Stock Analysis · CyberArk Software Ltd (CYBR)

Overview

CyberArk Software Ltd (CYBR) is a cybersecurity company focused on protecting “privileged access.” In simple terms, it helps organizations control, monitor, and secure the most powerful accounts and credentials in their IT environments—accounts that, if misused, can give an attacker broad control over systems. Its products are generally used by large and mid-sized organizations that need stronger protection for administrator access, remote access, application secrets, and increasingly for identity-related security controls.

CyberArk’s business is largely built around software subscriptions and related support/services. Like many enterprise software companies, it aims to grow recurring revenue over time by expanding within existing customers (adding more users, more systems protected, and more modules) and by winning new customers.

Main revenue sources are typically described in company filings as:

• Subscription revenue (recurring fees for access to software, often delivered via cloud services and/or term licenses)
• Maintenance and support (ongoing support tied to customer deployments)
• Professional services (implementation, training, and advisory work; usually smaller and less recurring than subscriptions)

The company’s reported totals show a business that has scaled meaningfully over the past few years, with annual revenue rising from about $503M (2021) to about $1.361B (2025), alongside continued high spending on product development and go-to-market activities.

Across the years shown, total revenue increases substantially, while the company continues to invest heavily in operating expenses (notably research and development and selling/general/administrative costs). Operating income remains negative in the periods shown, which highlights that CyberArk has prioritized growth and investment over near-term profitability.

Key Figures

Based on the latest metrics shown, CyberArk has an approximate $20.6B market capitalization and a beta of ~0.93, which indicates volatility broadly similar to the overall market in many periods. The company shows ~18.5% year-over-year revenue growth versus an industry median near ~15.3%. Profitability is currently a key difference versus many peers: the latest profit margin is about -10.8% (industry median about +6.9%). Financial leverage, measured as debt-to-equity ~50.9%, is higher than the industry median (about ~19.8%). At the same time, the latest free cash flow (TTM) is about $259M, showing the business can generate cash even while reporting net losses.

Growth (high)

CyberArk operates in a segment of cybersecurity that is closely tied to long-term trends: more cloud adoption, more remote and hybrid work, more software automation, and more machine-to-machine activity. These trends expand the number of identities, accounts, and credentials that need to be managed and secured—especially the highest-privilege ones. For many organizations, privileged access is a “must-get-right” control because it can limit the damage from breaches and reduce the chance that attackers can move freely inside systems.

The company’s strategy generally centers on expanding from a historically strong position in privileged access management into broader identity security use cases. In practice, that can support growth by increasing the potential number of buyers inside an organization (security, IT operations, cloud teams, developers) and increasing revenue per customer over time as more identity-related risks are addressed under one platform.

The year-over-year revenue growth trend shown is strong across multiple periods, reaching very high levels in 2024–2025 (with several quarters above 40%), before easing to about 18.5% in the latest point shown. Even with that slowdown, the latest growth rate remains above the industry median in the table, which suggests CyberArk has been expanding faster than many infrastructure software peers.

Free cash flow improves meaningfully over time in the chart, rising from about $18M (TTM, 2023) to about $250M (TTM, 2025). This matters for long-term business resilience because cash generation can help fund product development and expansion without relying entirely on external financing.

Risks (medium-high)

A central risk is that, despite strong revenue growth and improving cash generation, the company’s profitability has been inconsistent. CyberArk’s net income is negative in the periods shown in the financial breakdown, and profit margin has moved around substantially quarter to quarter. For long-term outcomes, a key question is whether operating costs can scale more slowly than revenue over time, leading to durable profitability rather than periodic swings.

Competition is another important risk. Identity and privileged access security sits at the intersection of cybersecurity and identity management, so buyers often compare platforms across adjacent categories. CyberArk is widely recognized for privileged access management, but enterprises may also evaluate alternatives from large security and identity vendors, as well as newer specialized providers. Competitive pressure can show up as slower customer additions, increased discounts, or higher sales and marketing expense to win deals.

The company’s balance sheet leverage is also worth monitoring, because higher debt relative to equity can reduce flexibility during downturns or periods of slower growth.

The debt-to-equity line shows CyberArk above the industry median for most of the period, and the latest level is about 50.9% versus an industry median near 14.5%. There is also visible variability over time, including one unusually low point in late 2024, followed by a return to higher levels in 2025. This pattern can reflect changes in financing, equity levels, or accounting effects, and it is a reminder that leverage has not been consistently low versus peers.

Profit margin trends show meaningful improvement from deeply negative levels in 2022–2023 to briefly positive territory in 2024, followed by a return to negative levels, with the latest around -10.8% versus an industry median around +7.2%. This gap highlights that many peers in the same broad industry are profitable on average while CyberArk is still working toward steadier earnings.

In terms of competitive advantages, CyberArk’s main strengths typically come from specialization (deep focus on privileged access threats), integration into critical enterprise environments, and the operational risk customers face when switching core security controls. However, leadership in a niche does not fully eliminate the risk of platform consolidation (customers preferring fewer vendors) or “good enough” alternatives from broader suites.

Valuation

For valuation, a common metric is the price-to-earnings (P/E) ratio, but it can be less informative when a company reports net losses or fluctuating earnings. In those cases, investors often look more at revenue growth, free cash flow generation, and the path to sustained profitability—alongside other valuation measures (not shown here) such as price-to-sales or free-cash-flow yield.

The P/E series for CyberArk is not meaningfully displayed in the chart, which is consistent with earnings being negative or otherwise not suitable for a stable P/E calculation during much of the period. By contrast, the industry median P/E shown is generally in the high-20s to around 40 in earlier periods. Practically, this means valuation discussions for CyberArk tend to rely more on growth and cash flow trajectory than on a simple earnings multiple, and the market price can be more sensitive to changes in growth expectations or profitability progress.

Conclusion

CyberArk is a cybersecurity company focused on securing high-impact access and credentials, an area that aligns with long-term IT and security priorities. The company has delivered strong top-line expansion over several years, with revenue rising from roughly $503M (2021) to roughly $1.361B (2025), and it shows a notable improvement in free cash flow over time.

At the same time, the company’s financial profile includes meaningful trade-offs: profitability has been uneven and currently lags the industry median, and leverage has generally been higher than typical peers based on debt-to-equity comparisons. Competitive intensity in identity and cybersecurity remains a structural risk, especially as large platform vendors and specialized providers target similar budgets.

Overall, the long-term assessment depends on whether CyberArk can sustain above-industry growth while converting that scale into consistently positive margins, and whether it can maintain differentiation in a crowded market as customer preferences evolve.

Sources:

• SEC EDGAR — CyberArk Software Ltd Forms 10-K and 10-Q (Consolidated Financial Statements; Revenue breakdown; Risk Factors)
• CyberArk Investor Relations — Annual Report materials and Shareholder communications (business description and strategy)
• Wikipedia — “CyberArk” (basic company background and product category overview)

This article is for informational purposes only and does not constitute financial advice. Some content is AI-generated. See Disclaimer