NewCore vs Idira
| Criterion | NewCore | Idira | Diff | NewCore reason | Idira reason |
|---|---|---|---|---|---|
| Total | 8.70 | 6.50 | +2.20 | Position 1 | Position 7 |
| Agent identity and ownership (20) | 10 | 5 | +5 | Every agent is linked to an accountable owner in an identity graph that resolves a person's accounts across identity providers, directories and HR systems. nc-discover | Agents are registered to receive an identity, but owner mapping was not found. id-docs |
| Credential model (20) | 9 | 8 | +1 | Access is short-lived and task-scoped, and the agent never holds the tool's own credential. nc-secure | Zero standing privilege applies, and it obtains MCP access tokens on the agent's behalf and manages rotation. id-launch, id-docs |
| Delegation and on-behalf-of (15) | 9 | 7 | +2 | The gateway shows the agent acting on behalf of a person and keeps it within that person's permissions. nc-secure | Agent and user identity are captured for every tool call in full mode. id-docs |
| Runtime authorization and human approval (20) | 10 | 7 | +3 | Every tool call is checked by one policy engine that allows, asks or denies, and an agent can never approve its own action. nc-secure, nc-govern | The Identity Broker proxy is the enforcement point between agent and tools, but human approval was not found. id-docs |
| Discovery of unregistered agents (10) | 8 | 5 | +3 | Read-only integrations find agents without registration and trace access paths outside SSO. nc-discover | Agent-specific discovery sources were not found. id-launch |
| Standards (10) | 5 | 7 | -2 | Public material names SAML, OIDC and an MCP server registry, but not OAuth 2.1, SPIFFE or Cross App Access. nc-foundation, nc-secure | Public material names MCP, OAuth 2.1 and DCR. id-docs |
| Buying clarity (5) | 5 | 5 | 0 | There is no list price, though an AWS Marketplace listing with custom units gives a procurement path. nc-aws | It is sold as add-on licences with no public price. id-launch |
In short:NewCore scores 8.70 against 6.50 for Idira, a gap of 2.20. NewCore is ahead on ownership, credentials, delegation, runtime control and discovery. Idira is ahead on standards. They are level on buying clarity. The right pick depends on which of those criteria matters most to you.
Which should I pick?
Pick NewCore if every agent must be tied to an accountable owner. Every agent is linked to an accountable owner in an identity graph that resolves a person's accounts across identity providers, directories and HR systems.
Pick Idira if you build on open protocols such as OAuth 2.1 and SPIFFE. Public material names MCP, OAuth 2.1 and DCR.
How do their prices compare?
| Platform | Pricing as published |
|---|---|
| NewCore | No list price. NewCore sells through an AWS Marketplace listing with custom units and an upfront commitment. nc-aws |
| Idira | Add-on licences with no public price. id-launch |
Common questions
- Which is better, NewCore or Idira?
- On our rubric NewCore scores higher, 8.70 to 6.50. Idira still leads on standards.
- How are NewCore and Idira priced?
- NewCore: No list price. NewCore sells through an AWS Marketplace listing with custom units and an upfront commitment. Idira: Add-on licences with no public price.
- Do NewCore and Idira work alongside Okta or Entra?
- NewCore: Yes. NewCore states that your current identity platform keeps handling employee sign-in. Its first deployment path is called "Start alongside your identity platform", and it also works alongside an existing AI gateway. Idira: Not stated in the public material read. The Identity Broker captures agent and user identity for each tool call in full mode.
Sources
- [nc-discover] NewCore: Discover. https://newcore.com/platform/discover. Read .
- [nc-secure] NewCore: Secure. https://newcore.com/platform/secure. Read .
- [nc-govern] NewCore: Govern. https://newcore.com/platform/govern. Read .
- [nc-foundation] NewCore: Identity foundation. https://newcore.com/platform/identity-foundation. Read .
- [nc-aws] NewCore on AWS Marketplace. https://aws.amazon.com/marketplace/seller-profile?id=seller-tgpd3ujnoiz3w. Read .
- [id-docs] CyberArk Secure AI architecture docs. https://docs.cyberark.com/manage/latest/en/content/secureai/architecture.htm. Read .
- [id-launch] Palo Alto Networks introduces Idira. https://investors.paloaltonetworks.com/news-releases/news-release-details/palo-alto-networks-introduces-idira-next-generation-identity. Read .