The Palo Alto Networks–CyberArk transaction is no longer a rumored combination. Palo Alto Networks completed its approximately $25 billion acquisition of CyberArk on February 11, 2026, making the identity-security company a wholly owned subsidiary. The deal filled a major gap in Palo Alto Networks’ platform strategy, but its long-term value depends on preserving CyberArk’s specialist capabilities while integrating products, sales and operations.
The headline in context
On July 29, 2025, CRN reported that Palo Alto Networks was negotiating to acquire CyberArk. CyberArk’s market capitalization was about $20 billion before the report, and the article said a transaction could be valued well above that level. Neither company commented on “rumor or speculation.”
Wedbush managing director and senior equity research analyst Daniel Ives called a possible combination a “watershed deal in the cyber security landscape.” His argument was that identity security and privileged access management (PAM) represented one of the last major gaps in Palo Alto Networks’ effort to consolidate security products on one platform. TD Cowen analyst Shaul Eyal highlighted the scale contrast: Palo Alto Networks had historically not paid more than approximately $800 million for an acquisition.
CRN’s July 29 report also noted that CyberArk had more than 10,000 customers, acquired Venafi for $1.54 billion in 2024 and bought Zilla Security for up to $175 million in February 2025. Palo Alto Networks had completed or announced at least 17 acquisitions since 2018, according to that report.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
The deal is no longer speculative
| Date | Event |
|---|---|
| July 29, 2025 | CRN reports the negotiations and Ives’s “watershed deal” assessment. |
| July 30, 2025 | The companies announce a definitive acquisition agreement. |
| September 24, 2025 | Palo Alto Networks reports early termination of the U.S. Hart-Scott-Rodino waiting period. |
| November 13, 2025 | CyberArk shareholders approve the transaction. |
| February 11, 2026 | Palo Alto Networks completes the acquisition; CyberArk becomes a wholly owned subsidiary. |
| June 2, 2026 | Palo Alto Networks reports fiscal third-quarter 2026 results, including integration and combined ARR information. |
The definitive agreement was announced on July 30, 2025. The closing and related note obligations are described in Palo Alto Networks’ February 11 filing. Shareholder approval was announced by CyberArk.
Why identity security made the combination strategically important
Palo Alto Networks had expanded well beyond next-generation firewalls into network security, SASE and secure access, cloud security, endpoint protection, security operations, XDR/XSIAM, automation, AI security and secure browsers. Its “platformization” strategy encourages customers to consolidate several security functions with one vendor.
Before the acquisition, that broad portfolio did not include a comparable, established identity-security and PAM franchise. CyberArk added recognized capabilities in privileged access, identity governance, workforce and machine identities, secrets and certificate-related controls. That matters because security decisions increasingly involve service accounts, workloads, machines and autonomous AI agents as well as human administrators.
Management’s stated goal was to make identity security a core Palo Alto Networks platform pillar and combine CyberArk’s PAM technology with Palo Alto Networks’ AI-powered security platforms. The proposed controls include least privilege and just-in-time access for AI agents and other privileged identities. Those are strategic objectives, not proof that the acquisition by itself solves AI-agent security; effective protection still requires identity inventory, privilege discovery, strong authentication, credential rotation, policy design and integration with cloud, development and security-operations workflows.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallRank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
The companies’ rationale is set out in the acquisition announcement.
The announced financial terms
| Term | Announced detail |
|---|---|
| Consideration | $45.00 in cash plus 2.2005 Palo Alto Networks shares for each CyberArk share |
| Equity value | Approximately $25 billion at announcement |
| Premium | Approximately 26% to CyberArk’s unaffected 10-day average daily VWAP through July 25, 2025 |
| Cash funding | Expected to come from Palo Alto Networks’ cash on hand |
| Management projections | Immediately accretive to revenue growth and gross margin; free-cash-flow-per-share accretive in fiscal 2028 |
The approximately $25 billion figure was the announced equity value, not a promise that the final economic value of the stock component would remain fixed. The cash portion was fixed at $45 per CyberArk share, while the dollar value of 2.2005 Palo Alto Networks shares could move with Palo Alto Networks’ stock price. The accretion statements were preliminary management projections rather than realized post-close results. The companies’ transaction overview provides the terms and premium calculation: Palo Alto Networks transaction materials.
What Palo Alto Networks said it would gain
- A new platform pillar: identity security added to network, endpoint, cloud, SOC, SASE and AI-security offerings.
- Broader identity coverage: controls for human, machine and AI-agent identities.
- Cross-selling: opportunities across the two companies’ installed customer bases.
- Shared telemetry and controls: a potential reduction in silos between identity, endpoint, network and security operations.
- Vendor consolidation: fewer contracts, integrations and account relationships for customers that want a single strategic supplier.
These points describe management’s strategic case. They do not establish that every customer will receive lower costs, better protection or a fully integrated product on the same timetable.
Early evidence after closing
In fiscal third-quarter 2026 materials released June 2, Palo Alto Networks reported $1.6 billion in next-generation-security ARR from CyberArk and Chronosphere combined. The figure is not CyberArk-only ARR. The company also included CyberArk-related integration costs in the quarter and described approximately 1,000 joint cross-organizational customer engagements.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteRank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Management said it had maintained CyberArk’s growth trajectory while improving its profitability profile and was three to six months ahead of its original timetable for converging CyberArk’s profitability with Palo Alto Networks’ profile. It described the purchase as its first large acquisition and an important test of its ability to integrate a major company. These are management-reported indicators, not independent proof that the integration has fully succeeded. See the Q3 fiscal 2026 release and earnings-call discussion.
Why security buyers may welcome the combination
- One supplier could coordinate network, endpoint, cloud, SOC and identity controls.
- Existing Palo Alto Networks customers may have a lower-friction path to CyberArk capabilities.
- Common account management and telemetry could reduce integration work between separate products.
- Organizations pursuing platform consolidation may gain negotiating and operational simplicity.
Why buyers may hesitate
Integration risk
Product road maps, support ownership, engineering priorities and account coverage can become confusing after a large acquisition. Palo Alto Networks’ own description of CyberArk as a major integration test underscores that risk.
Product dilution
CyberArk’s value partly comes from specialist identity-security expertise. Customers may worry that PAM innovation or support will be subordinated to broader platform cross-selling.
Vendor concentration
A single platform can simplify procurement while increasing switching costs and reducing best-of-breed flexibility. Buyers should examine APIs, data export, policy portability, retention and termination rights before consolidating aggressively.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Commercial uncertainty
No complete public post-acquisition price book was established. Costs may vary by workforce size, privileged accounts, machines, workloads, certificates, cloud environments, session monitoring, deployment model, support tier and Palo Alto Networks commitments. The acquisition should not be described as cheaper without customer-specific evidence.
Scope overlap
CyberArk does not automatically replace workforce IAM, SSO, MFA, identity governance, access reviews, directory services, secrets management or certificate lifecycle management. PAM and those adjacent categories overlap but are not interchangeable.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How the combined platform compares with alternatives
| Option | Typical strength | Key distinction |
|---|---|---|
| Microsoft Entra | Workforce identity, SSO, MFA and conditional access | Particularly attractive in Microsoft 365 and Azure environments; compare specialist PAM depth. |
| Okta | Workforce and customer identity, lifecycle and governance | Identity-centric option independent of a network-security platform; compare vaulting and privileged sessions. |
| BeyondTrust | Dedicated PAM, remote access and endpoint privilege management | Specialist alternative for buyers prioritizing dedicated PAM expertise. |
| Delinea | PAM and secrets management | Narrower platform footprint than Palo Alto Networks. |
| SailPoint | Identity governance, certification and lifecycle management | More relevant when compliance and governance workflows outweigh administrator PAM. |
The combined Palo Alto Networks–CyberArk offering may fit organizations already standardizing on Palo Alto Networks or seeking one supplier across security domains. A neutral, best-of-breed identity architecture—or a mature investment in Microsoft, Okta, BeyondTrust, Delinea or SailPoint—may make a wholesale switch less attractive.
A practical evaluation checklist
- Test PAM depth: verify discovery, vaulting, rotation, session monitoring, just-in-time access and least privilege for human and non-human identities.
- Demand integration specifics: ask whether consoles, APIs, policies and telemetry are genuinely unified or merely sold by one corporate parent.
- Map use cases: include administrators, vendors, service accounts, cloud and DevOps secrets, certificates, machines and AI agents.
- Model total cost: include migration, implementation, training, integrations, support, renewal terms and potential exit costs—not only subscription price.
- Protect optionality: require written answers on data portability, API access, roadmap continuity and the ability to retain or replace individual modules.
Bottom line
Daniel Ives’s “watershed deal” description was an analyst’s 2025 thesis, not a measured outcome. The completed acquisition nevertheless changed Palo Alto Networks’ category position: it now owns a major identity-security and PAM business alongside its network, cloud, endpoint, SOC, SASE and AI-security portfolio. The strategic logic is strong, but the durable verdict will depend on whether Palo Alto Networks preserves CyberArk’s product quality and growth while delivering integration that is better than simply having a larger catalog.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Best Value
- POWERFUL SECURITY KEY: The YubiKey 5 is a versatile physical passkey that protects your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 secures 100+ of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 via USB and tap it to authenticate. No batteries, no internet connection, and no extra fees required.
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Frequently Asked Questions
Did Palo Alto Networks acquire CyberArk?
Yes. Palo Alto Networks completed the acquisition on February 11, 2026, and CyberArk became a wholly owned subsidiary.
How much was the Palo Alto Networks–CyberArk deal worth?
The companies announced approximately $25 billion in equity value, consisting of $45 in cash plus 2.2005 Palo Alto Networks shares for each CyberArk share.
Is the reported $1.6 billion ARR figure CyberArk’s ARR alone?
No. Palo Alto Networks reported $1.6 billion in next-generation-security ARR from CyberArk and Chronosphere combined.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Recommended Free Tools
