{"id":528,"date":"2026-09-08T21:50:21","date_gmt":"2026-09-08T21:50:21","guid":{"rendered":"https:\/\/www.directcertify.com\/blog\/?p=528"},"modified":"2026-09-08T21:50:21","modified_gmt":"2026-09-08T21:50:21","slug":"cyberark-idira-certification-2026","status":"publish","type":"post","link":"https:\/\/www.directcertify.com\/blog\/cyberark-idira-certification-2026\/","title":{"rendered":"CyberArk Is Now Idira: What Actually Changes for Your PAM Certification in 2026"},"content":{"rendered":"<p>Palo Alto Networks folded CyberArk into a new platform called Idira on May 12, 2026. If you have spent the last few years working toward a CyberArk Defender or Sentry credential, or you are just starting to look into privileged access management as a career track, that name change alone probably raised a question the vendor&#8217;s own press materials never quite answer: what happens to the certification.<\/p>\n<p>The short version is that the brand moved faster than the exam catalog did. Pearson VUE still lists every CyberArk certification under the CyberArk name as of this writing, with the same exam codes candidates have been studying for years. But the platform underneath those exams, and the company that owns them, is not the same CyberArk it was in early 2025.<\/p>\n<p>Here is what genuinely changed, what did not, what the four certification levels actually cost and require, and whether it still makes sense to pursue one of these credentials now that Palo Alto Networks is running the show.<\/p>\n<h2>Why CyberArk Certification Searches Suddenly Spiked in 2026<\/h2>\n<p>Palo Alto Networks announced its intent to acquire CyberArk in mid 2025, a deal reported at roughly $25 billion, one of the largest acquisitions in identity security history. The deal closed in February 2026. For a few months afterward, CyberArk kept operating largely as its own brand under new ownership. That changed on May 12, 2026.<\/p>\n<ul>\n<li><strong>Mid 2025:<\/strong> Palo Alto Networks announces the CyberArk acquisition.<\/li>\n<li><strong>February 2026:<\/strong> The acquisition officially closes.<\/li>\n<li><strong>May 12, 2026:<\/strong> Palo Alto Networks launches Idira, folding CyberArk&#8217;s privileged access management technology into a single identity security platform built for &#8220;the AI enterprise.&#8221;<\/li>\n<\/ul>\n<p>Idira is not a cosmetic rename. Palo Alto Networks built it around a genuine architectural shift: a zero standing privilege model that replaces persistent access with access granted only at the moment it is needed, plus discovery and governance extended across human, machine, and AI agent identities. The company&#8217;s own launch materials cite a striking figure behind that push, machine and AI identities now outnumber human ones by 109 to 1 inside a typical enterprise, and 61% of privileged access requests are still fulfilled with standing access rather than granted on demand. Whatever you think of the branding, that is the actual problem Idira is trying to solve.<\/p>\n<h2>What Palo Alto Networks Actually Changed in the Certification Program<\/h2>\n<p>Strip away the platform name and the practical changes to CyberArk&#8217;s certification path are narrower than the acquisition headlines suggest. The one change that affects every single candidate, regardless of which level you are pursuing, has nothing to do with Idira at all.<\/p>\n<p>As of November 1, 2025, three months before the Palo Alto Networks deal even closed, CyberArk discontinued online proctoring for its certification exams entirely. Every CyberArk certification exam, from Defender through Guardian, now requires booking a physical seat at a Pearson VUE test center. There is no remote-proctored option anymore, which is a meaningful change for candidates who previously tested from home. Reporting on the rebrand also indicates certification products have been reorganized internally under a group Palo Alto Networks calls Next-Generation Trust Security, though that is an internal org chart detail more than something a candidate will notice on exam day.<\/p>\n<h2>What Stayed Exactly the Same<\/h2>\n<p>Strip out the platform branding and three things have not moved at all for anyone currently studying:<\/p>\n<ul>\n<li><strong>The engineering skills tested:<\/strong> Vault, the Password Vault Web Access console, the Central Policy Manager, and the Privileged Session Manager, the core components every CyberArk exam is built around, are unchanged in function.<\/li>\n<li><strong>The documentation location:<\/strong> official docs still live at the familiar CyberArk domain, just relabeled as Idira documentation rather than moved somewhere new.<\/li>\n<li><strong>The standing of credentials already earned:<\/strong> existing certifications remain valid on their normal recertification cycle. The rebrand affects product and platform naming, not credentials you already hold.<\/li>\n<\/ul>\n<p>More notably, the exam names and codes themselves have not been renamed to Idira branding. CyberArk Defender PAM, CyberArk Sentry, and CyberArk Guardian are still exactly what they are called on the vendor&#8217;s own certification page, with exam codes like PAM-DEF, PAM-SEN, and GUARD unchanged. Given that the Idira platform only launched in May 2026, that packaging could still shift, so it is worth checking the current exam list before you register rather than assuming this article&#8217;s snapshot will hold indefinitely.<\/p>\n<h2>The CyberArk Certification Levels Candidates Are Actually Studying For<\/h2>\n<p>CyberArk&#8217;s certification ladder runs four levels deep, and each one targets a genuinely different job function rather than just a harder version of the same test.<\/p>\n<table border=\"1\" cellpadding=\"8\" cellspacing=\"0\" style=\"border-collapse:collapse;width:100%\">\n<thead>\n<tr>\n<th>Level<\/th>\n<th>What It Validates<\/th>\n<th>Exam Fee<\/th>\n<th>Recertification<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Trustee<\/td>\n<td>Foundational understanding of CyberArk&#8217;s identity security architecture<\/td>\n<td>Not sold as a standalone public exam; typically bundled into onboarding and partner training<\/td>\n<td>N\/A<\/td>\n<\/tr>\n<tr>\n<td>Defender<\/td>\n<td>Day-to-day operation and support of a specific CyberArk solution (PAM, EPM, Secrets Manager, or Access)<\/td>\n<td>$200<\/td>\n<td>Standard cycle per solution<\/td>\n<\/tr>\n<tr>\n<td>Sentry<\/td>\n<td>Deployment, installation, and configuration of a specific CyberArk solution<\/td>\n<td>$200<\/td>\n<td>Standard cycle per solution<\/td>\n<\/tr>\n<tr>\n<td>Guardian<\/td>\n<td>Enterprise architecture and advanced technical design across the identity security portfolio<\/td>\n<td>$2,250<\/td>\n<td>24 months active maintenance<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>Trustee: The Foundational Layer Most Candidates Skip Past<\/h3>\n<p>Trustee validates basic familiarity with CyberArk&#8217;s identity security architecture before a candidate touches any specific solution. It is not sold as a standalone public exam the way the other three levels are, which is why most job postings never mention it by name, but it still shapes the baseline knowledge every higher level assumes.<\/p>\n<h3>Defender: The Level Most Working CyberArk Admins Actually Hold<\/h3>\n<p>Defender is split by solution rather than sold as one generic exam, so there is a <a href=\"https:\/\/www.directcertify.com\/cyberark\/pam-def\">Defender exam for Privileged Access Management<\/a>, a separate one for Endpoint Privilege Manager, and another for Secrets Manager, each with its own exam code and content outline. DirectCertify&#8217;s own PAM-DEF practice set, for comparison, covers 239 questions across a 120 minute format and was last refreshed on August 26, 2026, evidence that the underlying exam content is still being actively maintained well after the Idira launch rather than left to go stale during the transition.<\/p>\n<h3>Sentry: The Deployment and Configuration Track<\/h3>\n<p>Sentry mirrors Defender&#8217;s per-solution structure but shifts the questions from daily operation toward deployment, installation, and configuration work, the kind of exam a consultant setting up a new CyberArk environment for a client would sit rather than the person who just operates it afterward.<\/p>\n<h3>Guardian: The Architecture-Level Credential<\/h3>\n<p>Guardian is the outlier on cost and scope, priced at more than ten times a single Defender or Sentry exam and requiring 24 months of active maintenance to keep. It tests the ability to design an organization&#8217;s broader privileged account security strategy rather than operate one component of it, which is why it draws far fewer candidates than the two levels below it.<\/p>\n<p>Separately, the CyberArk Certified Delivery Engineer track shows up on DirectCertify&#8217;s catalog as a recertification exam (PAM-CDE-RECERT) and sits somewhat apart from these four core levels. Career guides call it out specifically as a credential that commands its own salary premium, covered in the next section.<\/p>\n<h2>What a CyberArk Certification Is Actually Worth in 2026<\/h2>\n<p>Privileged access management has become one of the higher paid specialties inside identity and access management generally, and the acquisition has not slowed hiring for it.<\/p>\n<ul>\n<li>Mid-level identity and access management engineers typically earn between $110,000 and $150,000 in base salary in 2026, according to <a href=\"https:\/\/startwithidentity.com\/guides\/career\/iam-salary-guide\/\" target=\"_blank\" rel=\"noopener\">Start with Identity&#8217;s 2026 IAM salary guide<\/a>, with senior engineers commonly landing between $150,000 and $200,000.<\/li>\n<li>That same guide places PAM specifically at the top of the IAM pay scale, alongside cloud identity and entitlement management and identity threat detection work, because the risk profile is high and the qualified talent pool stays small.<\/li>\n<li>Demand for PAM specialists is projected to keep growing at roughly 25% per year, according to <a href=\"https:\/\/iamroadmap.com\/article\/pam-specialist-career-guide\/\" target=\"_blank\" rel=\"noopener\">IAM Roadmap&#8217;s PAM career guide<\/a>, which also notes that holding a CyberArk Certified Delivery Engineer credential or similar vendor certification can lift a candidate&#8217;s market value by 15 to 25%.<\/li>\n<\/ul>\n<p>None of those figures guarantee any individual outcome, and salary data always tracks a role rather than a single certification. What they do show is that employers are not treating the CyberArk-to-Idira transition as a reason to pause PAM hiring, which lines up with what <a href=\"https:\/\/www.paloaltonetworks.com\/company\/press\/2026\/palo-alto-networks-introduces-idira--the-next-generation-identity-security-platform-built-for-the-ai-enterprise\" target=\"_blank\" rel=\"noopener\">Palo Alto Networks&#8217; own Idira announcement<\/a> describes as an identity security gap most organizations still have not closed.<\/p>\n<h2>Should You Still Pursue a CyberArk Certification in 2026?<\/h2>\n<p>The acquisition changes who owns the exam, not whether the skill is in demand. A few things are worth weighing before you book a test center seat.<\/p>\n<ul>\n<li><strong>If you are new to PAM entirely,<\/strong> Defender for the specific solution your employer runs, usually PAM, is the right starting point. It is the credential that actually maps to day-to-day operational work most job postings describe.<\/li>\n<li><strong>If you already operate CyberArk day to day and want to move into implementation work,<\/strong> Sentry is the natural next step, since it assumes the same solution knowledge Defender tests but shifts the focus to deployment and configuration.<\/li>\n<li><strong>If you are aiming for architecture-level roles,<\/strong> Guardian is a real jump in both cost and scope, and its 24-month active maintenance requirement means it is a commitment, not a one-time credential.<\/li>\n<li><strong>If your organization already uses CyberArk in production,<\/strong> the rebrand is mostly irrelevant to your study plan, since the components and skills tested have not changed.<\/li>\n<li><strong>If you are choosing a PAM vendor to specialize in from scratch,<\/strong> CyberArk&#8217;s installed base and the breadth of its now-combined portfolio with Palo Alto Networks still make it one of the more defensible bets in the category, even with the naming still in flux.<\/li>\n<\/ul>\n<p>Palo Alto Networks itself went through its own certification restructuring recently, retiring PCNSE and PCNSA in favor of a role-based exam framework, covered in <a href=\"https:\/\/www.directcertify.com\/blog\/palo-alto-networks-retired-pcnse-and-pcnsa-certifications-what-replaces-them-in-2026\/\">DirectCertify&#8217;s look at that transition<\/a>, so the company is no stranger to reshuffling a certification catalog after a major change. IBM went through something similar after absorbing HashiCorp, a case examined in <a href=\"https:\/\/www.directcertify.com\/blog\/hashicorp-certification-ibm-acquisition-2026\/\">this breakdown of what that acquisition changed and did not change<\/a> for Terraform and Vault candidates. The pattern across both is consistent: the underlying technical skill stays valuable, and the certification catalog eventually catches up to the corporate paperwork rather than the other way around. Security professionals building out a broader identity portfolio alongside CyberArk credentials often pair them with something like CISSP, which <a href=\"https:\/\/www.directcertify.com\/blog\/isc2-certification-changes-2026-ccsp-cc-cissp\/\">ISC2 updated its own outline for earlier this year<\/a>.<\/p>\n<p>DirectCertify is an independent certification prep provider and is not affiliated with, endorsed by, or sponsored by CyberArk, Palo Alto Networks, or the Idira platform. Exam codes, prerequisites, and pricing for identity security credentials are moving targets during a brand transition like this one, so confirm the current details directly on <a href=\"https:\/\/www.pearsonvue.com\/us\/en\/cyberark.html\" target=\"_blank\" rel=\"noopener\">Pearson VUE&#8217;s official CyberArk certification page<\/a> before you register for anything.<\/p>\n<h2>Common Questions About CyberArk Certification Under Idira<\/h2>\n<details style=\"border:1px solid #e0e0e0;border-radius:8px;margin-bottom:10px;padding:0;overflow:hidden\">\n<summary style=\"cursor:pointer;padding:14px 18px;background:#f5f7fa;font-weight:600\">Is CyberArk certification now called Idira certification?<\/summary>\n<div style=\"padding:14px 18px;border-top:1px solid #e0e0e0\">Not as of this writing. Pearson VUE&#8217;s official CyberArk certification page still lists exams under the CyberArk name, with codes like PAM-DEF, PAM-SEN, and GUARD unchanged. Since the Idira platform only launched May 12, 2026, that naming could still evolve, so check the current exam list before registering.<\/div>\n<\/details>\n<details style=\"border:1px solid #e0e0e0;border-radius:8px;margin-bottom:10px;padding:0;overflow:hidden\">\n<summary style=\"cursor:pointer;padding:14px 18px;background:#f5f7fa;font-weight:600\">Can I still take a CyberArk certification exam online?<\/summary>\n<div style=\"padding:14px 18px;border-top:1px solid #e0e0e0\">No. Online proctoring was discontinued on November 1, 2025, before the Palo Alto Networks acquisition even closed. Every CyberArk certification exam now requires an in-person visit to a physical Pearson VUE test center.<\/div>\n<\/details>\n<details style=\"border:1px solid #e0e0e0;border-radius:8px;margin-bottom:10px;padding:0;overflow:hidden\">\n<summary style=\"cursor:pointer;padding:14px 18px;background:#f5f7fa;font-weight:600\">Will my existing CyberArk certification still be valid after the Idira rebrand?<\/summary>\n<div style=\"padding:14px 18px;border-top:1px solid #e0e0e0\">Yes. Credentials already earned stay valid on their normal recertification schedule. The rebrand changed product and platform naming, not the standing of certifications candidates already hold.<\/div>\n<\/details>\n<details style=\"border:1px solid #e0e0e0;border-radius:8px;margin-bottom:10px;padding:0;overflow:hidden\">\n<summary style=\"cursor:pointer;padding:14px 18px;background:#f5f7fa;font-weight:600\">How much does it cost to get CyberArk certified in 2026?<\/summary>\n<div style=\"padding:14px 18px;border-top:1px solid #e0e0e0\">Defender and Sentry level exams are $200 each per solution. Guardian, the top architecture-level credential, costs $2,250 and requires 24 months of active maintenance to stay certified. None of those figures include travel or test center costs now that online proctoring is gone.<\/div>\n<\/details>\n<details style=\"border:1px solid #e0e0e0;border-radius:8px;margin-bottom:10px;padding:0;overflow:hidden\">\n<summary style=\"cursor:pointer;padding:14px 18px;background:#f5f7fa;font-weight:600\">Do I need Defender before I can sit the Sentry exam?<\/summary>\n<div style=\"padding:14px 18px;border-top:1px solid #e0e0e0\">CyberArk does not enforce a hard prerequisite gate between the two, but Sentry assumes the same working knowledge of the solution that Defender tests, just applied to deployment and configuration instead of daily operation. Most candidates are better prepared for Sentry after real Defender-level experience.<\/div>\n<\/details>\n<details style=\"border:1px solid #e0e0e0;border-radius:8px;margin-bottom:10px;padding:0;overflow:hidden\">\n<summary style=\"cursor:pointer;padding:14px 18px;background:#f5f7fa;font-weight:600\">Is privileged access management still a good specialty to certify in given the acquisition?<\/summary>\n<div style=\"padding:14px 18px;border-top:1px solid #e0e0e0\">Career data suggests yes. PAM sits at the top of the identity and access management pay scale, demand is projected to keep growing around 25% a year, and a CyberArk Certified Delivery Engineer credential specifically has been shown to lift market value by 15 to 25%. The acquisition changed CyberArk&#8217;s ownership, not the underlying demand for the skill.<\/div>\n<\/details>\n","protected":false},"excerpt":{"rendered":"<p>Palo Alto Networks folded CyberArk into Idira in 2026. Here&#8217;s what actually changed in the CyberArk certification program, and what didn&#8217;t.<\/p>\n","protected":false},"author":3,"featured_media":529,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rank_math_title":"CyberArk Certification in 2026: The Idira Rebrand Explained","rank_math_description":"Palo Alto Networks folded CyberArk into Idira in 2026. Here's what actually changed in the CyberArk certification program, and what didn't.","rank_math_focus_keyword":"CyberArk certification","footnotes":""},"categories":[877],"tags":[],"class_list":["post-528","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cyberark"],"_links":{"self":[{"href":"https:\/\/www.directcertify.com\/blog\/wp-json\/wp\/v2\/posts\/528","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.directcertify.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.directcertify.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.directcertify.com\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.directcertify.com\/blog\/wp-json\/wp\/v2\/comments?post=528"}],"version-history":[{"count":1,"href":"https:\/\/www.directcertify.com\/blog\/wp-json\/wp\/v2\/posts\/528\/revisions"}],"predecessor-version":[{"id":530,"href":"https:\/\/www.directcertify.com\/blog\/wp-json\/wp\/v2\/posts\/528\/revisions\/530"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.directcertify.com\/blog\/wp-json\/wp\/v2\/media\/529"}],"wp:attachment":[{"href":"https:\/\/www.directcertify.com\/blog\/wp-json\/wp\/v2\/media?parent=528"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.directcertify.com\/blog\/wp-json\/wp\/v2\/categories?post=528"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.directcertify.com\/blog\/wp-json\/wp\/v2\/tags?post=528"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}