TREMBLANT Loads Up CyberArk Software With 60,000 Shares in New Position

Tremblant Capital Group initiated a new position in CyberArk Software (NASDAQ:CYBR), acquiring 60,201 shares worth $29.09 million as of September 30, 2025 — representing 3% of Tremblant’s $968.95 million in reportable U.S. equity assets and making CyberArk its 14th largest holding. CyberArk shares were $487.29 as of November 13, 2025 (market cap $24.6 billion), with TTM revenue of $1.30 billion and a TTM net loss of $226.92 million; the stock trades at a P/S multiple near 17. The filing follows Tremblant’s portfolio reshuffle in Q3 and occurs against the backdrop of a proposed Palo Alto Networks acquisition, a factor that could influence upside but also reflects a relatively small, fund-specific allocation unlikely to move the overall market.

Analysis

Market structure: Tremblant’s $29M entry into CYBR reinforces M&A-driven demand for high-quality privileged-access/SaaS security assets; direct winners are CyberArk (CYBR) and acquiror Palo Alto (PANW) via deal arbitrage, while smaller point vendors and low-margin MSSPs face pricing pressure as customers consolidate. Limited supply of enterprise-grade PAM targets suggests continued premium multiples (CYBR P/S ~17) and higher implied vols; expect short-term bid in equities and tightened credit spreads for acquirors funding deals.

Risk assessment: Key tail risks are deal failure (regulatory/financing) which could trigger a >30% downside, integration/customer churn that compresses multiples, and an enterprise IT budget pullback in a recession reducing SaaS renewals. Immediate (days) volatility is event-driven around filings; short-term (weeks–months) hinge on antitrust/SEC/financing updates; long-term (3–5 years) fundamentals hinge on ARR conversion and margin expansion (target: move to GAAP profitability and 15–20% revenue CAGR).

Trade implications: Direct play: tactical long CYBR sized 1.5–3% of portfolio via stock or buy-write; hedge with PANW tail risk or buy PANW if you expect accretion. Options: buy CYBR 6–9 month call spreads (buy Jan-26 2026 480c / sell 650c) to cap premium; pair trade: long CYBR, short a broad cybersecurity ETF or OKTA to capture id-security-specific re-rate versus platform peers.

Contrarian angles: Consensus prices meaningful M&A probability — what’s missed is downside if deal fails or if CYBR standalone can re-rate post-integration inefficiency; historical M&A in identity (Cisco/Duo) shows both rapid premium capture and post-close attrition. If regulatory risk >20% probability, options market is underpricing asymmetric downside; conversely, if PANW faces financing constraints, a bidding war could push CYBR another +15–30% before close.

Key Decisions for Investors

• Establish a 1.5–3.0% long position in CYBR (stock or ETF-equivalent) within 5–30 days, scale 50% now and 50% on any pullback >8%; target hold until definitive M&A outcome or Q4 results, take profits on +25–35% moves.
• Buy a protective hedge: purchase PANW 9–12 month out-of-the-money puts (e.g., 20–25% OTM) sized to cover 0.5–1% portfolio risk if you hold CYBR, as regulatory/financing failure would hit acquiror/target pair.
• Execute a call-spread on CYBR: buy Jan-26-2026 480 call and sell 650 call to limit premium (target cost < $40–$60 per share), breakeven if CYBR > ~520 before Jan expiry — good asymmetric upside if deal completes.
• Implement a relative-value pair: long CYBR (0.5–1% portfolio) and short OKTA or a cybersecurity ETF (equal notional) to isolate PAM/identity re-rating vs. platform multiples; rebalance on any >10% divergence.
• If CYBR falls >20% on deal failure, increase conviction to 2–4% position only after confirming ARR retention >90% on subsequent quarter and management outlook showing path to positive operating cash flow within 12–18 months.