What are the key takeaways for Cyberark Software Ltd ($CYBR)?

CyberArk shareholders approved the definitive acquisition of the company by Palo Alto Networks on Nov 13, 2025, with closing expected in the second half of 2026. The company demonstrated substantial scale, with ARR increasing 51% YoY to $1.169 billion as of Dec 31, 2024. Strategic M&A has been a primary growth lever, specifically the acquisitions of Venafi (Oct 1, 2024) for machine identity and Zilla Security (Feb 12, 2025) for IGA.

Cyberark Software Ltd (CYBR) AI Stock Analysis & Earnings

Please enable JavaScript to continue using this application.

Overview Charts AI Summary Financials Valuation

Based on December 31, 2025

Key Takeaways

1.CyberArk shareholders approved the definitive acquisition of the company by Palo Alto Networks on Nov 13, 2025, with closing expected in the second half of 2026.
2.The company demonstrated substantial scale, with ARR increasing 51% YoY to $1.169 billion as of Dec 31, 2024.
3.Strategic M&A has been a primary growth lever, specifically the acquisitions of Venafi (Oct 1, 2024) for machine identity and Zilla Security (Feb 12, 2025) for IGA.
4.The company shifted its GTM strategy in 2024 to a solutions-based framework to simplify sales packaging and better address enterprise security needs.
5.Operational results in 2024 highlighted the transition-related financial burden, reporting a net loss of $93.5 million despite significant revenue growth.
6.The company maintains a high-touch, hybrid GTM strategy, leveraging over 1,500 channel partners and generating approximately 50.3% of 2024 revenue in the U.S.

What They Do

CyberArk provides a comprehensive Identity Security Platform designed to secure both human and machine identities in complex, hybrid enterprise environments. Its core offerings include Privileged Access Management (PAM), Identity Management, Secrets Management, and Cloud Security. By applying intelligent privilege controls, the platform helps organizations enforce zero trust strategies and minimize security risks related to compromised credentials and identities. The company serves over 9,700 customers globally, including major enterprises in financial services, healthcare, government, and technology, with a presence in 48 countries. CyberArk differentiates its business model by being the pioneer and category leader in PAM, moving beyond traditional infrastructure management to provide a unified identity security fabric that secures identities across the enterprise lifecycle.

How They Make Money

The company generates revenue primarily through subscription-based models, which include SaaS and self-hosted subscription licenses. Subscription revenues accounted for approximately 73% of total revenue in 2024, reflecting a successful strategic shift from perpetual licenses (now a single-digit percentage of revenue). Revenue recognition for SaaS is ratable over the contract term, while self-hosted subscriptions are recognized upon delivery of the license with associated support. The company also generates revenue from maintenance and professional services, though these are secondary to the recurring software streams. Key metrics include Annual Recurring Revenue (ARR), which reached $1.169 billion in 2024, and Remaining Performance Obligations (RPO), which grew to $1.386 billion. Revenue growth is primarily driven by expanding the customer base, selling incremental solutions, and cross-selling capabilities from acquired companies like Venafi.

Competitive Position

CyberArk competes in a fragmented information security market against established vendors such as Microsoft and Okta, as well as specialized players like BeyondTrust and Delinea (PAM), SailPoint (IGA), and HashiCorp (Secrets). CyberArk’s competitive advantage is rooted in its deep-seated expertise in PAM and the architectural depth of its platform, which is entrenched in many of the world's largest enterprises. While competitors possess significant scale or offer broader platform bundles, CyberArk differentiates through its focus on securing 'keys to the kingdom'—high-risk credentials. Recent financial data confirms high customer retention and strong platform adoption, though the company faces competitive pressure from hyperscalers and consolidation-focused cybersecurity platforms. The acquisition by Palo Alto Networks highlights the company's strong market position but acknowledges the trend toward platform-wide security consolidation.

Business Strategy & Moat

CyberArk's strategy centers on building an 'Identity Security' moat by integrating disparate identity silos—PAM, AM, IGA, and machine identity—into a single, unified platform. The company's 'flywheel' relies on its deep PAM integration becoming the foundation for a broader zero-trust framework, enabling cross-selling of newer solutions like IGA and machine identity management. Capital allocation has been highly focused on R&D for AI-powered threat detection (CORA AI) and aggressive, strategic M&A to acquire best-of-breed technologies (e.g., Venafi, Zilla). This strategy has successfully accelerated revenue growth, evidenced by the $1.169 billion ARR. The moat is highly durable due to the critical nature of its products in the customer's security stack, creating high switching costs, although the transition to a platform-based exit with PANW signals that the company’s independent strategic path is maturing.

Industry Outlook

The identity security industry is undergoing a significant shift toward platform consolidation as enterprises seek to unify siloed PAM, AM, and IGA functions to address 'zero trust' requirements. Macroeconomic factors like cloud migration and the proliferation of machine identities (driven by AI and DevOps) are increasing the importance of identity-based controls. Regulation is a significant driver, with frameworks like GDPR, HIPAA, and the EU AI Act forcing organizations to invest in more robust identity compliance. Near-term headwinds include intense competition from platform vendors (like Microsoft and Palo Alto Networks) attempting to bundle security services. The overall industry trajectory remains favorable as identity remains the most common attack vector for sophisticated threat actors.

Growth Drivers

•Successful integration and cross-selling of the Venafi (machine identity) and Zilla Security (IGA) technology portfolios to the existing 9,700-customer base.
•Expansion of SaaS-based offerings, which accounted for a significant portion of the $733.3 million in subscription revenue during 2024.
•Adoption of the new solution-based GTM framework which simplifies packaging and pricing to improve customer acquisition and renewal rates.
•Increased demand for machine identity management driven by the rapid growth of AI, bots, and cloud-native applications that require automated credential management.
•Expansion into new geographic regions and verticals (e.g., federal/local government) through a hybrid partner-direct sales model.

Recent Developments

•Shareholders approved the merger agreement with Palo Alto Networks on Nov 13, 2025.
•The company entered into a definitive merger agreement to be acquired by Palo Alto Networks on July 30, 2025.
•Completed the acquisition of Zilla Security Inc. (IGA specialist) on Feb 12, 2025, for AI-powered identity governance capabilities.
•Finalized the acquisition of Venafi Holdings, Inc. (machine identity) on Oct 1, 2024, for approximately $1.66 billion.
•Transitioned GTM strategy to a solutions-based sales framework in 2024 to better align with customer identity security challenges.

Catalysts

•Closing of the acquisition by Palo Alto Networks (Expected H2 2026), pending final regulatory approvals.
•Continued updates on regulatory review processes for the PANW transaction.
•Quarterly earnings reports prior to transaction close showcasing ARR growth trends.
•Product integration updates between CyberArk and Palo Alto Networks' existing infrastructure (post-closing).

Acquisitions & Strategy

•Acquired Zilla Security Inc. in Q1 2025 to bolster IGA capabilities and expand identity security platform scope.
•Acquired Venafi Holdings, Inc. in Oct 2024 for $1.66 billion to acquire market-leading machine identity management and TLS security technology.

RPO & Key Performance Indicators

•Remaining Performance Obligations (RPO) grew 42.6% YoY to $1.386 billion, signaling robust backlog visibility.
•Annual Recurring Revenue (ARR) increased 51% YoY to $1.169 billion as of Dec 31, 2024, highlighting strong demand for identity security subscription offerings.
•Customer base expanded to over 9,700 clients as of Dec 31, 2024, supporting platform penetration.

Strengths

•Market leadership in the PAM category, which serves as a mission-critical component of enterprise zero-trust security frameworks.
•Strong recurring revenue visibility with 51% ARR growth and a large, diversified base of 9,700+ enterprise customers.
•High gross margins (79.2% in 2024) indicating strong pricing power and the efficiency of the software-based platform model.
•A robust and scalable GTM engine, supported by a global ecosystem of over 1,500 channel partners, managed service providers, and advisory firms.

AI Benefits & Opportunities

•Implementation of 'CORA AI' embedded across the platform to enhance threat detection capabilities and automate identity lifecycle management for customers.
•Utilization of AI to automate security responses and reduce administrative overhead for IT teams, driving increased customer reliance and stickiness.

Risks & Concerns for Cyberark Software Ltd ($CYBR)

You're one step away

Unlock the full risk analysis

See business risks, AI filing insights, and deeper research for this stock. Create a free account to continue — includes a 14-day Pro trial.

No card required • Free plan stays after trial

About this summary

AI-generated research for Cyberark Software Ltd (CYBR, filings period ending December 31, 2025). AI summaries, reports, and scoring can be inaccurate or incorrect; accuracy and correctness are not guaranteed. Informational only; not investment advice or personalized guidance.Enumerated risk factors in this view may be abbreviated for anonymous or guest sessions. Full risk sections are available with full access.

Summary generated on Mar 31, 2026.

Peers of Cyberark Software Ltd (CYBR)

CHKPDeep Dive