CyberArk named leader in secrets management by KuppingerCole

CyberArk has been named an Overall Leader in the KuppingerCole Analysts 2025 Leadership Compass for Enterprise Secrets Management.

The KuppingerCole report evaluates solutions designed to manage the secrets lifecycle for humans, workloads, and devices, and assesses their effectiveness in helping organisations monitor, assess, and manage risks related to secrets. The report highlights growing challenges for organisations resulting from rapid increases in machine identities, which now significantly outnumber human users, partly due to the proliferation of APIs, microservices, and automated workflows. It notes that traditional secrets management practices often fall short in meeting these new requirements.

According to the report, "The proliferation of APIs, microservices, and automated workflows has created an exponential growth in machine identities, far outpacing human users. Organisations face challenges managing these identities securely, as traditional secrets management practices are often inadequate."

KuppingerCole commends CyberArk's focus on bridging the gap between machine and human identity management. The report states, "What sets CyberArk apart is its approach to identity security, closing gaps between machine and human identity management. Its strengths lie in its broad integrations, centralised management, and automated governance."

CyberArk's Identity Security Platform, powered by artificial intelligence, helps organisations secure all identities—whether human, artificial intelligence, or machine—by enforcing appropriate privilege controls. The company's recent acquisition of Venafi has allowed CyberArk to combine its own identity security solutions with Venafi's machine identity management solutions, resulting in what the company describes as the world's most complete portfolio for machine identity security. This combined offering covers secrets management, certificate lifecycle management, and workload identity security.

The expanded portfolio includes several core solutions. The Secure All Secrets Solution aims to centralise secrets management across hybrid and multi-cloud environments to help reduce the risk of secret leaks, improve operational efficiency, support compliance, and simplify enforcement of security policies. The Secure Certificates and PKI Solution automates certificate lifecycle management to prevent outages and streamline Public Key Infrastructure (PKI) management, thereby improving system resilience. Another solution, Secure Secrets and Certificates Within CSPs, is designed to discover and manage certificates and secrets across cloud service providers to lower risk, prevent outages, and bolster cloud security for machine identities. Lastly, the Secure Workload Access Solution provides each workload with its own identity, aiming to prevent credential exposure and support secure and scalable access in all types of environments.

Kurt Sand, General Manager of Machine Identity Security at CyberArk, commented on the company's recognition: "We are proud to be named an Overall Leader in Enterprise Secrets Management by KuppingerCole. This is a true testament to our vision and continued commitment to delivering the industry's most powerful, comprehensive Identity Security platform to our customers."

He added, "As the volume and complexity of machine identities continue to multiply amid the rise of AI and increased cloud adoption – with machine identities today outnumbering human identities by 82 to 1 – it is more critical now than ever for organisations to develop a unified approach to securing all machine identities. CyberArk is dedicated to helping organisations do this effectively across all machine identity types and all environments with our proven Identity Security Platform."

The KuppingerCole Analysts 2025 Leadership Compass for Enterprise Secrets Management, authored by Martin Kuppinger, ranked CyberArk with the highest scores across three main leadership categories: Product Leadership, Innovation Leadership, and Market Leadership.

The CyberArk Identity Security Platform applies intelligent privilege controls to every type of identity and offers continuous threat prevention, detection, and response across the entire identity lifecycle. The company states that its platform is designed to support zero trust and least privilege initiatives, providing complete visibility and secure access for all users and identities, including workforce members, IT, developers, and machines.