Palo Alto Networks is acquiring identity security company CyberArk in a deal valued at approximately US$25 billion.
Under the terms of the agreement, announced July 30, CyberArk shareholders will receive US$45 in cash and 2.2005 shares of Palo Alto Networks common stock for each CyberArk share. This represents an equity value of about US$25 billion and a 26% premium to the unaffected 10-day average of CyberArk’s daily volume weighted average price as of July 25.
Strategic goals behind the acquisition
The acquisition marks Palo Alto Networks’ entry into the identity security market. It plans to integrate CyberArk’s identity security and privileged access management (PAM) technologies into its own AI-based security platforms, with the goal of extending identity protection to human users, machines, and autonomous AI agents.
“Our market entry strategy has always been to enter categories at their inflection point, and we believe that moment for identity security is now,” said Nikesh Arora, Chairman and CEO of Palo Alto Networks. “This strategy has guided our evolution from a firewall company into a multi-platform cybersecurity provider. Today, the rise of AI and the growth of machine identities have underscored the need for security models built on the idea that every identity should be assigned the right level of privilege controls, not the ‘IAM fallacy’. CyberArk has long focused on identity security, with technologies aligned to this approach. We see the combination as a way to strengthen our overall security platform.”
Three focus areas for integration
The integration of CyberArk’s identity security platform with Palo Alto Networks is expected to deliver the following outcomes:
First, the integration is intended to advance Palo Alto Networks’ platform strategy. CyberArk’s capabilities will be added to the company’s Strata and Cortex platforms, with the goal of incorporating identity context and automated response into enterprise-wide security tools.
Second, the companies plan to expand the application of PAM principles beyond traditional identity and access management (IAM) systems. This includes applying stricter privilege controls to a wider range of identities, including human users, machines, and software agents.
Lastly, the integration is expected to support security governance for AI-driven automation. By enforcing just-in-time access and least privilege policies, the approach aims to limit permissions granted to AI agents to only what is needed and when, reducing potential exposure.
“This milestone reflects work that began more than two decades ago. We’re grateful to everyone who helped make this possible,” said Udi Mokady, Founder and Executive Chairman of CyberArk.
The deal is expected to close during the second half of Palo Alto Networks’ fiscal year 2026.
