Palo Alto Networks in talks to acquire agent security startup

In this article you will see:

• What Clutch Security does
• The deal numbers
• Why the AI agent security market is heating up
• What this changes for those building with AI

What Clutch Security does

Clutch Security builds software that helps organizations track and protect the credentials that AI agents and other automated systems use to access corporate data. The company focuses on what the industry calls non-human identities: API keys, service accounts, tokens and passwords that allow software to call other software.

The platform lets organizations map non-human identities in their environment, identify excessive or exposed permissions, manage credentials throughout their lifecycle and detect suspicious activity. Clutch operates in Israel and the United States.

The company was founded in late 2023 by Ofir Har-Chen (CEO), Sagi Haas (CTO) and Tal Kimhi (VP of research and development). It raised about $28.5 million across two rounds: an $8.5 million seed in July 2024, led by Lightspeed Venture Partners, and a $20 million Series A in January 2025, led by SignalFire.

The deal numbers

Clutch was valued at $85 million in its January 2025 Series A. Now, with annual recurring revenue approaching $10 million, the $500 million price represents about 50 times revenue. That is a standard multiple for pricing software companies, but it also reflects the heating up of the AI agent security market.

Neither company has confirmed the transaction. Palo Alto Networks said it does not comment on rumors or speculation, and Clutch did not respond to requests for comment. The negotiations may not result in a deal.

If completed, it would be Palo Alto Networks' seventh acquisition this year. The company has a history of buying innovation instead of building it internally and has accelerated acquisitions in response to the rise in AI-driven cyberattacks. In September, it acquired Console, a two-year-old startup that uses AI agents to automate IT help desk tasks, for $500 million in stock and cash.

Why the market is heating up

The high valuation is not an anomaly. The market is increasingly focused on protecting systems against attackers who use AI to breach more easily. Upwind, a startup that uses AI to protect cloud infrastructure, recently rejected an acquisition offer from Datadog that valued it at about 40 times annual recurring revenue.

Clutch competitors have also been acquired: Cyera, a security startup valued at $12 billion, acquired Oasis Security, which also focuses on managing AI agent access to systems, for $1 billion. Cisco bought Astrix, backed by Menlo Ventures, for about $400 million.

What this changes for those building with AI

AI agents that access corporate systems need credentials: API keys, tokens, service accounts. The more autonomous agents a company uses, the more non-human identities there are to manage. Agent security is becoming an identity and access problem, not just a code problem.

For those building with AI, this means agent credential security will become a requirement, not optional. Tools that map, rotate and monitor these credentials will become part of the standard stack, just as secret managers are today.