CyberArk
CyberArk provides an identity security platform applying intelligent privilege controls to human, machine, and AI identities across hybrid and multi-cloud environments, serving nearly 10,000 organizations including over 55% of Fortune 500 companies via subscription and channel sales.
- Company typePrivate
- Founded1999
- HeadquartersNewton, United States
- Headcount1,001–5,000
- GTM typeB2B
- OfferingSoftware
What CyberArk does
CyberArk, founded in Israel in 1999 and headquartered in Newton, MA with significant operations in Tel Aviv, is a security company specializing in intelligent privilege controls applied across the full identity lifecycle. The company's flagship offering is the CyberArk Identity Security Platform, a unified architecture that consolidates privileged access management (PAM), access management, secrets management, certificate management, endpoint privilege security, and identity governance and administration (IGA) into a single enforcement layer. The platform is built around Zero Standing Privilege (ZSP) and Just-In-Time (JIT) access models, with continuous identity discovery, AI-driven session auditing via CORA AI, and Identity Threat Detection and Response (ITDR) capabilities. It serves a customer base of nearly 10,000 organizations across 110 countries, including more than 55% of Fortune 500 and 35% of Global 2000 companies, spanning financial services, healthcare, government, manufacturing, and DevOps/cloud-native segments.
CyberArk monetizes primarily through recurring subscription contracts — approximately 80% of total revenue was subscription and support at the time of acquisition — with both SaaS and term-licensed on-premises/hybrid deployment options, supplemented by professional services, training, and certification revenue. Distribution combines a direct enterprise field-sales motion with a partner ecosystem of more than 200 alliance partners and 300+ pre-built integrations spanning AWS, Microsoft, VMware, CrowdStrike, ServiceNow, SAP, and others. The platform is sold via annual and multi-year enterprise agreements with quote-based pricing for larger deployments, alongside self-service 30-day trials and marketplace listings on AWS. Reported FY2025 revenue was $1.3 billion against a $131.2 million operating loss, with CyberArk being acquired by Palo Alto Networks in February 2026 for approximately $25 billion and subsequently rebranded as Idira within Palo Alto Networks' portfolio.
CyberArk firmographics
Firmographics- Name
- CyberArk
- Legal name
- CyberArk Software Ltd.
- Website
- https://cyberark.com
- Company type
- Private
- Founded year
- 1999
- Operating status
- Acquired
- Headcount range
- 1,001–5,000 employees
- Short description
- CyberArk provides an identity security platform applying intelligent privilege controls to human, machine, and AI identities across hybrid and multi-cloud environments, serving nearly 10,000 organizations including over 55% of Fortune 500 companies via subscription and channel sales.
- Ownership category
- akta.pro rank
CyberArk industry classification
Industry- Product category
- Identity Security
- NAICS
- Software Publishers (5132)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Secrets Management & Machine Identity (API keys, certificates, workload identity) (HDAEAJAJ)
- akta.pro secondary industries
- Identity & Access Security Services (IAM, PAM, Zero Trust) (BPAKAHAI), Secrets Management (Passwords, API Keys, Tokens) (HDADAFAD)
Keywords
Where CyberArk is headquartered
LocationHeadquarters
- HQ city
- Newton
- HQ country
- United States
- HQ region
- North America
Offices2 records
Markets served
CyberArk business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Subscription and Support Revenue: CyberArk generates the majority of its revenue (~80% of total revenue at time of acquisition by Palo Alto Networks) from recurring subscriptions and support services. Subscription revenue is derived from the Identity Security Platform delivered as SaaS, along with term licenses for on-premises and hybrid deployments. Annual and multi-year subscription contracts are the primary commercial model.
- Professional Services: CyberArk offers professional services including Design & Deployment Services, Red Team Services, Remediation Services, Strategic Consulting Services, and Cloud Native Consulting to support implementation and optimization of the Identity Security Platform.
- Training and Certification: CyberArk University provides training and certification programs for customers and partners to build expertise in identity security, privileged access management, and related technologies.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Monthly | Standard SSO tier provides basic single sign-on, adaptive access management, directory services, and user self-service features. |
| Per seat | Monthly | Adaptive Access Management add-on provides enhanced contextual access controls with location, device, network, time-based, and user behavior risk context. |
Go-to-market motion2 records
Distribution channels5 records
Marketing channels9 records
CyberArk product offering
Product offeringCore offering
CyberArk sells an enterprise Identity Security Platform (now marketed as Idira under Palo Alto Networks) that secures human, machine, and AI identities through privileged access management, endpoint privilege security, workforce and customer identity (SSO, adaptive MFA, passwordless), secrets and certificate management, and identity governance. The platform is offered via SaaS, on-premises, and hybrid deployments and is complemented by professional services (Design & Deployment, Red Team, Remediation, Strategic Consulting, Cloud Native) and training/certification through CyberArk University.
Product overview
CyberArk operates as a platform-plus-modules architecture offering the CyberArk Identity Security Platform (now integrated into Palo Alto Networks' Idira brand) that secures every identity—human, machine, and AI—across hybrid, SaaS, and multi-cloud environments. The platform comprises multiple integrated modules including Access Management (Workforce Identity, Customer Identity, B2B Identity with SSO, Adaptive MFA, Passwordless, Workforce Password Management, Secure Web Sessions), Privileged Access (Privileged Access Manager, Endpoint Privilege Manager, Vendor Privileged Access Manager, Secure Cloud Access), Machine Identity Security (Secrets Management, Certificate Management, Workload Identity), Modern IGA (Identity Governance Automation, Lifecycle Management, User Access Review), and the AI-powered CORA AI engine. The platform is built on intelligent privilege controls with Zero Standing Privileges (ZSP) and just-in-time access, unified under a single Control Center for administration. Palo Alto Networks acquired CyberArk in February 2026 for approximately $25 billion and rebranded the combined identity security capabilities under the Idira platform name.
Differentiator
Problem solved
Functional benefit
Brands
- Idira: Next-generation identity security platform launched by Palo Alto Networks following the CyberArk acquisition, designed to secure human, machine, and AI agent identities for the AI enterprise era.
Products and services
- CyberArk Identity Security Platform
Quantifiable outcome
- 87% of organizations experienced at least two successful identity-related breaches, highlighting the critical need for identity security
- +8 more outcomes
Companies that use CyberArk
Customer profileNamed customers10 records
Segments8 records
Ideal customer profiles4 records
CyberArk technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration43 records
AI capability15 records
Feature8 records
CyberArk partnerships and signals
Strategic signalPartnerships
16 partnerships are on record, tiered core and flagship.
- Palo Alto NetworkscorePalo Alto Networks completed its acquisition of CyberArk for approximately $25 billion in February 2026. CyberArk's Identity Security Platform has been rebranded as Idira and integrated into Palo Alto Networks' broader AI security platform. The integration combines CyberArk's privileged access management expertise with Palo Alto Networks' network, cloud, endpoint, and AI security portfolio. The combined entity aims to address the expanding identity security challenge where machine and AI identities now outnumber human identities 109-to-1.
- AWS (Amazon Web Services)coreCyberArk partnered with AWS to improve its cloud security posture, implementing five AWS security services including AWS Shield Advanced and AWS GuardDuty. The partnership achieved annual cost savings of $500,000 through automation and optimization. CyberArk's SCA MCP Server is available in AWS Marketplace, enabling developers to securely access cloud infrastructure from IDEs without embedded secrets or manual approvals.
- MicrosoftflagshipMicrosoft is listed as a key technology alliance partner. CyberArk integrates with Microsoft Entra ID (Azure AD), Microsoft 365, and other Microsoft security platforms to provide unified identity security across enterprise environments.
- VMwarecoreVMware is a key technology alliance partner, with CyberArk providing privileged access management for VMware environments including vSphere, vRealize, and other VMware platforms.
- CrowdStrikecoreCrowdStrike is a technology alliance partner, with joint integrations between CyberArk's identity security platform and CrowdStrike's endpoint and AI security platform to provide comprehensive coverage across identity and endpoint security.
- ServiceNowcoreServiceNow is listed as a technology alliance partner, with CyberArk integrating with ServiceNow's ITSM and security operations platforms to automate identity security workflows and incident response.
- SAPcoreSAP is a technology alliance partner, with CyberArk providing privileged access management and identity security for SAP environments including S/4HANA, SAP Cloud Platform, and SAP business applications.
- WorkdaycoreWorkday is a technology alliance partner, integrating with CyberArk for identity lifecycle management and provisioning into Workday Human Capital Management applications.
- UiPathcoreUiPath is a technology alliance partner, with CyberArk providing secrets management and privileged access control for robotic process automation (RPA) environments and machine identities.
- ProofpointcoreProofpoint is a technology alliance partner, with joint integrations addressing email security and identity-based threats through combined identity and information protection capabilities.
- SailPointcoreSailPoint is a technology alliance partner, with integrations between CyberArk's privileged access management and SailPoint's identity governance platform to provide comprehensive identity lifecycle and privilege management.
- Red HatcoreRed Hat is a technology alliance partner, with CyberArk providing privileged access management and secrets management for Red Hat OpenShift, Red Hat Enterprise Linux, and other Red Hat platforms.
- TenablecoreTenable is a technology alliance partner, with joint integrations between CyberArk's identity security and Tenable's vulnerability management and exposure analytics platforms.
- Google CloudcoreGoogle Cloud is listed as a technology alliance partner, with CyberArk providing identity security and privileged access management for Google Cloud Platform environments.
- CapgeminicoreCapgemini engaged to implement CyberArk's Privileged Access Management solution across a multinational telecommunications company's global operations. Capgemini conducted a six-week assessment, migrated entitlements to its Identity as a Service platform, onboarded 25 databases, and deployed disaster recovery components ahead of a September 2024 deadline.
- European BankcoreA European bank partnered with SighUp and CyberArk to implement a DevSecOps cloud-based initiative, securing human and non-human identities across the bank's cloud infrastructure.
Scale indicators9 records
Recent moves7 records
Expansion highlights6 records
CyberArk competitors and assessment
Company assessmentDirect peers
- Okta: Workforce identity and access management leader offering SSO, adaptive MFA, identity governance, and privileged access. Directly competes with CyberArk in the workforce IAM, customer IAM (Auth0), and increasingly privileged access (Okta Privileged Access) segments.
- BeyondTrust: Direct privileged access management competitor offering password vaulting, session management, endpoint privilege management, and secure remote vendor access. Closest head-to-head rival to CyberArk in the traditional PAM market.
- Delinea: Formed from the merger of Thycotic and Centrify, Delinea competes directly with CyberArk in privileged access management, secrets vaulting, and endpoint privilege elevation for enterprise and mid-market customers.
- HashiCorp: Vault is a direct competitor to CyberArk's Secrets Manager, particularly for cloud-native and DevOps-centric machine identity use cases. HashiCorp's broader infrastructure-as-code and Terraform ecosystem make it a frequent incumbent in the same enterprise accounts.
- SailPoint: Identity governance and administration (IGA) leader that directly competes with CyberArk's Modern IGA module. SailPoint's deep access-review and provisioning capabilities overlap with CyberArk's identity governance offerings, often appearing together in identity security RFPs.
- One Identity (formerly Quest): Offers One Identity Manager (IGA), One Login (IAM), and Defender (PAM), directly overlapping with CyberArk's integrated platform across workforce identity, governance, and privileged access.
Broad incumbents
- Microsoft (Entra ID / Azure AD): Provides Entra ID (formerly Azure AD), Entra Permissions Management, and identity protection within the broader Microsoft 365 and Azure platform. Bundled at zero-incremental-cost with the dominant enterprise productivity and cloud platform, it is the most consequential competitor for CyberArk's workforce identity modules.
- IBM Security Verify: IBM's identity and access management portfolio (Verify, IAM, Guardium) competes with CyberArk in enterprise workforce IAM and privileged access, often leveraged through large mainframe and services-led deployments.
- Ping Identity (now part of Thales): Workforce and customer identity platform (now under Thales) that competes with CyberArk in SSO, adaptive access, and federated identity, particularly for customer-facing applications at large enterprises.
Emerging players
- Saviynt: Cloud-native identity governance and privileged access challenger rapidly gaining enterprise traction. Competes with both CyberArk PAM and SailPoint IGA, and is often deployed as an alternative in converged identity security deals.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat5 records
Key risks5 records
Key highlights7 records
Customer concentration
CyberArk social profiles
Digital presenceCyberArk compliance and trust
Trust signalCompliance8 records
CyberArk financial estimates
Financial estimateRevenue estimate
Valuation estimate
CyberArk leadership team
Management profileNumber of profiles
Profiles14 records
CyberArk subsidiaries and ownership
Company hierarchySubsidiaries1 record
CyberArk funding detail
Funding detailFunding overview
Funding rounds9 records
Investors11 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
CyberArk M&A and investment
M&A and investmentM&A9 records
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about CyberArk
What does CyberArk do?
CyberArk sells an enterprise Identity Security Platform (now marketed as Idira under Palo Alto Networks) that secures human, machine, and AI identities through privileged access management, endpoint privilege security, workforce and customer identity (SSO, adaptive MFA, passwordless), secrets and certificate management, and identity governance. The platform is offered via SaaS, on-premises, and hybrid deployments and is complemented by professional services (Design & Deployment, Red Team, Remediation, Strategic Consulting, Cloud Native) and training/certification through CyberArk University.
Is CyberArk a public or private company?
CyberArk is a private company. It is classified as corporate owned and is currently acquired.
When was CyberArk founded?
CyberArk was founded in 1999. It employs 1,001 to 5,000 people.
Where is CyberArk based?
CyberArk is headquartered in Newton, United States, in the North America region.
How does CyberArk make money?
Three revenue lines are on record. Subscription and Support Revenue is the primary driver. The others are professional Services and training and Certification.
Who are CyberArk's main competitors?
Direct peers on record are Okta, BeyondTrust, Delinea, HashiCorp, SailPoint and One Identity (formerly Quest). Broad incumbents are Microsoft (Entra ID / Azure AD), IBM Security Verify and Ping Identity (now part of Thales). Saviynt is listed as an emerging player.
Does CyberArk have an API?
Yes. CyberArk offers developer resources through its developer portal at https://developer.cyberark.com/, which provides API documentation and technical resources for developers integrating with CyberArk products.
What industry is CyberArk in?
CyberArk's product category is Identity Security. Its primary akta.pro industry code is HDAEAJAJ, Secrets Management & Machine Identity (API keys, certificates, workload identity), with a secondary code of BPAKAHAI, Identity & Access Security Services (IAM, PAM, Zero Trust). Its NAICS code is 5132 and its SIC code is 7372.