CyberArk announced on February 13, 2025, that it was acquiring Boston-based identity-governance company Zilla Security for $165 million in cash plus a potential $10 million earn-out. That makes $175 million the maximum reported value, not a guaranteed all-cash price. The deal added cloud-oriented identity governance and administration (IGA) to CyberArk’s established privileged-access and identity-security business. By August 18, 2026, Zilla’s former website and CyberArk’s original announcement page redirected to Palo Alto Networks’ Idira identity-security platform.
The deal in one table
| Item | Reported detail |
|---|---|
| Announcement | February 13, 2025 |
| Buyer | CyberArk |
| Target | Zilla Security, a Boston identity-security company founded in 2019 |
| Upfront consideration | $165 million in cash |
| Contingent consideration | Up to $10 million tied to milestones |
| Maximum headline value | Up to $175 million |
| Products named in acquisition coverage | Zilla Comply and Zilla Provisioning |
TechCrunch reported that Zilla had raised approximately $19 million from investors including FirstMark, Pillar VC and Tola Capital. The same report said co-founders Deepak Taneja and Nitin Sonawane, together with the broader team, were expected to join CyberArk.
Why “up to $175 million” matters
The transaction had two economically different parts:
- $165 million cash: the reported upfront consideration.
- Up to $10 million earn-out: additional payment dependent on agreed milestones.
An earn-out can align founders and employees with post-closing performance or retention, but the available reporting does not establish whether any, or all, of the $10 million was ultimately paid. Investors should therefore distinguish the known cash price from the maximum possible consideration.
#1 Best Overall
- A great fit for 2-4 bedroom homes, this Alarm Kit includes one Base Station, two Keypads, eight Contact Sensors, two Motion Detectors, and one Range Extender.
- Includes an intuitive Keypad that can arm and disarm your Alarm and Contact Sensors that detect when doors or windows open.
- Choose the Ring Alarm Kit that fits your needs and detect even more with additional Alarm Sensors and accessories (sold separately) at any time.
- Receive mobile notifications when your system is triggered and monitor all your Ring devices all through the Ring app.
- More peace of mind. Subscribe to a compatible Ring Protect Plan (sold separately) to Arm your Alarm from anywhere, keep your system online if the Wi-Fi goes down, and more. Plus, get 24/7 Professional Monitoring for emergency police, fire and medical response, and more.
What Zilla Security’s IGA software did
Identity governance and administration manages the business rules around who should receive access, why they should receive it and when it should be removed. In practical terms, an IGA platform can:
- Centralize employee and contractor access requests.
- Automate joiner, mover and leaver workflows.
- Provision and deprovision accounts across cloud and SaaS applications.
- Route approvals and enforce policy conditions.
- Run periodic access certifications and reviews.
- Collect evidence for audits and compliance programs.
- Connect identity information across hybrid and multicloud environments.
Zilla was positioned as a cloud-native IGA provider rather than a conventional privileged-access-management (PAM) vendor. Its products addressed the governance and lifecycle layer surrounding ordinary workforce and third-party identities. CyberArk’s historical strength was protecting privileged accounts, credentials and sessions.
Why CyberArk wanted the combination
CyberArk could already help secure high-risk administrative access. Zilla added controls for the larger population of identities that need access approved, reviewed and removed throughout their lifecycle. Together, the capabilities support a more continuous identity-security model:
| CyberArk strength | Zilla contribution | Potential buyer value |
|---|---|---|
| Privileged-access security | Identity governance and administration | Govern ordinary and privileged access within a broader risk framework |
| Secrets and access controls | Provisioning and lifecycle automation | Reduce standing, orphaned or excessive access |
| Enterprise security platform | Cloud-native IGA workflows | Extend coverage across SaaS, hybrid-cloud and multicloud systems |
| Risk controls | Access reviews and compliance workflows | Improve auditability and least-privilege enforcement |
The strategic logic was not that IGA and PAM are identical. It was that organizations increasingly need both: governance to decide and review access, and security controls to protect sensitive access when it is used. The acquisition also fit a wider shift toward governing machine identities, secrets and other nonhuman access alongside employees.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteRank #2
- A great fit for 1-2 bedroom homes, this kit includes one base station, one keypad, four contact sensors, one motion detector, and one range extender.
- Includes an intuitive Keypad that can arm and disarm your Alarm and Contact Sensors that detect when doors or windows open.
- Choose the Ring Alarm Kit that fits your needs and detect even more with additional Alarm Sensors and accessories (sold separately) at any time.
- Receive mobile notifications when your system is triggered and monitor all your Ring devices all through the Ring app.
- More peace of mind. Subscribe to a compatible Ring Protect Plan (sold separately) to Arm your Alarm from anywhere, keep your system online if the Wi-Fi goes down, and more. Plus, get 24/7 Professional Monitoring for emergency police, fire and medical response, and more.
What the announcement did—and did not—promise
Acquisition coverage said Zilla Comply and Zilla Provisioning would continue as standalone offerings through CyberArk’s identity-security platform, with Zilla’s founders and team joining CyberArk. It did not publish a detailed integration timetable, SKU map, migration plan or feature-by-feature comparison. The announcement therefore supports the strategic direction, but not an assumption that every product, console or entitlement was immediately unified.
For buyers and investors, unresolved questions included:
- Whether the earn-out milestones were achieved.
- How Zilla functionality would be packaged and licensed.
- Which integrations and workflows would remain available under their original names.
- How existing customers would be supported during product and branding changes.
What happened to Zilla after the acquisition?
As of August 18, 2026, Zilla’s former domain redirects to Palo Alto Networks’ Idira site. CyberArk’s original acquisition announcement URL also redirects there. That means Zilla should be treated as an acquired product and team history, not as a separately marketed current vendor.
The current Idira platform overview presents the business as covering human, machine and agentic identities. Palo Alto Networks describes a platform that brings together privileged-access management, identity governance, machine-identity security, secrets management, agentic-identity security and endpoint privilege management, and states that it has more than 300 out-of-the-box integrations. Those are current vendor claims, not proof that every capability existed in Zilla’s 2025 standalone products.
Rank #3
- Simple to set up. Seriously secure - Get ready to protect right out of the box. Just plug in the Base Station, download the SimpliSafe App, place your sensors, and start protecting your home. No wiring or drilling required. Or contact SimpliSafe directly if you need help installing your system.
- 1 FREE month of professional monitoring for fast police response when you need it most. With optional monitoring services, our agents keep watch even when you can't, ready to instantly alert emergency responders. Starting at less than $1/day with no long-term contracts or hidden fees. (SimpliSafe products and professional monitoring services are only offered for sale and supported in the US)
- Complete control of your system with the SimpliSafe App - Arm, disarm and protect anytime, anywhere.
- Protection for entry points - Entry Sensors protect windows, doors, and cabinets and alert you when someone tries to enter. Customizable and can send Secret Alerts so you are quietly alerted if someone accesses private areas, without sounding an alarm.
- Blanket a whole room - Motion sensors detect motion within 35 feet, have a 90 degree field of view and get along great with pets under 60lbs. Perfect for full room coverage when placed in a corner.
The present narrative is therefore broader than the original transaction: Zilla supplied cloud-oriented IGA to CyberArk, while that capability is now presented inside a wider identity platform associated with Palo Alto Networks. Existing CyberArk customers are directed toward continuity while branding and platform positioning evolve.
What enterprise buyers should evaluate now
IGA depth
Test access requests, approval chains, automated provisioning, certifications, separation-of-duties controls, policy enforcement and compliance reporting. A broad platform description does not show how deeply each workflow is supported.
PAM integration
Ask whether privileged and ordinary identities share a risk model, whether governance events can trigger privileged-access changes, and whether separate consoles or licenses are required.
Cloud and SaaS coverage
Validate native connectors for the organization’s HR system, directories, IT-service platform, major SaaS applications, databases and cloud providers. Confirm API quality, connector maintenance and support for custom applications rather than relying only on a stated integration count.
Free tools Windows power users keep installed
One-click scans. No signup required.
Rank #4
- Like-New Ring Alarm 8-piece kit is refurbished, tested, and certified to look and work like new and comes with the same limited warranty as a new device. Like-New Amazon devices may be packaged in generic Amazon-branded boxes.
- A great fit for 1-2 bedroom homes, this kit includes one base station, one keypad, four contact sensors, one motion detector, and one range extender.
- Includes an intuitive Keypad that can arm and disarm your Alarm and Contact Sensors that detect when doors or windows open.
- Choose the Ring Alarm Kit that fits your needs and detect even more with additional Alarm Sensors and accessories (sold separately) at any time.
- Receive mobile notifications when your system is triggered and monitor all your Ring devices all through the Ring app.
Lifecycle automation
Demonstrate HR-driven onboarding and offboarding, role changes, temporary access, contractor workflows and orphaned-account detection.
Deployment and commercial model
Clarify SaaS or hybrid deployment, data residency, administrative separation, disaster recovery, implementation obligations and whether IGA, PAM, secrets, endpoint privilege and machine-identity functions are licensed separately. The Idira site uses a request-demo path and does not publish self-serve pricing.
Migration and support
Former Zilla customers should request written confirmation of the current product name, renewal route, support owner, data migration requirements, feature continuity and roadmap. Old product names should not be assumed to map directly to current SKUs.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How alternatives fit different environments
| Platform | Position to investigate | Potential limitation |
|---|---|---|
| Microsoft Entra ID Governance | Natural fit for Microsoft 365 and Azure-heavy organizations already using Entra | May be less suitable for deep standalone PAM or broad multivendor governance needs |
| Okta Identity Governance | Cloud-first workforce identity and governance for Okta-centered environments | Privileged-access, secrets and machine-identity controls may require additional products |
| SailPoint Identity Security | Specialist identity-governance depth, lifecycle management and compliance | Can require substantial implementation effort |
| Saviynt Enterprise Identity Cloud | Broad governance across applications, data and cloud environments | Evaluation and deployment may be complex for smaller teams |
| PingOne | Workforce and customer identity capabilities with governance-related options | Buyers must examine product boundaries when they need comprehensive IGA plus PAM |
Pricing and current packaging for these alternatives were not established here. The relevant comparison is capability and operating fit, not a generic claim that one vendor is best for every organization.
Best Value
- Outdoor 4 is our most affordable wireless smart security camera yet, offering up to two-year battery life for around-the-clock peace of mind. Local storage not included with Sync Module Core.
- See and speak from the Blink app — Experience 1080p HD live view, infrared night vision, and crisp two-way audio.
- Two-year battery life — Set up in minutes and get up to two years of power with the included AA Energizer lithium batteries and a Blink Sync Module Core.
- Enhanced motion detection — Be alerted to motion faster from your smartphone with dual-zone, enhanced motion detection.
- Person detection — Get alerts when a person is detected with embedded computer vision (CV) as part of an optional Blink Subscription Plan (sold separately).
What the acquisition means for investors and M&A watchers
The purchase illustrates why IGA startups can attract a larger security platform. CyberArk was buying a governance layer that could increase the value of its existing privileged-access relationships, broaden its addressable identity market and support a cloud-native product narrative. The $165 million upfront price also provides a clearer valuation reference than repeating the $175 million maximum without qualification.
However, the deal alone does not establish Zilla’s revenue, customer count, post-acquisition headcount, profitability or the return CyberArk achieved. Nor does it confirm the final earn-out payment. Those outcomes require later company filings or statements.
The Bottom Line
CyberArk’s Zilla purchase was fundamentally an IGA expansion: $165 million was reported as upfront cash, with up to $10 million more contingent on milestones. Zilla is no longer presented as a standalone vendor; its legacy is now part of the broader Idira identity-security story. Buyers should evaluate the current Idira offering and obtain written answers on packaging, migration and feature continuity rather than relying on 2025 product names.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →
