- \n
- Machine identities outnumber human identities by 82 to 1.<\/i><\/strong><\/li>\n<\/ul>\n
- \n
- Automated discovery and context-driven approaches are needed to meet complex machine identity security challenges.<\/i><\/strong><\/li>\n<\/ul>\n
- \n
- CyberArk\u2019s platform enhancements help security teams easily find, manage and secure machine identities across the enterprise.<\/i><\/strong><\/li>\n<\/ul>\n
\n\u00a0<\/p>\n
LONG BEACH, Calif.–(BUSINESS WIRE<\/a>)–CyberArk IMPACT World Tour 2025–<\/strong>CyberArk<\/a> (NASDAQ: CYBR<\/a>), the global leader in identity security<\/a>, today announced new discovery and context capabilities across its Machine Identity Security portfolio<\/a>. The enhancements enable security teams to automatically find, understand and secure machine identities \u2013 spanning certificates, keys, secrets, workloads and more \u2013 reducing risk and simplifying compliance at scale.<\/p>\n
\nMachine identities outnumber human identities by an estimated 82 to 1<\/a>, driven by increased AI adoption and cloud native growth. As a result, machine identity-related security incidents are on the rise, with 72% of security leaders reporting certificate-related outages and 50% experiencing security incidents or breaches from compromised machine identities, according to CyberArk research<\/a>. Manual processes can no longer keep up, and organizations need an automated discovery and context-driven approach to stay ahead.<\/p>\n
\n\u201cImplementing machine identity security programs has become increasingly complex as organizations grapple with shrinking certificate lifespans, the rise of AI agents, vault sprawl and vulnerable software supply chains. With these new discovery, context and remediation capabilities, customers gain the visibility and control they need to tame sprawl, enforce policy and secure their environments more efficiently,\u201d said Kurt Sand, GM of Machine Identity Security at CyberArk. \u201cThis milestone, just one year after our acquisition of Venafi<\/a>, marks a significant step forward in our commitment to delivering the industry\u2019s most comprehensive, end-to-end machine identity security solution.\u201d<\/p>\n
\nCyberArk\u2019s expanded Machine Identity Security portfolio delivers centralized visibility, automated policy enforcement and context-driven insights to help organizations monitor and secure every machine identity, anywhere, across the enterprise. Key enhancements include:<\/p>\n
CyberArk Secrets Hub<\/b><\/a><\/p>\n
- \n
- Discovery and Context for HashiCorp Vault<\/b>1<\/sup> \u2013 Helps address critical vault sprawl challenges by providing visibility into dispersed HashiCorp Vault instances and ensuring enterprise-wide policy compliance without disrupting developer workflows.\n<\/li>\n<\/ul>\n
- \n
- Risk Management and Remediation Dashboard<\/b>2<\/sup>\u2013 Centralizes observability across market-leading secrets vaults and integrates third-party scanner data to identify high-risk areas, enabling organizations to prioritize remediation and track compliance progress.\n<\/li>\n<\/ul>\n
CyberArk Certificate Manager, SaaS<\/b><\/a><\/p>\n
- \n
- CA\/B Forum TLS Certificate (47-day) Dashboard<\/b>1<\/sup> \u2013 Provides real-time visibility into certificate expiration timelines, renewal projections and certificate authority usage to help organizations prepare for reduced TLS certificate lifespans (from 398 days today to 200 days in 2026, 100 days in 2027 and 47 days by 2029), allowing them to easily manage renewals and prevent outages.\n<\/li>\n<\/ul>\n
- \n
- Code Sign Management, Policy Enforcement and Deep DevOps Integrations<\/b>2<\/sup>\u2013 Provide automated, policy-enforced code signing and governance alongside certificate lifecycle management to reduce infrastructure overhead, accelerate adoption and help ensure only trusted, compliant software is released.\n<\/li>\n<\/ul>\n
CyberArk SSH Manager for Machines<\/b><\/a><\/p>\n
- \n
- New Authorization and Policy Controls<\/b>1<\/sup> \u2013 Grant real-time authorization tracking and discovery for centralized visibility, risk reduction and audit compliance to help better manage SSH key sprawl and unmitigated access.\n<\/li>\n<\/ul>\n
\nTo learn more about the new capabilities, in addition to upcoming news and previews related to CyberArk\u2019s machine identity security solutions:<\/p>\n
- \n
- \nWatch the keynote at CyberArk IMPACT World Tour 2025 in Long Beach<\/b><\/a> for demos of the new features (available live and on-demand)<\/p>\n<\/li>\n
- \nJoin CyberArk\u2019s Securing the New Frontier of Agentic AI<\/b><\/a>virtual event on November 4 for new updates on the CyberArk Secure AI Agents Solution<\/a> (available live and on-demand)<\/p>\n<\/li>\n
- \nJoin CyberArk\u2019s Workload Identity Day Zero<\/b><\/a> on November 10 in Atlanta for new updates on the CyberArk Secure Workload Access Solution<\/a> (available on-demand)<\/p>\n<\/li>\n<\/ul>\n
About CyberArk<\/b><\/p>\n
\nCyberArk (NASDAQ: CYBR<\/a>) is the global leader in identity security, trusted by organizations around the world to secure human and machine identities in the modern enterprise. CyberArk\u2019s AI-powered Identity Security Platform applies intelligent privilege controls to every identity with continuous threat prevention, detection and response across the identity lifecycle. With CyberArk, organizations can reduce operational and security risks by enabling zero trust and least privilege with complete visibility, empowering all users and identities, including workforce, IT, developers and machines, to securely access any resource, located anywhere, from everywhere. Learn more at cyberark.com<\/a>.<\/p>\n
1<\/sup>Available now
\n
<\/i>2<\/sup>Available by late 2025<\/i><\/p>\nCopyright \u00a9 2025 CyberArk Software. All Rights Reserved. All other brand names, product names, or trademarks belong to their respective holders. This release is for informational purposes only, and represents CyberArk’s current view of its innovation direction. It is not a commitment or an obligation to deliver any product or functionality. The development, release, timing, if any, of any future innovation or product remains at our sole discretion and may be subject to applicable fees.<\/i><\/p>\n
Cautionary Language Concerning Forward-Looking Statements<\/b><\/p>\n
\nThis release contains forward-looking statements, which express the current beliefs and expectations of CyberArk’s (the “Company”) management. In some cases, forward-looking statements may be identified by terminology such as “believe,” “may,” “estimate,” “continue,” “anticipate,” “intend,” “should,” “plan,” “expect,” “predict,” “potential” or the negative of these terms or other similar expressions. Such statements involve a number of known and unknown risks and uncertainties that could cause the Company’s future results, levels of activity, performance or achievements to differ materially from the results, levels of activity, performance or achievements expressed or implied by such forward-looking statements. Important factors that could cause or contribute to such differences include, but are not limited to: risks related to the Company\u2019s acquisitions of Venafi Holdings, Inc. (\u201cVenafi\u201d) and Zilla Security Inc. (\u201cZilla\u201d), including potential impacts on operating results; challenges in retaining and hiring key personnel and maintaining business; risks related to the successful integration of Venafi\u2019s or Zilla\u2019s operations and the ability to realize anticipated benefits of the combined operations; disruption of the current plans and operations of the Company and\/or Zilla as a result of the announcement of the transaction, including risks of cyberattacks; changes to the drivers of the Company\u2019s growth and the Company\u2019s ability to adapt its solutions to the information security market changes and demands, including artificial intelligence (\u201cAI\u201d); the Company\u2019s ability to acquire new customers and maintain and expand the Company\u2019s revenues from existing customers; intense competition within the information security market; real or perceived security vulnerabilities, gaps, or cybersecurity breaches of the Company, or the Company\u2019s customers\u2019 or partners\u2019 systems, solutions or services; risks related to the Company\u2019s compliance with privacy, data protection and AI laws and regulations; the Company\u2019s ability to successfully operate its business as a subscription company and fluctuation in its quarterly results of operations; the Company\u2019s reliance on third-party cloud providers for its operations and software-as-a-service (\u201cSaaS\u201d) solutions; the Company\u2019s ability to hire, train, retain and motivate qualified personnel; the Company\u2019s ability to effectively execute its sales and marketing strategies; the Company\u2019s ability to find, complete, fully integrate or achieve the expected benefits of additional strategic acquisitions; the Company\u2019s ability to maintain successful relationships with channel partners, or if the Company\u2019s channel partners fail to perform; risks related to sales made to government entities; prolonged economic uncertainties or downturns; the Company\u2019s history of incurring net losses, the Company\u2019s ability to generate sufficient revenue to achieve and sustain profitability and the Company\u2019s ability to generate cash flow from operating activities; regulatory and geopolitical risks associated with the Company\u2019s global sales and operations; risks related to intellectual property claims; fluctuations in currency exchange rates; the ability of the Company\u2019s products to help customers achieve and maintain compliance with government regulations or industry standards; the Company\u2019s ability to protect its proprietary technology and intellectual property rights; risks related to using third-party software, such as open-source software; risks related to stock price volatility or activist shareholders; any failure to retain the Company\u2019s \u201cforeign private issuer\u201d status or the risk that the Company may be classified, for U.S. federal income tax purposes, as a \u201cpassive foreign investment company\u201d; changes in tax laws; the Company\u2019s expectation to not pay dividends on the Company\u2019s ordinary shares for the foreseeable future; risks related to the Company\u2019s incorporation and location in Israel, including wars and other hostilities in the Middle East; and other factors discussed under the heading \u201cRisk Factors\u201d in the Company\u2019s most recent annual report on Form 20-F filed with the Securities and Exchange Commission. Forward-looking statements in this release are made pursuant to the safe harbor provisions contained in the U.S. Private Securities Litigation Reform Act of 1995. These forward-looking statements are made only as of the date hereof, and the Company undertakes no obligation to update or revise the forward-looking statements, whether as a result of new information, future events or otherwise, except as required by applicable law.<\/p>\n
<\/p>\n
View source version on businesswire.com: <\/span>https:\/\/www.businesswire.com\/news\/home\/20251007133485\/en\/<\/a><\/span><\/p>\n
Investor Relations:
\n<\/b>
Kelsey Turcotte
\n
CyberArk
\n
617-558-2132
\n
ir@cyberark.com<\/a><\/p>\nMedia:
\n<\/b>
Rachel Gardner
\n
CyberArk
\n
603-531-7229
\n
press@cyberark.com<\/a><\/p>\nKEYWORDS:<\/b> Massachusetts California Georgia United States North America Israel Middle East<\/p>\n
INDUSTRY KEYWORDS:<\/b> Technology Mobile\/Wireless Security Other Technology Telecommunications Software Internet Hardware Artificial Intelligence<\/p>\n
- \nJoin CyberArk\u2019s Securing the New Frontier of Agentic AI<\/b><\/a>virtual event on November 4 for new updates on the CyberArk Secure AI Agents Solution<\/a> (available live and on-demand)<\/p>\n<\/li>\n
- \nWatch the keynote at CyberArk IMPACT World Tour 2025 in Long Beach<\/b><\/a> for demos of the new features (available live and on-demand)<\/p>\n<\/li>\n
- New Authorization and Policy Controls<\/b>1<\/sup> \u2013 Grant real-time authorization tracking and discovery for centralized visibility, risk reduction and audit compliance to help better manage SSH key sprawl and unmitigated access.\n<\/li>\n<\/ul>\n
- Code Sign Management, Policy Enforcement and Deep DevOps Integrations<\/b>2<\/sup>\u2013 Provide automated, policy-enforced code signing and governance alongside certificate lifecycle management to reduce infrastructure overhead, accelerate adoption and help ensure only trusted, compliant software is released.\n<\/li>\n<\/ul>\n
- CA\/B Forum TLS Certificate (47-day) Dashboard<\/b>1<\/sup> \u2013 Provides real-time visibility into certificate expiration timelines, renewal projections and certificate authority usage to help organizations prepare for reduced TLS certificate lifespans (from 398 days today to 200 days in 2026, 100 days in 2027 and 47 days by 2029), allowing them to easily manage renewals and prevent outages.\n<\/li>\n<\/ul>\n
- Risk Management and Remediation Dashboard<\/b>2<\/sup>\u2013 Centralizes observability across market-leading secrets vaults and integrates third-party scanner data to identify high-risk areas, enabling organizations to prioritize remediation and track compliance progress.\n<\/li>\n<\/ul>\n
- Discovery and Context for HashiCorp Vault<\/b>1<\/sup> \u2013 Helps address critical vault sprawl challenges by providing visibility into dispersed HashiCorp Vault instances and ensuring enterprise-wide policy compliance without disrupting developer workflows.\n<\/li>\n<\/ul>\n
- CyberArk\u2019s platform enhancements help security teams easily find, manage and secure machine identities across the enterprise.<\/i><\/strong><\/li>\n<\/ul>\n
- Automated discovery and context-driven approaches are needed to meet complex machine identity security challenges.<\/i><\/strong><\/li>\n<\/ul>\n
![\"Logo\"](\"https:\/\/mms.businesswire.com\/media\/20251007133485\/en\/2424624\/3\/CyberArk_Logo_Vertical_Navy_Tag-R_2025.jpg\"){kind=logo}
<\/td>\n<\/tr>\n