Palo Alto Networks has folded CyberArk into a new identity security platform called Idira, expanding privileged access management beyond administrators and human users to include machine identities, workloads, and AI agents.

The company argues that identity systems built around employees and admin accounts no longer reflect how enterprise environments operate. Palo Alto says machine identities now outnumber human identities by 109-to-1, with AI agents contributing to much of that growth. That changes the security focus from endpoint compromise toward credentials, service accounts, tokens, and automated systems with persistent access.

The launch reflects a broader shift underway across enterprise security. Identity management, once treated as a separate function managed by IAM teams, is increasingly tied into cloud security, network security, and zero trust architectures. Palo Alto is positioning Idira as part of that trend, integrating identity controls and telemetry across its broader security portfolio.

The platform’s focus on reducing standing privileges also aligns with wider changes in enterprise access management. Organizations are moving toward shorter-lived, contextual access policies instead of persistent permissions that can be reused or abused after compromise.

The larger trend is that identity is becoming infrastructure-level security rather than a standalone category. As AI agents, workloads, APIs, and automated systems become more common, the distinction between users, devices, applications, and services becomes less meaningful from a security perspective. All of them increasingly require identity-based policy enforcement and monitoring.

The CyberArk acquisition also points to continued consolidation across enterprise security markets. Networking, identity, cloud security, endpoint telemetry, and access management are steadily converging into broader platforms as vendors try to reduce fragmented tooling and centralize policy management.