Palo Alto Networks reportedly in talks to buy AI agent identity startup Clutch Security for about $500 million

Palo Alto Networks is in talks to acquire Clutch Security, a three-year-old Israeli startup, for around $500 million, The Information reported, citing people familiar with the matter. Israeli outlets CTech and Globes relayed the report on November 5. Palo Alto told The Information it does not comment on rumours or speculation, and Clutch did not respond or declined to comment, according to the two Israeli publications. CTech notes that final terms are unclear and that the negotiations may not lead to a deal.

What Clutch does

Clutch works on what the industry calls non-human identities: the API keys, service accounts, secrets, tokens and passwords that software uses to talk to other software. Its platform maps those credentials across an organisation, flags permissions that are excessive or exposed, manages their lifecycle and watches for suspicious use, CTech reports. The company is now applying the same approach to AI agents, which need their own credentials to act inside corporate systems. Globes describes the product as helping companies track the passwords and authentication codes that AI agents use.

The company was founded in late 2023 by chief executive Ofir Har-Chen, CTO Sagi Haas and Tal Kimhi, who leads R&D, and operates in Israel and the US. It has raised about $28.5 million: an $8.5 million seed round led by Lightspeed Venture Partners and a $20 million Series A in January 2025 led by SignalFire, with Lightspeed and Merlin Ventures returning. When the Series A was announced, TechCrunch reported that Clutch integrated with close to 60 infrastructure services, applications and identity providers.

Why it would matter for Palo Alto

If signed, the deal would be Palo Alto's fifth announced acquisition this year, according to the reports. CTech notes that Palo Alto recently completed its roughly $25 billion takeover of CyberArk, and Globes says Clutch would expand Palo Alto's identity and access security business. Clutch would add tooling aimed specifically at machine and agent credentials, an area that grows as companies deploy more automated systems and AI agents with access to sensitive data.

Open questions

The price and structure have been reported only through anonymous sources, and no definitive agreement has been announced. It is also unclear how Clutch's product would be combined with CyberArk's identity offerings inside Palo Alto, or whether it would remain a separate product. Confirmation would most likely come from a Palo Alto announcement or regulatory filing.