Palo Alto Networks is in talks to buy Clutch Security for $500 million in cash plus milestone payments. The deal targets a three-year-old startup that secures access to company systems for artificial intelligence agents. A person familiar with the discussions confirmed the figure.
Clutch raised a $20 million Series A round in January 2025. Lightspeed and SignalFire led that investment. The company was last valued at $85 million. Annual recurring revenue is currently approaching $10 million. A completed acquisition would value the firm at roughly 50 times its ARR. That multiple is standard for software pricing.
Neither company responded to a request for comment. The Information was the first to report the discussions.
The valuation fits a market increasingly focused on protecting software against bad actors using AI to breach systems more easily. Upwind, a startup using AI to secure cloud infrastructure, recently turned down an acquisition offer from DataDog. That offer valued the firm at roughly 40 times ARR, TechCrunch reported last week.
If the deal happens, it would be Palo Alto Networks’ seventh acquisition this year, according to PitchBook. The cybersecurity giant has a history of buying innovation rather than building it in-house. It has ramped up dealmaking this year in response to rising AI-driven cyberattacks.
In September, Palo Alto Networks acquired Console. That firm uses AI agents to automate routine IT help desk tasks. The transaction valued Console at $500 million in stock and cash, TechCrunch reported. Other VC-backed companies that Palo Alto Networks has bought this year include Embrace, for $325 million. Embrace is backed by NEA. Chronosphere, an observability platform backed by Greylock and Lux Capital, sold for $2.95 billion. Koi, a cyber startup backed by Battery and Team8, was bought for $231 million, according to regulatory filings.
Several of Clutch’s competitors have also been acquired. Cyera, a cybersecurity startup valued at $12 billion earlier this year, acquired Oasis Security for $1 billion. Like Clutch, Oasis focuses on managing AI agents’ access to systems. Meanwhile, Cisco bought Menlo Ventures-backed Astrix for roughly $400 million, Calcalist reported.
What it means
For companies running internal AI tools, this move adds another layer of oversight to how those agents connect to data. Palo Alto Networks is consolidating its position by purchasing specific security capabilities rather than developing them internally. This approach accelerates the availability of new protections against AI-driven threats.
