Add to cart… (again)

Looks like Nike$h “Just Buy It” Arora (read: Palo Alto Networks CEO Nikesh Arora) is going out for a little more retail therapy.

Palo Alto Networks is in talks to drop $500M in straight cash, homie, on a startup you’ve probably never heard of: Clutch Security. Oh, and there’d be extra payouts if it hits certain milestones (read: edging).

In case you aren’t a nerd, Clutch locks down what AI agents can get into at your company (think: passwords for robots, I guess). The talks could still fall apart. As for Palo Alto, it told The Information, which broke the story, that it doesn’t comment on “rumors or speculation,” which usually means it’s true.

Now, Clutch is approaching $10M in annual recurring revenue (ARR), so the deal would value it at about 50x ARR, which, excuse me, how much? Back in January 2025, it was valued at $85M when it raised a $20M Series A led by Lightspeed and SignalFire. Meaning, it’s a $500M clutch with about $10M inside.

Y tho? Because everyone else already has one… Cyera, valued at $12B earlier this year, went shopping and came home with Oasis Security ($1B), which also manages AI agents’ access. Cisco picked up Astrix for roughly $400M, per Calcalist. And just this week, CrowdStrike dropped a reported $495M on Fiddler AI and Dreadnode. Meanwhile, Upwind, which uses AI to secure cloud infrastructure, apparently turned down a Datadog offer worth roughly 40x ARR. “The worst she could say is no.”

Palo Alto is really getting its murder & acquisition on, though. This would be its seventh deal this year, per PitchBook, including Chronosphere ($2.95B), Console ($500M), Embrace ($325M), and Koi ($231M). CTech says Beacon Security is in the cart, too. Friendly reminder, that’s on top of the $25B it paid for CyberArk (think: passwords for humans), so… ashtray money. Back when Palo Alto bought Protect AI last year, we said “considering it has AI in the name, Palo Alto definitely overpaid.” Clutch doesn’t even have AI in the name.

Per TechCrunch, the firewall company has a history of backing up the Brinks truck “buying innovation rather than building it in-house.” It’s just that Nikebv has about 6,000 engineers. He said last month: “Even if they get twice as effective and efficient, I’m not firing any one of them.” Cool. So what the f*ck are they doing all day? Everyone else at the company, he said, is “fair game” (except whoever’s holding the company card, presumably).

The excuse for all this? AI hackers. Nikesh on X this week: “Attacks will accelerate from here on.” Nice little company you got there… be a shame if something happened to it. Then again, Nikesh used to be Masa Son’s heir apparent, and if there’s still one person who knows “you gotta spend money to lose money,” it’s his old boss (sup, WeWork).

All in all, Lightspeed and SignalFire would like to thank Nikesh for “coming” in clutch. Of course, actual therapy would’ve been cheaper.

Your move, CrowdStrike… 

Until next time, friends! 

At the time of publishing, Stocks.News does not hold positions in companies mentioned in the article.