CISO Tribune

Vendor comparison · 2 companies

CyberArk vs Onyx Security

CyberArk sells the Idira Identity Security Platform, which brings together modern privileged access management (PAM), machine identity security and agentic identity security. Onyx Security sells a secure control plane for AI agents and models. CISO Tribune files both under Non-human identity security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • CyberArk
  • Onyx Security
CyberArk vs Onyx Security: Products, Customers and Funding Compared
CyberArkCyberArk sells the Idira Identity Security Platform, which brings together modern privileged access management (PAM), machine identity security and agentic identity security.cyberark.comOnyx SecurityOnyx Security sells a secure control plane for AI agents and models.onyx.security
What it sells
  • Modern PAM[12]Provides discovery of privileged access and dynamic privileged access for human identities.
  • Secrets Management[1][3][12]Secures machine identities from secrets to workloads.
  • Agentic identity security[12]Discovers, controls and governs agentic identities at scale.
  • AI Security[1][7]Onyx provides the runtime and posture layer of the Onyx Secure AI Control Plane.
  • MCP Gateway[8]The MCP Gateway governs the agent-to-tool surface.
Categories
Headquarters
Petach-Tikva, Israel[4]Not stated on its pages
Founded
1999[4]Not stated on its pages
Ownership and funding
Owned by Palo Alto Networks since 2026[1][14]Not stated on its pages
Named customers
  • Northern Trust[5]
  • Healthfirst[6]
  • Carnival Corporation[7]
  • Aflac[8]
  • Webster Bank[9]
Not stated on its pages
Recent news
  • June 2, 2026Palo Alto Networks reported fiscal third quarter 2026 revenue of $3.0 billion, including $388 million from CyberArk and Chronosphere combined.[10]
  • May 12, 2026Palo Alto Networks launched Idira, an identity security platform built on CyberArk's privileged access products, adding new capabilities for existing CyberArk customers.[11]
  • July 29, 2026Onyx Security announced a $113 million Series B funding round led by Bessemer Venture Partners.[15]
  • March 12, 2026Onyx Security officially launched operations after securing $40 million in initial funding.[14]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: listed, seen October 24, 2026[14]
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, the company sells mainly to organizations that want to secure human, machine and agentic identities on one platform. It names customers such as a group of dental practices, a government services organization and an organization with vault sprawl to control. Its pages address existing CyberArk customers moving to Idira.From its own pages, Onyx Security sells mainly to security, governance, and AI teams that need control over AI agent adoption across the enterprise. Onyx Security describes a single platform for security, governance, and infrastructure teams. Onyx Security offers cloud, hybrid, or self-hosted options for organisations with sensitive data residency requirements. Onyx Security presents one console for AI agents and models across SaaS, cloud, endpoint, and code environments. Onyx Security names security, finance, and platform teams as the teams that share its usage, cost, and policy ledger.
Last verified
September 27, 2026October 19, 2026

Where they overlap

  • CyberArk and Onyx Security are both filed under Non-human identity security.

Where they differ, field by field

  • CyberArk's primary category is Privileged access management; Onyx Security's is AI model and agent security.
  • CyberArk is also filed under Identity governance and administration. Onyx Security is also filed under AI governance and Workforce AI usage security.
  • CyberArk lists Modern PAM, Secrets Management and Agentic identity security. Onyx Security lists AI Security and MCP Gateway.
  • CyberArk is headquartered in Petach-Tikva, Israel.
  • CyberArk was founded in 1999.
  • CyberArk is owned by Palo Alto Networks, since 2026.
  • CyberArk publicly names Northern Trust, Healthfirst, Carnival Corporation, Aflac and Webster Bank.

What it sells: CyberArk

What Modern PAM does[12]
Modern PAM provides discovery with continuous visibility and AI-driven analytics. It eliminates always-on standing privileges. A unified command center streamlines deployment through automation and embeds threat detection directly into privileged workflows.
What Secrets Management does[1][3][12]
The Idira platform includes discovery, risk analytics and modern secrets management. It includes governance and reporting for all vaults and workloads.
What Agentic identity security does[12]
Idira secures agentic identities alongside human and machine identities. Machine and agentic identities are often referred to as nonhuman identities.

What it sells: Onyx Security

What AI Security does[1][7]
Onyx provides the runtime and posture layer of the Onyx Secure AI Control Plane. Onyx inspects every prompt, tool call, and model response inline across browser AI, coding assistants, desktop AI agents, cloud workloads, and MCP servers. Onyx offers five enforcement actions: alert, block, mask, steer, or ask.
What MCP Gateway does[8]
The MCP Gateway governs the agent-to-tool surface. Every tool call an agent makes to an MCP server gets inspected and policy-enforced. MCP Gateway coverage spans the MCP ecosystem, including servers using dynamic client registration and popular servers like GitHub.

Questions about CyberArk and Onyx Security

What do CyberArk and Onyx Security sell?
CyberArk sells Modern PAM, Secrets Management and Agentic identity security. Onyx Security sells AI Security and MCP Gateway.
Are CyberArk and Onyx Security in the same category?
They share Non-human identity security. CyberArk's primary category is Privileged access management and Onyx Security's is AI model and agent security.
Where are CyberArk and Onyx Security headquartered?
CyberArk is headquartered in Petach-Tikva, Israel.
When were CyberArk and Onyx Security founded?
CyberArk was founded in 1999.
Who owns CyberArk and Onyx Security?
CyberArk is owned by Palo Alto Networks, since 2026.
Which customers do CyberArk and Onyx Security name?
CyberArk publicly names Northern Trust, Healthfirst, Carnival Corporation, Aflac and Webster Bank.
Who are CyberArk and Onyx Security sold to?
From its own pages, the company sells mainly to organizations that want to secure human, machine and agentic identities on one platform. From its own pages, Onyx Security sells mainly to security, governance, and AI teams that need control over AI agent adoption across the enterprise.
What have CyberArk and Onyx Security announced recently?
June 2, 2026: Palo Alto Networks reported fiscal third quarter 2026 revenue of $3.0 billion, including $388 million from CyberArk and Chronosphere combined. July 29, 2026: Onyx Security announced a $113 million Series B funding round led by Bessemer Venture Partners.

About CyberArk

CyberArk sells the Idira Identity Security Platform, which brings together modern privileged access management (PAM), machine identity security and agentic identity security.[12]

The page says that legacy identity solutions were built for yesterday's problems, when elevated privileges were reserved for a select few. Idira is presented as a platform that extends privilege control to every identity in order to minimize attack surface.[12]

Idira secures human, machine and agentic identities. The platform is described as a unified control plane that discovers risk, applies privilege dynamically and governs the full lifecycle from first access to final session. The pages say one part of the platform covers modern privileged access, endpoint and identity governance needs, another covers every machine identity from secrets to workloads, and another discovers, controls and governs agentic identities.[3][12]

On the human side, the pages say modern PAM provides discovery with continuous visibility and AI-driven analytics. It also provides dynamic privileged access that eliminates always-on standing privileges. A unified command center streamlines deployment through automation and embeds threat detection directly into privileged workflows.[3][12]

On the nonhuman side, the pages say machine and agentic identities are often referred to as nonhuman identities. The Idira platform includes discovery, risk analytics and modern secrets management, with governance and reporting for all vaults and workloads. Customer quotes on the pages mention Idira Privileged Access Manager, Idira Secrets Hub and Certificate Manager.[3][12]

For zero trust, the pages say the platform enforces least privilege and secures access for human, machine and agentic identities across any device. Privilege controls are used to grant access for just the right amount of time, and the platform continuously monitors threats so organizations can adjust controls based on risk.[12]

Idira is described as built on CyberArk's legacy and powered by Palo Alto Networks. Existing CyberArk customers can continue to use the platform as they always have, with a new logo and design. The pages say that over time customers will be able to use cross-platform capabilities across the Palo Alto Networks product portfolio.[2][12]

The pages name customers including an organization securing access to clinical resources for over 900 dental practices, a government services organization implementing PAM as a service, and an organization deploying Idira to centralize secrets and control vault sprawl.[12][13]

CyberArk on the record

Sources

CyberArk full record

  1. [1]Palo alto networks completes acquisition of cyberark to secure the ai eraPalo Alto Networks · paloaltonetworks.com · published February 11, 2026 · Tier A
  2. [2]CyberArk is now Idira Frequently Asked QuestionsCyberArk (Idira Team) · community.cyberark.com · published September 21, 2026 · Tier A
  3. [3]IdiraPalo Alto Networks · paloaltonetworks.com · undated page, accessed September 27, 2026 · Tier A
  4. [4]Zk2532806CyberArk Software Ltd. via SEC EDGAR · sec.gov · undated page, accessed May 1, 2025 · Tier A
  5. [5]Northern trustPalo Alto Networks · paloaltonetworks.com · undated page, accessed October 10, 2026 · Tier A
  6. [6]HealthfirstPalo Alto Networks · paloaltonetworks.com · undated page, accessed October 10, 2026 · Tier A
  7. [7]Carnival corporationPalo Alto Networks · paloaltonetworks.com · undated page, accessed October 10, 2026 · Tier A
  8. [8]AflacPalo Alto Networks · paloaltonetworks.com · undated page, accessed October 10, 2026 · Tier A
  9. [9]Webster bankPalo Alto Networks · paloaltonetworks.com · undated page, accessed October 10, 2026 · Tier A
  10. [10]Palo alto networks reports fiscal third quarter 2026 financial resultsPalo Alto Networks · paloaltonetworks.com · published June 2, 2026 · Tier A
  11. [11]Palo alto networks introduces idira the next generation identity security platform built for the ai enterprisePalo Alto Networks · paloaltonetworks.com · published May 12, 2026 · Tier A
  12. [12]Idira | The Identity Security Platform - Palo Alto NetworksCyberArk · undated page, accessed October 24, 2026 · Tier A
  13. [13]CyberArk Introduces First Identity Security Solution Purpose-Built to Protect AI Agents with Privilege ControlsBusiness Wire · published November 4, 2025 · Tier A
  14. [14]Palo Alto Networks (CyberArk) Reviews - GartnerGartner Peer Insights · undated page, accessed October 24, 2026 · Tier C

Onyx Security full record

  1. [1]onyx.securityOnyx Security · onyx.security · undated page, accessed October 19, 2026 · Tier A
  2. [2]The Secure AI Control Plane for the Agentic Era | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  3. [3]About Onyx | The Team Behind the AI Control PlaneOnyx Security · undated page, accessed November 10, 2026 · Tier A
  4. [4]One Platform to Discover and Control Every AI Agent | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  5. [5]AI Observability – Discover Every Agent & Session | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  6. [6]AI Agent Security | Block Prompt Injection in Real TimeOnyx Security · undated page, accessed November 10, 2026 · Tier A
  7. [7]AI Governance Platform Built for the EU AI Act | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  8. [8]AI Orchestration – Governed Routing & Control | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  9. [9]AI ROI Platform – Prove Value & Control Costs | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  10. [10]Secure Claude Enterprise with Onyx | Anthropic IntegrationOnyx Security · undated page, accessed November 10, 2026 · Tier A
  11. [11]Secure ChatGPT Enterprise with Onyx | OpenAI IntegrationOnyx Security · undated page, accessed November 10, 2026 · Tier A
  12. [12]Secure Amazon Bedrock Agents | Onyx IntegrationOnyx Security · undated page, accessed November 10, 2026 · Tier A
  13. [13]Copilot Studio Security – Discover, Govern & Control | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  14. [14]Israeli cyber firm Onyx Security launches operations with $40 million funding round | ReutersReuters · published March 12, 2026 · Tier B
  15. [15]Onyx Security Raises $113M Series B to Control Advanced AI, Quadrupling Revenue since Stealth Launch Four Months AgoBusiness Wire · published July 29, 2026 · Tier A

Spot a factual error? Request a correction.