CyberArk Buys Vaultive To Strengthen Cloud Security

CyberArk has purchased certain assets of Vaultive to boost proactive cloud security controls and streamline the user experience for privileged accounts and cloud administrators.

The Newton, Mass.-based privileged account security vendor said its acquisition of Boston-based Vaultive will provide for greater visibility and control over privileged business users, as well as Software-as-a-Service, Infrastructure-as-a-Service, and Platform-as-a-Service administrators. Terms of the deal, which closed Monday, weren't disclosed.

"Vaultive provides a strong building block to accelerate CyberArk's cloud security strategy," Udi Mokady, CyberArk's chairman and CEO, said in a statement. "We look forward to incorporating the technology to add additional depth and proactive protection for enterprises facing an expanded attack surface in the cloud."

[RELATED: 2018 Security 100: 20 Coolest Identity Management And Data Protection Vendors]

Vaultive will extend CyberArk's offering to highly privileged users by delivering a cloud-native and mobile experience, the company said. These accounts are frequent targets for cyber-attacks, according to the company. Vaultive was named one of the 20 Coolest Cloud Security Vendors on the 2018 CRN Cloud 100.

Privileged business users and SaaS, IaaS and PaaS administrators have broad and often unlimited access to a range of social media, web-based sales operations and financial applications, according to CyberArk. This access must be monitored and controlled across multiple types of applications in a way that doesn't change how cloud administrators and privileged business users work.

The acquisition will give CyberArk a level of granularity and control around privileged account security in cloud environments that's unmatched in the industry, according to the company.

"It's becoming increasingly clear that customers desire a unified security approach that extends from the data center to the cloud," Ben Matzkel, Vaultive's founder and CTO, said in a statement. "Fortified with Vaultive's technology and its team, CyberArk is uniquely positioned to meet this critical need."

Vaultive was founded in 2009, and employs 34 people, according to LinkedIn. The company has raised $19 million in four rounds of venture funding, according to CrunchBase, with .406 Ventures, New Science Ventures and Harmony Partners leading the way. CyberArk didn't immediately respond to a request for additional comment.

The Vaultive acquisition extends CyberArk's leadership around securing privileged access to SaaS, IaaS and PaaS applications by administrators and privileged business users, according to the company. This will further the company's leadership around security modern infrastructure and applications, CyberArk said.

CyberArk Conjur provides organizations with comprehensive secrets management around DevOps toolchains and cloud-native applications. This capability is based off the company's $42 million acquisition of DevOps software security vendor Conjur in May 2017, which extended CyberArk's reach deeper into the DevOps life cycle to protect secrets and manage machine identities

The company additionally offers cloud platform support across AWS, Microsoft Azure and Google Cloud Platform, and has validated its ability to stand up a privileged account security offering in AWS in 15 minutes or less.

Vaultive's Cloud Security Platform allows users to rapidly onboard mainstream cloud services and custom web applications, enabling organizations to quickly apply a broad set of cloud security protections to their data, including feature-preserving encryption capabilities.

This is the sixth acquisition of a vendor with cloud access security broker (CASB) capabilities in the past two years. McAfee bought Skyhigh Networks and Forcepoint purchased Imperva's Skyfence division in 2017, while Cisco, Oracle and Proofpoint acquired CloudLock, Palerra and FireLayers, respectively, in the second half of 2016.