CyberArk’s Strategic Expansion in Identity Security
CyberArk has made a significant move in the identity governance and administration (IGA) space by acquiring Boston-based startup Zilla for $165 million. The deal, which has already closed, marks CyberArk’s continued expansion beyond privileged access management (PAM) into a more comprehensive identity security platform.
This acquisition reflects a broader trend in the cybersecurity industry, where converged identity platforms are becoming essential for enterprise security. With identity threats on the rise, organizations are demanding faster, more automated, and AI-driven solutions to manage access, compliance, and governance.
Zilla’s Modern IGA Platform: A Competitive Edge
Zilla, a small but innovative IGA provider, was founded by Deepak Taneja, the former CEO of Aveksa. In 2023, Zilla reported $5 million in annual recurring revenue, employed 40 staff members, and served 125 enterprise customers.
What Makes Zilla Different
CyberArk’s CEO, Matt Cohen, emphasized that Zilla’s platform is designed to overcome the limitations of legacy IGA solutions, which are often slow to deploy, difficult to integrate, and reliant on manual processes.
- AI-Driven Role Management: Automates identity, compliance, and provisioning processes.
- Faster Deployment: Customers can implement Zilla five times faster than traditional IGA solutions.
- Reduced Service Tickets: Zilla’s automation leads to 60% fewer service tickets, improving IT efficiency.
- Cloud-Native SaaS Model: Built from the ground up to support modern cloud environments.
CyberArk’s Identity Security Expansion Strategy
CyberArk’s strategic acquisition follows a series of investments in identity security, reinforcing its ambition to lead the market beyond PAM.
- 2023: CyberArk acquired Venafi (a non-human identity provider) for $1.6 billion.
- 2024: The company surpassed $1 billion in annual revenue for the first time.
- 2025: Acquisition of Zilla, further strengthening its identity governance capabilities.
This expansion aligns with a larger industry trend, where leading IGA and PAM providers are moving into each other’s domains to create comprehensive security ecosystems.
The Competitive Landscape: SailPoint & Market Shifts
CyberArk’s move comes on the same day that SailPoint—the largest IGA provider—returned to the public market with a major tech IPO valued at $1.38 billion. SailPoint, acquired by Thoma Bravo for $6.9 billion in 2023, is expanding its reach beyond IGA into PAM.
SailPoint’s Expansion into PAM
- 2023: Acquired Osirium, a PAM provider.
- December 2024: Acquired Imprivata’s IGA unit for $10.7 million, plus earnouts of up to $7.4 million.
This highlights the growing convergence of IGA, PAM, and identity security, where leading vendors are no longer confined to a single domain but are instead evolving into holistic identity platforms.
Why Identity Governance Is Becoming a Cybersecurity Priority
According to Alex Bovee, CEO of ConductorOne, an IGA startup competing with SailPoint and Zilla, identity security is becoming one of the most vital components of an organization’s cybersecurity posture.
- According to Alex Bovee, CEO of ConductorOne, an IGA startup competing with SailPoint and Zilla, identity security is becoming one of the most vital components of an organization’s cybersecurity posture.
- Identity threats are rising—Organizations need more automation, AI, and proactive governance to mitigate risks.
- Legacy IGA solutions are outdated—Enterprises require fast, cloud-native platforms that integrate seamlessly with modern IT environments.
- Converged identity platforms are the future—PAM, IGA, and identity threat detection are merging into a single, unified security approach.
“Every security company now recognizes that identity and governance are critical parts of the cybersecurity stack. CyberArk’s investment in Zilla proves that PAM alone is not enough—the future lies in identity convergence.”
The Future of Identity Security
CyberArk’s acquisition of Zilla signals a paradigm shift in identity security, where IGA, PAM, and AI-driven automation are converging into one unified security solution. With major players like SailPoint and CyberArk expanding their capabilities, enterprises will soon have access to more streamlined, intelligent, and proactive identity governance solutions.
- CyberArk is evolving from a PAM provider into a full-scale identity security platform.
- Zilla brings AI-driven automation, faster deployment, and better compliance management.
- The industry is witnessing the convergence of IGA, PAM, and identity security solutions.
- Organizations must invest in modern identity governance to stay ahead of evolving threats.
As identity becomes the new cybersecurity perimeter, businesses must adopt integrated security platforms to mitigate risk and strengthen their defense against identity-based attacks.
FAQs: Understanding CyberArk’s Acquisition & IGA Trends
Why did CyberArk acquire Zilla?
CyberArk aims to expand beyond PAM into IGA, offering a more comprehensive identity security platform with AI-driven governance and automation.
How does Zilla’s IGA solution differ from legacy systems?
Zilla is a cloud-native, AI-powered platform that deploys 5x faster than traditional IGA, reduces service tickets by 60%, and integrates seamlessly with modern IT environments.
What does this mean for CyberArk customers?
Customers will now have an integrated solution that combines identity governance, privilege management, compliance, and AI-driven automation—all within the CyberArk ecosystem.
How is the IGA market evolving?
Leading PAM and IGA providers (e.g., CyberArk, SailPoint) are moving towards converged identity platforms, merging their capabilities into holistic cybersecurity solutions.
What’s next for identity security?
As cyber threats evolve, companies will increase investment in AI-driven, cloud-native identity security solutions that provide real-time governance, access control, and compliance enforcement.
References
CyberArk – CyberArk Acquires Zilla Security to Reshape Identity Governance and Administration
