Palo Alto Networks is reported to be closing in on Clutch Security, a company that manages how AI agents reach the systems they are allowed to touch. The price talked about is $500M in cash, with more tied to milestones.
Clutch was worth $85M in January 2025, when it raised a $20M Series A from Lightspeed and SignalFire, according to a source who asked not to be named. Its recurring revenue now sits just under $10M annually. Divide one by the other and the multiple lands near 50 times revenue.
Neither company would comment.
A hot market for agent doorways
Investors are pricing this corner aggressively because agents need credentials, tokens and permissions, and every one is a way in for an attacker. Upwind, a startup defending cloud infrastructure, turned down a Datadog offer carrying a multiple near 40 times revenue last week before raising $400M.
For Palo Alto, this would be the seventh purchase of 2026. It prefers buying to building. Console, an AI help desk automation startup, came in September for $500M in stock and cash. Earlier deals brought in Embrace at $325M, Chronosphere at $2.95B and Koi at $231M.
Consolidation is running through the category. Cyera paid $1B for Oasis Security, which works on the same identity problem, and Cisco took Astrix for roughly $400M.
Why the number looks less strange
A 50 times multiple on a security product would have been an outlier two years ago. Agents are multiplying faster than the controls around them, and the quickest route to market for a firewall giant is absorbing a small vendor with a working permission graph.
The deal is still talks. But its shape says plenty about where enterprise AI money is heading: away from a smarter chatbot, toward whatever keeps one from redecorating a production database.
