Every category where a model named CyberArk for a mid-market B2B company. Share is first choices across the direct, paraphrase, budget and scale prompts; rank is within every product named in that category.

Category	Function	Share	Rank	Negative rate	Labels	Quadrant
Identity governance	Identity and access	2%	22 of 77	40%	5	under 10 labels · led by Lumos at 20%
Privileged access management	Identity and access	0%	74 of 74	63%	51	criticized challenger
Secrets management	Identity and access	0%	15 of 40	14%	7	under 10 labels · led by Doppler at 33%
Business password managers	Identity and access	0%	19 of 35	0%	1	under 10 labels · led by Bitwarden at 49%

Movement

This is the first edition on this tier, so no move can be computed for CyberArk yet. From the next edition this section shows, per buyer segment, whether its share moved by more than the measured noise floor.

By model

How each model treated CyberArk across every prompt where it was named for a mid-market B2B company. Twelve models, six prompts per category.

Model	First choice	Alternative	Mention	Negative	Labels
Claude Haiku 4.5	0	0	3	3	6
GPT-5.4 mini	1	2	0	2	5
Gemini 3.5 Flash	0	0	0	5	5
Perplexity Sonar	1	0	0	0	1
Grok 4.1 Fast	2	0	1	5	8
Mistral Small	1	0	3	2	6
DeepSeek V4 Flash	1	0	1	5	7
Llama 4 Maverick	1	0	3	1	5
Qwen 3.7 Flash	1	1	0	4	6
Kimi K2	1	1	2	4	8
GLM 4.7 FlashX	0	1	0	1	2
MiniMax M2.5	1	1	0	3	5

By framing

Which of the six questions produced the naming. By model says how often; this says asked what. The first-choice count on the right carries the marks of the models that produced it.

FramingLabels by classFirst choices

Direct25 labels9

Paraphrase33 labels11

Comparative37 labels19not counted in share

Budget-constrained26 labels1

Scale-constrained27 labels3

Negative32 labels2not counted in share

First choiceAlternativeMentionNegative180 labels in all, every segment counted; 24 of the 45 first choices count toward share, since the comparative and negative framings do not. The bar is one segment per label class, to scale within the framing.

What the models said for it

Verbatim evidence the judge attached to positive labels.

“Frequently ranked the enterprise benchmark; strong on vaulting, session control, and broad identity-security depth.” Perplexity Sonar · PAM · comparative prompt · first choice

“like CyberArk, are considered the market leader with the deepest privileged access controls and broadest coverage” Llama 4 Maverick · PAM · comparative prompt · first choice

“Choose CyberArk if you want the most established enterprise PAM program and deep vault/session controls.” GPT-5.4 mini · PAM · comparative prompt · first choice

“Choose CyberArk for largest, most regulated environments needing maximum depth and security posture” DeepSeek V4 Flash · PAM · comparative prompt · first choice

And against it

Verbatim evidence attached to negative labels. A warning on a product with few labels is a warning; on a product with many, it is one voice among them.

“What to Avoid ... CyberArk | Highest cost, requires dedicated PAM team, lengthy implementation” Kimi K2 · PAM · paraphrase prompt · hard negative

“avoid CyberArk and look for modern, SaaS-first, low-overhead tools” Gemini 3.5 Flash · PAM · negative prompt · hard negative

“Unlike large enterprises that can afford the high cost and massive operational overhead of legacy giants like CyberArk, mid-market companies require fast time-to-value, lower total cost of ownership” Gemini 3.5 Flash · PAM · direct prompt · soft negative

“Caveat: High implementation costs and requires significant maintenance resources. You might find yourself under-utilizing features if your headcount is under 500.” Qwen 3.7 Flash · PAM · paraphrase prompt · soft negative

Named alongside

The products named in the same answers as CyberArk, over the 180 answers that named it. Took the first choice instead counts the answers where the other product was the first choice and CyberArk was named but was not.

ProductSame answerTook the first choice insteadHead to head

BeyondTrust115 of 1802Not in the top three

Delinea107 of 18019Not in the top three

ManageEngine PAM36066 of 18021Not in the top three

KeeperPAM61 of 18022Not in the top three

HashiCorp Vault45 of 1806Not in the top three

StrongDM40 of 1804Not in the top three

Teleport40 of 1804Not in the top three

Securden Unified PAM27 of 1806Not in the top three

Delinea Secret Server25 of 1805Not in the top three

1Password24 of 1803Not in the top three

A head-to-head page exists where both products are in a category's top three. The other rows are the same fact without a page behind them, so they link to the product instead.

What carried it into the answer

The sites and pages cited by the answers that named CyberArk. A fact about retrieval, not a lever on the model.

Citations exist only for the models that return a source list, four of the twelve in this edition, so these counts come from 142 of the 180 answers that named CyberArk and are not a share of its labels.

Domains cited

startwithidentity.com73

expertinsights.com53

netwrix.com52

aimultiple.com50

gartner.com41

heimdalsecurity.com41

oneidentity.com38

cybervendorguide.com37

tech-insider.org30

delinea.com28

443 of the 443 domain citations in answers naming CyberArk came from somebody else's page.

Pages cited

netwrix.com/en/resources/blog/pam-solutions46

expertinsights.com/identity-and-access-management/the-top-privileged-access-management-pam44

aimultiple.com/pam-solutions43

heimdalsecurity.com/blog/privileged-access-management-pam-software-solutions39

oneidentity.com/learn/top-5-privileged-access-management-tools-in-2025.aspx32

cybervendorguide.com/guides/privileged-access-management29

tech-insider.org/cyberark-vs-beyondtrust-vs-delinea-pam-202629

startwithidentity.com/rankings/best-pam-for-smb28

Pages are listed as the models cited them.

Names read as CyberArk

What the judge wrote, as written, with how often. The vendor table decides that these count as CyberArk; a claim can dispute any of them.

CyberArk (On-Premises and Privilege Cloud) 1CyberArk (Privilege Cloud) 1CyberArk Enterprise Suite 1

Is this your product?

Claim this page

Claiming is free and changes nothing in the data. A claimed page shows a verified contact who is told when each edition publishes and when CyberArk's standing changes by more than the noise floor; the right to propose corrections to the vendor table, meaning names the judge wrote that should or should not read as CyberArk, applied by version and listed in the change log; and a one-line description supplied by the vendor and marked as such.

It does not get any change to labels, shares or verdicts, any preview, or any say over which quotes appear. A verification link goes to your work email; an address at cyberark.com is approved on the spot, any other address is reviewed by hand.

Your name and company appear on the claimed page, or the company alone if you ask below. A title and a LinkedIn address appear there too if you give them, and are left off if you do not. Your email address is never published.