CyberArk's 'Identity Crisis' campaign, created by Boston agency Colossus in 2023, launched three effects-driven films tackling identity proliferation across
How CyberArk Made Identity Proliferation the Star of Its First Brand Campaign
CyberArk's "Identity Crisis" campaign, created by Boston agency Colossus and launched in the United States in October 2023, is a three-film, effects-driven brand initiative that uses surreal visual storytelling to communicate the threat of identity proliferation and credential theft facing modern organisations across financial services, energy, retail, healthcare, and government sectors.
CyberArk operates as a publicly traded information security company specialising in identity management, with offices across 15 countries. The company's "Identity Crisis" campaign marks what Colossus describes as CyberArk's first-ever brand campaign, according to the agency's portfolio, and it represents a decisive departure from the stock-imagery conventions that have long dominated cybersecurity advertising. Rather than lean on images of diligent professionals at monitors, Colossus and CyberArk chose fantastical, effects-laden filmmaking to make the abstract dangers of cyber attacks visceral and immediate for enterprise buyers across the United States.
The campaign centres on three short films — titled "DevSecOps," "Access/Identity," and "PAM" — each visualising a distinct dimension of the identity security problem CyberArk exists to solve. Beyond the films themselves, the initiative generated more than 700 creative assets deployed across programmatic advertising, social media, video, and out-of-home channels, according to wearecolossus.com. An international rollout extended the campaign's reach to Tokyo, Prague, Warsaw, Singapore, and Jakarta through event geofencing and global distribution, per agencycompile.com. CyberArk CMO Simon Mouyal described the campaign's purpose directly: "Across organisations, identities continue to proliferate and every identity is a target for attackers trying to steal credentials and data," positioning the work as a translation of a deeply technical challenge into a form that resonates with human audiences. CyberArk's Clapboard Score for "Identity Crisis" is 74 out of 100.
CyberArk builds its "Identity Crisis" campaign on a specific and well-documented strategic insight: for cyber criminals, stolen or compromised identity credentials represent the single most exploitable access point into any organisation. The decision to build an entire brand platform around identity proliferation reflects a broader repositioning that CyberArk undertook around 2020 and 2021, when the company expanded from its heritage in Privileged Access Management into the wider Identity Security platform category, following its acquisition of Idaptive, according to clapboard.com and agencycompile.com.
The global Identity and Access Management market context underscores why this strategic emphasis is credible. The IAM market was estimated at approximately 15 to 18 billion dollars globally in 2023, with annual growth of roughly 11 to 12 percent, across multiple forecasts cited by sources including Market Us and growthmarketreports.com. In the United States, where CyberArk's enterprise customer base is concentrated across financial services, energy, and government, the acceleration of notable cyber attacks in the years preceding the campaign created immediate relevance for identity-led messaging. The recent surge in high-profile breaches gave CyberArk and Colossus a genuine news cycle to work against.
Competitively, CyberArk operates in a crowded field. Microsoft, through its Azure Active Directory and Entra identity platform, commands broad enterprise reach, while Okta has established strong brand recognition in the Identity and Access Management category across the United States. Against these competitors, CyberArk's strategic differentiator is its depth in securing non-human identities and privileged access — a specialisation that the "DevSecOps" and "PAM" films in the "Identity Crisis" campaign directly address. By focusing creative storytelling on the human and non-human identity threat simultaneously, Colossus gave CyberArk a positioning argument that neither Microsoft nor Okta had articulated through brand advertising with comparable cinematic ambition in the United States market.
Directors Dan Shapiro and Alex Topaller — a Grammy Award-winning directing duo working through production company Aggressive — led the visual execution of "Identity Crisis," bringing a filmmaking sensibility more commonly associated with music videos and feature work than enterprise software advertising. Their approach transforms abstract cybersecurity concepts into physical, tactile metaphors that are legible without technical knowledge, a requirement for any brand campaign attempting to reach enterprise decision-makers across the United States who may not share a DevSecOps vocabulary.
Each of the three films deploys a distinct visual language tied to its subject. "DevSecOps" uses a nesting-doll structure to illustrate how attackers penetrate layered firewalls to reach developer data, according to wearecolossus.com. "Access/Identity" depicts a user cloning and morphing into increasingly distorted versions of themselves, visualising credential duplication and the loss of identity integrity. "PAM" — addressing Privileged Access Management — renders identity propagation through liquid morphing, capturing the fluid and often invisible way in which excessive privileges spread through an organisation. Together the three films form a coherent visual grammar for identity proliferation and hacking without relying on a single line of code or a single shot of a computer screen.
The creative leadership at Colossus included Executive Creative Directors Travis Robertson and Greg Almeida, with Creative Directors Alex Mikhaylov and Max Chelyadnikov shaping the visual identity system, per clapboard.com and ryandaltondesign.com. Associate Creative Directors Ryan Dalton and Matt Cermak contributed to execution, alongside Account Director Melissa Astorga and Managing Director Jon Balck. Production management was handled by Nadit Aslam, with post production produced by Dustin Pownall, according to clapboard.com. The campaign also involved a reimagined brand identity and voice for CyberArk, meaning the films existed within a comprehensively refreshed visual ecosystem rather than as isolated spots.
No independently verified performance metrics for the "Identity Crisis" campaign — such as view counts, lead generation figures, or brand lift data — are publicly available at the time of writing. What is documentable is the campaign's structural scale and distribution ambition. Production of more than 700 creative assets across programmatic, social, video, and out-of-home channels, as reported by wearecolossus.com, indicates a media investment designed for sustained enterprise audience reach rather than a single-channel activation. The planned international rollout across five cities — Tokyo, Prague, Warsaw, Singapore, and Jakarta — using event geofencing confirms that the United States launch was conceived as the origin point of a global campaign, per agencycompile.com.
Structurally, the campaign demonstrates several characteristics associated with effective B2B brand advertising in the cybersecurity category. The decision to produce three thematically distinct films — each mapping to a specific CyberArk product area including DevSecOps, identity access, and privileged access management — allows the campaign to serve both broad brand awareness and targeted consideration objectives simultaneously. For a company operating in a growing global IAM market, estimated at 15 to 18 billion dollars annually across multiple forecasts including those from market.us and growthmarketreports.com, establishing emotional and narrative differentiation from competitors such as Microsoft and Okta carries significant long-term commercial logic. CyberArk's Clapboard Score of 74 out of 100 reflects strong creative ambition and production quality relative to category norms, with room to develop measurable audience response data as the campaign matures.
CyberArk's "Identity Crisis" is a three-film brand campaign created by Boston agency Colossus and launched in the United States in October 2023. It uses surreal, effects-driven filmmaking to communicate the threat of identity proliferation and cyber attacks, spanning more than 700 creative assets across programmatic, social, video, and out-of-home channels, according to wearecolossus.com.
Grammy Award-winning directing duo Dan Shapiro and Alex Topaller directed the three films for CyberArk's Identity Crisis campaign through production company Aggressive. Their background in high-concept visual work shaped the campaign's effects-driven approach to depicting identity theft, hacking, and credential proliferation across enterprise cybersecurity audiences in the United States.
Colossus, a Boston-based creative agency, created the Identity Crisis campaign for CyberArk. The agency handled both a reimagined brand identity and the three core campaign films, with Executive Creative Directors Travis Robertson and Greg Almeida leading creative, per clapboard.com and ryandaltondesign.com.
The three films are titled "DevSecOps," "Access/Identity," and "PAM." Each visualises a distinct cybersecurity threat: nesting-doll firewalls for DevSecOps, identity cloning for Access/Identity, and liquid morphing for Privileged Access Management. All three were directed by Dan Shapiro and Alex Topaller through production company Aggressive, according to wearecolossus.com.
CyberArk's campaign addresses identity management by depicting how cyber criminals exploit both human and non-human identities as entry points into organisations. CyberArk CMO Simon Mouyal stated that every identity is a target for attackers seeking to steal credentials and data, positioning the campaign directly against the identity proliferation challenge facing financial services, energy, healthcare, and government sectors in the United States.
CyberArk's Identity Crisis campaign holds a Clapboard Score of 74 out of 100, reflecting strong creative ambition and production quality relative to cybersecurity category norms. The score recognises the campaign's effects-driven filmmaking and its strategic use of visual metaphor to translate complex identity security concepts for enterprise audiences across the United States.
Creative Collaboration Platform: The Backbone of Modern Creative WorkWhat is a creative collaboration platform?Clapboard defines a creative collaboration platform as the operational core for today’s distributed creative teams. This is not a collection of digital collaboration tools stitched together; Clapboard’s system
Understanding the Creative Production MarketplaceWhat is a Creative Production Marketplace?Clapboard defines a creative production marketplace as a structured ecosystem where brands, agencies, and production talent converge to execute video, advertising, and branded content at scale. Unlike the legacy agency or freelanREAD FULL ARTICLE
The Urgent Need for a Creative Production Operating SystemWhy Traditional Creative Production Models Break DownClapboard sees the creative production landscape shifting under pressure. Content velocity is no longer a buzzword—it’s a mandate. Modern advertising demands relentless output across dozens of channels, each wREAD FULL ARTICLE
