CyberArk Software Ltd.
CyberArk Software Ltd. develops identity security software for enterprises, centered on privileged access and controls for human, machine, and other non-human identities. The company sells cloud-based and self-hosted security products through a global software platform, with operations rooted in Israel and the United States and customers worldwide.
Fiscal year 2024 · change from previous year
Development 2019–2024
Business
Share of revenueCore software that secures and governs privileged and other identities across the enterprise.
Cloud and self-hosted subscription offerings sold as recurring software access.
Ongoing support and maintenance tied to installed software and perpetual licenses.
Implementation, deployment, and advisory services around identity security products.
Products
Reported · share of revenue- Saas46.8 %
- Self Hosted Subscription26.4 %
- Maintenance19.7 %
- Professional Services5.6 %
- Perpetual License1.4 %
Source: 20-F FY2024, revenue the company reports per product line (SEC XBRL). Shares are of the lines shown and add up to 100 %.
Customers
CyberArk sells primarily to enterprises that need to control privileged access, secure administrators and developers, and protect machine identities at scale. Its customers span regulated industries and complex IT environments where identity risk, zero trust, and least-privilege controls are important. The company also serves organizations adopting cloud, hybrid, and AI-enabled workflows that require stronger identity governance.
Buy enterprise identity security platforms to protect privileged access across complex environments.
Purchase controls, monitoring, and policy enforcement for privileged and machine identities.
Use tools for administrator access, session control, and credential protection.
Need secrets and machine-identity security for automation and application workflows.
Adopt CyberArk to support compliance, auditability, and least-privilege policies.
Strategy
CyberArk’s strategy is centered on expanding its identity security platform across human, machine, and agentic AI identities. It also emphasizes recurring revenue through subscription contracts and maintenance, which deepens customer relationships and improves visibility into future demand. Broader platform adoption and cross-sell across privileged access, secrets, and identity controls are important to its competitive position.
Recurring contracts provide more durable revenue and expand the installed base.
More modules per customer increase switching costs and wallet share.
Machine and agentic AI identities create new security needs that fit CyberArk’s platform.
Geography
CyberArk operates globally, with corporate roots and significant operations in Israel and a major U.S. presence. Its software is sold to customers around the world, so demand is tied more to enterprise security spending than to any single local market. The company’s geographic footprint matters because it supports global sales coverage, product development, and exposure to cross-border regulatory and cybersecurity conditions.
Risks
CyberArk faces execution risk from the need to keep innovating in a fast-moving cybersecurity market where customer requirements, threat types, and platform expectations change quickly. Its business is also exposed to integration, deal, and regulatory risk because it completed a merger with Palo Alto Networks, while subscription transition and large-enterprise sales cycles can affect timing and visibility of revenue. Like other security software vendors, it must defend against competition, technology substitution, and concentration in enterprise IT spending.
- Competitive pressure in identity securityImpact: HighLikelihood: High
The market includes large security vendors and niche IAM providers competing on platform breadth and innovation.
Exposure: Enterprise identity security and privileged access management
- Technology and threat evolutionImpact: HighLikelihood: High
Identity threats and AI-driven attack methods change quickly, requiring constant product updates.
Exposure: Identity security platform and machine identity controls
- Merger integration and transaction riskImpact: HighLikelihood: Medium
The company completed a merger with Palo Alto Networks, creating integration and operational change risk.
Exposure - Enterprise spending and sales-cycle riskImpact: MediumLikelihood: High
Large customers often require long evaluation periods and budget approvals before deployment.
Exposure: Large enterprise contracts
Accounting
Judgemental itemsThe company combined prior perpetual license and maintenance/professional services lines into a new line item presentation, affecting trend analysis.
Impact: Impacts period-to-period revenue comparability
Management uses recurring revenue and annual recurring revenue to track subscription momentum and contract durability.
Impact: Affects how investors assess growth quality
The company identifies stock compensation as a significant recurring expense that changes adjusted earnings.
Impact: Impacts non-GAAP margin and profit comparisons
Amortization of acquired intangibles and deal-related costs can materially distort reported earnings.
Impact: Impacts GAAP profitability and comparability
Similar listed companies
Publicly listed companies with a comparable business focus.
CrowdStrike Holdings, Inc.
CRWD · Services-Prepackaged Software
Cyberloq Technologies, Inc.
CLOQ · Services-Prepackaged Software
Check Point Software Technologies Ltd
CHKP · Services-Prepackaged Software
Verisk Analytics, Inc.
VRSK · Services-Computer Processing & Data Preparation
Verisk Analytics is a U.S.-based data, analytics, and technology company focused on the insurance ecosystem.
SentinelOne, Inc.
S · Services-Prepackaged Software
SentinelOne is a U.S.-based cybersecurity software company built around its Singularity platform for endpoint, cloud, identity, and data protection.
Hub Cyber Security Ltd.
HUBCZ · Computer Communications Equipment
Last updated: 28/09/2026