Why Palo Alto Networks is Acquiring CyberArk for $25bn
Palo Alto Networks has agreed to acquire identity security specialist CyberArk in a transaction valued at approximately US$25bn: one of the sector’s most significant deals this year and the Santa Clara-based company’s formal entry into the identity security market.
The acquisition represents a strategic shift for Palo Alto Networks, which has built its reputation around network security and firewall technology since its founding in 2005. CyberArk, established in 1999, has focused specifically on privileged access management and protecting high-value credentials from cyber threats.
Announced on 30 July, the acquisition will establish identity security as a new core platform within Palo Alto Networks’ multi-platform strategy, combining CyberArk’s privileged access management capabilities with Palo Alto Networks’ AI-powered security platforms.
“Our market entry strategy has always been to enter categories at their inflection point, and we believe that moment for Identity Security is now,” says Nikesh Arora, Chairman and CEO of Palo Alto Networks. “This strategy has guided our evolution from a next-gen firewall company into a multi-platform cybersecurity leader.”
Palo Alto Networks targets identity security inflection point
The identity management market has traditionally been served by providers offering access controls, while privileged access management has remained a specialist area.
Enterprises manage human user accounts alongside service accounts, API keys, certificates and other non-human identities that operate with elevated privileges. Nikesh explains that AI development has highlighted the need for privilege controls across all identity types.
“Today, the rise of AI and the explosion of machine identities have made it clear that the future of security must be built on the vision that every identity requires the right level of privilege controls, not the ‘IAM fallacy’,” he says. “CyberArk is the definitive leader in Identity Security with durable, foundational technology that is essential for securing the AI era.”
The combined platform will address security challenges associated with autonomous AI agents, which require oversight and access controls. These AI agents operate with varying levels of autonomy and require access to systems and data to perform their functions.
Identity and access management systems were designed before the emergence of AI agents, which may need different permissions at different times based on their tasks. The integration aims to apply just-in-time access and least privilege principles to AI agents, granting permissions when required and revoking them when tasks are complete.
CyberArk’s capabilities will be integrated into Palo Alto Networks' Strata and Cortex platforms, using AI to deliver identity-aware security and real-time response across enterprise environments. The integration extends privileged access management principles to all identity types.
The combined platform will apply privileged access management principles across all identities, whether human, machine, or AI agent, moving beyond basic identity and access management controls.
“From the beginning, we set out to protect the world's most critical assets, with a relentless focus on innovation, trust, and security, says Udi Mokady, Founder and Executive Chairman of CyberArk. “Joining forces with Palo Alto Networks is a powerful next chapter, built on shared values and a deep commitment to solving the toughest identity challenges.
“Together, we'll bring unmatched expertise across human and machine identities, privileged access, and AI-driven innovation to secure what's next,” Udi adds. “This is more than a combination of technologies – it's an acceleration of the mission we began over two decades ago.”
Transaction expected to close in second half of fiscal 2026
Both companies' boards of directors have unanimously approved the transaction, which is expected to close during the second half of Palo Alto Networks' fiscal 2026. The completion remains subject to regulatory clearances and CyberArk shareholder approval.
Palo Alto Networks expects the transaction to be immediately accretive to revenue growth and gross margin, with free cash flow per share accretion anticipated in fiscal year 2028. CyberArk shareholders will receive $45.00 in cash and 2.2005 Palo Alto Networks shares for each CyberArk share, representing a 26% premium to recent trading prices.
The acquisition positions the combined entity to address identity and security requirements in enterprise environments. The integration aims to provide a solution for privileged credential security across human and machine identities, including AI agents and workloads.
Udi acknowledges the significance of the milestone for CyberArk's development. “I’m incredibly proud of what our team has built and deeply grateful to everyone who made this milestone possible.”
