Zilla Security
Zilla Security is an identity security company providing a modern Identity Governance Automation (IGA) SaaS platform.
Est 2019|Valuation $175M|Raised $17.6M
Published Sep 26, 2026
Zilla maintains a public changelog and product updates area indicating ongoing integration updates and product changes (including branding reflecting acquisition). This shows active development; buyers should confirm:
No explicit public scale limits were identified. Buyers should validate performance and scale characteristics during evaluation, such as:
Public churn commentary specific to Zilla is limited. Hypotheses to validate with references:
From vendor positioning and community comments:
Zilla published a 2025 survey report with findings including low levels of full automation, integration complexity identified as a major blocker, and high prevalence of user access reviews.
Critical evaluation:
Indicative fit (to validate):
Common fits where audit and access reviews are frequent:
Zilla’s site lists customer logos (for example, L’Oreal, Linux Foundation, Pax8) described as customers; procurement teams should validate logo usage and the scope of deployments.
Get a comprehensive analysis of Zilla Security including market position, competitive landscape, adoption trends, and peer benchmarks.
Download full report →Organizations that need extensive, independently verifiable review volume and public references at scale. Zilla has limited review presence on major third-party review platforms, which increases diligence workload.
Organizations that require complex, multi-stage signoff flows with heavy workflow customization. Public commentary indicates potential limitations in advanced workflow depth for access reviews.
Procurement processes that require publicly available, pre-validated compliance certifications (for example, SOC 2 Type II or ISO 27001) without the use of an NDA to access reports. If the vendor does not publish these artifacts, qualification can be slower.
Organizations standardizing on a single-vendor identity suite (for example, Microsoft Entra) and seeking minimal third-party tooling. Native governance capabilities within a primary vendor ecosystem may be preferred in those cases.
Environments that require mature legacy IGA capabilities for highly regulated or complex on-premise systems. Some established vendors may better match those requirements despite potentially higher implementation complexity.
A key limitation in evaluating Zilla is the low review volume on major review platforms:
Given low sample sizes on these platforms, qualitative feedback and reference checks are positioned as more important than aggregated star averages.
Vendor-provided testimonial (attributed, limited verifiability):
Community anecdotal references (public forums):
What these positive comments might indicate if representative:
Capterra reviewer snippet suggests a desire for additional workflow capabilities, for example richer signoff flows within access reviews.
Community discussion among identity-management professionals suggests newer platforms may be effective for basic reviews in cloud/API-first environments, which could imply limitations in more complex legacy or on-premises scenarios.
Interpreting the negatives:
Zilla has published outcomes such as faster deployments, reduced effort for access reviews, and fewer service tickets for provisioning in vendor materials and acquisition-related communications.
Critical evaluation:
Zilla Security is a cloud-first Identity Governance & Administration (IGA) platform that focuses on automating:
Zilla describes itself as a modern IGA platform, stating shorter deployment times compared with legacy IGA suites and increased use of automation and AI (notably labeled "AI Profiles") to reduce manual work involved in role and entitlement modeling and certification campaigns.
Important context: Zilla Security was acquired by CyberArk in February 2025 for a reported cash consideration plus potential earn-out. Buyers should evaluate Zilla both as a standalone product and as a component of a broader platform roadmap within CyberArk (and note that CyberArk was later acquired by Palo Alto Networks in early 2026, which may influence packaging and long-term direction).
Based on Zilla’s messaging and third-party coverage, the target market appears to be:
Zilla emphasizes shorter time to deployment (weeks rather than months), integration breadth, and reduced operational burden for access reviews and provisioning.