CyberArk

CyberArk
Name	CyberArk
Type	Public
Industry	Cybersecurity
Founded	1999
Founder	Alon N. Cohen; Udi Mokady
Headquarters	Newton, Massachusetts; Petah Tikva, Israel
Key people	Matt Cohen; Udi Mokady
Products	Privileged Access Management; Secrets Management; Endpoint Privilege Manager; Identity Security
Revenue	(see company reports)
Num employees	(see company reports)
Website	(company website)

CyberArk

CyberArk is a multinational enterprise cybersecurity company specializing in privileged access management and identity security. The company develops software and cloud services intended to protect credentials and secrets for administrators, service accounts, and machine identities used by organizations in sectors such as finance, healthcare, and government. Its solutions are deployed by enterprises, governments, and technology providers to reduce risk from credential theft, insider threat, and supply chain compromise.

Overview

CyberArk originated as a provider of credential vaulting and privileged session management and expanded into a broader identity security platform addressing secrets management, endpoint privilege, and cloud-native environments. Major contemporaries and partners in the cybersecurity space include Palo Alto Networks, Fortinet, CrowdStrike, Splunk, and Okta. The company participates in industry consortia such as the Cloud Security Alliance and engages with standards organizations like NIST and ISO to align products with frameworks including NIST Cybersecurity Framework and ISO/IEC 27001.

History

Founded in 1999 by Israeli entrepreneurs, the company grew during the 2000s alongside rising attention to insider threats and privileged credential abuse highlighted by incidents such as the Target data breach and discussions in hearings before the United States Congress on cyber risk. CyberArk expanded through organic development and acquisitions, interacting with firms like Thycotic in market consolidation dynamics and with technology companies including Microsoft and Amazon Web Services for platform interoperability. The company completed an initial public offering and has been listed on the NASDAQ while maintaining research centers in Israel and operations in North America, Europe, and Asia-Pacific.

Products and Technology

CyberArk's portfolio includes vaulting, session isolation, secrets management, and endpoint privilege management. Core offerings compete and integrate with products from vendors such as HashiCorp, AWS Secrets Manager, and Microsoft Azure Key Vault. The enterprise suite addresses credential rotation, multi-factor authentication interoperability with solutions from Duo Security and Yubico, and API-driven automation suitable for orchestration tools like Ansible, Puppet, and Chef. The company has built connectors for identity providers and directories including Microsoft Active Directory, Okta, and Ping Identity and offers agents and agentless approaches compatible with virtualization platforms from VMware and cloud platforms such as Google Cloud Platform.

Security Features and Architecture

Architecture elements include encrypted credential repositories, session brokering, privileged session recording, and policy engines that map to compliance controls such as Sarbanes–Oxley Act and PCI DSS. Integration points extend to endpoint detection and response platforms like Carbon Black and FireEye to correlate privileged activity with threat intelligence from providers such as Mandiant and Recorded Future. High-availability and disaster-recovery deployments align with practices from Amazon Web Services and Microsoft Azure regions, and cryptographic implementations reference standards used by NIST and FIPS 140-2 validations.

Deployment and Integration

Deployments range from on-premises appliances and virtual appliances to cloud SaaS offerings and hybrid models that support container orchestration systems such as Kubernetes and continuous integration/continuous deployment pipelines using Jenkins and GitLab CI/CD. Integrations exist for orchestration with service mesh and platform teams relying on HashiCorp Vault patterns, and for identity lifecycle workflows with human resources systems like Workday and IT service management platforms such as ServiceNow. Professional services and partner ecosystems include systems integrators like Accenture, Deloitte, and regional managed security service providers.

Market Position and Customers

CyberArk competes in the privileged access management and identity security market alongside vendors including SailPoint, BeyondTrust, Thycotic, and One Identity. Its customer base spans regulated industries, with clients in banking such as JPMorgan Chase, insurers, healthcare providers, energy companies, and government agencies. Industry recognition has come from analyst firms like Gartner and Forrester, and the company participates in technology alliances with firms such as Cisco and Splunk to provide joint solutions for enterprise customers.

Governance and Compliance

Corporate governance follows practices expected of public companies listed on the NASDAQ, with board oversight, audit committees, and disclosure obligations under U.S. Securities and Exchange Commission regulations. Product compliance and certifications reference standards and regulatory regimes including PCI DSS, GDPR, SOC 2, and national cybersecurity directives in jurisdictions such as United Kingdom and European Union. Cybersecurity incident response and disclosure practices align with norms promoted by organizations like FIRST and national computer emergency response teams such as US-CERT and CERT-EU.

Category:Computer security companies Category:Companies established in 1999