New CyberArk Research: Rapid Growth of Machine Identities, AI Adoption and Cloud Native Innovations Leave Organizations More Vulnerable to Attacks

Rhea-AI Summary

CyberArk (NASDAQ: CYBR) has released its 2025 State of Machine Identity Security Report, revealing significant challenges in machine identity security. The study, surveying over 1,200 security leaders, shows that 72% of organizations experienced certificate-related outages in the past year, with 67% facing monthly outages and 45% weekly outages.

The report highlights that 50% of security leaders reported security incidents due to compromised machine identities, leading to application launch delays (51%), customer experience impacts (44%), and unauthorized data access (43%). Machine identities are projected to increase by up to 150% over the next year, with 81% of security leaders viewing machine identity security as crucial for AI protection.

Key challenges include lack of cohesive security strategy (42%), adapting to shorter machine identity lifecycles (37%), and potential exploitation of stolen identities (37%). Responsibilities for security are split among security (53%), development (28%), and platform (14%) teams.

Positive

• 92% of organizations have implemented some form of machine identity security program
• Growing awareness of machine identity security importance for AI protection (81% of leaders)
• Clear identification of security challenges enabling targeted improvements

Negative

• 72% of organizations experienced certificate-related outages, with significant increase in frequency
• 50% reported security breaches from compromised machine identities
• Lack of cohesive machine identity security strategy in most organizations
• Split responsibilities between teams creating security management challenges

81% of security leaders view securing machine identities as vital to protecting the future of AI

NEWTON, Mass. & PETACH TIKVA, Israel--(BUSINESS WIRE)-- CyberArk (NASDAQ: CYBR), the global leader in identity security, today released its 2025 State of Machine Identity Security Report, revealing that machine identity-related security incidents are on the rise, as the volume and complexity of machine identities continue to multiply. Seventy-two percent of organizations have experienced at least one certificate-related outage in the past year, marking a significant increase compared to previous years. Additionally, 50% of security leaders reported security incidents or breaches due to compromised machine identities.

Machine identities—including certificates, keys, secrets and access tokens—are exploding amid the rise of artificial intelligence (AI) adoption, cloud native innovations and shorter machine identity lifespans. As a result, organizations are struggling to keep up and siloed approaches to securing machine identities creates its own risks. The report shows the substantial business impacts of not securing machine identities effectively, leaving organizations vulnerable to costly outages and breaches.

2025 State of Machine Identity Security Report Highlights

CyberArk surveyed more than 1,200 security leaders across multiple countries. Key findings from the research include:

• Frequency of outages surges dramatically – Nearly three-quarters (72%) of respondents have suffered at least one certificate-related outage in the past year, with 67% experiencing outages monthly and 45% weekly. This marks a substantial jump from 2022, when 26% reported outages monthly and only 12% weekly.
  
  
• Machine identity-related compromises have substantial business impacts – Half (50%) of security leaders reported security incidents or breaches linked to compromised machine identities in the last year, which led to delays in application launches (51%), outages impacting customer experience (44%) and unauthorized access to sensitive data or networks (43%).
  
  
• Machine identity growth continues at pace – Machine identities outnumber human identities by an overwhelming margin and continue to grow quickly. Seventy-nine percent of security leaders anticipate the number of machine identities in their organization to increase, by as much as 150% over the next year.
  
  
• AI looms large on the machine identity threat horizon – As AI systems become a growing target for cyberattacks, 81% of security leaders believe machine identity security will play a vital role in securing the future of AI. Seventy-nine percent say securing AI models from manipulation and theft means putting greater emphasis on the need for machine identity authentication and authorization.
  
  
• Machine identity security programs lack maturity – While 92% of security leaders report some form of machine identity security program, many of these programs lack maturity. Respondents reveal the lack of a cohesive machine identity security strategy as their biggest concern (42%), followed by challenges adapting to shorter machine identity lifecycles (37%) and the possibility of adversaries exploiting stolen machine identities (37%).
  
  
• Siloed approach to securing machine identities creates risk – Where multiple tools to secure machine identities exist within organizations, inefficiencies, risk and management challenges are created. For example, responsibilities for preventing machine identity-related compromises were found to be split among security (53%), development (28%) and platform (14%) teams.

“Machine identities of all kinds will continue to skyrocket over the next year, bringing not only greater complexity but also increased risks,” said Kurt Sand, GM of Machine Identity Security at CyberArk. “Cybercriminals are increasingly targeting machine identities – from API keys to code signing certificates – to exploit vulnerabilities, compromise systems and disrupt critical infrastructure, leaving even the most advanced businesses dangerously exposed. This research highlights the urgency for security leaders to establish a comprehensive, end-to-end machine identity security strategy that tackles the non-human identities that matter most to prevent potential attacks and outages—especially as AI agents continue to rise and the quantum attack timeline shortens.”

To read the full report and access additional findings, please visit https://www.cyberark.com/2025-state-of-machine-identity-security-report/.

Additional Resources:

• Blog post
• Infographic

¹Research was conducted by Censuswide among a sample of 1,201 security and IT decision-makers in organizations with 500 or more employees across the USA, UK, Australia, France, Germany and Singapore. The data was collected between January 9, 2025 and January 17, 2025. Censuswide abides by and employs members of the Market Research Society and follows the MRS code of conduct and ESOMAR principles. Censuswide is also a member of the British Polling Council.

About CyberArk

CyberArk (NASDAQ: CYBR) is the global leader in identity security, trusted by organizations around the world to secure human and machine identities in the modern enterprise. CyberArk’s AI-powered Identity Security Platform applies intelligent privilege controls to every identity with continuous threat prevention, detection and response across the identity lifecycle. With CyberArk, organizations can reduce operational and security risks by enabling zero trust and least privilege with complete visibility, empowering all users and identities, including workforce, IT, developers and machines, to securely access any resource, located anywhere, from everywhere. Learn more at cyberark.com.

Copyright © 2025 CyberArk Software. All Rights Reserved. All other brand names, product names, or trademarks belong to their respective holders.

View source version on businesswire.com: https://www.businesswire.com/news/home/20250313883089/en/

Investor Relations:

Srinivas Anantha, CFA

CyberArk

617-558-2132

ir@cyberark.com

Media:

Rachel Gardner

CyberArk

603-531-7229

press@cyberark.com

Source: CyberArk

FAQ

What percentage of organizations experienced machine identity-related security breaches in 2025 according to CyberArk (CYBR)?

50% of organizations reported security incidents or breaches linked to compromised machine identities in the last year.

How much are machine identities expected to grow in organizations according to the CyberArk (CYBR) 2025 report?

79% of security leaders expect machine identities to increase by up to 150% over the next year.

What are the main business impacts of machine identity compromises reported by CyberArk (CYBR)?

Key impacts include application launch delays (51%), outages affecting customer experience (44%), and unauthorized access to sensitive data or networks (43%).

How many organizations experienced certificate-related outages in 2025 according to CyberArk (CYBR)?

72% of organizations experienced at least one certificate-related outage, with 67% facing monthly outages and 45% weekly outages.

What are the top challenges in machine identity security according to the CyberArk (CYBR) 2025 report?

Main challenges include lack of cohesive security strategy (42%), adapting to shorter machine identity lifecycles (37%), and risk of adversaries exploiting stolen machine identities (37%).