Palo Alto Networks is in talks to buy AI agent security startup Clutch for $500M, about 50 times revenue
Clutch secures what AI agents can reach inside company systems. It's nearing $10M in annual revenue and was valued at $85M in early 2025.
DevIsDead Newsroom
Giving AI agents keys to company systems is now a $500 million problem. Palo Alto Networks is negotiating to buy Clutch Security, a startup that controls what AI agents can access, for $500 million in cash plus milestone payments, Marina Temkin reports for TechCrunch, citing a person familiar with the talks. The Information reported the discussions first. Neither company commented.
The math
Clutch is three years old. Its last valuation was $85 million, set in January 2025 with a $20 million Series A that Lightspeed and SignalFire led, and it's now approaching $10 million in annual recurring revenue. At $500 million, that's about 50 times ARR.
That multiple isn't unusual right now. Security for an AI-heavy world is in demand as attackers use AI to break in more easily. Upwind, an AI cloud-security startup, just said no to a Datadog offer at around 40 times ARR.
A shopping spree
If it closes, this would be Palo Alto Networks' seventh acquisition of the year, according to PitchBook. The company tends to buy rather than build, and it has sped up as AI-driven attacks rise. This year alone it bought Console, which automates IT help desk work with AI agents, for $500 million; Embrace for $325 million; observability platform Chronosphere for $2.95 billion; and Koi for $231 million.
Clutch's rivals are getting bought, too. Cyera, valued at $12 billion earlier this year, paid $1 billion for Oasis Security, which also manages AI agents' access to systems. Cisco reportedly bought Astrix for about $400 million.
Why developers should care
Every agent you deploy is a new identity with credentials, permissions and the ability to do damage at machine speed. That's why "agent access management" became a category fast enough to command these prices. If your agents still run on a shared API key with broad permissions, the market is telling you that's the thing to fix first: scope each agent's access, log what it does, and make it easy to revoke.
Scoreboard update: AI +1. AI agents now need their own security guards, and the guards sell for 50 times revenue.
Stay undead.
Comments 0