CyberArk Due Diligence
Run due diligence on CyberArk: check compliance and get alerts when suppliers change.
United States · www.cyberark.com · 33 vendors
CyberArk is a leading identity security provider that helps organizations secure access to critical business data and infrastructure. The company offers solutions for privileged access management, protecting against cyber threats by managing and monitoring privileged accounts and credentials. It serves various sectors, including financial services, energy, retail, healthcare, and government markets.
Resilience scores
- Digital Sovereignty: 85
- Digital Resilience: 9
- Financial Resilience: 7
Technology vendors
- Hotjar Ltd — Technology — Malta
- MongoDB, Inc. — Technology — United States
- WP Engine, Inc. — Technology — United States
- and 32 more
Services catalogue
6 services in catalogue across 3 categories; runs on 33 sub-vendors.
- Identity Security
- Certificate Manager
- Privileged Access Manager
Insights
Last updated 2026-09-26 · revision 8
33 direct vendors, 242 subvendors
Direct vendors by controlling owner country (sample)
- France: 1
- United States: 28
- United Kingdom: 1
Subvendors by controlling owner country (sample)
- France: 6
- Unknown: 2
- Romania: 1
Compliance
5 in-scope frameworks identified; showing 3.
SOC 2 (source) — Evidence found
Evidence: https://www.cyberark.com/trust/, https://trust.cyberark.com
NIS2 (source) — No public evidence
Evidence: https://www.cyberark.com/company/office-locations/
ISAE 3000 (source) — No public evidence
Financials
Three-year financials
- 2023: revenue USD 763.1M, EBIT USD 110.5M, equity USD 1.84B
- 2022: revenue USD 658.5M, EBIT USD 85.2M, equity USD 1.73B
- 2021: revenue USD 563.0M, EBIT USD 65.0M, equity USD 1.61B
Financial Resilience Score: 7/10
CyberArk benefits from a highly recurring subscription revenue model that provides strong cash flow visibility and customer retention. The company maintains healthy operating margins and a debt-free balance sheet, enabling consistent R&D investment and strategic M&A. However, it operates in a highly competitive cybersecurity landscape where budget sensitivity and competition from larger platform vendors pose ongoing challenges.
Key strengths: Recurring subscription revenue model, Debt-free balance sheet, Market leadership in privileged access management, Strong operating cash flow generation
Risk factors: Intense competition from hyperscalers and legacy security vendors, Customer budget constraints during macroeconomic downturns, Integration and execution risks from frequent acquisitions, Rapidly evolving threat landscape requiring continuous innovation
Revenue by geography
- Americas: 55%
- EMEA: 30%
- APJC: 15%
Revenue by product/service
- Privileged Access Management: 60%
- Cloud & Secrets Management: 25%
- Professional Services & Other: 15%
Workforce by country
- United States: 1200
- Israel: 800
- Other: 450
- United Kingdom: 150
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.