verification and fraud platform used by banks, fintechs, and government agencies to validate identities during digital…
Keyfactor
Machine identity and PKI management platform helping enterprises secure certificates, keys, and post-quantum cryptography readiness at scale.
Astrix Security
Non-human identity security platform that discovers and governs API keys, OAuth tokens, service accounts, and AI-agent credentials across…
CyberArk
The market-leading privileged access management vendor, extending from vaulted human credentials into machine identity and secrets management.