CyberArk

What CyberArk does

CyberArk, founded in Israel in 1999 and headquartered in Newton, MA with significant operations in Tel Aviv, is a security company specializing in intelligent privilege controls applied across the full identity lifecycle. The company's flagship offering is the CyberArk Identity Security Platform, a unified architecture that consolidates privileged access management (PAM), access management, secrets management, certificate management, endpoint privilege security, and identity governance and administration (IGA) into a single enforcement layer. The platform is built around Zero Standing Privilege (ZSP) and Just-In-Time (JIT) access models, with continuous identity discovery, AI-driven session auditing via CORA AI, and Identity Threat Detection and Response (ITDR) capabilities. It serves a customer base of nearly 10,000 organizations across 110 countries, including more than 55% of Fortune 500 and 35% of Global 2000 companies, spanning financial services, healthcare, government, manufacturing, and DevOps/cloud-native segments.

CyberArk monetizes primarily through recurring subscription contracts — approximately 80% of total revenue was subscription and support at the time of acquisition — with both SaaS and term-licensed on-premises/hybrid deployment options, supplemented by professional services, training, and certification revenue. Distribution combines a direct enterprise field-sales motion with a partner ecosystem of more than 200 alliance partners and 300+ pre-built integrations spanning AWS, Microsoft, VMware, CrowdStrike, ServiceNow, SAP, and others. The platform is sold via annual and multi-year enterprise agreements with quote-based pricing for larger deployments, alongside self-service 30-day trials and marketplace listings on AWS. Reported FY2025 revenue was $1.3 billion against a $131.2 million operating loss, with CyberArk being acquired by Palo Alto Networks in February 2026 for approximately $25 billion and subsequently rebranded as Idira within Palo Alto Networks' portfolio.

Name

CyberArk

Legal name

CyberArk Software Ltd.

Website

https://cyberark.com

Company type

Private

Founded year

1999

Operating status

Acquired

Headcount range

1,001–5,000 employees

Short description

CyberArk provides an identity security platform applying intelligent privilege controls to human, machine, and AI identities across hybrid and multi-cloud environments, serving nearly 10,000 organizations including over 55% of Fortune 500 companies via subscription and channel sales.

Ownership category

akta.pro rank

Product category

Identity Security

NAICS

Software Publishers (5132)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

Secrets Management & Machine Identity (API keys, certificates, workload identity) (HDAEAJAJ)

akta.pro secondary industries

Identity & Access Security Services (IAM, PAM, Zero Trust) (BPAKAHAI), Secrets Management (Passwords, API Keys, Tokens) (HDADAFAD)

Keywords

• Privileged access management
• Identity security platform
• Secrets management
• Endpoint privilege security
• Identity governance

Headquarters

HQ city

Newton

HQ country

United States

HQ region

North America

Offices2 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Subscription and Support Revenue: CyberArk generates the majority of its revenue (~80% of total revenue at time of acquisition by Palo Alto Networks) from recurring subscriptions and support services. Subscription revenue is derived from the Identity Security Platform delivered as SaaS, along with term licenses for on-premises and hybrid deployments. Annual and multi-year subscription contracts are the primary commercial model.
2. Professional Services: CyberArk offers professional services including Design & Deployment Services, Red Team Services, Remediation Services, Strategic Consulting Services, and Cloud Native Consulting to support implementation and optimization of the Identity Security Platform.
3. Training and Certification: CyberArk University provides training and certification programs for customers and partners to build expertise in identity security, privileged access management, and related technologies.

Pricing tiers

Go-to-market motion2 records

Distribution channels5 records

Marketing channels9 records

Core offering

CyberArk sells an enterprise Identity Security Platform (now marketed as Idira under Palo Alto Networks) that secures human, machine, and AI identities through privileged access management, endpoint privilege security, workforce and customer identity (SSO, adaptive MFA, passwordless), secrets and certificate management, and identity governance. The platform is offered via SaaS, on-premises, and hybrid deployments and is complemented by professional services (Design & Deployment, Red Team, Remediation, Strategic Consulting, Cloud Native) and training/certification through CyberArk University.

Product overview

CyberArk operates as a platform-plus-modules architecture offering the CyberArk Identity Security Platform (now integrated into Palo Alto Networks' Idira brand) that secures every identity—human, machine, and AI—across hybrid, SaaS, and multi-cloud environments. The platform comprises multiple integrated modules including Access Management (Workforce Identity, Customer Identity, B2B Identity with SSO, Adaptive MFA, Passwordless, Workforce Password Management, Secure Web Sessions), Privileged Access (Privileged Access Manager, Endpoint Privilege Manager, Vendor Privileged Access Manager, Secure Cloud Access), Machine Identity Security (Secrets Management, Certificate Management, Workload Identity), Modern IGA (Identity Governance Automation, Lifecycle Management, User Access Review), and the AI-powered CORA AI engine. The platform is built on intelligent privilege controls with Zero Standing Privileges (ZSP) and just-in-time access, unified under a single Control Center for administration. Palo Alto Networks acquired CyberArk in February 2026 for approximately $25 billion and rebranded the combined identity security capabilities under the Idira platform name.

Differentiator

Problem solved

Functional benefit

Brands

• Idira: Next-generation identity security platform launched by Palo Alto Networks following the CyberArk acquisition, designed to secure human, machine, and AI agent identities for the AI enterprise era.

Products and services

• CyberArk Identity Security Platform

Quantifiable outcome

• 87% of organizations experienced at least two successful identity-related breaches, highlighting the critical need for identity security
• +8 more outcomes

Named customers10 records

Segments8 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration43 records

AI capability15 records

Feature8 records

Partnerships

16 partnerships are on record, tiered core and flagship.

• Palo Alto NetworkscoreOEM/ Whitelabel/ Licensing Partner · 11 February 2026Palo Alto Networks completed its acquisition of CyberArk for approximately $25 billion in February 2026. CyberArk's Identity Security Platform has been rebranded as Idira and integrated into Palo Alto Networks' broader AI security platform. The integration combines CyberArk's privileged access management expertise with Palo Alto Networks' network, cloud, endpoint, and AI security portfolio. The combined entity aims to address the expanding identity security challenge where machine and AI identities now outnumber human identities 109-to-1.
• AWS (Amazon Web Services)coreTechnology or Integration · 1 October 2024CyberArk partnered with AWS to improve its cloud security posture, implementing five AWS security services including AWS Shield Advanced and AWS GuardDuty. The partnership achieved annual cost savings of $500,000 through automation and optimization. CyberArk's SCA MCP Server is available in AWS Marketplace, enabling developers to securely access cloud infrastructure from IDEs without embedded secrets or manual approvals.
• MicrosoftflagshipTechnology or IntegrationMicrosoft is listed as a key technology alliance partner. CyberArk integrates with Microsoft Entra ID (Azure AD), Microsoft 365, and other Microsoft security platforms to provide unified identity security across enterprise environments.
• VMwarecoreTechnology or IntegrationVMware is a key technology alliance partner, with CyberArk providing privileged access management for VMware environments including vSphere, vRealize, and other VMware platforms.
• CrowdStrikecoreTechnology or IntegrationCrowdStrike is a technology alliance partner, with joint integrations between CyberArk's identity security platform and CrowdStrike's endpoint and AI security platform to provide comprehensive coverage across identity and endpoint security.
• ServiceNowcoreTechnology or IntegrationServiceNow is listed as a technology alliance partner, with CyberArk integrating with ServiceNow's ITSM and security operations platforms to automate identity security workflows and incident response.
• SAPcoreTechnology or IntegrationSAP is a technology alliance partner, with CyberArk providing privileged access management and identity security for SAP environments including S/4HANA, SAP Cloud Platform, and SAP business applications.
• WorkdaycoreTechnology or IntegrationWorkday is a technology alliance partner, integrating with CyberArk for identity lifecycle management and provisioning into Workday Human Capital Management applications.
• UiPathcoreTechnology or IntegrationUiPath is a technology alliance partner, with CyberArk providing secrets management and privileged access control for robotic process automation (RPA) environments and machine identities.
• ProofpointcoreTechnology or IntegrationProofpoint is a technology alliance partner, with joint integrations addressing email security and identity-based threats through combined identity and information protection capabilities.
• SailPointcoreTechnology or IntegrationSailPoint is a technology alliance partner, with integrations between CyberArk's privileged access management and SailPoint's identity governance platform to provide comprehensive identity lifecycle and privilege management.
• Red HatcoreTechnology or IntegrationRed Hat is a technology alliance partner, with CyberArk providing privileged access management and secrets management for Red Hat OpenShift, Red Hat Enterprise Linux, and other Red Hat platforms.
• TenablecoreTechnology or IntegrationTenable is a technology alliance partner, with joint integrations between CyberArk's identity security and Tenable's vulnerability management and exposure analytics platforms.
• Google CloudcoreTechnology or IntegrationGoogle Cloud is listed as a technology alliance partner, with CyberArk providing identity security and privileged access management for Google Cloud Platform environments.
• CapgeminicoreImplementation/ SI/ Consulting PartnerCapgemini engaged to implement CyberArk's Privileged Access Management solution across a multinational telecommunications company's global operations. Capgemini conducted a six-week assessment, migrated entitlements to its Identity as a Service platform, onboarded 25 databases, and deployed disaster recovery components ahead of a September 2024 deadline.
• European BankcoreImplementation/ SI/ Consulting PartnerA European bank partnered with SighUp and CyberArk to implement a DevSecOps cloud-based initiative, securing human and non-human identities across the bank's cloud infrastructure.

Scale indicators9 records

Recent moves7 records

Expansion highlights6 records

Direct peers

• Okta: Workforce identity and access management leader offering SSO, adaptive MFA, identity governance, and privileged access. Directly competes with CyberArk in the workforce IAM, customer IAM (Auth0), and increasingly privileged access (Okta Privileged Access) segments.
• BeyondTrust: Direct privileged access management competitor offering password vaulting, session management, endpoint privilege management, and secure remote vendor access. Closest head-to-head rival to CyberArk in the traditional PAM market.
• Delinea: Formed from the merger of Thycotic and Centrify, Delinea competes directly with CyberArk in privileged access management, secrets vaulting, and endpoint privilege elevation for enterprise and mid-market customers.
• HashiCorp: Vault is a direct competitor to CyberArk's Secrets Manager, particularly for cloud-native and DevOps-centric machine identity use cases. HashiCorp's broader infrastructure-as-code and Terraform ecosystem make it a frequent incumbent in the same enterprise accounts.
• SailPoint: Identity governance and administration (IGA) leader that directly competes with CyberArk's Modern IGA module. SailPoint's deep access-review and provisioning capabilities overlap with CyberArk's identity governance offerings, often appearing together in identity security RFPs.
• One Identity (formerly Quest): Offers One Identity Manager (IGA), One Login (IAM), and Defender (PAM), directly overlapping with CyberArk's integrated platform across workforce identity, governance, and privileged access.

Broad incumbents

• Microsoft (Entra ID / Azure AD): Provides Entra ID (formerly Azure AD), Entra Permissions Management, and identity protection within the broader Microsoft 365 and Azure platform. Bundled at zero-incremental-cost with the dominant enterprise productivity and cloud platform, it is the most consequential competitor for CyberArk's workforce identity modules.
• IBM Security Verify: IBM's identity and access management portfolio (Verify, IAM, Guardium) competes with CyberArk in enterprise workforce IAM and privileged access, often leveraged through large mainframe and services-led deployments.
• Ping Identity (now part of Thales): Workforce and customer identity platform (now under Thales) that competes with CyberArk in SSO, adaptive access, and federated identity, particularly for customer-facing applications at large enterprises.

Emerging players

• Saviynt: Cloud-native identity governance and privileged access challenger rapidly gaining enterprise traction. Competes with both CyberArk PAM and SailPoint IGA, and is often deployed as an alternative in converged identity security deals.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks5 records

Key highlights7 records

Customer concentration

• Xx.com/Cyberark
• YouTubeyoutube.com/user/cyberarksoftware
• Facebookfacebook.com/CyberArk
• LinkedInlinkedin.com/company/cyber-ark-software

Compliance8 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles14 records

Subsidiaries1 record

Funding overview

Funding rounds9 records

Investors11 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A9 records

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about CyberArk