CyberArk Secure Browser Achieves SOC 2 Type 2 Compliance

Rhea-AI Summary

CyberArk (NASDAQ: CYBR) has announced that its CyberArk Secure Browser has achieved SOC 2 Type 2 Compliance, validating its effective controls and processes for securing customer data. As the industry's first identity-centric secure browser, it provides secure access for distributed workforces and unmanaged endpoints to applications while protecting against threats like cookie theft and session takeover.

The browser offers organizations:

• Protection against unauthorized access from compromised identities and endpoints
• A centralized launchpad for accessing all resources and applications
• Safeguards for sensitive data while maintaining compliance requirements

The certification is based on Trust Services Principles established by the American Institute of Certified Public Accountants (AICPA), demonstrating CyberArk's commitment to securing user actions from endpoint to application.

Positive

• Achieved SOC 2 Type 2 compliance, enhancing product credibility and security validation
• First-to-market identity-centric secure browser solution
• Expands security capabilities for distributed workforce and unmanaged endpoints

Negative

• None.

NEWTON, Mass. & PETACH TIKVA, Israel--(BUSINESS WIRE)-- CyberArk (NASDAQ: CYBR), the global leader in identity security, today announced that CyberArk Secure Browser has achieved SOC 2 Type 2 Compliance, underscoring CyberArk’s commitment to apply the right level of privilege controls to secure every user’s action, from endpoint to application. This certification confirms that CyberArk Secure Browser uses effective controls and processes to secure and protect customer data, aligning with strict security standards.

CyberArk Secure Browser is the industry’s first identity-centric secure browser. Designed for distributed workforces and unmanaged endpoints, it provides easy, secure access for every user to any application and enables organizations to secure all access points and user sessions with intelligent privilege controls. This includes safeguarding against pre- and post-authentication threats, such as cookie theft and session takeover, all while maintaining a familiar, seamless and productive user experience.

SOC 2 Type 2 certification is based on the Trust Services Principles established by the American Institute of Certified Public Accountants (AICPA). Find details of all of CyberArk’s compliance and certifications here.

With CyberArk Secure Browser, organizations can:

• Helps to minimize the risk of unauthorized access stemming from the malicious use of compromised identities, endpoints, web sessions and credentials at and beyond the login stage.
• Provide a centralized, consistent and secure launchpad to every resource and application - whether on-premises or SaaS-based - for every workforce identity and every endpoint (managed and unmanaged) across the enterprise.
• Safeguard sensitive data, applications and infrastructure, while still offering access to users from unmanaged endpoints and meeting compliance requirements.

“CyberArk Secure Browser is key for CyberArk customers looking to protect sensitive enterprise data throughout the entire user journey and access lifecycle, at the point of login and beyond. It is vital in reducing risk from SaaS and cloud infrastructure access, where the browser is the only gateway,” said Peretz Regev, Chief Product Officer at CyberArk. “SOC 2 Type 2 compliance reflects our unwavering focus on delivering secure, scalable and efficient identity-centric solutions for modern infrastructures.”

Further Information

• EBook: Elevate Identity Protection With a Secure Enterprise Browser.
• Trust at CyberArk: Find compliance, certification and privacy information here.

About CyberArk
CyberArk (NASDAQ: CYBR) is the global leader in identity security, trusted by organizations around the world to secure human and machine identities in the modern enterprise. CyberArk’s AI-powered Identity Security Platform applies intelligent privilege controls to every identity with continuous threat prevention, detection and response across the identity lifecycle. With CyberArk, organizations can reduce operational and security risks by enabling zero trust and least privilege with complete visibility, empowering all users and identities, including workforce, IT, developers and machines, to securely access any resource, located anywhere, from everywhere. Learn more at cyberark.com.

Copyright © 2025 CyberArk Software. All Rights Reserved. All other brand names, product names, or trademarks belong to their respective holders.

View source version on businesswire.com: https://www.businesswire.com/news/home/20250402289686/en/

Investor Relations:

Srinivas Anantha, CFA

CyberArk

617-558-2132

ir@cyberark.com

Media:

Rachel Gardner

CyberArk

603-531-7229

press@cyberark.com

Source: CyberArk

FAQ

What does CyberArk Secure Browser's SOC 2 Type 2 compliance mean for CYBR customers?

It validates that CYBR's secure browser effectively protects customer data and maintains strict security controls, ensuring reliable security standards for enterprise users.

How does CyberArk Secure Browser protect against security threats?

It safeguards against pre- and post-authentication threats, including cookie theft and session takeover, while securing access points and user sessions with intelligent privilege controls.

What are the main features of CyberArk Secure Browser for enterprise security?

It provides secure access to applications, centralized resource management, and protection for sensitive data across both managed and unmanaged endpoints.

How does CyberArk Secure Browser support distributed workforce security?

It enables secure access to all applications while maintaining compliance, offering a seamless user experience for remote workers using unmanaged endpoints.