Palo Alto Networks in talks to buy AI agent security firm Clutch

A pattern of rich valuations

The price reflects a market increasingly focused on defending software against attackers who use AI to break into systems more easily. Upwind, a startup that uses AI to secure cloud infrastructure, recently turned down an offer from DataDog that valued it at about 40 times ARR.

Rivals in AI agent access management have also been snapped up. Cyera, valued at $12 billion earlier this year, bought Oasis Security, which like Clutch manages AI agents' access to systems, for $1 billion. Cisco reportedly bought Astrix, backed by Menlo Ventures, for roughly $400 million.

Another deal for a serial acquirer

According to PitchBook, Clutch would be Palo Alto Networks' seventh acquisition this year. The cybersecurity giant has long preferred buying innovation to building it, and it has stepped up dealmaking in response to rising AI-driven cyberattacks.

In September it acquired Console, a two-year-old startup that uses AI agents to automate routine IT help desk work, in a stock-and-cash deal valuing it at $500 million. Regulatory filings show other purchases this year include Embrace for $325 million, observability platform Chronosphere for $2.95 billion, and Koi for $231 million.

For enterprises deploying AI agents, the deal signals that controlling what those agents can reach is becoming a core part of the security stack, and that large vendors are willing to pay heavily to own it.