Palo Alto Networks is negotiating to acquire Clutch Security for roughly $500 million in cash plus additional milestone‑based payments, according to a person familiar with the discussions.
Clutch Security is a three‑year‑old startup that secures AI agents’ access to company systems. The company last raised a $20 million Series A in January 2025 led by Lightspeed and SignalFire, at an $85 million valuation, the source said. Clutch is approaching about $10 million in annual recurring revenue (ARR). Based on those figures, the proposed purchase price would amount to roughly 50 times ARR — a common software valuation metric.
Neither Palo Alto Networks nor Clutch Security responded to requests for comment. The Information was the first to report the acquisition talks.
Market context and recent Palo Alto Networks deals
High valuations like this are becoming more common as buyers focus on protecting software from attackers who increasingly use AI to breach systems. For example, Upwind, a startup using AI to secure cloud infrastructure, recently declined an acquisition offer from DataDog that valued it at about 40 times ARR, TechCrunch reported.
If completed, the Clutch deal would be Palo Alto Networks’ seventh acquisition of the year, according to PitchBook. The cybersecurity company has a history of purchasing external innovation rather than building every capability in‑house, and it has stepped up dealmaking this year in response to rising AI‑driven cyberattacks.
In September 2025, Palo Alto Networks acquired Console, a two‑year‑old startup that uses AI agents to automate routine IT help‑desk tasks; that transaction valued Console at $500 million in stock and cash, TechCrunch reported. Other VC‑backed companies Palo Alto Networks has acquired this year include Embrace (backed by NEA) for $325 million; Chronosphere (backed by Greylock and Lux Capital) for $2.95 billion; and Koi (backed by Battery and Team8) for $231 million, according to regulatory filings.
Several competitors to Clutch have also been bought. Cyera — which was valued at $12 billion earlier this year — acquired Oasis Security, a company focused on managing AI agents’ access to systems, for about $1 billion. Meanwhile, Cisco reportedly purchased Astrix for roughly $400 million, Calcalist reported.
Why this matters
The potential acquisition illustrates that major cybersecurity vendors are willing to pay steep premiums for technologies addressing AI‑related risks. Rising ARR multiples reflect how buyers and investors currently prize AI‑security capabilities amid an evolving threat landscape.
Without comment from Palo Alto Networks, Clutch Security, or their investors, specifics such as the exact milestone terms and timing of any closing remain unknown.
