CyberArk announces $1.54bn acquisition of Venafi to enhance machine identity security

CyberArk (NASDAQ: CYBR), a global leader in identity security, has entered into a definitive agreement to acquire Venafi, a pioneer in machine identity management, from private equity firm Thoma Bravo. The transaction, valued at approximately $1.54 billion, comprises $1 billion in cash and $540 million in CyberArk shares, aiming to create a comprehensive platform for machine identity security at an enterprise scale.

Transaction Overview

This strategic acquisition is set to close in the second half of 2024, pending customary regulatory approvals and other closing conditions. Venafi, known for its advanced solutions in certificate lifecycle management and identity protection for IoT devices, will bring approximately $150 million in annual recurring revenue to CyberArk, with a strong business model that boasts 95% recurring revenue.

Strategic Implications and Market Expansion

The integration of Venafi’s machine identity management capabilities with CyberArk’s robust identity security solutions will address the growing challenge posed by the rapid increase in machine identities across digital and cloud environments. This challenge is exacerbated by the expansion of IoT, AI technologies, and cloud migrations, increasing the number of machine identities significantly, a figure that now outpaces human identities at a ratio of more than 40 to 1.

CyberArk to acquire Venafi for $1.54 billion to expand capabilities in machine identity security and increasing market presence.

Matt Cohen, CEO of CyberArk, emphasized the strategic nature of the acquisition: “This acquisition marks a pivotal milestone for CyberArk, enabling us to further our vision to secure every identity — human and machine — with the right level of privilege controls,” said Cohen. “By combining forces with Venafi, we are expanding our abilities to secure machine identities in a cloud-first, GenAI, post-quantum world.”

Enhanced Security and Operational Synergy

The combined expertise of CyberArk and Venafi will offer organizations a unified solution to manage and secure machine identities, from cloud workloads to IoT devices. This merger is expected to expand CyberArk’s total addressable market by nearly $10 billion, raising it to approximately $60 billion. The transaction is also projected to be immediately accretive to margins, with significant revenue synergies anticipated through cross-selling, up-selling, and geographic expansion.

The acquisition of Venafi by CyberArk represents a significant enhancement of CyberArk’s portfolio, addressing the critical and growing cybersecurity challenge of protecting machine identities in increasingly complex IT environments. This move strategically positions CyberArk to capitalize on emerging technology trends and reinforces its leadership in the identity security market.