# CyberArk Software Ltd. > Clarifo company profile — qualitative business description generated from > the company's filings. Financial statements, charts and ratios are > available on Clarifo (https://www.clarifo.com/fi/companies/CyberArk Software Ltd.). ## Overview CyberArk Software Ltd. develops identity security software for enterprises, centered on privileged access and controls for human, machine, and other non-human identities. The company sells cloud-based and self-hosted security products through a global software platform, with operations rooted in Israel and the United States and customers worldwide. ## Products & services • Identity Security Platform • Privileged Access Management • SaaS and self-hosted subscriptions • Maintenance for perpetual licenses • Professional services and support - **Identity security platform** (55%) — Core software that secures and governs privileged and other identities across the enterprise. - **Subscription software** (35%) — Cloud and self-hosted subscription offerings sold as recurring software access. - **Maintenance and support** (7%) — Ongoing support and maintenance tied to installed software and perpetual licenses. - **Professional services** (3%) — Implementation, deployment, and advisory services around identity security products. - Identity Security Platform - Privileged Access Management - SaaS and self-hosted subscriptions - Maintenance for perpetual licenses - Professional services and support ## Customers CyberArk sells primarily to enterprises that need to control privileged access, secure administrators and developers, and protect machine identities at scale. Its customers span regulated industries and complex IT environments where identity risk, zero trust, and least-privilege controls are important. The company also serves organizations adopting cloud, hybrid, and AI-enabled workflows that require stronger identity governance. - **Large enterprises** (primary) — Buy enterprise identity security platforms to protect privileged access across complex environments. - **Security and IAM teams** (primary) — Purchase controls, monitoring, and policy enforcement for privileged and machine identities. - **IT operations** (secondary) — Use tools for administrator access, session control, and credential protection. - **Developers and DevOps** (secondary) — Need secrets and machine-identity security for automation and application workflows. - **Regulated industries** (secondary) — Adopt CyberArk to support compliance, auditability, and least-privilege policies. - Large enterprises securing privileged user access - Security teams buying zero-trust identity controls - IT operations organizations managing administrator accounts - Developer and DevOps teams protecting machine identities - Regulated industries needing auditability and access controls ## Geography CyberArk operates globally, with corporate roots and significant operations in Israel and a major U.S. presence. Its software is sold to customers around the world, so demand is tied more to enterprise security spending than to any single local market. The company’s geographic footprint matters because it supports global sales coverage, product development, and exposure to cross-border regulatory and cybersecurity conditions. - Headquartered in Israel with a major U.S. presence - Sells identity security software to global enterprise customers - Revenue is internationally diversified across regions - Geographic reach supports multi-national deployments - Cross-border operations expose the company to regulatory variation ## Strategy CyberArk’s strategy is centered on expanding its identity security platform across human, machine, and agentic AI identities. It also emphasizes recurring revenue through subscription contracts and maintenance, which deepens customer relationships and improves visibility into future demand. Broader platform adoption and cross-sell across privileged access, secrets, and identity controls are important to its competitive position. - **Grow recurring subscriptions** (short-term) — Recurring contracts provide more durable revenue and expand the installed base. - **Broaden platform footprint** (medium-term) — More modules per customer increase switching costs and wallet share. - **Secure AI-era identities** (medium-term) — Machine and agentic AI identities create new security needs that fit CyberArk’s platform. - Expand identity security across human and machine identities - Increase recurring subscription revenue - Broaden platform adoption within existing enterprise accounts - Attach additional modules around privileged access and secrets - Address AI-era identity risk with continuous controls ## Risks CyberArk faces execution risk from the need to keep innovating in a fast-moving cybersecurity market where customer requirements, threat types, and platform expectations change quickly. Its business is also exposed to integration, deal, and regulatory risk because it completed a merger with Palo Alto Networks, while subscription transition and large-enterprise sales cycles can affect timing and visibility of revenue. Like other security software vendors, it must defend against competition, technology substitution, and concentration in enterprise IT spending. - **Competitive pressure in identity security** [high] — The market includes large security vendors and niche IAM providers competing on platform breadth and innovation. - **Merger integration and transaction risk** [high] — The company completed a merger with Palo Alto Networks, creating integration and operational change risk. - **Enterprise spending and sales-cycle risk** [medium] — Large customers often require long evaluation periods and budget approvals before deployment. - **Technology and threat evolution** [high] — Identity threats and AI-driven attack methods change quickly, requiring constant product updates. - Cybersecurity competition can pressure pricing and win rates - Enterprise sales cycles can delay large platform deployments - Subscription mix changes can affect revenue recognition timing - Merger integration creates execution and regulatory risk - Rapid threat evolution can require continuous product investment ## Accounting CyberArk’s reported revenue mix depends on how it classifies SaaS subscriptions, self-hosted subscriptions, perpetual-license maintenance, and professional services, so line-item presentation changes can affect comparability. The company also highlights recurring revenue and ARR, which are non-GAAP operating measures that help investors track subscription momentum but do not replace GAAP revenue recognition. Share-based compensation, acquisition-related items, and intangible asset amortization are important adjustments because they can materially affect reported earnings and comparability across periods. - **Revenue classification** — Impacts period-to-period revenue comparability - **Recurring revenue and ARR** — Affects how investors assess growth quality - **Share-based compensation** — Impacts non-GAAP margin and profit comparisons - **Acquisition-related intangibles** — Impacts GAAP profitability and comparability - Revenue mix changes affect comparability across periods - Recurring revenue and ARR are key non-GAAP operating metrics - Subscription and maintenance timing affects revenue recognition - Share-based compensation is a recurring expense adjustment - Acquisition intangibles and transaction costs affect earnings comparability --- *Last updated: 2026-09-28T11:58:17.236950+00:00*