By Hamza Faisal
Palo Alto Networks is in talks to buy two Israeli cybersecurity startups in the same week, a double move that shows how fast the security industry is retooling for an era in which AI agents, not people, hold the keys to corporate systems.
The bigger of the two deals would see Palo Alto pay about $500 million for Clutch Security, according to The Information, which first reported the talks on November 4. Separately, Calcalist reported on November 5 that Palo Alto is also in negotiations to acquire Beacon Security, a two-year-old startup that builds AI agents for cyber defence. No price has been reported for Beacon, and neither deal is done.
Clutch: the keys AI agents carry
Clutch, founded in late 2023, makes software that tracks and secures the passwords, authentication codes and other credentials that AI agents use to access corporate systems. As companies hand more work to autonomous agents, those machine credentials have become a fast-growing blind spot: an agent with a stolen API key or service-account password can move through systems just as a compromised employee account once did, but with far less human oversight.
The startup was founded by chief executive Ofir Har-Chen, chief technology officer Sagi Haas and research and development vice president Tal Kimhi. It has raised about $28.5 million in two disclosed rounds, an $8.5 million seed round in July 2024 led by Lightspeed Venture Partners and a $20 million Series A in January 2025 led by SignalFire. Palo Alto told the publication it does not comment on rumours or speculation, and Clutch did not immediately respond to a request for comment.
Beacon: agents that fight back
Beacon, founded in 2024, takes the opposite side of the same problem. Its platform gives security teams the data and context to build and deploy AI agents that detect, investigate and respond to cyber threats on their own. The company says it serves dozens of organisations across several industries, and reported that its annual recurring revenue grew by more than 300 percent in the first half of 2026.
Beacon raised $13 million in a seed round in July, led by Notable Capital, with participation from more than 60 entrepreneurs and cybersecurity executives. Its founders, chief executive Gal Tal-Hochberg, chief product officer Or Mattatia and chief technology officer Ido Israeli, are veterans of the Israeli military's intelligence units. Calcalist reported that the talks are separate from the Clutch negotiations, and that no deal has been announced.
A buying spree aimed at the agentic era
If the Clutch deal closes, it would be Palo Alto's fifth announced acquisition of 2026, under chief executive Nikesh Arora. The strategy builds on the $25 billion takeover of CyberArk, the identity security company, which Palo Alto completed in February 2026. CyberArk focused on human users; Clutch would extend that coverage to the machine identities AI agents use.
The reported $500 million price is also the same amount Palo Alto paid earlier this year for Console, another AI-agent security startup, according to AI Weekly. Palo Alto was also reported in September to be weighing a roughly $400 million acquisition of Koi Security, an endpoint security vendor. The company is scheduled to report quarterly results on November 18, when investors are likely to press Arora on how much more of the acquisition budget is earmarked for AI security.
For now, both deals remain talks, and either could still fall apart. But the direction is clear: the companies that secure AI agents are becoming the security industry's most sought-after prizes.
