CyberArk
Identity Security Platform
CyberArk is the global leader in privileged access protection. Its platform protects every type of identity: administrators, DevOps secrets, machine accounts and cloud roles. Sessions are fully audited.
What the platform includes.
The CyberArk Identity Security Platform combines tools for protecting privileged access and managing secrets and cloud identities.
Key capabilities.
Digital Vault
An isolated encrypted vault (AES-256) with HSM support for passwords, SSH keys, certificates and API tokens.
Session Recording
Video recording and keystroke logging of privileged RDP, SSH and HTTPS sessions. Full-text search across recordings.
Auto Credential Rotation
Automatic password rotation on a schedule, on suspicion of compromise or after every use.
Just-In-Time Access
Privileges are granted only for the duration of a task. This removes standing privileges, a key vector for lateral movement.
Least Privilege
EPM enforces least privilege on workstations: application control and privilege elevation or reduction on request.
Secrets Management
Secrets management for applications and CI/CD pipelines. Conjur provides programmatic access without hard-coding secrets.
Adaptive MFA
Multi-factor authentication with adaptive risk scoring. Support for FIDO2, push notifications, OTP and biometrics.
Identity Threat Detection
Detection of attacks on identities: golden ticket, pass-the-hash, DCSync, credential stuffing and Kerberoasting.
Who uses CyberArk and how.
Financial sector
Access control for core banking systems, SWIFT and trading platforms. Recording of DBA sessions. PCI DSS compliance (requirements 7, 8, 10).
Government bodies
Protecting privileged accounts in government information systems and critical infrastructure. Auditing of administrator actions. Integration with corporate directories.
DevOps and CI/CD
Storing application secrets (API keys, database passwords) in Conjur. Integration with Jenkins, GitLab CI, GitHub Actions, Kubernetes and Terraform.
Multi-cloud
JIT access to the AWS, Azure and GCP consoles. Detection and removal of excessive IAM permissions. A single policy for the hybrid cloud.
Healthcare
Control over medical staff access to hospital information systems. Protection of personal health data. Help with meeting HIPAA and ISO 27001 requirements.
Industry and OT
Protecting privileged access to SCADA and DCS. Just-in-time access for contractors without sharing a VPN password.
Choose the right model.
CyberArk supports three deployment models. CYBER BOOST will help you choose the best option for your infrastructure.
Self-Hosted PAM
CyberArk Vault is deployed in your data center. You keep full control over your data, which suits strictly regulated organizations.
- Data stays inside the perimeter
- HSM integration for keys
- Fully customizable policies
Cloud PAM
A fully managed SaaS option. Automatic updates, built-in SSO and MFA.
- Fast deployment
- SSO and MFA out of the box
- Updates without downtime
Hybrid Deployment
An on-prem Vault for critical systems and cloud PAM for remote users, managed from one console.
- Gradual migration to the cloud
- A single access policy
- Contractor access without a VPN
300+ ready-made integrations.
CyberArk integrates with leading SIEM, ITSM and DevOps tools and cloud platforms.
Which module to choose.
CYBER BOOST will help you choose the right set of modules for your needs.
| Capability | PAM Self-Hosted | Cloud PAM | EPM | Secrets Mgr |
|---|---|---|---|---|
| Privileged account vault | ✓ | ✓ | - | - |
| Credential rotation | ✓ Auto | ✓ Auto | - | Partially |
| Privileged session recording | ✓ | ✓ | - | - |
| Just-in-Time Access | ✓ | ✓ | Partially | - |
| Least Privilege (endpoints) | - | - | ✓ | - |
| Secrets for applications and CI/CD | Via Conjur | Via Conjur | - | ✓ |
| SSO / MFA | - | ✓ | - | - |
| Cloud IAM (CIEM) | Add-on module | ✓ | - | - |
| Deployment | On-Prem | SaaS | Agent | On-Prem / SaaS |
Frequently asked questions
Which accounts need CyberArk?
Was CyberArk acquired by Palo Alto Networks?
Is there a SaaS option without our own infrastructure?
Can CyberArk be deployed fully on-premise in Uzbekistan?
Request a demo or a quote
We reply within one business day.