Palo Alto Networks reportedly weighs $500M deal for Clutch
Palo Alto Networks is reportedly in discussions to acquire Clutch Security, a three-year-old startup that secures AI agents’ access to corporate systems, for $500 million in cash plus additional milestone-based payouts. Neither Palo Alto Networks nor Clutch Security responded to requests for comment, and the acquisition has not been confirmed.
Clutch was last valued at $85 million when it raised a $20 million Series A round in January 2025 led by Lightspeed and SignalFire. The company is approaching $10 million in annual recurring revenue, meaning the reported transaction value would equate to roughly 50 times ARR.
A premium for AI-agent access security
The reported valuation illustrates the attention paid to tools designed to govern how AI agents reach company systems. Clutch focuses on securing that access, an issue that has become more prominent as attackers use AI to make breaches easier.
The proposed multiple is not isolated. Upwind, a startup that uses AI to secure cloud infrastructure, recently declined an acquisition offer from DataDog that reportedly valued the company at around 40 times ARR. In the same market, Cyera acquired Oasis Security, another company focused on managing AI agents’ system access, for $1 billion, while Cisco acquired Astrix for roughly $400 million.
Palo Alto Networks continues its acquisition drive
If completed, the Clutch transaction would be Palo Alto Networks’ seventh acquisition this year, according to PitchBook. The cybersecurity company has pursued acquisitions as it responds to AI-driven cyberattacks and seeks technology developed by younger specialist vendors.
That strategy was visible in September, when Palo Alto Networks bought Palo Alto Networks' Console acquisition in a $500 million stock-and-cash transaction, adding AI agents designed to automate routine IT help-desk work. Other acquisitions this year include Embrace for $325 million, observability platform Chronosphere for $2.95 billion, and cyber startup Koi for $231 million, based on regulatory filings.
What the talks mean for security teams
The reported negotiations do not establish that a deal will close, and the final terms could differ from those under discussion. Still, they place AI-agent permissions and access management alongside a broader group of cybersecurity capabilities attracting strategic buyers.
For businesses deploying AI agents, the practical implication is to examine which systems an agent can reach, what privileges it receives, and how that activity is controlled as deployments expand.