Palo Alto Networks in talks to acquire Clutch Security

Palo Alto Networks is in discussions to acquire Clutch Security, according to a person familiar with the discussions.[1] The reported proposal includes $500 million in cash and additional payments tied to milestones.[1] The negotiations are ongoing and may not result in an acquisition.[2] Palo Alto Networks told The Information that it does not comment on rumors or speculation.[2] For teams assessing the news, the distinction matters: the reported price and strategic fit remain tied to a transaction that has not been confirmed as completed.

Clutch develops software to track and secure credentials—including passwords and authentication codes—that AI agents use to access corporate systems.[2] Its platform maps non-human identities, identifies excessive or exposed permissions, manages credentials across their lifecycle and detects suspicious activity.[2] Clutch says its tools can find every AI agent and map what each can access.[4] Organizations evaluating such tools can compare the reported capabilities with their own needs for visibility and credential management.

Clutch is a three-year-old Israeli security startup founded in late 2023 by CEO Ofir Har-Chen, CTO Sagi Haas and VP of R&D Tal Kimhi.[3][2] The company said its $20 million Series A brought its total funding to $28.5 million.[5] It was last valued at $85 million when it raised that Series A in January 2025, according to TechCrunch.[1] Clutch was approaching $10 million in annual recurring revenue, and the reported acquisition would value it at about 50 times ARR if completed.[1]

If completed, the acquisition would be Palo Alto Networks’ seventh acquisition this year, according to PitchBook.[1] TechCrunch reported that Palo Alto Networks has a history of buying innovation rather than building it in-house and increased dealmaking this year in response to rising AI-driven cyberattacks.[1] Earlier this year, Palo Alto Networks completed its $25 billion acquisition of Israeli-founded CyberArk, which historically focused on human users’ access to corporate systems.[2] Other reported activity includes Cyera’s $1 billion acquisition of Oasis Security, which also focuses on managing AI agents’ access, and Cisco’s purchase of Astrix for roughly $400 million.[1]