Palo Alto Networks closes its 25 billion dollar CyberArk acquisition
The largest deal in security industry history closed on 11 February 2026. CyberArk shareholders took 45 dollars cash plus 2.2005 Palo Alto shares per ordinary share, and privileged access management now sits inside a network security platform.
Palo Alto Networks has completed its acquisition of CyberArk, closing on 11 February 2026 after clearances in the United States, European Union, United Kingdom, and Israel. At roughly 25 billion dollars it is the largest transaction the security industry has seen. CyberArk shareholders received 45 dollars in cash plus 2.2005 Palo Alto Networks shares for each ordinary share. Palo Alto is establishing identity security as a pillar of its platform strategy alongside network and cloud, integrating the CyberArk Identity Security Platform into Cortex and Strata to deliver identity-aware detection and response across human, machine, and agentic identities. CyberArk products remain available standalone while integration proceeds.
Why it matters
CyberArk was the anchor vendor of privileged access management and the default answer in regulated enterprises for two decades. Its move inside a network security platform is the clearest signal that standalone identity categories are being absorbed, and it set the tone for a year in which Delinea took StrongDM, 1Password took Apono, and ServiceNow took Veza.
Two things to watch as a customer. CyberArk owns Venafi and Zilla Security, so machine identity and governance came along with it, and those lines now compete for roadmap attention inside a much larger portfolio. And bundling shifts the balance at renewal: pricing that assumes you also buy Cortex is a different negotiation than the one you signed up for.
See the full deal record and our PAM buyer guide.
Source: Palo Alto Networks
Related on Start with Identity
- BlogServiceNow closes its Veza acquisition at about 1.2 billion dollars
Announced in December 2025 and closed on 2 March 2026, substantially in cash. Veza, valued at 808 million dollars in its Series D, now supplies the permission g
- Blog1Password buys Apono, moving from credential vault to access control plane
Reported at 250 to 300 million dollars, the deal gives 1Password just-in-time privileged access across AWS, Azure, GCP, Kubernetes, Snowflake, and Databricks, a
- BlogSailPoint closes its Entro Security deal, reportedly at 200 million dollars
Two weeks from announcement to close. Entro brings discovery and lifecycle management for more than 1,200 kinds of secret, token, and certificate into SailPoint
- CVEBeyondTrust PRA and Remote Support unauthenticated command injection
Privileged Remote Access and Remote Support accepted a malicious client request and ran OS commands as the site user. Unauthenticated. CVSS 9.8. CISA KEV. A PAM
- GlossaryBreak-Glass Account
A tightly controlled emergency account used only when normal access fails, with strong vaulting, monitoring, and alerting. Tested regularly so it works in a rea
- GlossaryIAM
Identity and Access Management. Workforce identity for employees, contractors, and partners. Covers authentication, authorization, lifecycle, and audit. Distinc