Product

Idira (CyberArk)

CyberArk is now Idira, after Palo Alto Networks acquired CyberArk and rebranded the platform in 2026. The technology and module names are unchanged. Our practice leads with machine identity and privileged access, the two areas FM invests in most, then the secrets and certificate work that sits underneath them.

Machine Identity

Secrets, certificates, and workload identities, the non-human identities that now outnumber people many times over. Idira brings them under one governed control plane: discover what exists, give each a short-lived and scoped identity, and rotate credentials automatically.

Privileged Access Manager

Vault, rotate, isolate, and record privileged human access for administrators and systems across on-premises, multi-cloud, and hybrid infrastructure. The cornerstone of the practice.

Secrets Manager

Centrally stores, rotates, and controls secrets, API keys, and credentials used by applications, scripts, and CI/CD pipelines. The entry point into non-human identity.

Certificate Manager

Discovers, issues, and automatically renews TLS and machine certificates across the enterprise, so expiry outages and untrusted certificates stop happening.

Workload Identity Manager

Issues short-lived, automatically validated identities to cloud-native workloads using the open SPIFFE standard, replacing long-lived hard-coded secrets.

Vendor PAM

Gives third-party vendors and external admins secure, monitored privileged access, without VPNs, agents, or shared passwords.