CyberArk Identity Governance
CyberArk Identity Governance (Zilla) answers who has access to what — AI-powered lifecycle, fast access reviews and compliance, unified with privileged access.
Buy through TechBag
Same software. Better outcome — at a lower cost.
How it’s rated
Full scoreboard ↓Quick answer
The CyberArk platform family
This page covers Identity Governance — IGA & access reviews (Zilla). The rest of the platform:
Quick facts
30-second orientation- Product
- Now sold as Idira IGA (formerly CyberArk IGA)
- Renamed
- CyberArk → Idira® — rebrand launched 12 May 2026
- Vendor
- Palo Alto Networks (CyberArk acquired 11 Feb 2026)
- The questions
- Who has access to what · should they · can you prove it
- The lifecycle
- Provision · deprovision · review & certify
- The gap it closes
- Orphaned accounts, access creep, audit pain
- Zilla's edge
- Modern, AI-powered, fast access reviews
- Includes
- Identity Flows · provisioning · lifecycle · UARs
- Part of
- Idira Identity Security Platform (formerly CyberArk)
- Licensing
- Per identity / subscription
- In India via
- TechBag — quotes, PoCs, GST invoicing, Tier-1 support
Understand identity & access management before you buy it
Most product pages skip this. We start here — so you buy a capability, not a buzzword.
What is IGA?
Governing who has access to what across the lifecycle — provision, deprovision, review and certify.
Modernised by Zilla’s AI-powered approach.
Fragmented logins vs unified identity — the honest table
What consolidation actually replaces, dimension by dimension.
| Dimension | Unprotected / signature email | Identity Governance (CyberArk) |
|---|---|---|
| Who has access | Nobody really knows | Auto-discovered & mapped |
| Joiners/movers | Manual, slow, error-prone | Auto-provisioned by policy |
| Leavers | Orphaned accounts linger | Auto-deprovisioned |
| Access creep | Accumulates, never trimmed | Right-sized (AI) |
| Access reviews | Painful spreadsheet rubber-stamp | Fast, AI-assisted, meaningful |
| Audit | A scramble | An export |
| Separation of duties | Toxic combos unseen | Flagged & enforced |
| The estate | Governance & PAM siloed | Unified on one platform |
Who has access to what, should they, can you prove it — answered by AI-powered governance. Unified with CyberArk PAM.
The five pieces of the platform
Vendors love diagrams; buyers need to know what they’re actually operating. Here’s the whole platform, demystified.
Access Discovery
Automatically discovers who has access to what across cloud and on-prem applications — the visibility governance depends on, gathered without manual spreadsheets.
Provisioning & Lifecycle
Provisions the right access on joining or role change, and deprovisions it on leaving — closing the orphaned-account gap automatically.
Access Reviews (UAR)
Runs periodic user-access reviews so managers certify access is still appropriate — the certification auditors demand, made fast instead of painful.
AI Right-Sizing
Zilla's AI recommends right-sized access and flags anomalies — turning slow, rubber-stamp reviews into intelligent, meaningful governance.
Identity Security Platform
Delivered on CyberArk's platform with Identity Flows automation — governance unified with privileged access, the whole identity estate together.
Every entitlement reviewed and justified — access certified on evidence, not assumed.
Twelve capabilities. Discover, automate, certify.
CyberArk Identity Governance answers who has access to what — AI-powered, fast reviews, part of the CyberArk portfolio.
Access Discovery
Automatically discovers who has access to what across cloud and on-prem apps — no manual access-inventory spreadsheets.
Access-Creep Detection
Surfaces the permissions users accumulate over years and never lose — the access creep that inflates risk and fails audits.
Orphaned-Account Detection
Finds the accounts of departed employees and role-changers that were never deprovisioned — a classic, dangerous breach vector.
Automated Provisioning
Grants the right access automatically when someone joins or changes role — the right access, fast, without manual tickets.
Automated Deprovisioning
Removes access automatically when someone leaves or changes role — closing the orphaned-account gap the moment it opens.
Identity Flows
No-code workflow automation for identity processes — request, approve, provision, review, all orchestrated without custom code.
Lifecycle Management
Full joiner-mover-leaver lifecycle management — access always matches the person's current role, automatically.
AI-Powered Access Reviews
Zilla's AI right-sizes access and flags anomalies during reviews — turning slow rubber-stamping into meaningful governance.
User Access Reviews
Runs periodic access certifications so managers confirm access is still appropriate — audit-ready, and far faster than legacy IGA.
Compliance Reporting
Demonstrates who has access, why, and that it was reviewed — the evidence SOX, ISO, RBI and SEBI audits require.
Separation of Duties
Enforces separation-of-duties policies — flagging toxic access combinations that would let one person do too much.
Unified with PAM
Governance on CyberArk's platform, unified with privileged access — the whole identity estate governed together.
Watch CyberArk Identity Governance in action
The overview, getting started, and the core workflows.
Looking for a modern approach to identity governance?
Modern, AI-powered identity governance.
A New Identity Crisis: Governance in the AI Age
Why IGA matters as identities and AI explode.
What is Identity Security?
Where governance fits in identity security.
Want a live, India-context walkthrough for your environment?
Book a guided demo →Passwords are the breach. Own the identity layer.
Here’s what genuinely sets CyberArk / Zilla governance apart.
Who has access to what — and should they?
Who can reach what, is that access justified, and could you show an auditor? Access sprawls as people join, move and leave, leaving excess permissions and orphaned accounts, a classic breach vector. Identity Governance and Administration controls and evidences access across the lifecycle, a core need for regulated organisations.
The joiner-mover-leaver lifecycle
Joiners and movers need the right access promptly; done manually, they end up under- or over-provisioned. Leavers must lose access immediately, yet deprovisioning is routinely missed, leaving orphaned accounts active for months. IGA automates joiner-mover-leaver so access always matches a person’s current status.
Access reviews auditors actually demand
SOX, ISO 27001 and, in India, RBI and SEBI cyber directions require periodic user access reviews. Legacy IGA made them painful: huge spreadsheets and managers rubber-stamping access they don’t understand. Modern IGA gives reviewers clear context to certify or revoke quickly, and produces the audit trail regulators expect.
Zilla — modern, AI-powered governance
IGA earned a reputation for being slow, complex and expensive. In 2025 CyberArk acquired Zilla Security, whose IGA automatically discovers access across cloud and on-premises apps and uses AI to right-size access and flag anomalous or excessive rights during reviews, keeping pace as human, machine and AI identities multiply.
Governance and privileged access, together
Organisations often govern ordinary access with an IGA tool and privileged access with a separate PAM tool, leaving gaps where privileged entitlements escape review. CyberArk runs governance on the same platform as its privileged access, tied together with Identity Flows, so ordinary and privileged access are governed together.
The honest scope
CyberArk Identity Governance, modernised by Zilla, is AI-powered IGA that suits CyberArk PAM customers or teams wanting faster reviews. SailPoint is the dominant standalone IGA leader with the most mature capabilities; Saviynt is a strong cloud-native rival; Microsoft Entra ID Governance covers Microsoft estates.
The numbers behind the platform
What your identity-governance journey looks like
Governance scoping
Map your access-review pain, joiner-mover-leaver gaps, SOX/RBI/SEBI obligations and any CyberArk PAM. TechBag scopes it free.
Discover & connect
Access auto-discovered across cloud and on-prem apps; orphaned accounts and access creep surfaced; the current-state picture built.
Automate & review
Joiner-mover-leaver automated via Identity Flows; AI-assisted access reviews run; separation-of-duties enforced.
Governed & provable
Access right-sized, lifecycle automated, reviews an export, governance unified with PAM. TechBag models the mix in INR/GST.
The review scoreboard
Modelled on Gartner Peer Insights structure. *Counts and breakdowns are illustrative pending verified review collection.
Quick poll — what’s driving your evaluation?
Talk to an advisor“Managers rubber-stamped spreadsheet reviews. Zilla’s AI right-sizing shows what is anomalous so they revoke it. Audit is now an export.”
“Orphaned accounts of departed staff were our recurring audit finding. Automated deprovisioning closes them when someone leaves.”
“Automatic discovery of access across our cloud and on-prem apps spared us a manual integration marathon.”
“Governance on the same CyberArk platform as our PAM means privileged entitlements get reviewed like everything else.”
“Identity Flows let us automate joiner-mover-leaver without custom code — the right access, fast, and removed on exit.”
“We compared SailPoint, the most mature IGA, but chose CyberArk/Zilla for the AI approach and PAM unification.”
“Separation-of-duties checks caught toxic combinations, like one person who could both create and approve.”
“As our identities, machine ones included, exploded, an AI-first governance tool was the only way to keep up.”
Where everyone sits — the grids
Analyst firms bury this view behind paywalls, and review-site grids score satisfaction, not fit for your estate. So here’s TechBag’s synthesis of the identity & access market — tap any vendor to see why it sits where it does.
TechBag Identity & Access Grid
Execution strength vs product vision — the classic market map, minus the paywall.
Modern AI-first IGA, unified with PAM. This page's product.
Governance Depth × PAM Unification
The grid nobody publishes — governance depth vs unified with PAM (identity platform).
Modern AI IGA + PAM unification — the corner it owns.
Positions are TechBag’s illustrative synthesis of public review-platform data and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
CyberArk / Zilla vs the IGA field
The standalone IGA leaders and native option — honest lanes; the edge is modern AI governance unified with PAM.
| Dimension | CyberArk / Zilla | SailPoint | Saviynt | Microsoft Entra ID Governance | No IGA |
|---|---|---|---|---|---|
| Approach | Modern, AI-first, PAM-unified | The IGA leader | Cloud-native IGA | MS-world governance | The gap |
| Access reviews (speed) | Fast, AI-assisted | Powerful but complex | Modern | Good (E5) | None |
| Lifecycle & discovery | Auto-discovery | Deepest | Strong | MS-centric | None |
| Unified with PAM | Yes — one platform | Standalone IGA | Standalone IGA | MS stack | None |
| Best fit | CyberArk shops wanting modern IGA unified with PAM | Deepest standalone governance | Cloud-native IGA-first | All-Microsoft E5 estates | Nobody regulated or at scale |
Which identity & access management approach fits you?
Honest fit signals — because the fastest way to lose your trust is to pretend one product wins every scenario.
Choose CyberArk / Zilla if…
- You want modern, AI-powered, fast identity governance
- You run (or want) CyberArk PAM — governance unified with privileged access
- Legacy-IGA pain (slow reviews, complex setup) is a concern
- Closing the orphaned-account and access-creep gaps matters
Choose SailPoint if…
- You want the deepest, most mature standalone IGA leader
Choose Saviynt if…
- You want a strong cloud-native IGA-first platform
Choose Entra ID Governance if…
- You are all-in on Microsoft E5 and want native governance
No IGA if…
- Not advisable if regulated or at scale — you must govern access
CyberArk Identity Governance is one of 22 identity governance products TechBag carries. The Identity Governance guide narrows them to a shortlist and shows the reasoning. →
What could this save you?
Drag the sliders (count users; IT-hour cost as loaded incident rate). Estimates assume ~1.5 hours per user per year of manual effort this tool automates away, with ~70% of that effort removed — the avoided-risk value is the larger, unpriced win. Illustrative.
Loaded cost = salary + overheads per productive hour. Illustrative only — your TechBag quote models your actual environment and modules.
Three ways to consume it
CyberArk Identity Governance prices per identity/subscription. TechBag scopes it (and unification with CyberArk PAM) for your governance needs in one GST quote.
Identity Governance
Best for access governance
- Who has access, should they, prove it
- Joiner-mover-leaver + Identity Flows
- AI-powered fast access reviews (Zilla)
+ Platform add-ons
Best for a broader rollout
- Scoped to your estate
- Add-on modules as needed
- Phased, right-sized deployment
+ Unified with PAM
Best for the whole estate
- Governance + privileged access, one platform
- No gap where privileged escapes review
- TechBag scopes the mix
Buy it for less — TechBag pricing beats list
Whatever the list prices above, TechBag negotiates a significantly better deal — with GST-compliant INR invoicing and local support. Ask us for your discounted quote.
Get an India-ready quote
Tell us your requirements and current tools — we’ll model it against what you spend today.
The 8 questions to ask every vendor
Take this into your next vendor call — including ours.
Confirm it auto-discovers access across YOUR cloud and on-prem apps — no manual integration marathon.
Test joiner-mover-leaver automation — right access on arrival/change, removed on exit (no orphans).
Verify reviews are fast and AI-assisted (right-sizing), not painful spreadsheet rubber-stamping.
Test detection and auto-deprovisioning of departed-employee accounts — a classic breach vector.
Map reviews and reporting to YOUR obligations (SOX/ISO/RBI/SEBI) — provable governance.
Confirm SoD policy enforcement flags toxic access combinations.
Decide whether unifying governance with CyberArk PAM matters; else compare SailPoint (deepest standalone).
Right-size per identity/subscription — TechBag scopes and quotes in INR/GST.
Questions buyers ask
Ready to govern access properly?
Scope a governance PoC (discover who has access, then prove fast AI-assisted reviews and closed orphaned-account gaps), unify it with your PAM, or let a TechBag advisor plan identity governance.
Stats, ratings, review counts and pricing are illustrative and sourced from public materials; verify before purchase.