8-K: Palo Alto Networks to Acquire CyberArk in $25 Billion Deal, Expanding Identity Security Footprint

Palo Alto Networks announced a definitive agreement to acquire CyberArk Software Ltd. for approximately $25 billion, marking its formal entry into Identity Security and aiming to create an end-to-end security platform for the AI era.

Summary

• Palo Alto Networks (PANW) has entered into a definitive Agreement and Plan of Merger with CyberArk Software Ltd. (CyberArk) dated July 30, 2025.
• A wholly owned subsidiary of Palo Alto Networks, Athens Strategies Ltd. (Merger Sub), will merge with and into CyberArk, with CyberArk continuing as a wholly owned subsidiary of Palo Alto Networks.
• The total equity value of the acquisition is approximately $25 billion for CyberArk.
• CyberArk shareholders will receive $45.00 in cash and 2.2005 shares of Palo Alto Networks common stock for each CyberArk share.
• This consideration represents a 26% premium to the unaffected 10-day average of the daily Volume-Weighted Average Prices (VWAPs) of CyberArk as of July 25, 2025.
• The transaction is anticipated to close during the second half of Palo Alto Networks' Fiscal Year 2026.
• The acquisition is subject to approval by CyberArk shareholders and satisfaction of customary closing conditions, including applicable regulatory clearances.
• Palo Alto Networks reaffirmed its Q4 FY25 and FY25 guidance shared on May 20, 2025.

Sentiment

Score: 9

Explanation: The filing presents a highly strategic and financially accretive acquisition, positioning the combined entity as a dominant force in the rapidly evolving cybersecurity landscape, particularly in the critical area of identity security and AI. The language is very positive and forward-looking, emphasizing significant market expansion and synergy potential.

Positives

• Accelerates platform strategy by establishing Identity Security as a new core platform, covering all major Security Total Addressable Markets (TAMs).
• Adds a $29 billion Identity Security market opportunity (2025 forecast), with further upside from securing AI agents.
• Expected to be immediately accretive to revenue growth and gross margin for Palo Alto Networks post-close.
• Expected to be accretive to free cash flow per share for Palo Alto Networks in FY28.
• Significant revenue synergy potential, including cross-selling into Palo Alto Networks' 70,000+ customer base.
• Extends Identity Security to all users (human, machine, and AI agents), advancing the vision that every identity requires deep security.
• Will provide customers with the optimal combination of best-of-breed technology and integrated platforms to deliver near real-time security outcomes.
• The combined entity will solidify leadership in all major cybersecurity categories, expanding Palo Alto Networks' TAM from $19 billion in 2018 to an estimated $257 billion by 2028 (including Identity).
• Unites two security leaders with similar values, strong cultures, and talented teams, aiming to offer the industry's most comprehensive and integrated security portfolio.

Risks

• The occurrence of any event, change, or other circumstance that could give rise to the termination of the proposed transaction.
• Palo Alto Networks' ability to successfully integrate CyberArk's businesses and technologies.
• The risk that the expected benefits and synergies of the proposed transaction may not be fully achieved in a timely manner, or at all.
• The risk that Palo Alto Networks or CyberArk will be unable to retain and hire key personnel.
• The risk associated with CyberArk's ability to obtain the approval of its shareholders required to consummate the proposed transaction.
• The risk that the conditions to the proposed transaction are not satisfied on a timely basis, or at all, or the failure of the proposed transaction to close for any other reason or to close on the anticipated terms.
• The risk that any regulatory approval, consent, or authorization that may be required for the proposed transaction is not obtained or is obtained subject to conditions that are not anticipated or that could adversely affect the expected benefits of the transaction.
• Significant and/or unanticipated difficulties, liabilities, or expenditures relating to the transaction.
• The effect of the announcement, pendency, or completion of the proposed transaction on the parties' business relationships and business operations generally.
• The effect of the announcement or pendency of the proposed transaction on the parties' common or ordinary share prices and uncertainty as to the long-term value of Palo Alto Networks' or CyberArk's common or ordinary shares.
• Risks related to disruption of management time from ongoing business operations due to the proposed transaction.
• The outcome of any legal proceedings that may be instituted against Palo Alto Networks, CyberArk, or their respective directors.
• Developments and changes in general or worldwide market, geopolitical, economic, and business conditions.
• Failure of Palo Alto Networks' platformization product offerings.
• Failure to achieve the expected benefits of Palo Alto Networks' strategic partnerships and acquisitions.
• Changes in the fair value of Palo Alto Networks' contingent consideration liability associated with acquisitions.
• Risks associated with managing Palo Alto Networks' growth.
• Risks associated with new product, subscription, and support offerings, including product offerings that leverage AI.
• Shifts in priorities or delays in the development or release of new product or subscription or other offerings, or the failure to timely develop and achieve market acceptance of new products and subscriptions as well as existing products, subscriptions and support offerings.
• Failure of Palo Alto Networks' or CyberArk's business strategies.
• Rapidly evolving technological developments in the market for security products, subscriptions, and support offerings.
• Defects, errors, or vulnerabilities in products, subscriptions, or support offerings.
• Customers' purchasing decisions and the length of sales cycles.
• Competition.
• Palo Alto Networks' ability to attract and retain new customers.
• Palo Alto Networks' ability to acquire and integrate other companies, products, or technologies in a successful manner.
• Palo Alto Networks' share repurchase program, which may not be fully consummated or enhance shareholder value, and any share repurchases which could affect the price of its common stock.

Future Outlook

The acquisition is expected to be immediately accretive to Palo Alto Networks' revenue growth and gross margin, and accretive to free cash flow per share in fiscal year 2028. The combined entity aims to define the next chapter of cybersecurity by securing all identity types, including human, machine, and AI agents, and significantly expanding the total addressable market. The integration will provide a unified platform to eliminate security gaps and simplify operations for customers.

Management Comments

• Nikesh Arora, Chairman and CEO of Palo Alto Networks, stated: "Our market entry strategy has always been to enter categories at their inflection point, and we believe that moment for Identity Security is now. This strategy has guided our evolution from a next-gen firewall company into a multi-platform cybersecurity leader. Today, the rise of AI and the explosion of machine identities have made it clear that the future of security must be built on the vision that every identity requires the right level of privilege controls, not the IAM fallacy. CyberArk is the definitive leader in Identity Security with durable, foundational technology that is essential for securing the AI era. Together, we will define the next chapter of cybersecurity."
• Udi Mokady, Founder and Executive Chairman of CyberArk, stated: "This is a profound moment in CyberArk's journey. From the beginning, we set out to protect the world's most critical assets, with a relentless focus on innovation, trust, and security. Joining forces with Palo Alto Networks is a powerful next chapter, built on shared values and a deep commitment to solving the toughest identity challenges. Together, we'll bring unmatched expertise across human and machine identities, privileged access, and AI-driven innovation to secure what's next. This is more than a combination of technologies—it's an acceleration of the mission we began over two decades ago. I'm incredibly proud of what our team has built and deeply grateful to everyone who made this milestone possible."

Industry Context

The cybersecurity industry is undergoing significant shifts, particularly in Identity Security, driven by the convergence of identity and security, the need for platformization due to a highly fragmented vendor landscape (over 100 vendors), and the exponential growth of machine identities and AI agents. The current Identity and Access Management (IAM) paradigm is considered broken, with 88% of attacks involving stolen credentials. This acquisition positions Palo Alto Networks to address these critical challenges by integrating a leading Identity Security platform, especially crucial for securing the emerging class of 'privileged' AI agents.

Comparison to Industry Standards

• Palo Alto Networks is recognized as a Cybersecurity Leader across Firewall, SASE, Cloud Security, and SOC Automation, with leadership recognition in over 20 categories of cybersecurity.
• CyberArk is identified as a category leader in Identity Security and the definitive leader in Privileged Access Management (PAM), as recognized in the 2024 Gartner Magic Quadrant for Privileged Access Management.
• The acquisition aims to solidify Palo Alto Networks' leadership across all major cybersecurity categories, expanding its total addressable market from $19 billion (2018, primarily firewall) to an estimated $257 billion by 2028, including the Identity Security segment.
• The filing highlights that 88% of attacks involve stolen credentials (Verizon 2025 Data Breach Investigations Report) and 70% of companies report identity silos as a root cause of cybersecurity risk (CyberArk 2025 Identity Security Landscape Report), underscoring the critical need for integrated identity security solutions.
• The increasing machine-to-human identity ratio (over 80:1, CyberArk, Apr-25) indicates a significant and growing area of security focus that the combined entity aims to address comprehensively, differentiating itself from fragmented legacy IAM solutions.

Stakeholder Impact

• Shareholders of Palo Alto Networks are expected to benefit from immediate accretion to revenue growth and gross margin, and free cash flow per share accretion by FY28, along with expanded total addressable market and strengthened strategic positioning.
• Shareholders of CyberArk will receive a 26% premium to their shares and will become shareholders of Palo Alto Networks, participating in the future growth of the combined entity.
• Customers of both companies are expected to benefit from a single, unified, end-to-end security platform, designed to eliminate dangerous security gaps, simplify operations, and provide integrated, AI-powered identity-aware security.
• Employees of both Palo Alto Networks and CyberArk are part of a combination that aims to unite talented teams and offer the industry's most comprehensive portfolio, potentially leading to new opportunities, though risks related to retaining key personnel are noted.
• Competitors in the Identity and Access Management (IAM) market are likely to face increased competitive pressure from the combined entity, which aims to disrupt the legacy IAM market and solidify its leadership.

Next Steps

• Palo Alto Networks intends to provide supplemental information regarding the proposed transaction in connection with presentations to analysts and investors.
• Palo Alto Networks intends to file a registration statement on Form S-4 with the SEC, which will include a proxy statement of CyberArk and a prospectus of PANW common shares.
• CyberArk shareholders must approve the proposed transaction.
• Satisfaction of customary closing conditions, including applicable regulatory clearances, is required.
• Palo Alto Networks will host its Q4 FY2025 Earnings Call on August 18, 2025.

Key Dates

Recommendation

The acquisition of CyberArk by Palo Alto Networks is a highly strategic move that significantly expands Palo Alto Networks' total addressable market into the critical and rapidly growing Identity Security segment, particularly relevant with the rise of AI agents. The transaction is expected to be immediately accretive to revenue growth and gross margin, and free cash flow per share by FY28, indicating strong financial rationale. The combined entity will offer a more comprehensive and integrated security platform, addressing a fragmented market and enhancing competitive positioning. While integration risks exist, the long-term strategic benefits and financial accretion make this a compelling investment opportunity.

Keywords

Cybersecurity, Identity Security, PAM, Privileged Access Management, AI Security, Machine Identities, Merger, Acquisition, Palo Alto Networks, CyberArk, PANW, CYBR, Enterprise Security, Cloud Security, SOC Automation, Network Security