CyberArk Software Ltd.

01. Findings

CyberArk maintains a robust public security posture with extensive certifications ^[12]. The company holds SOC 2 and SOC 3 reports, ISO/IEC 27001:2022, ISO/IEC 27017:2015, ISO/IEC 27018:2019, ISO 9001:2015, ISO/IEC 42001:2023, ISO 22301, CSA STAR, Cyber Essentials, FedRAMP High, Common Criteria, HIPAA, and IRAP ^[13]. These attestations demonstrate compliance with rigorous information security and privacy standards ^[14].

02. Events

• [breach] Drift Token Breach Exposure

  CyberArk confirmed exposure in the ongoing Drift token breach via a Salesloft GitHub hack in September 2025.

  Sep 9, 2025, 12:00 AM · Source

Deterministic outside-in checks run directly against the vendor's domain - not inferred from press or marketing pages.

Last observed: Aug 12, 2026, 05:33 AM

• TLS certificate

  Certificate expires in 56 days

  lowPass

• Security headers

  6/6 security headers present

  infoPass

• Email authentication (SPF / DMARC)

  infoPass

04. Company

CyberArk Software Ltd. is an Israeli information security company and a subsidiary of Palo Alto Networks ^[1]. Founded in 1999, the firm is headquartered in Petach-Tikva, Israel ^[2][3]. It employs between 1,001 and 5,000 people ^[4]. CyberArk reported US$1.00 billion in revenue for 2024 ^[5]. The company serves various industries including banking, critical infrastructure, government, healthcare, and manufacturing ^[6].

05. Product

CyberArk is the global leader in Identity Security, centered on privileged access management ^[7]. Its platform secures human and machine identities across business applications, distributed workforces, hybrid cloud workloads, and the DevOps lifecycle ^[8]. Key offerings include the Privileged Account Security Platform, Identity Lifecycle Management, Secure Web Sessions, and Secrets Manager ^[9][10]. The solution helps organizations implement least privilege, protect credentials, and automate access reviews ^[11].

06. Recent News

In September 2025, CyberArk confirmed exposure in the ongoing Drift token breach, which originated from a Salesloft GitHub hack ^[15]. The incident impacted dozens of leading cybersecurity vendors, including Tenable and Proofpoint ^[16]. No direct infrastructure breaches or material legal actions against CyberArk were identified in the provided sources ^[17]. The company continues to operate its security platform without reported service outages ^[18].

08. Vendor response

Content in this section is vendor-supplied and does not alter Vendorisk.ai's risk tier or evaluation.

09. Assessment history

1. 8/12/2026, 5:33:38 AM · Moderate · 45

Risk delta is hidden until two stored snapshots can be compared.

10. Targeted questions

11. Sources

1. [1] CyberArk Software Ltd. is an Israeli information security company and a subsidiary of Palo Alto Networks. CyberArk - Wikipedia
2. [2] Founded in 1999, the firm is headquartered in Petach-Tikva, Israel. CyberArk Software Ltd Company Profile - CyberArk Software Ltd Overview - GlobalData
3. [3] Founded in 1999, the firm is headquartered in Petach-Tikva, Israel. CyberArk - Wikipedia
4. [4] It employs between 1,001 and 5,000 people. CyberArk
5. [5] CyberArk reported US$1.00 billion in revenue for 2024. CyberArk - Wikipedia
6. [6] The company serves various industries including banking, critical infrastructure, government, healthcare, and manufacturing. CyberArk Software Ltd Company Profile - CyberArk Software Ltd Overview - GlobalData
7. [7] CyberArk is the global leader in Identity Security, centered on privileged access management. CyberArk Software Solutions
8. [8] Its platform secures human and machine identities across business applications, distributed workforces, hybrid cloud workloads, and the DevOps lifecycle.