CyberArk Announces Strong Fourth Quarter and Full Year 2022 Results

Subscription Portion of Annual Recurring Revenue (ARR) of $364 million; Growth of 99% Year-over-Year
 Total ARR of $570 million; Growth of 45%
 Subscription Revenue of $280.6 million for the Full Year 2022; Growth of 108% Year-Over-Year
 Total Revenue of $591.7 million for the Full Year; Growth of 18% Year-Over-Year
 Net Cash Provided by Operating Activities of $49.7 million for the Full Year 2022

NEWTON, Mass. & PETACH TIKVA, Israel— CyberArk (NASDAQ: CYBR), the global leader in Identity Security, today announced strong financial results for the fourth quarter and full year ended December 31, 2022.

“Our results in the fourth quarter and full year 2022 demonstrate the durability of demand for our solutions and strong execution,” said Udi Mokady, CyberArk Chairman and CEO. “Our subscription bookings mix reached a new record of 90 percent in the fourth quarter, well above the mix assumed in our guidance framework. The higher mix drove our Annual Recurring Revenue to $570 million, an increase of 45 percent year over year and significantly above our guidance, but also negatively impacted our recognized revenue in the quarter. We also once again set a record for net new Total ARR and Subscription ARR in the fourth quarter compared to the third quarter 2022. Customers are embracing our identity security platform, the most comprehensive in the market and our solutions are being prioritized by Chief Information Security Officers. As we look ahead, we believe that our competitive position has never been stronger. With our leadership position, durable demand trends and our strong execution, we believe we are positioned to navigate the current economic uncertainty and continue to capitalize on our massive opportunity and deliver long-term profitable growth.”

Financial Summary for the Fourth Quarter Ended December 31, 2022

• Subscription revenue was $88.5 million in the fourth quarter of 2022, an increase of 86 percent from $47.6 million in the fourth quarter of 2021.
• Maintenance and professional services revenue was $66.1 million in the fourth quarter of 2022, compared to $65.1 million in the fourth quarter of 2021.
• Perpetual license revenue was $14.6 million in the fourth quarter of 2022, compared to $38.7 million in the fourth quarter of 2021.
• Total revenue was $169.2 million in the fourth quarter of 2022, up 12 percent from $151.3 million in the fourth quarter of 2021.
• GAAP operating loss was $(30.1) million and non-GAAP operating income was $4.1 million in the fourth quarter of 2022.
• GAAP net loss was $(22.2) million, or $(0.54) per basic and diluted share, in the fourth quarter of 2022. Non-GAAP net income was $7.2 million, or $0.16 per diluted share, in the fourth quarter of 2022.

Financial Summary for the Full Year Ended December 31, 2022

• Subscription revenue was $280.6 million in the full year 2022, an increase of 108 percent from $134.6 million in the full year 2021.
• Maintenance and professional services revenue was $261.1 million in the full year 2022, an increase of 3 percent from $252.6 million in the full year 2021.
• Total revenue was $591.7 million in the full year 2022, up 18 percent from $502.9 million in the full year 2021.
• GAAP operating loss was $(152.5) million and non-GAAP operating loss was $(22.4) million in the full year 2022.
• GAAP net loss was $(130.4) million, or $(3.21) per basic and diluted share, in the full year 2022. Non-GAAP net loss was $(17.8) million, or $(0.44) per basic and diluted share, in the full year 2022.

Balance Sheet and Net Cash Provided by Operating Activities

• As of December 31, 2022, CyberArk had $1.2 billion in cash, cash equivalents, marketable securities, and short-term deposits.
• During the full year 2022, the Company generated $49.7 million in net cash provided by operating activities.
• As of December 31, 2022, total deferred revenue was $408.4 million, a 29 percent increase from $317.3 million at December 31, 2021.

Key Business Highlights

• Annual Recurring Revenue (ARR) was $570 million, an increase of 45 percent from $393 million at December 31, 2021.
  • The Subscription portion of ARR was $364 million, or 64 percent of total ARR at December 31, 2022. This represents an increase of 99 percent from $183 million, or 46 percent of total ARR, at December 31, 2021.
  • The Maintenance portion of ARR was $206 million at December 31, 2022, compared to $210 million at December 31, 2021.
• Recurring revenue in the fourth quarter was $142.6 million, an increase of 39 percent from $102.9 million for the fourth quarter of 2021. For the full year 2022, recurring revenue was $498.3 million, an increase of 43 percent from $348.7 million for the full year 2021.
• Remaining Performance Obligations (RPO) of $713 million at December 31, 2022, an increase of 38 percent compared to $516 million at December 31, 2021.
• 90 percent of total license bookings in the fourth quarter 2022 were related to subscription bookings, compared to approximately 71 percent in the fourth quarter of 2021. For the full year 2022, 88 percent of total license bookings were related to subscription bookings, compared with approximately 66 percent for the full year 2021.
• Added a strong number of new logos in the quarter, signing more than 380 new customers during the fourth quarter of 2022.

CyberArk Announces Planned Executive Changes

CyberArk today announced that Founder, Chairman and CEO, Udi Mokady, will assume the role of Executive Chair of the Board of Directors, (Executive Chair) effective April 3, 2023. At that time, Matthew Cohen, CyberArk’s Chief Operating Officer, will be appointed Chief Executive Officer and join the Board of Directors. The details of the announcement can be accessed here.

Recent Developments

• CyberArk was named a Leader in the Gartner® Magic Quadrant™ for Access Management⁽¹⁾, the only vendor to be named a leader for both Gartner® Magic Quadrant™ Privileged Access Management⁽²⁾ and Access Management in 2022.
• CyberArk was named a Leader in KuppingerCole “Leadership Compass: Passwordless Authentication” for 2022⁽³⁾

Business Outlook

Based on information available as of February 9, 2023, CyberArk is issuing guidance for the first quarter and full year 2023 as indicated below.

First Quarter 2023:

• Total revenue is expected to be in the range of $160.0 million and $164.0 million, representing growth of 25 percent to 29 percent compared to the first quarter of 2022.
• Non-GAAP operating loss is expected to be in the range of ($15.5) million to $(12.5) million.
• Non-GAAP net loss per share is expected to be in the range of $(0.30) to $(0.23) per basic and diluted share.
  • Assumes 41.3 million weighted average basic and diluted shares.

Full Year 2023:

• Total revenue is expected to be in the range of $724.0 million to $736.0 million, representing growth of 22 percent to 24 percent compared to the full year 2022.
• Non-GAAP operating income/(loss) is expected to be in the range of $(5.0) million to $5.0 million.
• Non-GAAP net income per share is expected to be in the range of $0.07 to $0.28 per diluted share.
  • Assumes 46.1 million weighted average diluted shares
• ARR as of December 31, 2023 is expected to be in the range of $730 million to $740 million, representing growth of 28 percent to 30 percent from December 31, 2022.

⁽¹⁾ Gartner®, Magic Quadrant™ for Access Management, by Henrique Teixeira, Abhyuday Data, Michael Kelley, James Hoover, Brian Guthrie, 1 November 2022.
⁽²⁾ Gartner®, Magic Quadrant™ for Privileged Access Management, by Michael Kelley, James Hoover, Felix Gaehtgens, Abhyuday Data, 19th July 2022.
⁽³⁾ KuppingerCole Analysts AG, “Leadership Compass: Passwordless Authentication,” October 4, 2022 by Alejandro Leal

Conference Call Information

In conjunction with this announcement, CyberArk will host a conference call on Thursday, February 9, 2023 at 8:00 a.m. Eastern Time (ET) to discuss the Company’s fourth quarter and full year financial results and its business outlook. To access this call, dial +1 (888) 330-2455 (U.S.) or +1 (240) 789-2717 (international). The conference ID is 6515982. Additionally, a live webcast of the conference call will be available via the “Investor Relations” section of the company’s website at www.cyberark.com.

Following the conference call, a replay will be available for one week at +1 (800) 770-2030 (U.S.) or +1 (647) 362-9199 (international). The replay pass code is 6515982. An archived webcast of the conference call will also be available in the “Investor Relations” section of the company’s website at www.cyberark.com.

About CyberArk
CyberArk (NASDAQ: CYBR) is the global leader in Identity Security. Centered on privileged access management, CyberArk provides the most comprehensive security offering for any identity – human or machine – across business applications, distributed workforces, hybrid cloud workloads and throughout the DevOps lifecycle. The world’s leading organizations trust CyberArk to help secure their most critical assets. To learn more about CyberArk, visit https://www.cyberark.com, read the CyberArk blogs or follow on Twitter via @CyberArk, LinkedIn or Facebook.

Copyright © 2023 CyberArk Software. All Rights Reserved. All other brand names, product names, or trademarks belong to their respective holders.

Key Performance Indicators and Non-GAAP Financial Measures

Annual Recurring Revenue (ARR)

• Annual Recurring Revenue (ARR) is defined as the annualized value of active SaaS, subscription or term-based license and maintenance contracts related to perpetual licenses in effect at the end of the reported period.

Subscription Portion of Annual Recurring Revenue

• Subscription portion of ARR is defined as the annualized value of active SaaS and subscription or term-based license contracts in effect at the end of the reported period. The subscription portion of ARR excludes maintenance contracts related to perpetual licenses.

Maintenance Portion of Annual Recurring Revenue

• Maintenance portion of ARR is defined as the annualized value of active maintenance contracts related to perpetual licenses. The Maintenance portion of ARR excludes SaaS and subscription or term-based license contracts in effect at the end of the reported period.

Recurring Revenue

• Recurring Revenue is defined as revenue derived from SaaS and subscription or term-based license contracts, and maintenance contracts related to perpetual licenses during the reported period.

Non-GAAP Financial Measures

CyberArk believes that the use of non-GAAP gross profit, non-GAAP operating expense, non-GAAP operating income (loss), non-GAAP net income (loss) and free cash flow is helpful to our investors. These financial measures are not measures of the Company’s financial performance under U.S. GAAP and should not be considered as alternatives to gross profit, operating loss, net loss or net cash provided by operating activities or any other performance measures derived in accordance with GAAP.

• Non-GAAP gross profit is calculated as GAAP gross profit excluding share-based compensation expense, and amortization of intangible assets related to acquisitions.
• Non-GAAP operating expense is calculated as GAAP operating expenses excluding share-based compensation expense, facility exit costs, acquisition related expenses and amortization of intangible assets related to acquisitions.
• Non-GAAP operating income (loss) is calculated as GAAP operating loss excluding share-based compensation expense, facility exit costs, acquisition related expenses and amortization of intangible assets related to acquisitions.
• Non-GAAP net income (loss) is calculated as GAAP net loss excluding share-based compensation expense, facility exit costs, acquisition related expenses, amortization of intangible assets related to acquisitions, amortization of debt discount and issuance costs, the tax effect of non-GAAP adjustments and unrealized gain from investment in privately held companies.
• Free cash flow is calculated as net cash provided by operating activities less purchase of property and equipment.

The Company believes that providing non-GAAP financial measures that are adjusted by, as applicable, share-based compensation expense, facility exit costs, acquisition related expenses, amortization of intangible assets related to acquisitions, non-cash interest expense related to the amortization of debt discount and issuance cost, the tax effect of the non-GAAP adjustments, unrealized gain from investment in privately held companies and purchase of property and equipment allows for more meaningful comparisons of its period to period operating results. Share-based compensation expense has been, and will continue to be for the foreseeable future, a significant recurring expense in the Company’s business and an important part of the compensation provided to its employees. Share based compensation expense has varying available valuation methodologies, subjective assumptions and a variety of equity instruments that can impact a company’s non-cash expense. The Company believes that expenses related to its facility exit costs, acquisitions, amortization of intangible assets related to acquisitions, unrealized gain from investment in privately held companies, and non-cash interest expense related to the amortization of debt discount and issuance costs do not reflect the performance of its core business and impact period-to-period comparability. The Company believes free cash flow is a liquidity measure that, after the purchase of property and equipment, provides useful information about the amount of cash generated by the business.

Non-GAAP financial measures may not provide information that is directly comparable to that provided by other companies in the Company’s industry, as other companies in the industry may calculate non-GAAP financial results differently, particularly related to non-recurring, unusual items. In addition, there are limitations in using non-GAAP financial measures as they exclude expenses that may have a material impact on the Company’s reported financial results. The presentation of non-GAAP financial information is not meant to be considered in isolation or as a substitute for the directly comparable financial measures prepared in accordance with U.S. GAAP. CyberArk urges investors to review the reconciliation of its non-GAAP financial measures to the comparable U.S. GAAP financial measures included below, and not to rely on any single financial measure to evaluate its business.

Guidance for non-GAAP financial measures excludes, as applicable, share-based compensation expense, acquisition related expenses, amortization of intangible assets related to acquisitions, non-cash interest expense related to the amortization of debt discount and issuance costs and the tax effect of the non-GAAP adjustments. A reconciliation of the non-GAAP financial measures guidance to the corresponding GAAP measures is not available on a forward-looking basis due to the uncertainty regarding, and the potential variability and significance of, the amounts of share-based compensation expense, amortization of intangible assets related to acquisitions, and the non-recurring expenses that are excluded from the guidance. Accordingly, a reconciliation of the non-GAAP financial measures guidance to the corresponding GAAP measures for future periods is not available without unreasonable effort.

Cautionary Language Concerning Forward-Looking Statements

This release contains forward-looking statements, which express the current beliefs and expectations of CyberArk’s (the “Company”) management. In some cases, forward-looking statements may be identified by terminology such as “believe,” “may,” “estimate,” “continue,” “anticipate,” “intend,” “should,” “plan,” “expect,” “predict,” “potential” or the negative of these terms or other similar expressions. Such statements involve a number of known and unknown risks and uncertainties that could cause the Company’s future results, levels of activity, performance or achievements to differ materially from the results, levels of activity, performance or achievements expressed or implied by such forward-looking statements. Important factors that could cause or contribute to such differences include risks relating to: changes to the drivers of the Company’s growth and its ability to adapt its solutions to IT security market demands; risks related to the Company’s planned transition to a new Chief Executive Officer; the transition of the Company’s business to a subscription model that began in 2021; the Company’s sales cycles and multiple pricing and delivery models; unanticipated product vulnerabilities or cybersecurity breaches of the Company’s, or the Company’s customers’ or partners’ systems; an increase in competition within the Privileged Access Management and Identity Security markets; the Company’s ability to hire, train, retain and motivate qualified personnel; the Company’s ability to sell into existing and new customers and industry verticals; risks related to compliance with privacy and data protection laws and regulations; the Company’s history of incurring net losses and our ability to achieve profitability in the future; the duration and scope of the COVID-19 pandemic and its impact on global and regional economies and the resulting effect on the demand for the Company’s solutions and on its expected revenue growth rates and costs; the Company’s ability to find, complete, fully integrate or achieve the expected benefits of additional strategic acquisitions; reliance on third-party cloud providers for the Company’s operations and SaaS solutions; the Company’s ability to expand its sales and marketing efforts and expand its channel partnerships across existing and new geographies; risks related to sales made to government entities; regulatory and geopolitical risks associated with global sales and operations (including the current conflict between Russia and Ukraine) and changes in regulatory requirements or fluctuations in currency exchange rates; the ability of the Company’s products to help customers achieve and maintain compliance with government regulations or industry standards; risks related to intellectual property claims or the Company’s ability to protect its proprietary technology and intellectual property rights; and other factors discussed under the heading “Risk Factors” in the Company’s most recent annual report on Form 20-F filed with the Securities and Exchange Commission. Forward-looking statements in this release are made pursuant to the safe harbor provisions contained in the U.S. Private Securities Litigation Reform Act of 1995. These forward-looking statements are made only as of the date hereof, and the Company undertakes no obligation to update or revise the forward-looking statements, whether as a result of new information, future events or otherwise.

Gartner Disclaimers: GARTNER and MAGIC QUADRANT are registered trademarks and service marks of Gartner Inc. and/or its affiliates in the U.S. and internationally and are used herein with permission. All rights reserved.

Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

The Gartner content described herein, (the “Gartner Content”) represent(s) research opinion or viewpoints published, as part of a syndicated subscription service, by Gartner, Inc. (“Gartner”), and are not representations of fact. Gartner Content speaks as of its original publication date (and not as of the date of this 6-K filing) and the opinions expressed in the Gartner Content are subject to change without notice.