CISO Tribune

Vendor comparison · 2 companies

CyberArk vs Sonrai

CyberArk sells the Idira Identity Security Platform, which brings together modern privileged access management (PAM), machine identity security and agentic identity security. Sonrai sells identity, access, and permissions security for companies running on AWS, Azure, and Google Cloud platforms. CISO Tribune files both under Non-human identity security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • CyberArk
  • Sonrai
CyberArk vs Sonrai: Products, Customers and Funding Compared
CyberArkCyberArk sells the Idira Identity Security Platform, which brings together modern privileged access management (PAM), machine identity security and agentic identity security.cyberark.comSonraiSonrai sells identity, access, and permissions security for companies running on AWS, Azure, and Google Cloud platforms.sonraisecurity.com
What it sells
  • Modern PAM[12]Provides discovery of privileged access and dynamic privileged access for human identities.
  • Secrets Management[1][3][12]Secures machine identities from secrets to workloads.
  • Agentic identity security[12]Discovers, controls and governs agentic identities at scale.
  • Cloud Permissions Firewall[2][3][4][6][8]Removes dangerous permissions and blocks unused privileges, services, and regions with automated global policies.
Categories
Headquarters
Petach-Tikva, Israel[4]Not stated on its pages
Founded
1999[4]Not stated on its pages
Ownership and funding
Owned by Palo Alto Networks since 2026[1][14]Not stated on its pages
Named customers
  • Northern Trust[5]
  • Healthfirst[6]
  • Carnival Corporation[7]
  • Aflac[8]
  • Webster Bank[9]
Not stated on its pages
Recent news
  • June 2, 2026Palo Alto Networks reported fiscal third quarter 2026 revenue of $3.0 billion, including $388 million from CyberArk and Chronosphere combined.[10]
  • May 12, 2026Palo Alto Networks launched Idira, an identity security platform built on CyberArk's privileged access products, adding new capabilities for existing CyberArk customers.[11]
Not stated on its pages
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: listed, seen October 24, 2026[14]
  • G2: listed, seen November 10, 2026[5]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, the company sells mainly to organizations that want to secure human, machine and agentic identities on one platform. It names customers such as a group of dental practices, a government services organization and an organization with vault sprawl to control. Its pages address existing CyberArk customers moving to Idira.From its own pages, Sonrai sells mainly to enterprises of all sizes that run on AWS, Azure, and Google Cloud platforms. Deployment is described as covering agents, humans, and machines. Banks in the US and Canada use Sonrai to secure their cloud, alongside customers from other highly regulated industries. The customers described include a financial services company providing insurance, investment, and wealth management products and services. The customers described include a global fuel provider. One described customer operating model bridges operations between cloud, security, audit, and DevOps teams.
Last verified
September 27, 2026September 27, 2026

Where they overlap

  • CyberArk and Sonrai are both filed under Non-human identity security.

Where they differ, field by field

  • CyberArk's primary category is Privileged access management; Sonrai's is Cloud identity entitlements (CIEM).
  • CyberArk is also filed under Identity governance and administration. Sonrai is also filed under Cloud security posture management.
  • CyberArk lists Modern PAM, Secrets Management and Agentic identity security. Sonrai lists Cloud Permissions Firewall.
  • CyberArk is headquartered in Petach-Tikva, Israel.
  • CyberArk was founded in 1999.
  • CyberArk is owned by Palo Alto Networks, since 2026.
  • CyberArk publicly names Northern Trust, Healthfirst, Carnival Corporation, Aflac and Webster Bank.

What it sells: CyberArk

What Modern PAM does[12]
Modern PAM provides discovery with continuous visibility and AI-driven analytics. It eliminates always-on standing privileges. A unified command center streamlines deployment through automation and embeds threat detection directly into privileged workflows.
What Secrets Management does[1][3][12]
The Idira platform includes discovery, risk analytics and modern secrets management. It includes governance and reporting for all vaults and workloads.
What Agentic identity security does[12]
Idira secures agentic identities alongside human and machine identities. Machine and agentic identities are often referred to as nonhuman identities.

What it sells: Sonrai

What Cloud Permissions Firewall does[2][3][4][6][8]
The Cloud Permissions Firewall removes dangerous permissions before an attack can use them. Policies are built from usage data, and anything in use is exempted before a policy is written.

Questions about CyberArk and Sonrai

What do CyberArk and Sonrai sell?
CyberArk sells Modern PAM, Secrets Management and Agentic identity security. Sonrai sells Cloud Permissions Firewall.
Are CyberArk and Sonrai in the same category?
They share Non-human identity security. CyberArk's primary category is Privileged access management and Sonrai's is Cloud identity entitlements (CIEM).
Where are CyberArk and Sonrai headquartered?
CyberArk is headquartered in Petach-Tikva, Israel.
When were CyberArk and Sonrai founded?
CyberArk was founded in 1999.
Who owns CyberArk and Sonrai?
CyberArk is owned by Palo Alto Networks, since 2026.
Which customers do CyberArk and Sonrai name?
CyberArk publicly names Northern Trust, Healthfirst, Carnival Corporation, Aflac and Webster Bank.
Who are CyberArk and Sonrai sold to?
From its own pages, the company sells mainly to organizations that want to secure human, machine and agentic identities on one platform. From its own pages, Sonrai sells mainly to enterprises of all sizes that run on AWS, Azure, and Google Cloud platforms.
What have CyberArk and Sonrai announced recently?
June 2, 2026: Palo Alto Networks reported fiscal third quarter 2026 revenue of $3.0 billion, including $388 million from CyberArk and Chronosphere combined.

About CyberArk

CyberArk sells the Idira Identity Security Platform, which brings together modern privileged access management (PAM), machine identity security and agentic identity security.[12]

The page says that legacy identity solutions were built for yesterday's problems, when elevated privileges were reserved for a select few. Idira is presented as a platform that extends privilege control to every identity in order to minimize attack surface.[12]

Idira secures human, machine and agentic identities. The platform is described as a unified control plane that discovers risk, applies privilege dynamically and governs the full lifecycle from first access to final session. The pages say one part of the platform covers modern privileged access, endpoint and identity governance needs, another covers every machine identity from secrets to workloads, and another discovers, controls and governs agentic identities.[3][12]

On the human side, the pages say modern PAM provides discovery with continuous visibility and AI-driven analytics. It also provides dynamic privileged access that eliminates always-on standing privileges. A unified command center streamlines deployment through automation and embeds threat detection directly into privileged workflows.[3][12]

On the nonhuman side, the pages say machine and agentic identities are often referred to as nonhuman identities. The Idira platform includes discovery, risk analytics and modern secrets management, with governance and reporting for all vaults and workloads. Customer quotes on the pages mention Idira Privileged Access Manager, Idira Secrets Hub and Certificate Manager.[3][12]

For zero trust, the pages say the platform enforces least privilege and secures access for human, machine and agentic identities across any device. Privilege controls are used to grant access for just the right amount of time, and the platform continuously monitors threats so organizations can adjust controls based on risk.[12]

Idira is described as built on CyberArk's legacy and powered by Palo Alto Networks. Existing CyberArk customers can continue to use the platform as they always have, with a new logo and design. The pages say that over time customers will be able to use cross-platform capabilities across the Palo Alto Networks product portfolio.[2][12]

The pages name customers including an organization securing access to clinical resources for over 900 dental practices, a government services organization implementing PAM as a service, and an organization deploying Idira to centralize secrets and control vault sprawl.[12][13]

CyberArk on the record

Sources

CyberArk full record

  1. [1]Palo alto networks completes acquisition of cyberark to secure the ai eraPalo Alto Networks · paloaltonetworks.com · published February 11, 2026 · Tier A
  2. [2]CyberArk is now Idira Frequently Asked QuestionsCyberArk (Idira Team) · community.cyberark.com · published September 21, 2026 · Tier A
  3. [3]IdiraPalo Alto Networks · paloaltonetworks.com · undated page, accessed September 27, 2026 · Tier A
  4. [4]Zk2532806CyberArk Software Ltd. via SEC EDGAR · sec.gov · undated page, accessed May 1, 2025 · Tier A
  5. [5]Northern trustPalo Alto Networks · paloaltonetworks.com · undated page, accessed October 10, 2026 · Tier A
  6. [6]HealthfirstPalo Alto Networks · paloaltonetworks.com · undated page, accessed October 10, 2026 · Tier A
  7. [7]Carnival corporationPalo Alto Networks · paloaltonetworks.com · undated page, accessed October 10, 2026 · Tier A
  8. [8]AflacPalo Alto Networks · paloaltonetworks.com · undated page, accessed October 10, 2026 · Tier A
  9. [9]Webster bankPalo Alto Networks · paloaltonetworks.com · undated page, accessed October 10, 2026 · Tier A
  10. [10]Palo alto networks reports fiscal third quarter 2026 financial resultsPalo Alto Networks · paloaltonetworks.com · published June 2, 2026 · Tier A
  11. [11]Palo alto networks introduces idira the next generation identity security platform built for the ai enterprisePalo Alto Networks · paloaltonetworks.com · published May 12, 2026 · Tier A
  12. [12]Idira | The Identity Security Platform - Palo Alto NetworksCyberArk · undated page, accessed October 24, 2026 · Tier A
  13. [13]CyberArk Introduces First Identity Security Solution Purpose-Built to Protect AI Agents with Privilege ControlsBusiness Wire · published November 4, 2025 · Tier A
  14. [14]Palo Alto Networks (CyberArk) Reviews - GartnerGartner Peer Insights · undated page, accessed October 24, 2026 · Tier C

Sonrai full record

  1. [1]sonraisecurity.comSonrai · sonraisecurity.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Cloud permissions firewallSonrai · sonraisecurity.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]Cloud Identity and Access Management IAM Solution Platform - SonraiSonrai · undated page, accessed October 28, 2026 · Tier A
  4. [4]Customer Product Email Subscription | SonraiSonrai · undated page, accessed October 28, 2026 · Tier A
  5. [5]Sonrai Security Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 28, 2026 · Tier C
  6. [6]Sonrai Company Story - Enterprise IAM & PAM Cloud SecuritySonrai · undated page, accessed November 10, 2026 · Tier A
  7. [7]Why Choose Sonrai for Cloud Security & Identiy Access Management - SonraiSonrai · undated page, accessed November 10, 2026 · Tier A
  8. [8]Cloud IAM & PAM Pricing | Sonrai Security - SonraiSonrai · undated page, accessed November 10, 2026 · Tier A
  9. [9]Case Study: Fortune 100 Insurance CompanySonrai · undated page, accessed November 10, 2026 · Tier A
  10. [10]Case Study: World Fuel ServicesSonrai · undated page, accessed November 10, 2026 · Tier A
  11. [11]Case Study: Top 5 Canadian Bank - Sonrai | Enterprise Cloud Security PlatformSonrai · undated page, accessed November 10, 2026 · Tier A
  12. [12]Case Study: Top 10 US Bank - Sonrai | Enterprise Cloud Security PlatformSonrai · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.