Palo Alto Networks nears $20 billion acquisition of CyberArk, one of the year’s largest tech mergers

Palo Alto Networks is reportedly close to acquiring Israeli cybersecurity provider CyberArk in what could become one of the biggest tech takeovers of the year.

According to the Wall Street Journal (WSJ), the deal could be finalized as soon as this week and may exceed CyberArk’s current $20 billion market value once a typical premium is factored in. If completed, the acquisition would mark Palo Alto’s most ambitious bet yet—cementing its status as a heavyweight in the identity security space.

“Palo Alto Networks could finalize a deal for CyberArk as soon as later this week, the people said. Assuming a typical deal premium, a deal could value CyberArk well above its roughly $20 billion market value,” the WSJ reported.

Headquartered in Santa Clara, California, Palo Alto Networks has grown into one of the most valuable cybersecurity companies in the world, now worth around $132 billion. Under CEO Nikesh Arora, the company has made a string of acquisitions to broaden its platform—including Protect AI for $200 million this month and Talon Cyber Security, Dig Security, and Zycada Networks last year. Still, a CyberArk deal would dwarf all of those combined.

Founded in 1999, CyberArk specializes in identity security and privileged access management, helping organizations lock down access to critical systems and sensitive data. Its platform is used by more than 10,000 customers globally. The company pulled in over $1 billion in revenue last year and is projecting $1.3 billion in 2025, with much of that growth driven by a shift to subscription-based software.

Analysts at Wedbush called the potential acquisition a “strategic home run,” noting that CyberArk’s identity and secrets management tools would complement Palo Alto’s cloud, endpoint, and network security offerings. The combined portfolio could strengthen Palo Alto’s zero-trust architecture and sharpen its competitive edge against CrowdStrike, Okta, Microsoft, and IBM.

Investors had mixed reactions. CyberArk’s stock jumped 13% on July 29 following the report, lifting its valuation above $20 billion. Shares of Palo Alto Networks dropped 2% to 5%, a sign of investor concern about the scale of the deal and its potential financial impact. Some users on X were enthusiastic about the potential of CyberArk under Palo Alto’s umbrella, while others questioned whether the price tag was worth the dilution risk.

Although the terms haven’t been finalized, the structure is expected to include both cash and stock, backed by Palo Alto’s substantial cash flows. Still, a deal of this size will likely draw regulatory attention, especially given U.S.-Israel ties and growing antitrust scrutiny around tech M&A.

If completed, the CyberArk deal would land in the same league as other recent cybersecurity megadeals—like Alphabet’s $32 billion acquisition of Wiz earlier this year and Cisco’s $28 billion purchase of Splunk in 2023. It also underscores Israel’s growing influence in cybersecurity innovation.

CyberArk, which has typically been an acquirer, bought cybersecurity firm Venafi in 2023 for $1.5 billion to bolster machine-to-machine security. The company also acquired identity governance startup Zilla for $165 million in early 2025. Under CEO Matt Cohen, CyberArk’s transition to a subscription model has fueled double-digit growth and positioned it as one of the most sought-after security vendors in the market.

Still, there are real integration hurdles ahead. Combining CyberArk’s 2,500 employees with Palo Alto’s 15,000 could pose logistical and cultural challenges. There’s also the competitive threat—rivals will likely double down in response, especially if the deal triggers a broader wave of M&A in the sector.

Even so, Palo Alto has earned a reputation for folding acquisitions into its product ecosystem effectively. If this one closes, it could mark a new chapter in cybersecurity—where identity and network security aren’t treated as separate layers but merged into a single, unified stack.