CyberArk Announces Strong Third Quarter 2024 Results

Results Exceeded all Guided Metrics

Subscription Portion of Annual Recurring Revenue (ARR) Grew 46% Year-Over-Year to $735 million

Total ARR Grew 31% Year-Over-Year to $926 million

Subscription Revenue Grew 43% Year-Over-Year to $175.6 million

Total Revenue Grew 26% Year-Over-Year Reaching a Record of $240.1 million

Net Cash Provided by Operating Activities for the Nine Months Ended September 30, 2024 of $167.2 million

Company Raises Full Year Guidance Across all Metrics

Newton, Mass. and Petach Tikva, Israel – November 13, 2024 – CyberArk (NASDAQ: CYBR), the global leader in identity security, today announced strong financial results for the third quarter ended September 30, 2024.

“CyberArk reported strong results and outperformed guidance across all metrics. Our best-in-class execution and industry leadership in identity security is helping us deliver strong net new ARR, record revenue and increased profitability and cash flow,” said Matt Cohen, CyberArk’s Chief Executive Officer. “The security first approach is at the core of CyberArk’s DNA and differentiating us from competitors. We continue to deliver on our vision of securing every identity – human and machine – with the right level of privilege controls. Demand for our solutions remains strong as customers continue to embrace our industry leading solutions across workforce, IT, developer and machine identities.  Given the tremendous market opportunity, the mission critical nature of securing all identities, and durable demand drivers, we are confidently raising our guidance for the full year 2024 across all metrics.

“We are thrilled to have closed the acquisition of Venafi on October 1, extending our platform leadership and setting a new standard for end-to-end machine identity security. Feedback from both customers and partners has further validated our excitement. Machine identities are the fastest growing and most complex identities today, and Venafi’s cloud native, modern machine identity management solution is the leader in a market that is ready for an inflection,” concluded Cohen.

Financial Summary for the Third Quarter Ended September 30, 2024

The financial results for the third quarter of 2024 did not include any financial contribution from the acquisition of Venafi, which closed on October 1, 2024.

     

Balance Sheet and Net Cash Provided by Operating Activities

 

CyberArk Announces Chief Financial Officer Transition

CyberArk today announced that Josh Siegel, CyberArk’s Chief Financial Officer, is stepping down from his role as Chief Financial Officer effective January 1, 2025. As part of a planned succession, Erica Smith, CyberArk's Deputy Chief Financial Officer, will become Chief Financial Officer and join the executive team at that time. The details of the announcement can be accessed here.

Recent Developments

(1)Gartner® Magic Quadrant™ for Privileged Access Management, by Abhyuday Data, Michael Kelley, Nayara Sangiorgio, Felix Gaehtgens, Paul Mezzera, 9 September 2024

(2)KuppingerCole Analysts AG “Leadership Compass: Privileged Access Management,” October 7, 2024 by Paul Fisher.

Business Outlook

Based on information available as of November 13, 2024, CyberArk is issuing guidance for the fourth quarter and full year 2024 as indicated below.

The guidance for the fourth quarter and full year 2024 includes the expected contribution from the acquisition of Venafi, which closed on October 1, 2024.

Fourth Quarter 2024:

Full Year 2024:

 

Conference Call Information

 

In conjunction with this announcement, CyberArk will host a conference call on Wednesday, November 13, 2024 at 8:30 a.m. Eastern Time (ET) to discuss the Company’s third quarter financial results and its business outlook. To access this call, dial +1 (888) 330-2455 (U.S.) or +1 (240) 789-2717 (international). The conference ID is 6515982. Additionally, a live webcast of the conference call will be available via the “Investor Relations” section of the company’s website at www.cyberark.com.

Following the conference call, a replay will be available for one week at +1 (800) 770-2030 (U.S.) or +1 (609) 800-9909 (international). The replay pass code is 6515982. An archived webcast of the conference call will also be available in the “Investor Relations” section of the company’s website at www.cyberark.com.

Gartner Disclaimers

GARTNER is a registered trademarks and service mark, and MAGIC QUADRANT is a registered trademark of Gartner, Inc. ("Gartner"), and/or its affiliates in the U.S. and internationally and are used herein with permission. All rights reserved.

Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

The Gartner content described herein (the “Gartner Content”) represents research opinion or viewpoints published, as part of a syndicated subscription service, by Gartner, Inc. and is not a representation of fact. Gartner Content speaks as of its original publication date (and not as of the date of this press release), and the opinions expressed in the Gartner Content are subject to change without notice.

About CyberArk                                                                                                       

CyberArk (NASDAQ: CYBR) is the global leader in identity security. Centered on Intelligent Privilege Controls™, CyberArk provides the most comprehensive security offering for any identity – human or machine – across business applications, distributed workforces, hybrid cloud environments and throughout the DevOps lifecycle. The world’s leading organizations trust CyberArk to help secure their most critical assets. To learn more about CyberArk, visit cyberark.com, read the CyberArk blogs or follow on LinkedIn, X, Facebook or YouTube.

 

Copyright © 2024 CyberArk Software. All Rights Reserved. All other brand names, product names, or trademarks belong to their respective holders.

 

Key Performance Indicators and Non-GAAP Financial Measures

Recurring Revenue

 

 

Annual Recurring Revenue (ARR)

 

Subscription Portion of Annual Recurring Revenue

 

Maintenance Portion of Annual Recurring Revenue

 

Net New ARR

 

Annual Recurring Revenue (ARR), Subscription portion of ARR and Maintenance portion of ARR are performance indicators that provide more visibility into the growth of our recurring business in the upcoming year. This visibility allows us to make informed decisions about our capital allocation and level of investment. Each of these measures should be viewed independently of revenues and total deferred revenue as each is an operating measure and is not intended to be combined with or to replace either of those measures. ARR, Subscription portion of ARR and Maintenance portion of ARR are not forecasts of future revenues and can be impacted by contract start and end dates and renewal rates.

 

Non-GAAP Financial Measures

CyberArk believes that the use of non-GAAP gross profit, non-GAAP operating expense, non-GAAP operating income (loss), non-GAAP net income and free cash flow is helpful to our investors. These financial measures are not measures of the Company’s financial performance under U.S. GAAP and should not be considered as alternatives to gross profit, operating loss, net income (loss) or net cash provided by operating activities or any other performance measures derived in accordance with GAAP.

 

 

 

 

 

The Company believes that providing non-GAAP financial measures that are adjusted by, as applicable, share-based compensation expense, acquisition related expenses, amortization of intangible assets related to acquisitions, non-cash interest expense related to the amortization of debt discount and issuance cost, change in fair value of derivative assets, and the tax effect of the non-GAAP adjustments and purchase of property and equipment allows for more meaningful comparisons of its period to period operating results. Share-based compensation expense has been, and will continue to be for the foreseeable future, a significant recurring expense in the Company’s business and an important part of the compensation provided to its employees. Share based compensation expense has varying available valuation methodologies, subjective assumptions and a variety of equity instruments that can impact a company’s non-cash expense. The Company believes that expenses related to its acquisitions, amortization of intangible assets related to acquisitions, change in fair value of derivative assets, and non-cash interest expense related to the amortization of debt discount and issuance costs do not reflect the performance of its core business and impact period-to-period comparability. The Company believes free cash flow is a liquidity measure that, after the purchase of property and equipment, provides useful information about the amount of cash generated by the business. 

 

Non-GAAP financial measures may not provide information that is directly comparable to that provided by other companies in the Company’s industry, as other companies in the industry may calculate non-GAAP financial results differently, particularly related to non-recurring, unusual items. In addition, there are limitations in using non-GAAP financial measures as they exclude expenses that may have a material impact on the Company’s reported financial results. The presentation of non-GAAP financial information is not meant to be considered in isolation or as a substitute for the directly comparable financial measures prepared in accordance with U.S. GAAP. CyberArk urges investors to review the reconciliation of its non-GAAP financial measures to the comparable U.S. GAAP financial measures included below, and not to rely on any single financial measure to evaluate its business.

Guidance for non-GAAP financial measures excludes, as applicable, share-based compensation expense, acquisition related expenses, amortization of intangible assets related to acquisitions, non-cash interest expense related to the amortization of debt discount and issuance costs, non-cash change in fair value of derivative assets, the tax effect of the non-GAAP adjustments, and purchase of property and equipment. A reconciliation of the non-GAAP financial measures guidance to the corresponding GAAP measures is not available on a forward-looking basis due to the uncertainty regarding, and the potential variability and significance of, the amounts of share-based compensation expense, amortization of intangible assets related to acquisitions, and the non-recurring expenses that are excluded from the guidance, as well as changes in interest rates and foreign exchange rates, which impact other GAAP performance metrics. Accordingly, a reconciliation of the non-GAAP financial measures guidance to the corresponding GAAP measures for future periods is not available without unreasonable effort.

 

Cautionary Language Concerning Forward-Looking Statements

 

This release contains forward-looking statements, which express the current beliefs and expectations of CyberArk’s (the “Company”) management. In some cases, forward-looking statements may be identified by terminology such as “believe,” “may,” “estimate,” “continue,” “anticipate,” “intend,” “should,” “plan,” “expect,” “predict,” “potential” or the negative of these terms or other similar expressions. Such statements involve a number of known and unknown risks and uncertainties that could cause the Company’s future results, levels of activity, performance or achievements to differ materially from the results, levels of activity, performance or achievements expressed or implied by such forward-looking statements. Important factors that could cause or contribute to such differences include risks relating, but not limited to: risks related to the Company’s acquisition of Venafi Holdings, Inc. (“Venafi”), including impacts of the acquisition on the Company’s or Venafi’s operating results and business generally; the ability of the Company or Venafi to retain and hire key personnel and maintain relationships with customers, suppliers and others with whom the Company or Venafi do business; risks that Venafi’s business will not be integrated successfully into the Company’s operations; risks relating to the Company’s ability to realize anticipated benefits of the combined operations after the Venafi acquisition; changes to the drivers of the Company’s growth and the Company’s ability to adapt its solutions to the information security market changes and demands, including artificial intelligence (“AI”); the Company’s ability to acquire new customers and maintain and expand the Company’s revenues from existing customers; intense competition within the information security market; real or perceived security vulnerabilities, gaps, or cybersecurity breaches of the Company, or the Company’s customers’ or partners’ systems, solutions or services; risks related to the Company’s compliance with privacy, data protection and AI laws and regulations; the Company’s ability to successfully operate its business as a subscription company and fluctuation in the quarterly results of operations; the Company’s reliance on third-party cloud providers for its operations and software-as-a-service (“SaaS”) solutions; the Company’s ability to hire, train, retain and motivate qualified personnel; the Company’s ability to effectively execute its sales and marketing strategies; the Company’s ability to find, complete, fully integrate or achieve the expected benefits of additional strategic acquisitions; the Company’s ability to maintain successful relationships with channel partners, or if the Company’s channel partners fail to perform; risks related to sales made to government entities; prolonged economic uncertainties or downturns; the Company’s history of incurring net losses, the Company’s ability to generate sufficient revenue to achieve and sustain profitability and the Company’s ability to generate cash flow from operating activities; regulatory and geopolitical risks associated with the Company’s global sales and operations; risks related to intellectual property claims; fluctuations in currency exchange rates; the ability of the Company’s products to help customers achieve and maintain compliance with government regulations or industry standards; the Company’s ability to protect its proprietary technology and intellectual property rights; risks related to using third-party software, such as open-source software; risks related to stock price volatility or activist shareholders; any failure to retain the Company’s “foreign private issuer” status or the risk that the Company may be classified, for U.S. federal income tax purposes, as a “passive foreign investment company”; risks related to the Company’s Convertible Senior Notes due 2024 (the “Convertible Notes”), including the potential dilution to existing shareholders and the Company’s ability to raise the funds necessary to repurchase the Convertible Notes; changes in tax laws; the Company’s expectation to not pay dividends on the Company’s ordinary shares for the foreseeable future; risks related to the Company’s incorporation and location in Israel, including the ongoing war between Israel and Hamas and conflict in the region; and other factors discussed under the heading “Risk Factors” in the Company’s most recent annual report on Form 20-F filed with the Securities and Exchange Commission. Forward-looking statements in this release are made pursuant to the safe harbor provisions contained in the U.S. Private Securities Litigation Reform Act of 1995. These forward-looking statements are made only as of the date hereof, and the Company undertakes no obligation to update or revise the forward-looking statements, whether as a result of new information, future events or otherwise, except as required by applicable law.

 

###

CyberArk

Media Contact:

Nick Bowman

CyberArk