Palo Alto Networks, delivered by an identity-security partner
Palo Alto Networks is the platform enterprises consolidate onto: network security in Strata, cloud and secure access in Prisma, security operations in Cortex, and — since the CyberArk acquisition completed in February 2026 — identity. We are a certified Palo Alto services partner with years of hands-on privileged access delivery behind us, which means we lead with identity and connect it to the rest.
Privileged access is now a pillar of a consolidation platform rather than a standalone purchase.
Identity security, now part of the platform
Palo Alto completed its acquisition of CyberArk on 11 February 2026, and the identity portfolio now carries the IDIRA name. For most organizations nothing changed operationally: the components are the same, and existing deployments carry on. What changed is that privileged access is now a pillar of a consolidation platform rather than a standalone purchase, which matters if you are already consolidating onto Palo Alto for network and security operations.
This is our home ground. We deploy and operate the identity-security platform and extend privileged protection across human, machine and AI-agent identities. See CyberArk implementation for that work in detail, and PAM implementation for what an engagement involves.
The rest of the platform
Prisma Access and SASE
Prisma Access delivers secure access service edge for a workforce that is no longer in one building: security enforced at the edge, wherever the user is, instead of backhauling traffic to a data center so a firewall can look at it. We stand it up and wire it into your identity controls, so access decisions follow the user rather than the IP address. That integration is the part most deployments skip, and it is the part that makes SASE worth having — a policy that cannot see who the user is falls back to trusting the network. Prisma Cloud secures cloud workloads and posture alongside it.
Cortex XSIAM and security operations
Cortex unifies detection and response — XSIAM and XDR — into one security operations platform. We feed identity and access signals into it, because credential-based threats are what most real intrusions run on, and they surface fastest when identity telemetry sits in the same place as everything else. A privileged session in Cortex means something; a privileged session in a log file nobody reads does not. This pairs with our managed SOC services where you want the watching done for you.
Strata and next-generation firewalls
Strata is the network security family built on Palo Alto's next-generation firewalls. We help deploy and tune Strata policy so the network enforces identity-aware least privilege rather than IP rules alone: who is connecting, from what device, to which application, rather than which subnet is talking to which port.
What being a services partner means
We are a certified Palo Alto services partner. That means we deploy, integrate and operate the platform. It does not mean we resell the licenses, which is a different relationship from the one we hold with CyberArk and Keeper, and worth being plain about.
- Identity-first delivery. We lead with the identity pillar because it is our core practice, then connect the rest around it.
- Certified on the platform. Services certification held, with CyberArk CDE depth behind the identity half.
- Integrated, not installed. Access context flowing between the pillars is the whole point of consolidating onto one platform. Wiring that is the work, and it is IAM integration work.
- Operated afterwards. Day-two operations as managed IAM services or a managed SOC engagement.
Common questions about Palo Alto delivery
Yes, a certified services partner. We deploy, integrate and operate the platform. We are not a Palo Alto license reseller, which is a different relationship from the one we hold with CyberArk and Keeper.
Operationally, very little. The acquisition completed on 11 February 2026, the identity portfolio now carries the IDIRA name, and the components are unchanged. Existing deployments carry on as before. What it changes is the buying picture: privileged access is now part of a consolidation platform rather than a standalone purchase.
Identity is where we lead and where our depth is. We also deploy and tune Strata policy, stand up Prisma Access, and feed identity signals into Cortex. What we will not do is pretend a network security specialist and an identity specialist are the same thing — where an engagement needs deep network work, we say so.
Yes, with the identity integration that makes it worth having. Prisma Access enforces policy at the edge; that policy is only as good as the identity signals feeding it, which is the part we care most about getting right.
Yes, as part of managed IAM services for the identity side, or a managed SOC engagement where Cortex is carrying detection.
Go deeper
CyberArk vs Delinea: What Changes Once You Actually Deploy Them
Most CyberArk and Delinea comparisons are written by CyberArk or by Delinea. Here is the version from people who deploy privileged access for a living.
Oct 14, 2026
Identity Security Posture Management: What ISPM Is and Whether You Need It
Owning PAM and IGA is not the same as knowing your identity risk. What identity security posture management actually measures.
Jul 27, 2026
AI Agents Are Privileged Users: How to Govern Agent Identities With the PAM You Already Run
An AI agent is a service account that makes its own decisions. Most of what you need to control it already exists — and the part that is genuinely new is smaller than the marketing suggests.
Sep 30, 2026Talk to us about your Palo Alto deployment
A free consultation covers what you run today, what you are consolidating onto and where identity fits. You get the findings in writing.