Palo Alto Networks is in talks to acquire Clutch Security, a three-year-old startup that secures AI agents’ access to company systems, for $500 million in cash plus additional milestone-based payouts, according to a person familiar with the discussions. Clutch was last valued at $85 million when it raised a $20 million Series A in January 2025 led by Lightspeed and SignalFire. The company is approaching $10 million in annual recurring revenue, so the reported price would value it at roughly 50 times ARR, a standard way of pricing software companies. Neither Palo Alto Networks nor Clutch Security responded to TechCrunch’s request for comment, and The Information first reported the acquisition talks.

The high valuation is not an anomaly in a market increasingly focused on securing software against bad actors using AI to breach systems more easily. Upwind, a startup using AI to secure cloud infrastructure, recently declined an acquisition offer from DataDog that valued it at roughly 40 times ARR, TechCrunch reported last week. If the deal closes, it would be Palo Alto Networks‘ seventh acquisition this year, according to PitchBook. The cybersecurity giant has a history of buying innovation rather than building it in-house, and it has ramped up dealmaking this year in response to rising AI-driven cyberattacks. In September, it acquired Console, a two-year-old startup that uses AI agents to automate routine IT help desk tasks, in a transaction valuing Console at $500 million in stock and cash. Other VC-backed companies Palo Alto Networks has scooped up this year include NEA-backed Embrace for $325 million, Chronosphere for $2.95 billion, and Koi for $231 million, per regulatory filings.

Several of Clutch’s competitors have also been acquired. Cyera, a cybersecurity startup valued at $12 billion earlier this year, acquired Oasis Security, which similarly focuses on managing AI agents’ access to systems, for $1 billion. Cisco bought Menlo Ventures-backed Astrix for roughly $400 million, as reported by Calcalist. These deals highlight how AI agent security has become a distinct consolidation target within the cybersecurity market.