Palo Alto Networks is reportedly in negotiations to acquire Clutch Security for $500 million in cash, with additional milestone-based payouts, according to a source familiar with the talks. Neither Palo Alto Networks nor Clutch responded to requests for comment, and The Information was the first outlet to report the potential deal.
Clutch, founded three years ago, last raised a $20 million Series A round in January 2025 that valued the company at $85 million, led by Lightspeed and SignalFire. The startup is now close to $10 million in annual recurring revenue, meaning the proposed purchase would price the firm at roughly fifty times its ARR, a common multiple for software valuations.
The lofty valuation reflects a broader market focus on protecting software from AI-driven threat actors. Upwind, an AI-based cloud-security startup, recently rejected an acquisition offer from DataDog that would have valued it at about forty times its ARR, as reported by TechCrunch last week. Such multiples underscore investor confidence in AI-centric security solutions.
If finalized, the deal would be Palo Alto Networks’ seventh acquisition this year, according to PitchBook. The cybersecurity giant has pursued a strategy of buying external innovation rather than developing it internally, accelerating deal activity in response to a surge in AI-enabled cyberattacks. Recent purchases include Console for $500 million in stock and cash, Embrace for $325 million, Chronosphere for $2.95 billion, and Koi for $231 million, all disclosed in regulatory filings.
Clutch’s rivals have also attracted acquisition interest. Earlier this year, Cyera, a cybersecurity firm once valued at $12 billion, bought Oasis Security,a company with a similar focus on managing AI agents’ system access,for $1 billion. Cisco likewise acquired Menlo-Ventures-backed Astrix for roughly $400 million, as reported by Calcalist.
The proposed $500 million price tag, equating to about fifty times Clutch’s ARR, signals that buyers are willing to pay premium multiples for capabilities that can safeguard AI-driven processes. As AI integration deepens across enterprise environments, securing autonomous agents becomes a strategic priority, driving continued consolidation among specialized security vendors.