Identity Governance and Administration (IGA) Software
CyberArk Identity Governance: features, pricing and who it fits
CyberArk Identity Governance is a SaaS IGA built on Zilla Security, bought in February 2025, and CyberArk now belongs to Palo Alto Networks. It automates access reviews, provisioning and audit evidence for human and non-human identities. Pricing is by quote and no free trial is offered.
Who CyberArk Identity Governance is for
Best for
- Enterprises already using CyberArk for privileged access
- Teams that want access reviews and audit evidence automated
Look elsewhere if
- Buyers wanting public pricing or a free trial
- Teams unsure of product roadmap after the Palo Alto Networks integration
CyberArk Identity Governance features
- Provisioning automation
- Automated provisioning and deprovisioning; browser plugins and gateway for apps without APIs (G-Cloud listing)
- Access reviews and certification
- AI-driven access reviews; Zilla Comply automates review campaigns and auditor evidence
- Role management
- Policy-based role management (G-Cloud listing)
- Segregation of duties controls
- Monitors entitlements and alerts on SoD violations; enforces SoD policies for SOX and PCI DSS
- Integrations and connectors
- Out-of-the-box connectors; reseller listings claim 1,000+ cloud and on-premises apps
- Compliance and audit reporting
- Real-time reporting and automatic audit evidence
- Pricing model
- Quote only
- Target company size
- Enterprise
Integrations, security and hosting
- Security and compliance
- ISO/IEC 27001 (G-Cloud listing)
- Data residency
- UK, EEA and other locations, customer-controlled, per UK G-Cloud listing
- Implementation
- Customer Success Managers and Cloud Support Engineers for enterprise customers
Worth knowing before you buy
- The product originated as Zilla Security, bought by CyberArk in February 2025 for up to $175 million
- Palo Alto Networks closed its CyberArk deal in February 2026 and layoffs followed
- CyberArk web pages now redirect to Palo Alto Networks' Idira page
- UK G-Cloud 15 listing states data held in the UK and EEA with customer control of location, support 24/7 by phone, and no free trial
- Gartner Peer Insights shows only 11 to 13 ratings for the CyberArk Identity Security Platform in IGA
CyberArk Identity Governance alternatives
Vendor dossier
Fit by company size
| Category | 1-10 people | 11-50 people | 51-500 people | 500+ people |
|---|---|---|---|---|
| Identity Governance and Administration (IGA) Software | No data | No data | No data | Strong fit |
Strong fitWorkablePoor fitNo data from the vendor
How buying CyberArk Identity Governance works
- How you buy
- Through sales
- Demo or quote needed for
- All editions
Security and data protection
- ISO 27001
- Yes
- Data hosting regions
- United Kingdom, EEA
From CyberArk Identity Governance's trust center, security and legal pages. Anything not listed is not published.
About the company
- Founded
- 1999
- Headquarters
- Petah Tikva, Israel (US: Newton, Massachusetts)
- Ownership
- part of Palo Alto Networks (acquisition closed February 2026)
- Employees
- 3,793 (2024)
- 2025
- Acquired Zilla Security (identity governance)
- 2026
- Palo Alto Networks completed its acquisition of CyberArk
Support and integrations
- Support
- Email and ticketing with 2 to 12 hour response targets by severity; phone 24/7; premium 24x7 support offered
What vendors in this category ask before quoting
Answer these once in a SaaSBid request and CyberArk Identity Governance and its alternatives quote against the same facts.
- How many identities, including contractors and service accounts, need to be governed?Most vendors price per identity, and the count sets the tier.
- Which directory and identity provider do you use today?Okta, Entra and Ping add-ons only work on their own platforms.
- Which business applications and on-premises systems must be connected?Connector coverage drives implementation effort and may require extra licenses.
- Which audits or regulations drive this project?SOX or similar rules make separation-of-duties controls a requirement.
- Do you want SaaS, a private cloud or software run in your own data center?Deployment model changes price, timeline and staffing.
- What is your target go-live, and do you have identity engineers in-house?It decides whether a partner or accelerator program is needed.