CyberArk
Privileged access management specialist, now a Palo Alto Networks unit.
On the record
Checkpoint: Palo Alto Networks Q3 FY2026 earnings, next integration cost and headcount update
The call
CyberArk's technology stays entrenched in big enterprises, but its fate now runs through Palo Alto Networks' integration decisions, not its own roadmap.
CyberArk sells software that controls who gets to access a company's most sensitive computer systems and data. It is hard to replace because it is woven into the computer networks of half of the Fortune 500 companies, and switching would be risky and expensive. The main threats are Microsoft (which is adding similar features to its own product), Okta and other rivals trying to steal market share, and the fact that the new owner Palo Alto Networks laid off over 10 percent of CyberArk's workers the day after the deal closed in February 2026, which contradicts what the CEO promised before the sale. The one thing that could change everything: whether those layoffs were just cleanup of duplicate jobs (like combining sales teams) or the start of deeper cost-cutting that could damage the product or customer service over the next two years.
Why
01
AI pressure: Microsoft Entra Agent ID (agentic identity management). Microsoft is building agent identity controls into Entra, which could fold CyberArk's new AI agent security niche into a bundle. Could AI do the core job? Unlikely.
02
Bigger players: Palo Alto Networks (as parent) and Microsoft Entra ID. PANW now owns CyberArk and could fold it into XSIAM pricing; Microsoft keeps expanding Entra into PAM territory. Could a giant copy it? No, they are blocked.
03
What protects it. Deep, audit-grade integrations across roughly half the Fortune 500 make ripping out CyberArk's vaults costly and slow.
What would change this call
R&D headcount in Petach Tikva over the next 2 to 3 quarters. Shows whether cuts stay confined to sales/marketing overlap or spread into product engineering.
PANW's Q2 and Q3 FY2026 earnings calls on integration costs beyond the $2.3B figure. Shows whether integration costs are stabilizing or compounding.
Whether CyberArk is rebranded or folded into PANW's XSIAM bundled pricing within 2026. Would signal CyberArk losing its standalone identity ahead of deeper consolidation.
PANW's Q2 and Q3 FY2026 earnings calls on integration costs beyond the $2.3B figure. Shows whether integration costs are stabilizing or compounding.
Whether CyberArk is rebranded or folded into PANW's XSIAM bundled pricing within 2026. Would signal CyberArk losing its standalone identity ahead of deeper consolidation.
Key numbers
- Q4 2025 revenue $372.7M, up 19% YoY
- Palo Alto closed $25B acquisition of CyberArk
- Over 10% of CyberArk staff cut day after close
Named risks
- Post-close layoffs exceeding 10% of workforce contradicted CEO's pre-close assurances, raising trust/reputational exposure.
- PANW integration costs of $2.3B in one quarter and EPS guidance cuts signal compounding financial strain.
- Standalone CyberArk brand could be dissolved into bundled PANW platform pricing, eroding product identity.
- R&D headcount contraction in Petach Tikva could erode core product development capacity.
- Competitive consolidation (Okta/Axiom, IBM/HashiCorp, Delinea/StrongDM) could shift competitive dynamics within 6 months.
Rivals, as read in July 2026
| Rival | Direction | Evidence |
|---|---|---|
| BeyondTrust | contesting | Co-leader with CyberArk on Gartner PAM Magic Quadrant as of mid-2026 |
| Delinea | contesting | Positioned as faster-deploying cloud-native PAM challenger, per June 2026 comparisons |
| Okta | gaining on | Expanding into PAM via Axiom Security acquisition, active as of June 2026 |
| Microsoft Entra | gaining on | Extending IAM into PAM territory but has not shipped a cross-platform rival taking F500 share as of 2026 |
| HashiCorp (owned by IBM) | contesting | Vault/Boundary positioned as cloud-native secrets challenger per June 2026 buyer guides |
| SailPoint | contesting | Deeper identity governance niche depth than CyberArk, per February 2026 PANW portfolio comparison |
Questions people ask
- Is CyberArk still a public company?
- No. Palo Alto Networks completed its acquisition of CyberArk on February 11, 2026 for about $25 billion ($45 cash plus 2.2005 PANW shares per CyberArk share). CyberArk now operates as the Identity pillar within Palo Alto Networks rather than as an independent NASDAQ-listed company (ticker CYBR).
- Did CyberArk have layoffs after the Palo Alto Networks deal?
- Yes. One day after the deal closed, on February 12, 2026, Palo Alto Networks cut hundreds of CyberArk jobs, affecting over 10% of the combined CyberArk workforce, mostly in overlapping sales, marketing and admin roles, contradicting CEO Nikesh Arora's earlier assurances against major cuts.
- Could AI replace CyberArk's privileged access management product?
- Unlikely soon. CyberArk's 2025 report found machine identities outnumber humans 82 to 1, and CyberArk shipped a Secure AI Agents Solution (GA December 2025) to secure those AI agent identities, positioning AI proliferation as a demand driver rather than a replacement threat.
- Who is CyberArk's biggest competitor?
- In core PAM, BeyondTrust and Delinea are the closest Gartner-recognized rivals, while Okta is expanding into PAM via its Axiom Security acquisition and Microsoft Entra is extending identity capabilities, though as of 2026 none has shipped a cross-platform product displacing CyberArk's Fortune 500 base.
- Is CyberArk profitable?
- Standalone profitability figures for CyberArk are not detailed in available 2025-2026 reporting, but its final independent quarter (Q4 2025, reported February 4, 2026) showed revenue of $372.7M, up 19% YoY, with Total ARR of $1.44B, up 23% YoY, indicating strong top-line growth into the Palo Alto Networks acquisition.
- What happened to CyberArk's headcount after the acquisition?
- Headcount trends conflict across trackers, but one source (Crustdata) shows a decline from roughly 4,238 employees in November 2024 to about 2,631 by July 2026, a 43-44% year-over-year drop, consistent with post-merger restructuring following the February 11, 2026 close.
Timeline
- 2026-02-18PANW reports $2.3B integration costs in one quarter; Q3 FY2026 EPS guidance misses consensus, shares fall ~7%
- 2026-02-16Reports confirm Palo Alto Networks cut over 500 CyberArk jobs post-close
- 2026-02-12Palo Alto Networks lays off hundreds of CyberArk staff, over 10% of combined workforce
- 2026-02-11Palo Alto Networks completes $25 billion acquisition of CyberArk
- 2026-02-04CyberArk reports record Q4 and full-year 2025 results as final standalone earnings report
- 2025-11-13CyberArk shareholders approve Palo Alto Networks acquisition deal
- 2025-11-03CyberArk announces GA of Secure AI Agents Solution for AI agent identity privilege controls
- 2025-07-30Palo Alto Networks announces definitive agreement to acquire CyberArk for ~$25B
- 2025-04-22CyberArk publishes report finding machine identities outnumber humans 82 to 1
- 2025-04-10CyberArk announces Secure AI Agents Solution at IMPACT 2025 conference
Revision history
21 July 2026
First assessed. Defensible for now. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources
- Palo Alto Networks Completes Acquisition of CyberArk to Secure the AI Era (2026-02-11)
- CyberArk Announces Record Fourth Quarter and Full Year 2025 Results (2026-02-04)
- CyberArk Announces Strong Second Quarter 2025 Results (2025-07-30)
- Palo Alto to cut over 500 CyberArk jobs (2026-02-16)
- CyberArk - Headcount, Funding & Open Jobs (2026-07-07)
- Best 9 CyberArk Alternatives For Privileged Access Management (2026-07-07)
- CyberArk Introduces First Identity Security Solution Purpose-Built to Protect AI Agents (2025-11-03)
- Machine Identities Outnumber Humans by More Than 80 to 1 (2025-04-22)
- PANW, CyberArk Acquisition: Integration Complications (2026-02-18)
- Palo Alto Networks Announces Agreement to Acquire CyberArk (2025-07-30)