CISO Tribune

Vendor comparison · 2 companies

CyberArk vs HashiCorp

CyberArk sells the Idira Identity Security Platform, which brings together modern privileged access management (PAM), machine identity security and agentic identity security. HashiCorp sells The Infrastructure Cloud, an integrated platform that turns Infrastructure Lifecycle Management and Security Lifecycle Management into code. CISO Tribune files both under Privileged access management and Non-human identity security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • CyberArk
  • HashiCorp
CyberArk vs HashiCorp: Products, Customers and Funding Compared
CyberArkCyberArk sells the Idira Identity Security Platform, which brings together modern privileged access management (PAM), machine identity security and agentic identity security.cyberark.comHashiCorpHashiCorp sells The Infrastructure Cloud, an integrated platform that turns Infrastructure Lifecycle Management and Security Lifecycle Management into code.hashicorp.com
What it sells
  • Modern PAM[12]Provides discovery of privileged access and dynamic privileged access for human identities.
  • Secrets Management[1][3][12]Secures machine identities from secrets to workloads.
  • Agentic identity security[12]Discovers, controls and governs agentic identities at scale.
  • Vault[1][4][7][8][9]Vault is used for secrets management operations.
  • Boundary[1][7][8]Boundary brokers credentials to targets through external credential sources such as HashiCorp Vault.
  • HCP Terraform[4][6][10][11]HCP Terraform provisions cloud resources through automation.
  • Terraform Enterprise[10]Terraform Enterprise is an infrastructure as code tool.
  • Infragraph[4]Infragraph gives a view of a hybrid estate through a knowledge graph.
  • Packer[8]Packer workflows are used for image compliance in Azure.
  • HashiCorp Cloud PlatformHCP is a unified suite of SaaS products for infrastructure and security lifecycle management.
Categories
Headquarters
Petach-Tikva, Israel[4]Not stated on its pages
Founded
1999[4]2012[2]
Ownership and funding
Owned by Palo Alto Networks since 2026[1][14]Owned by IBM since 2025[3][6][11][12][15][16]
Named customers
  • Northern Trust[5]
  • Healthfirst[6]
  • Carnival Corporation[7]
  • Aflac[8]
  • Webster Bank[9]
Not stated on its pages
Recent news
  • June 2, 2026Palo Alto Networks reported fiscal third quarter 2026 revenue of $3.0 billion, including $388 million from CyberArk and Chronosphere combined.[10]
  • May 12, 2026Palo Alto Networks launched Idira, an identity security platform built on CyberArk's privileged access products, adding new capabilities for existing CyberArk customers.[11]
  • October 27, 2026HashiCorp introduced the Terraform Developer Portal in public preview, according to a post listed on its Terraform blog.[15]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: listed, seen October 24, 2026[14]
  • G2: listed, seen November 10, 2026[16]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, the company sells mainly to organizations that want to secure human, machine and agentic identities on one platform. It names customers such as a group of dental practices, a government services organization and an organization with vault sprawl to control. Its pages address existing CyberArk customers moving to Idira.Organizations can implement The Infrastructure Cloud through the HashiCorp Cloud Platform, self-managed solutions, or a combination, across a hybrid environment. Customers named on its pages include a company that partners with medical organizations and an Italian telecommunications company. HCP Terraform is described with minimum privileges for developers, cloud engineers, and operations managers.
Last verified
September 27, 2026October 21, 2026

Where they overlap

  • Privileged access management is the primary category of both CyberArk and HashiCorp; both are also filed under Non-human identity security.

Where they differ, field by field

  • CyberArk is also filed under Identity governance and administration. HashiCorp is also filed under Secrets detection.
  • CyberArk lists Modern PAM, Secrets Management and Agentic identity security. HashiCorp lists Vault, Boundary, HCP Terraform, Terraform Enterprise, Infragraph and 2 more.
  • CyberArk is headquartered in Petach-Tikva, Israel.
  • CyberArk was founded in 1999. HashiCorp was founded in 2012.
  • CyberArk is owned by Palo Alto Networks, since 2026. HashiCorp is owned by IBM, since 2025.
  • CyberArk publicly names Northern Trust, Healthfirst, Carnival Corporation, Aflac and Webster Bank.

How they differ

CISO Tribune files both CyberArk and HashiCorp under Privileged access management as their primary category. CyberArk sells the Idira Identity Security Platform, which brings together modern privileged access management, machine identity security and agentic identity security. HashiCorp sells The Infrastructure Cloud, an integrated platform that turns Infrastructure Lifecycle Management and Security Lifecycle Management into code. Both companies sell secrets management: CyberArk offers Secrets Management for machine identities, and HashiCorp offers Vault.

CyberArk is headquartered in Petach-Tikva, Israel, and was founded in 1999. Palo Alto Networks has owned CyberArk since 2026. HashiCorp was founded in 2012 and has been owned by IBM since 2025. CyberArk publicly names Northern Trust, Healthfirst, Carnival Corporation, Aflac and Webster Bank as customers. HashiCorp's pages cite AGL, which used Terraform Enterprise, and Vodafone Italy, which uses HCP Terraform.

On May 12, 2026, Palo Alto Networks launched Idira, an identity security platform built on CyberArk's privileged access products. On October 27, 2026, HashiCorp introduced the Terraform Developer Portal in public preview.

What it sells: CyberArk

What Modern PAM does[12]
Modern PAM provides discovery with continuous visibility and AI-driven analytics. It eliminates always-on standing privileges. A unified command center streamlines deployment through automation and embeds threat detection directly into privileged workflows.
What Secrets Management does[1][3][12]
The Idira platform includes discovery, risk analytics and modern secrets management. It includes governance and reporting for all vaults and workloads.
What Agentic identity security does[12]
Idira secures agentic identities alongside human and machine identities. Machine and agentic identities are often referred to as nonhuman identities.

What it sells: HashiCorp

What Boundary does[1][7][8]
Boundary integrates with external credential sources such as HashiCorp Vault to broker credentials to targets. HashiCorp describes using Boundary to automatically discover target hosts and services for access to on-demand infrastructure.
What HCP Terraform does[4][6][10][11]
HCP Terraform enables automated provisioning of cloud resources. Vodafone Italy uses HCP Terraform to create databases, set up its repository and team structure on GitHub, and create CI/CD pipelines.
What Terraform Enterprise does[10]
Terraform Enterprise helped AGL create configuration files to define infrastructure. AGL chose Terraform Enterprise over the community edition because of its enterprise-specific features.
What Infragraph does[4]
Infragraph delivers a single pane of glass view of a hybrid estate through a centralized, event-driven knowledge graph. HCP Terraform Standard and Premium customers now have access to Infragraph.
What HashiCorp Cloud Platform does
The HashiCorp Cloud Platform (HCP) is a unified suite of SaaS products that automate the lifecycle management of the infrastructure and security supporting critical applications. Organizations can implement The Infrastructure Cloud through HCP, self-managed solutions, or a combination of the two.

Questions about CyberArk and HashiCorp

What do CyberArk and HashiCorp sell?
CyberArk sells Modern PAM, Secrets Management and Agentic identity security. HashiCorp sells Vault, Boundary, HCP Terraform, Terraform Enterprise, Infragraph and 2 more.
Are CyberArk and HashiCorp in the same category?
Yes. Privileged access management is the primary category of both on CISO Tribune.
Where are CyberArk and HashiCorp headquartered?
CyberArk is headquartered in Petach-Tikva, Israel.
When were CyberArk and HashiCorp founded?
CyberArk was founded in 1999. HashiCorp was founded in 2012.
Who owns CyberArk and HashiCorp?
CyberArk is owned by Palo Alto Networks, since 2026. HashiCorp is owned by IBM, since 2025.
Which customers do CyberArk and HashiCorp name?
CyberArk publicly names Northern Trust, Healthfirst, Carnival Corporation, Aflac and Webster Bank.
Who are CyberArk and HashiCorp sold to?
From its own pages, the company sells mainly to organizations that want to secure human, machine and agentic identities on one platform. Organizations can implement The Infrastructure Cloud through the HashiCorp Cloud Platform, self-managed solutions, or a combination, across a hybrid environment.
What have CyberArk and HashiCorp announced recently?
June 2, 2026: Palo Alto Networks reported fiscal third quarter 2026 revenue of $3.0 billion, including $388 million from CyberArk and Chronosphere combined. October 27, 2026: HashiCorp introduced the Terraform Developer Portal in public preview, according to a post listed on its Terraform blog.

About CyberArk

CyberArk sells the Idira Identity Security Platform, which brings together modern privileged access management (PAM), machine identity security and agentic identity security.[12]

The page says that legacy identity solutions were built for yesterday's problems, when elevated privileges were reserved for a select few. Idira is presented as a platform that extends privilege control to every identity in order to minimize attack surface.[12]

Idira secures human, machine and agentic identities. The platform is described as a unified control plane that discovers risk, applies privilege dynamically and governs the full lifecycle from first access to final session. The pages say one part of the platform covers modern privileged access, endpoint and identity governance needs, another covers every machine identity from secrets to workloads, and another discovers, controls and governs agentic identities.[3][12]

On the human side, the pages say modern PAM provides discovery with continuous visibility and AI-driven analytics. It also provides dynamic privileged access that eliminates always-on standing privileges. A unified command center streamlines deployment through automation and embeds threat detection directly into privileged workflows.[3][12]

On the nonhuman side, the pages say machine and agentic identities are often referred to as nonhuman identities. The Idira platform includes discovery, risk analytics and modern secrets management, with governance and reporting for all vaults and workloads. Customer quotes on the pages mention Idira Privileged Access Manager, Idira Secrets Hub and Certificate Manager.[3][12]

For zero trust, the pages say the platform enforces least privilege and secures access for human, machine and agentic identities across any device. Privilege controls are used to grant access for just the right amount of time, and the platform continuously monitors threats so organizations can adjust controls based on risk.[12]

Idira is described as built on CyberArk's legacy and powered by Palo Alto Networks. Existing CyberArk customers can continue to use the platform as they always have, with a new logo and design. The pages say that over time customers will be able to use cross-platform capabilities across the Palo Alto Networks product portfolio.[2][12]

The pages name customers including an organization securing access to clinical resources for over 900 dental practices, a government services organization implementing PAM as a service, and an organization deploying Idira to centralize secrets and control vault sprawl.[12][13]

CyberArk on the record

Sources

CyberArk full record

  1. [1]Palo alto networks completes acquisition of cyberark to secure the ai eraPalo Alto Networks · paloaltonetworks.com · published February 11, 2026 · Tier A
  2. [2]CyberArk is now Idira Frequently Asked QuestionsCyberArk (Idira Team) · community.cyberark.com · published September 21, 2026 · Tier A
  3. [3]IdiraPalo Alto Networks · paloaltonetworks.com · undated page, accessed September 27, 2026 · Tier A
  4. [4]Zk2532806CyberArk Software Ltd. via SEC EDGAR · sec.gov · undated page, accessed May 1, 2025 · Tier A
  5. [5]Northern trustPalo Alto Networks · paloaltonetworks.com · undated page, accessed October 10, 2026 · Tier A
  6. [6]HealthfirstPalo Alto Networks · paloaltonetworks.com · undated page, accessed October 10, 2026 · Tier A
  7. [7]Carnival corporationPalo Alto Networks · paloaltonetworks.com · undated page, accessed October 10, 2026 · Tier A
  8. [8]AflacPalo Alto Networks · paloaltonetworks.com · undated page, accessed October 10, 2026 · Tier A
  9. [9]Webster bankPalo Alto Networks · paloaltonetworks.com · undated page, accessed October 10, 2026 · Tier A
  10. [10]Palo alto networks reports fiscal third quarter 2026 financial resultsPalo Alto Networks · paloaltonetworks.com · published June 2, 2026 · Tier A
  11. [11]Palo alto networks introduces idira the next generation identity security platform built for the ai enterprisePalo Alto Networks · paloaltonetworks.com · published May 12, 2026 · Tier A
  12. [12]Idira | The Identity Security Platform - Palo Alto NetworksCyberArk · undated page, accessed October 24, 2026 · Tier A
  13. [13]CyberArk Introduces First Identity Security Solution Purpose-Built to Protect AI Agents with Privilege ControlsBusiness Wire · published November 4, 2025 · Tier A
  14. [14]Palo Alto Networks (CyberArk) Reviews - GartnerGartner Peer Insights · undated page, accessed October 24, 2026 · Tier C

HashiCorp full record

  1. [1]hashicorp.comHashiCorp · hashicorp.com · undated page, accessed October 21, 2026 · Tier A
  2. [2]AboutHashiCorp · hashicorp.com · undated page, accessed October 21, 2026 · Tier A
  3. [3]PressHashiCorp · hashicorp.com · undated page, accessed October 21, 2026 · Tier A
  4. [4]HashiCorp | An IBM CompanyHashiCorp · undated page, accessed November 10, 2026 · Tier A
  5. [5]HCP Brand Guidelines - Product LogosHashiCorp · undated page, accessed November 10, 2026 · Tier A
  6. [6]HashiCorp Product PricingHashiCorp · undated page, accessed November 10, 2026 · Tier A
  7. [7]Topics in the Security categoryHashiCorp · published October 29, 2026 · Tier A
  8. [8]Security with HashiCorp and Microsoft AzureHashiCorp · undated page, accessed November 10, 2026 · Tier A
  9. [9]HashiCorp - athenahealthHashiCorp · undated page, accessed November 10, 2026 · Tier A
  10. [10]HashiCorp - AGL EnergyHashiCorp · undated page, accessed November 10, 2026 · Tier A
  11. [11]HashiCorp - Vodafone ItalyHashiCorp · undated page, accessed November 10, 2026 · Tier A
  12. [12]Privacy at HashiCorpHashiCorp · published April 20, 2026 · Tier A
  13. [13]Security at HashiCorpHashiCorp · undated page, accessed November 10, 2026 · Tier A
  14. [14]Technical Support Services and PoliciesHashiCorp · undated page, accessed November 10, 2026 · Tier A
  15. [15]The Stack by HashiCorpHashiCorp · published October 27, 2026 · Tier A
  16. [16]IBM Terraform (formerly HashiCorp Terraform) Reviews 2026G2 · undated page, accessed November 10, 2026 · Tier C

Spot a factual error? Request a correction.