CyberArk Bolsters Identity Security Platform with New Capabilities for Human, AI and Machine Identities

Rhea-AI Summary

CyberArk (NASDAQ: CYBR) announced significant enhancements to its Identity Security Platform at IMPACT 2025 Conference. The platform now provides comprehensive security controls for human, AI, and machine identities.

Key innovations include:

• CyberArk CORA AI™ improvements with AI-based session audits, policy recommendations, and natural language interface
• Secure AI Agents solution (available end of 2025) for managing AI agent privileged access
• Secure Workforce Unmanaged Endpoints for extending identity security to unmanaged devices
• Modern Identity Governance & Administration (IGA) powered by Zilla Security, promising 80% reduction in access review effort
• Secure Workload Access for machine identity lifecycle management
• New solutions for secrets management, certificate lifecycle automation, and cloud-native security across GCP, AWS, and Azure

Positive

• Platform expansion to cover emerging AI security market
• New IGA solution reduces access review effort by 80%
• Comprehensive cloud coverage across major providers (AWS, Azure, GCP)
• Enhanced automation and efficiency in identity management

Negative

• Key AI Agents solution won't be available until end of 2025
• Secure Workload Access solution still in early availability phase

Insights

Cybersecurity Analyst

CyberArk's platform expansion represents a strategic evolution in identity security architecture, directly addressing three critical vulnerability vectors that organizations face today. The unified approach to securing human, machine, and AI identities acknowledges the fundamental security principle that identity has become the new perimeter in distributed environments.

The introduction of AI agent security capabilities is particularly forward-thinking. With Secure AI Agents (scheduled for late 2025), CyberArk is positioning itself ahead of an emerging attack surface that few vendors have addressed comprehensively. As organizations deploy autonomous AI agents with privileged access capabilities, securing these new identity types becomes critical to prevent novel attack vectors.

From a technical perspective, the zero standing privilege approach represents best-practice implementation of the principle of least privilege. By ensuring entitlements don't exist by default, this feature significantly reduces the attack surface even when credentials are compromised - addressing a common weakness in traditional privilege management approaches.

The enhancements to machine identity management are equally important as most security incidents now involve compromised machine identities. The new Secure Workload Access solution fills a crucial gap in the identity security lifecycle, particularly as organizations struggle with the proliferation of service accounts, API keys, and certificates in cloud-native environments.

Enterprise Technology Strategist

CyberArk's platform expansion demonstrates a comprehensive response to the changing identity landscape that enterprises face across their digital transformation initiatives. This announcement positions CyberArk to capitalize on three convergent market trends: the fragmentation of identity security tools, the explosion of machine identities, and the emergence of autonomous AI systems requiring secured access.

The unified platform approach addresses a significant pain point for security leaders - the integration challenges of maintaining separate tools for different identity types. By consolidating previously siloed capabilities under one platform, CyberArk offers potential operational efficiencies for security teams facing resource constraints.

Particularly noteworthy is CyberArk's strategic foresight in developing solutions for AI agent security before widespread enterprise adoption of autonomous AI systems. This positions the company to establish early leadership in an emerging category, potentially creating competitive differentiation and first-mover advantages.

The emphasis on SaaS delivery for services like the Secrets Rotation Service aligns with enterprise preferences for consumption-based security tools that reduce operational overhead. The modern approach to Identity Governance claiming 80% reduction in access review effort and 5x faster deployment directly addresses cost and complexity issues that have plagued traditional IGA implementations.

This comprehensive platform expansion strengthens CyberArk's enterprise value proposition at a time when identity security has become a board-level concern and budget priority.

Unified platform provides the most comprehensive capabilities for securing all identities in an era of escalating threats and rapid change

BOSTON--(BUSINESS WIRE)-- CyberArk (NASDAQ: CYBR), the global leader in identity security, today at its IMPACT 2025 Conference, announced new solutions and capabilities across its Identity Security Platform, enabling organizations to secure all identities – human, AI and machine – with the right level of privilege controls. The innovations add expanded, deeper functionality across human and machine identities and will extend identity security capabilities to AI Agents – all from a unified platform.

The CyberArk Identity Security Platform

In today's exponential era, characterized by an escalating threat landscape, proliferation of human privileges, rise of machine identities and the emergence of Agentic AI, identities continue to be a primary target for attackers. The innovations introduced by CyberArk are in response to these market dynamics, all of which create increased risk for organizations. By securing every identity – human, AI and machine – with best-in-class security controls, enterprises can protect their critical assets, mitigate risk and increase business resiliency.

"Security teams require identity security capabilities that extend to all identities, including human, AI and machine, because any identity can become privileged and all identities carry risk," said Peretz Regev, Chief Product and Technology Officer, CyberArk. "Only CyberArk provides core capabilities across discovery and context, privilege controls, policy automation, lifecycle management and governance and compliance from a single, unified platform. Our approach enables organizations to consolidate previously siloed capabilities to truly secure all identities, along with optimal efficiency and effectiveness."

New Platform Capabilities

• CyberArk CORA AI™, which boosts platform performance, efficiency and security, has been enhanced with the following:
  • AI-based session audits for deeper insights
  • Policy recommendations based on activity patterns and best practices
  • Natural language interface for configuration and setup
  • Troubleshooting and diagnostic support—at the speed of AI
• Control Center is a new centralized hub that provides guided workflows to streamline administration, manage access across environments, and improve both end-user and admin experiences.
• Discovery and Context has been enhanced with continuous discovery across privilege accounts, secrets, certificates, agents, workloads and Active Directory accounts, through native scanners and agents, as well as through integration with 3rd parties such as Wiz.

New for Securing AI Agents

• Secure AI Agents¹ is a new solution that will allow organizations to implement identity-first security for agentic AI to address the unique challenges and evolving attack surface posed by millions of autonomous, adaptable and interactive AI agents needing privileged access to dynamic AI-driven ecosystems. The new solution will leverage the breadth of intelligent privilege controls offered by the CyberArk Identity Security Platform to enable:
  • Discovery and context to provide observability into known and shadow agents, and agentic infrastructure
  • Secure access management controls to enforce least privilege and manage credentials for agents with privileged access
  • Threat detection and response privilege controls for real-time behavioral monitoring to detect drift and prevent misuse
  • Automated lifecycle management to help eliminate stale or excessive access for the entire agentic population
  • Governance to ensure AI Agents operate in compliance with organizational and regulatory requirements.
• CyberArk Labs AI Agent Toolset is a new set of open-source tools designed to assist developers in building AI agent environments by providing a view of how they communicate and highlight potential risks that may require attention. It is available on the CyberArk GitHub account.

New for Securing Human Identities

• Secure Workforce Unmanaged Endpoints is a new solution that extends enterprise-grade identity security to unmanaged devices without requiring IT to control them through non-intrusive, layered identity security controls. In addition, Secure Web Sessions now delivers deep, continuous protection for unmanaged devices for SaaS and browser-based access.
• Just-in-Time and Zero Standing Privilege Access are now extended to enable granular control for multiple roles accessing cloud infrastructure, services and workloads. With Zero Standing Privilege, entitlements don't exist, so there are no permissions or privileges, safeguarding identities even if credentials are compromised.
• Privilege Controls include new modern session management capabilities that reduce ownership costs and enhance the user experience for managing access to infrastructure and cloud with a lower-footprint connector.
• Modern Identity Governance & Administration (IGA), powered by Zilla Security:
  • Accelerates provisioning and access reviews.
  • Reduces access review effort by 80%.
  • Delivers five times faster deployment than legacy IGA systems.

New for Securing Machine Identities

• Secure Workload Access² is a new solution that will allow security teams to gain visibility and control over the entire machine identity lifecycle, from creation and governance to automated rotation and renewal.
• Secure All Secrets is a new solution that centralizes secrets management across hybrid and multi-cloud environments, with a new authenticator wizard and improved edge performance.
• Policy Automation is enhanced with Secrets Rotation Service, a new SaaS-based approach to managing credentials and policies across environments. This service secures privileged credentials stored in CyberArk Privileged Access Manager, improving security, compliance and efficiency by enforcing policies and regulations.
• Secure Certificates and PKI is a new solution that automates certificate lifecycle management and prepares enterprises for post-quantum cryptography.
• Secure Cloud-Native Secrets and Certificates now discovers and manages native cloud secrets across GCP, AWS, and Azure—with one-click remediation of unmanaged AWS secrets.

¹ Solution capabilities will be available to customers at the end of 2025.

²CyberArk Secure Workload Access Solution is currently in early availability. An early availability program enables select customers to access technologies before they become generally available.

About CyberArk
CyberArk (NASDAQ: CYBR) is the global leader in identity security, trusted by organizations around the world to secure human and machine identities in the modern enterprise. CyberArk's AI-powered Identity Security Platform applies intelligent privilege controls to every identity with continuous threat prevention, detection and response across the identity lifecycle. With CyberArk, organizations can reduce operational and security risks by enabling zero trust and least privilege with complete visibility, empowering all users and identities, including workforce, IT, developers and machines, to securely access any resource, located anywhere, from everywhere. Learn more at cyberark.com.

Copyright © 2025 CyberArk Software. All Rights Reserved. All other brand names, product names, or trademarks belong to their respective holders. This release is for informational purposes only, and represents CyberArk's current view of its innovation direction. It is not a commitment or an obligation to deliver any product or functionality. The development, release, timing, if any, of any future innovation or product remains at our sole discretion and may be subject to applicable fees.

Cautionary Language Concerning Forward-Looking Statements
This release contains forward-looking statements, which express the current beliefs and expectations of CyberArk's (the "Company") management. In some cases, forward-looking statements may be identified by terminology such as "believe," "may," "estimate," "continue," "anticipate," "intend," "should," "plan," "expect," "predict," "potential" or the negative of these terms or other similar expressions. Such statements involve a number of known and unknown risks and uncertainties that could cause the Company's future results, levels of activity, performance or achievements to differ materially from the results, levels of activity, performance or achievements expressed or implied by such forward-looking statements. Important factors that could cause or contribute to such differences include, but are not limited to: risks related to the Company’s acquisitions of Venafi Holdings, Inc. (“Venafi”) and Zilla Security Inc. (“Zilla”), including potential impacts on operating results; challenges in retaining and hiring key personnel and maintaining business; risks related to the successful integration of Venafi’s or Zilla’s operations and the ability to realize anticipated benefits of the combined operations; disruption of the current plans and operations of the Company and/or Zilla as a result of the announcement of the transaction, including risks of cyberattacks; changes to the drivers of the Company’s growth and the Company’s ability to adapt its solutions to the information security market changes and demands, including artificial intelligence (“AI”); the Company’s ability to acquire new customers and maintain and expand the Company’s revenues from existing customers; intense competition within the information security market; real or perceived security vulnerabilities, gaps, or cybersecurity breaches of the Company, or the Company’s customers’ or partners’ systems, solutions or services; risks related to the Company’s compliance with privacy, data protection and AI laws and regulations; the Company’s ability to successfully operate its business as a subscription company and fluctuation in its quarterly results of operations; the Company’s reliance on third-party cloud providers for its operations and software-as-a-service (“SaaS”) solutions; the Company’s ability to hire, train, retain and motivate qualified personnel; the Company’s ability to effectively execute its sales and marketing strategies; the Company’s ability to find, complete, fully integrate or achieve the expected benefits of additional strategic acquisitions; the Company’s ability to maintain successful relationships with channel partners, or if the Company’s channel partners fail to perform; risks related to sales made to government entities; prolonged economic uncertainties or downturns; the Company’s history of incurring net losses, the Company’s ability to generate sufficient revenue to achieve and sustain profitability and the Company’s ability to generate cash flow from operating activities; regulatory and geopolitical risks associated with the Company’s global sales and operations; risks related to intellectual property claims; fluctuations in currency exchange rates; the ability of the Company’s products to help customers achieve and maintain compliance with government regulations or industry standards; the Company’s ability to protect its proprietary technology and intellectual property rights; risks related to using third-party software, such as open-source software; risks related to stock price volatility or activist shareholders; any failure to retain the Company’s “foreign private issuer” status or the risk that the Company may be classified, for U.S. federal income tax purposes, as a “passive foreign investment company”; changes in tax laws; the Company’s expectation to not pay dividends on the Company’s ordinary shares for the foreseeable future; risks related to the Company’s incorporation and location in Israel, including wars and other hostilities in the Middle East; and other factors discussed under the heading “Risk Factors” in the Company’s most recent annual report on Form 20-F filed with the Securities and Exchange Commission. Forward-looking statements in this release are made pursuant to the safe harbor provisions contained in the U.S. Private Securities Litigation Reform Act of 1995. These forward-looking statements are made only as of the date hereof, and the Company undertakes no obligation to update or revise the forward-looking statements, whether as a result of new information, future events or otherwise, except as required by applicable law.

View source version on businesswire.com: https://www.businesswire.com/news/home/20250410380855/en/

Investor Relations:

Srinivas Anantha, CFA

CyberArk

617-558-2132

ir@cyberark.com



Media:

Rachel Gardner

CyberArk

603-531-7229

press@cyberark.com

Source: CyberArk

FAQ

What new AI capabilities did CyberArk (CYBR) announce at IMPACT 2025?

CyberArk announced enhanced CORA AI with AI-based session audits, policy recommendations, and natural language interface. They also introduced Secure AI Agents solution for managing AI agent privileged access, available end of 2025.

How does CyberArk's new IGA solution improve efficiency?

CyberArk's Modern Identity Governance & Administration (IGA), powered by Zilla Security, reduces access review effort by 80% and offers 5x faster deployment compared to legacy systems.

What cloud security features did CyberArk (CYBR) introduce?

CyberArk introduced Secure Cloud-Native Secrets and Certificates management across GCP, AWS, and Azure, featuring one-click remediation of unmanaged AWS secrets.

How does CyberArk's new Secure Workforce Unmanaged Endpoints solution work?

The solution extends enterprise-grade identity security to unmanaged devices without requiring IT control, using non-intrusive, layered identity security controls and continuous protection for SaaS access.