#1Investor Relations Presentation August 2023 CYBERARKⓇ Com Shit control caps lock 98 X C B N M 88#2Cautionary Language Concerning Forward-Looking Statements This presentation contains forward-looking statements, which express the current beliefs and expectations of CyberArk's (the "Company") management. In some cases, forward-looking statements may be identified by terminology such as "believe," "may," "estimate," "continue," "anticipate," "intend," "should," "plan," "expect," "predict," "potential" or the negative of these terms or other similar expressions. Such statements involve a number of known and unknown risks and uncertainties that could cause the Company's future results, levels of activity, performance or achievements to differ materially from the results, levels of activity, performance or achievements expressed or implied by such forward-looking statements. Important factors that could cause or contribute to such differences include risks relating to: changes to the drivers of the Company's growth and its ability to adapt its solutions to IT security market demands; fluctuation in the Company's quarterly results of operations due to sales cycles and multiple pricing and delivery models; the Company's ability to sell into existing and new customers and industry verticals; an increase in competition within the Privileged Access Management and Identity Security markets; unanticipated product vulnerabilities or cybersecurity breaches of the Company's, or the Company's customers' or partners' systems; complications or risks in connection with the Company's subscription model, including uncertainty regarding renewals from its existing customer base, and retaining sufficient subscription or maintenance and support service renewal rates; risks related to compliance with privacy and data protection laws and regulations; risks regarding potential negative economic conditions in the global economy or certain regions, including conditions resulting from financial and credit market fluctuations, rising interest rates, bank failures, inflation, and the potential for regional or global recessions; the Company's ability to hire, train, retain and motivate qualified personnel; reliance on third-party cloud providers for the Company's operations and SaaS solutions; the Company's history of incurring net losses and its ability to achieve profitability in the future; risks related to the Company's ongoing transition to a new Chief Executive Officer; risks related to sales made to government entities; the Company's ability to find, complete, fully integrate or achieve the expected benefits of strategic acquisitions; the duration and scope of the COVID-19 pandemic and its resulting effect on the demand for the Company's solutions and on its expected revenue growth rates and costs; the Company's ability to expand its sales and marketing efforts and expand its channel partnerships across existing and new geographies; regulatory and geopolitical risks associated with global sales and operations, as well as the location of our principal executive offices, most of our research and development activities and other significant operations in Israel; changes in regulatory requirements or fluctuations in currency exchange rates; the ability of the Company's products to help customers achieve and maintain compliance with government regulations or industry standards; risks related to intellectual property claims or the Company's ability to protect its proprietary technology and intellectual property rights; and other factors discussed under the heading "Risk Factors" in the Company's most recent annual report on Form 20-F filed with the Securities and Exchange Commission. Forward-looking statements in this presentation are made pursuant to the safe harbor provisions contained in the U.S. Private Securities Litigation Reform Act of 1995. These forward-looking statements are made only as of the date hereof, and the Company undertakes no obligation to update or revise the forward-looking statements, whether as a result of new information, future events or otherwise. © 2023 CyberArk Software Ltd. All rights reserved CYBERARKⓇ#3CyberArk at a Glance Leading the way in Identity Security, centered on intelligent privilege controls The only Identity Security Platform that secures all identities - human and machine Customers prioritize CyberArk for Consolidation of Trust The Global Leader in Identity Security 90% of Revenue is Recurring © 2023 CyberArk Software Ltd. All rights reserved Data is as of June 30, 2023 or for the quarter ended June 30, 2023, as applicable. $50 Billion Total Addressable Market ~1,500 customers with >$100k in ARR >8,000 Global Customers >55% Fortune 500 >35% Global 2000 Revenues 61% Americas 29% EMEA 10% APJ CYBERARKⓇ#4Durable Industry Tailwinds ... Industry Leading Innovation Investment Highlights *As compared to the period in which CyberArk's reported metrics were impacted as a result of its transition to a recurring revenue business model. © 2023 CyberArk Software Ltd. All rights reserved Strong ARR Growth Highly Predictable, Recurring Revenue Model Platform Selling Motion Driving Land and Expand $ Improving Profitability & Free Cash Flow* CYBERARKⓇ#5CyberArk's Mission Secure the world against cyber threats so together we can move fearlessly forward © 2023 CyberArk Software Ltd. All rights reserved CYBERARKⓇ#6New Identities © 2023 Cyber Ark Software Ltd. All rights reserved Consolidation of Trust 11111 O 6 New Environments New Attack Methods - CYBERARKⓇ