CyberArk to Acquire Venafi for $1.54 Billion as Cybersecurity Market Shows Signs of Recovery

CyberArk Software Ltd., a leading cybersecurity company, has announced its agreement to acquire Venafi, a specialist in machine identity management, for approximately $1.54 billion. The transaction, which includes around $1 billion in cash and $540 million in CyberArk shares, marks a significant move in the cybersecurity sector, highlighting the increasing importance of machine identity security as digital transformation accelerates.

Venafi, known for its expertise in managing machine identities, provides services that include certificate lifecycle management, private Public Key Infrastructure (PKI), and cryptographic code signing. This acquisition will enable CyberArk to enhance its capabilities in securing both human and machine identities, addressing the growing need for advanced identity security solutions in cloud environments.

The deal is expected to expand CyberArk’s total addressable market by nearly $10 billion, bringing it to approximately $60 billion. Venafi’s strong recurring revenue model, with 95% of its revenue from SaaS and term-based licenses, is anticipated to contribute significantly to CyberArk’s financial performance, adding about $150 million in annual recurring revenue.

The acquisition, which is set to close in the second half of 2024, underscores a broader trend of consolidation in the cybersecurity industry as companies seek to bolster their defenses against increasingly sophisticated threats. The transaction is also expected to bring revenue synergies through cross-selling, up-selling, and geographic expansion, further enhancing CyberArk’s market position.

The Boards of Directors of both CyberArk and Venafi have approved the transaction, which is subject to regulatory approvals and other customary closing conditions. Financial and legal advisories for the deal include Morgan Stanley & Co. LLC and Latham & Watkins LLP for CyberArk, and Piper Sandler and Kirkland & Ellis LLP for Thoma Bravo, Venafi’s private equity owner.

This acquisition is a strategic move for CyberArk, positioning it to better protect against cyber threats in a world where the distinction between human and machine identities is becoming increasingly blurred.