US — TechCrunch

Palo Alto Networks in talks to buy AI agent security startup Clutch for $500M

SecurityNovember 6, 20261 min read

Palo Alto Networks, a big cybersecurity company, is reportedly in talks to buy Clutch Security, a small startup that keeps AI agents safe when they access company systems. The deal could be worth $500 million.

What happened

Palo Alto Networks is in talks to buy Clutch Security for $500 million in cash, plus extra payments if certain goals are met. A person familiar with the talks shared this information. Neither company has publicly commented. The Information was first to report the talks.

Key numbers

Deal price: $500 million in cash, plus milestone-based payouts
Clutch's last value: $85 million, after a $20 million funding round in January 2025
Clutch's yearly recurring revenue (ARR, the money a company expects to earn each year from subscriptions): close to $10 million
Deal price compared to ARR: about 50 times, a common way to price software companies
This would be Palo Alto Networks' seventh acquisition this year

Why AI agents need protection

AI agents are programs that can act on their own, such as logging into systems and doing tasks for people. Clutch helps control what these agents can access inside a company. Other companies in this space have also been bought recently. Cyera bought Oasis Security for $1 billion, and Cisco bought Astrix for about $400 million.

Why it matters

Companies are worried that criminals will use AI to break into systems more easily. Big security firms are buying smaller startups instead of building new tools themselves. This shows that AI security is a hot market, and investors may pay very high prices for it.

What to watch

Whether Palo Alto Networks and Clutch Security confirm the deal
The final price and how much of it depends on milestones
Whether other AI security startups get similar offers

Glossary

Palo Alto Networks: A large cybersecurity company that protects computers and networks from hackers.
Clutch Security: A three-year-old startup that controls how AI agents can access company systems.

Hospital gave very sick doctor a special PC for his personal, erm, pleasure

In this On Call column, a reader named Mason recounts supporting a hospital research lab run by a prominent organ transplant researcher who repeatedly caused malware infections by visiting adult sites on his office PCs. Management did not discipline him after a worm outbreak; instead, the IT department gave him a designated PC for personal use, and Mason's boss told him to comply or find another job. Mason later learned that the PC was cited as evidence in a lawsuit filed by the doctor's graduate students.

SecurityITmediaNov 6

Unauthorized Access Hits Security Awareness Group; Up to 15,000 Personal Records Possibly Leaked

The Japan Network Security Association (JNSA) said a third party gained unauthorized access to its "Information Security Comprehension Check Service," possibly leaking up to 15,128 personal records, including user IDs and hashed passwords. The service has been suspended while JNSA and external specialists investigate the cause and scope; the entry route is not yet known. JNSA plans to notify affected individuals once identified and report to the Personal Information Protection Commission, and warns users to beware of phishing emails that may use the leaked information.

SecurityTechCrunchNov 6

At least 10 local governments have moved to drop Flock’s surveillance cameras since summer

At least 10 local governments and police departments have moved since summer to restrict or end their use of Flock Safety technology amid growing concerns about mass surveillance and data privacy. Cities including Monroe, Ohio; Newburgh, New York; and Richmond, Virginia have moved to end their Flock contracts, and Ithaca, New York, cited reports of federal agents using Flock data. Flock says police departments use its technology to solve serious crimes and find missing people.