Privileged access management is one of the least glamorous and most consequential areas of security. Almost every serious breach involves credential abuse at some point in the chain, and the discipline of vaulting, rotating, brokering and recording privileged sessions is the control that most directly limits the blast radius. CyberArk built that category and its training reflects thirty years of accumulated practice. The curriculum on vault architecture, session isolation, credential rotation and least privilege enforcement is genuinely the deepest available, and much of the conceptual content transfers to competing products because competitors largely copied the model.
The certification ladder runs through Defender for operational administrators and Sentry for implementation engineers, with specialisations layered on top. These credentials appear by name in job specifications for PAM roles, which is the only real test of whether a vendor certification is worth anything. Someone holding CyberArk Sentry is employable in a specific and well-paid niche, and the training is what gets them there. The reason this review is being written now rather than a year ago is a change of circumstance rather than a change of content.
Palo Alto Networks announced an agreement to acquire CyberArk on 30 July 2025, shareholders approved it in November with about 99.8 percent of votes cast in favour, and the acquisition completed on 11 February 2026 at roughly $25 billion in equity value, structured as $45 in cash and 2.2005 Palo Alto shares per CyberArk share. That is a very large deal and it is explicitly framed around identity security for the AI era. The practical evidence that integration is under way is already visible. CyberArk's own university resource URL now redirects to a Palo Alto Networks page.
That is a small thing on its own but it is exactly the pattern that precedes a platform migration, and anyone who has watched a certification programme get absorbed into an acquirer's learning platform knows what usually follows: a migration window, a period where exams are unavailable, a remapping of credential names, and a set of holders who have to explain what their old badge corresponded to. Appian paused its entire certification programme for a month during a platform migration in 2026. DataStax certifications went into suspension mid-migration after the IBM acquisition with no published return date. There is no reason to assume CyberArk will be worse than those, and no reason to assume it will be better.
So the recommendation splits cleanly. If you already work in a CyberArk environment, your employer will pay, and the operational knowledge is immediately useful, then proceed. The product is not going away, Palo Alto has said the identity security solutions continue as a standalone platform, and the Defender-level skills are needed on day one regardless of what happens to the badge. If you are an individual weighing whether to invest your own money and several weeks into the Sentry track as a career move, wait for Palo Alto to publish an integration roadmap for the certification programme.
The information asymmetry right now is entirely in the vendor's favour and there is no cost to waiting a quarter. The pricing opacity compounds this. Nothing is published. Every conversation starts with sales, which was already annoying and becomes more so when the entity you are negotiating with is mid-integration into a much larger company with different commercial habits.
Three point four. Category-defining content held back by a moment of genuine structural uncertainty. The score would be higher in a stable year and it may well be higher again once the integration settles.