Vendor dossier // cyberark.com
CyberArk Software Ltd.
Also known as CyberArk · CyberArk Software
Petach-Tikva, Israel
Last updated: Aug 12, 2026, 05:33 AM · Partial / limited public data
Proceed with caution
CyberArk demonstrates a strong security posture with comprehensive certifications like FedRAMP High and ISO 27001 [12][13]. However, the vendor confirmed… Limited public data — verify before relying.
39/100
Moderate RiskRationale
CyberArk demonstrates a strong security posture with comprehensive certifications like FedRAMP High and ISO 27001 [12][13]. However, the vendor confirmed exposure in the September 2025 Drift token breach via a third-party GitHub hack [15]. While this is a third-party incident rather than a direct infrastructure compromise, it introduces supply chain risk [16]. Given the extensive compliance framework and lack of direct breaches, the vendor is rated Moderate Risk [17].
01. Company
CyberArk Software Ltd. is an Israeli information security company and a subsidiary of Palo Alto Networks [1]. Founded in 1999, the firm is headquartered in Petach-Tikva, Israel [2][3]. It employs between 1,001 and 5,000 people [4]. CyberArk reported US$1.00 billion in revenue for 2024 [5]. The company serves various industries including banking, critical infrastructure, government, healthcare, and manufacturing [6].
02. Product
CyberArk is the global leader in Identity Security, centered on privileged access management [7]. Its platform secures human and machine identities across business applications, distributed workforces, hybrid cloud workloads, and the DevOps lifecycle [8]. Key offerings include the Privileged Account Security Platform, Identity Lifecycle Management, Secure Web Sessions, and Secrets Manager [9][10]. The solution helps organizations implement least privilege, protect credentials, and automate access reviews [11].
03.Security & Risk
CyberArk maintains a robust public security posture with extensive certifications [12]. The company holds SOC 2 and SOC 3 reports, ISO/IEC 27001:2022, ISO/IEC 27017:2015, ISO/IEC 27018:2019, ISO 9001:2015, ISO/IEC 42001:2023, ISO 22301, CSA STAR, Cyber Essentials, FedRAMP High, Common Criteria, HIPAA, and IRAP [13]. These attestations demonstrate compliance with rigorous information security and privacy standards [14].
04. Observed posture
Evidence class: observed by us
Deterministic outside-in checks run directly against the vendor's domain - not inferred from press or marketing pages.
Last observed: Aug 12, 2026, 05:33 AM
TLS certificate
Certificate expires in 56 days
lowPassSecurity headers
6/6 security headers present
infoPassEmail authentication (SPF / DMARC)
infoPassDNS presence
05. Events
[breach] Drift Token Breach Exposure
CyberArk confirmed exposure in the ongoing Drift token breach via a Salesloft GitHub hack in September 2025.
Sep 9, 2025, 12:00 AM · Source
06. Recent News
In September 2025, CyberArk confirmed exposure in the ongoing Drift token breach, which originated from a Salesloft GitHub hack [15]. The incident impacted dozens of leading cybersecurity vendors, including Tenable and Proofpoint [16]. No direct infrastructure breaches or material legal actions against CyberArk were identified in the provided sources [17]. The company continues to operate its security platform without reported service outages [18].
07. Citations
- [1] CyberArk Software Ltd. is an Israeli information security company and a subsidiary of Palo Alto Networks. CyberArk - Wikipedia
- [2] Founded in 1999, the firm is headquartered in Petach-Tikva, Israel. CyberArk Software Ltd Company Profile - CyberArk Software Ltd Overview - GlobalData
- [3] Founded in 1999, the firm is headquartered in Petach-Tikva, Israel. CyberArk - Wikipedia
- [4] It employs between 1,001 and 5,000 people. CyberArk
- [5] CyberArk reported US$1.00 billion in revenue for 2024. CyberArk - Wikipedia
- [6] The company serves various industries including banking, critical infrastructure, government, healthcare, and manufacturing. CyberArk Software Ltd Company Profile - CyberArk Software Ltd Overview - GlobalData
- [7] CyberArk is the global leader in Identity Security, centered on privileged access management. CyberArk Software Solutions
- [8] Its platform secures human and machine identities across business applications, distributed workforces, hybrid cloud workloads, and the DevOps lifecycle.
11. Vendor response
Content in this section is vendor-supplied and does not alter Vendorisk.ai's risk tier or evaluation.
Loading claim status
00.Evidence & provenance
32 sources · Generated Aug 12, 2026, 05:33 AM
Expand →Collapse ↑
00.Evidence & provenance
32 sources · Generated Aug 12, 2026, 05:33 AM
Every verdict stores the public sources retrieved for this run. Read our methodology.
- Verdict generated
- Aug 12, 2026, 05:33 AM
Input sources · retrieved Aug 12, 2026, 05:33 AM
Company(8)
- Open source →
CyberArk Software Ltd Company Profile - CyberArk Software Ltd Overview - GlobalData
Company
- Open source →
CyberArk - Wikipedia
Company
Overview | Annual Report 2024
AI-generated assessment based on publicly available sources. Verify critical findings before contractual reliance. Analysis is advisory, not a compliance attestation, and is subject to data availability.