Did CyberArk become Idira?

Yes. On May 12, 2026, Palo Alto Networks rebranded CyberArk as Idira and positioned it as the next-generation identity security platform for the AI enterprise. The underlying product portfolio is unchanged; the rebrand reflects Palo Alto Networks' platform consolidation strategy.

How is Delinea different from CyberArk?

Delinea delivers centralized authorization with runtime enforcement across human, machine, and AI agent identities in one platform, including a broker for modern workload access. CyberArk is positioned as a vault-centric platform with additional modules for cloud and agentic use cases. Delinea is designed to integrate with existing environments, while CyberArk is part of a broader Palo Alto Networks platform bundle.

Is Delinea cloud-native?

Yes. The Delinea Platform is cloud-native, with a 99.995% uptime SLA, 30 minutes from code to production, and a 2-minute mean time to recovery. Delinea also supports on-premises and hybrid deployments for regulated workloads.

Does Delinea support AI agents and non-human identities?

Yes. Delinea provides runtime authorization for AI agents through StrongDM, with MCP-native connectivity plus session and command auditing. Customers are using these capabilities in production, and AI capabilities are included in the Delinea Platform.

What does Delinea integrate with?

Delinea integrates with major identity providers such as Okta, Microsoft Entra, and Google Cloud Identity; cloud platforms such as AWS, Azure, and Google Cloud; Kubernetes; databases including Postgres, Redis, and MongoDB; DevOps pipelines; and security tools including SIEM, SOAR, and ITSM platforms.

How long does a Delinea deployment take?

Modern workload access deployments typically reach production in weeks. Traditional PAM deployments typically take less than 90 days. Delinea is positioned as requiring fewer resources to manage and less time to achieve full functionality than CyberArk.

Identity security vendors – compare the differences

Delinea vs. ARCON

One platform for privileged access across AI agents, humans and machines,
built for the AI era.

Delinea extends privileged access management into just-in-time continuous authorization, evaluating access across the whole estate, every server, database and cloud, with Linux and Unix depth, multicloud entitlements, and runtime authorization for AI agents, at global enterprise scale. ARCON is a capable traditional PAM with a mature vault and strong session control, strongest in Windows-centric, on-premise environments.

Try an interactive demo Contact us

Capability		ARCON
Core Privileged Access
Credential vaulting and rotation	Available, enterprise-scale	Available, mature vault
Privileged session recording and control	Available, command-level	Available
Just-in-time access and zero standing privilege	Available across the environment	Available
MFA and single sign-on	Integrates with your identity provider	Native
Endpoint privilege management	Available, Windows and macOS	Available, Windows-centric
Depth across Windows, Linux, Unix and cloud
Linux and Unix privileged access and least privilege	Available, AD bridging and depth	Narrower than its Window features
Multicloud entitlement management (CIEM)	Available across AWS, Azure, GCP	Cloud governance, narrower
Modern native-client access to servers, databases and Kubernetes	Available, in the connection	Session proxy and integrations
Secrets management for DevOps and machines	Available	Emerging
AI agent and modern workload
Runtime authorization for AI agents, per action in the connection	Available	Not offered; analytics and claimed MCP workflows
Credential separation for agents (never reaches the agent)	Available, injected at the proxy	Not offered
MCP-native connectivity	Available	Claimed, verify maturity
Platform, scale, and ecosystem
One platform across AI agents, human and machine identities	One identity, one policy, one audit	Suite of modules
Global enterprise scale and support	Available	Regionally concentrated (BFSI, EMEA, APAC)
Integration and partner ecosystem	Broad	Growing, regionally weighted

Delinea Platform

"Once you get used to the product it is quite straight forward. We use the secret server to secure our network infrastructure."

IT Associate - Software

Gartner® and Peer Insights™ are trademarks of Gartner, Inc. and/or its affiliates. All rights reserved. Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences, and should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose

Secret Server

"Exceptional channel and solution ease of use. Also, vendor has a clear development path."

BDM FOR Cyber Security - Miscellaneous

Faster to deploy: Easier to use

Delinea is consistently recognized for requiring fewer resources to manage and less time to achieve full functionality.

• 99.995% uptime SLA
• No multi-year commitment required to start

Zero standing privilege—available now

Delinea ships ephemeral access with proxy injection, JIT entitlement, and full session recording for human, machine, and AI agent identities - today.

• Native tools, broker invisible
• Time to value in weeks

Identity security built for the AI era

Delinea centralizes authorization with runtime enforcement across every AI agent in your stack.

• MCP-native connectivity
• Customers are using this in production today

One platform for every system, not a Windows-first toolset

Delinea unifies vaulting, session control, endpoint privilege, Linux and Unix least privilege, multicloud entitlements, secrets and AI-agent runtime authorization under one identity, one policy and one audit trail. ARCON is a capable traditional PAM with a mature vault and strong session recording, and it is well established in regulated financial services across the Middle East, APAC, and India. Its depth is Windows-centric and on-premise-first; customers report that its Linux and Unix privilege management lags compared to its Windows features. Cloud DevOps and AI-agent capabilities are newer and narrower. Delinea gives you robust PAM capabilities that extend into runtime authorization across your existing workflows and systems.

One platform for every system, not a Windows-first toolset

The modern environment now includes AI agents, machine identities, Kubernetes and multicloud. Delinea authorizes each action in the connection, injects the credential at the proxy so it never reaches the user or the agent, and records the session across SSH, RDP, databases, Kubernetes, cloud and MCP. ARCON secures privileged access with a traditional vault-and-session model and adds behavioral analytics through its Knight engine. Its AI-agent and modern workload story is emerging. When the requirement is per-action control of what an agent or workload does, not just who logged in, that is where Delinea shines.

Privileged access has to be as strong on Linux and Mac as it is on Windows

ARCON's depth is Windows-centric; by its own customers' accounts, its Linux and Unix privilege management lags its Windows features, and its endpoint privilege is Windows-first.

Delinea delivers Linux and Unix least privilege with Active Directory bridging at depth, and endpoint privilege on macOS as well as Windows, under one policy.

Controlled per action, not just at login

Privileged access now must cover AI agent, human and machine identities, Kubernetes and multicloud entitlements.

ARCON secures access with a traditional vault-and-session model plus behavioral analytics; its cloud, DevOps and AI-agent capabilities are newer and narrower.
Delinea authorizes each action across SSH, RDP, databases, Kubernetes, cloud and MCP, and injects the credential at the proxy so it never reaches the user or the agent.

One platform at global enterprise scale

A privileged access program should run on one control plane, everywhere you operate.

ARCON is a suite of separately managed modules with a footprint concentrated in regulated financial services across the Middle East, APAC, and India.
Delinea runs on one identity, one policy and one audit across AI agents, human and machine identities, with global deployment, support and a broad integration ecosystem.

Frequently Asked Questions

How is Delinea different from ARCON?

Both cover core PAM well, vaulting, session recording, just-in-time access and MFA. Delinea adds Linux and Unix depth, multicloud entitlement management, secrets for DevOps and machines and runtime authorization for AI agents on one modern platform at global enterprise scale.

Does Delinea replace ARCON?

Yes. Delinea can consolidate ARCON's vault, session control and endpoint privilege onto one platform and extend to the parts of the estate ARCON reaches less deeply; Linux and Unix, multicloud, DevOps and AI agents. Many customers migrate to cut tool sprawl and cover the modern estate in one place.

We run ARCON for financial services compliance. What does Delinea add?

Delinea helps you meet the same audit and compliance mandates, including SOC 2, ISO 27001, PCI DSS, HIPAA, and GDPR, and adds Linux and Unix depth, multicloud entitlements, DevOps secrets and AI-agent authorization with global deployment and support.

How does Delinea secure AI agents differently from ARCON?

Delinea authorizes each action in the connection and injects the credential so it never reaches the agent across native protocols and MCP. ARCON's agent story is newer and analytics-led rather than per-action enforcement in the connection.

How quickly can we deploy Delinea?

Delinea deploys in weeks on one platform, with fast time-to-value and fewer resources to run than a multi-module traditional stack.

How hard is it to move from ARCON to Delinea?

You can migrate in phases, running Delinea alongside ARCON during the transition and moving vaults, sessions and endpoints over in stages rather than a full cutover, so there is no gap in coverage.

Identity security vendors – compare the differences

Identity security vendors – compare the differences

The Delinea Platform secures privileged access across every system you run

Capability

ARCON

Core Privileged Access

Credential vaulting and rotation

Privileged session recording and control

Just-in-time access and zero standing privilege

MFA and single sign-on

Endpoint privilege management

Depth across Windows, Linux, Unix and cloud

Linux and Unix privileged access and least privilege

Multicloud entitlement management (CIEM)

Modern native-client access to servers, databases and Kubernetes

Secrets management for DevOps and machines

AI agent and modern workload

Runtime authorization for AI agents, per action in the connection

Credential separation for agents (never reaches the agent)

MCP-native connectivity

Platform, scale, and ecosystem

One platform across AI agents, human and machine identities

Global enterprise scale and support

Integration and partner ecosystem

Why the differences between Delinea and CyberArk matter

Faster to deploy: Easier to use

Zero standing privilege—available now

Identity security built for the AI era

One platform for every system, not a Windows-first toolset

One platform for every system, not a Windows-first toolset

Privileged access has to be as strong on Linux and Mac as it is on Windows

Thousands of customers. One easy choice.

See the Platform in action

Frequently Asked Questions

How is Delinea different from ARCON?

Does Delinea replace ARCON?

We run ARCON for financial services compliance. What does Delinea add?

How does Delinea secure AI agents differently from ARCON?

How quickly can we deploy Delinea?

How hard is it to move from ARCON to Delinea?

Credential vaulting and rotation 

Depth across Windows, Linux, Unix and cloud  

One platform across AI agents, human and machine identities  