Palo Alto Networks Idira Secrets Manager review

Idira Secrets Manager from Palo Alto Networks is the enterprise option for organizations with large hybrid estates; the conjur.org project site now redirects to its product page. It stores API keys, tokens, passwords, certificates and database credentials in one place, rotates, expires and retires secrets based on policy, and gives every workload a universal cryptographic identity that can authenticate directly to cloud services and databases where they support it. You can run it as managed SaaS or self-host it in your own data center, including air-gapped environments. Access uses native application attributes and role-based controls, with tamper-resistant audit logging and a high-availability architecture. The catch for most engineering teams is the buying process: there is no published price and no free plan, and evaluation starts with a demo request. It ranks last here because small and mid-size teams can get most of what they need faster from the tools above.

Who it is for

large enterprises securing machine identities across hybrid infrastructure

Price

Pricing on request (USD check pending).

US price check pending. See the vendor pricing page.

Key features

• Centralized storage for API keys, tokens, passwords, certificates and database credentials
• Policy-based rotation, expiry and retirement of secrets
• A universal cryptographic identity for each workload
• SaaS or self-hosted deployment, including air-gapped environments
• Tamper-resistant audit and role-based access controls

Strengths and weaknesses

• Strength: Self-hosted option for strict data residency or air-gap requirements
• Strength: Identity-based access to cloud services and databases where supported
• Strength: Validated integrations for DevOps tools, CI/CD toolchains, PaaS and public clouds
• Weakness: No published prices or free plan
• Weakness: Sales-led setup through a demo request
• Weakness: Aimed at large enterprises, more than small engineering teams need

Key facts

• Deployment: SaaS or self-hosted
• Price: On request
• Free plan: No
• Scope: Cloud, on-premises and hybrid

Where it ranks

Palo Alto Networks Idira Secrets Manager is No. 10 in our Best Secrets Management Tools verdict.