8-K: Palo Alto Networks to Acquire CyberArk in Major Cybersecurity Merger

Palo Alto Networks has entered into a definitive agreement to acquire CyberArk Software Ltd. in a cash and stock transaction, aiming to expand its cybersecurity offerings.

Summary

• Palo Alto Networks, Inc. (PANW) has signed an Agreement and Plan of Merger with CyberArk Software Ltd. (CyberArk) and its wholly-owned subsidiary, Athens Strategies Ltd. (Merger Sub).
• Merger Sub will merge into CyberArk, with CyberArk continuing as a wholly-owned subsidiary of PANW.
• Each outstanding ordinary share of CyberArk will be converted into the right to receive 2.2005 shares of PANW common stock and $45.00 in cash.
• The cash portion of the merger consideration is expected to be financed with cash on hand.
• The merger agreement and the transactions have been unanimously approved by the boards of directors of both Palo Alto Networks and CyberArk.
• CyberArk's board of directors has resolved to recommend that its shareholders approve the merger.
• Vested CyberArk equity awards will be paid out in a combination of cash and PANW stock, while unvested awards will be assumed and converted into comparable PANW equity awards.
• The CyberArk Employee Share Purchase Plan (ESPP) will terminate immediately prior to the Effective Time, with accumulated payroll deductions used to purchase shares.
• The transaction is subject to customary closing conditions, including CyberArk shareholder approval, Nasdaq listing for PANW shares, effectiveness of a Form S-4 registration statement, and various regulatory approvals (e.g., HSR Act, antitrust, foreign investment laws).
• CyberArk may be required to pay PANW a termination fee of $750 million under certain circumstances, including a material breach of non-solicitation covenants or a change of recommendation.
• PANW may be required to pay CyberArk a termination fee of $1 billion if the merger is terminated due to failure to obtain required regulatory approvals.

Sentiment

Score: 7

Explanation: The sentiment is positive due to unanimous board approval and the strategic rationale for the merger, indicating a strong commitment from both parties. However, the inherent risks of integration, regulatory hurdles, and the potential for significant termination fees introduce a degree of caution, preventing a higher score.

Positives

• The merger has received unanimous approval from the boards of directors of both Palo Alto Networks and CyberArk, indicating strong internal support.
• CyberArk's board of directors recommends the merger to its shareholders, suggesting a favorable outcome for CyberArk investors.
• The cash portion of the merger consideration is expected to be financed with cash on hand, demonstrating Palo Alto Networks' financial strength and reducing reliance on external debt for this component.
• The transaction is anticipated to yield benefits and synergies, although specific details are not provided in this filing.
• Unvested CyberArk equity awards will be converted into PANW equity awards, providing continuity and alignment for key employees post-merger.

Negatives

• The merger involves significant termination fees: $750 million payable by CyberArk to PANW under certain conditions, and $1 billion payable by PANW to CyberArk if regulatory approvals fail.
• There is a risk that the expected benefits and synergies of the proposed transaction may not be fully achieved or in a timely manner.
• The integration of CyberArk's businesses and technologies into Palo Alto Networks presents inherent operational and strategic risks.
• The transaction carries a risk of not being able to retain and hire key personnel from CyberArk, which could impact post-merger performance.
• The merger is subject to various regulatory approvals, including antitrust and foreign investment laws, which could lead to delays or impose burdensome conditions.
• The announcement and pendency of the merger could disrupt existing business relationships and operations for both companies.
• Uncertainty exists regarding the long-term value of PANW's or CyberArk's common or ordinary shares post-merger.

Risks

• The occurrence of any event, change, or other circumstance that could give rise to the termination of the proposed transaction between PANW and CyberArk.
• PANW's ability to successfully integrate CyberArk's businesses and technologies.
• The risk that the expected benefits and synergies of the proposed transaction may not be fully achieved in a timely manner, or at all.
• The risk that PANW or CyberArk will be unable to retain and hire key personnel.
• The risk associated with CyberArk's ability to obtain the approval of its shareholders required to consummate the proposed transaction.
• The risk that the conditions to the proposed transaction are not satisfied on a timely basis, or at all, or the failure of the proposed transaction to close for any other reason or to close on the anticipated terms.
• The risk that any regulatory approval, consent or authorization that may be required for the proposed transaction is not obtained or is obtained subject to conditions that are not anticipated or that could adversely affect the expected benefits of the transaction.
• Significant and/or unanticipated difficulties, liabilities or expenditures relating to the transaction.
• The effect of the announcement, pendency or completion of the proposed transaction on the parties' business relationships and business operations generally.
• The effect of the announcement or pendency of the proposed transaction on the parties' common or ordinary share prices and uncertainty as to the long-term value of PANW's or CyberArk's common or ordinary shares.
• Risks related to disruption of management time from ongoing business operations due to the proposed transaction.
• The outcome of any legal proceedings that may be instituted against PANW, CyberArk or their respective directors.
• Developments and changes in general or worldwide market, geopolitical, economic, and business conditions.
• Failure of PANW's platformization product offerings.
• Failure to achieve the expected benefits of PANW's strategic partnerships and acquisitions.
• Changes in the fair value of PANW's contingent consideration liability associated with acquisitions.
• Risks associated with managing PANW's growth.
• Risks associated with new product, subscription and support offerings, including product offerings that leverage AI.
• Shifts in priorities or delays in the development or release of new product or subscription or other offerings, or the failure to timely develop and achieve market acceptance of new products and subscriptions as well as existing products, subscriptions and support offerings.
• Failure of PANW's or CyberArk's business strategies.
• Rapidly evolving technological developments in the market for security products, subscriptions and support offerings.
• Defects, errors, or vulnerabilities in products, subscriptions or support offerings.
• Customer purchasing decisions and the length of sales cycles.
• Competition.
• Ability to attract and retain new customers.
• Ability to acquire and integrate other companies, products, or technologies in a successful manner.
• PANW's share repurchase program, which may not be fully consummated or enhance shareholder value, and any share repurchases which could affect the price of its common stock.

Future Outlook

The filing indicates that the merger is expected to be consummated as soon as practicable, subject to the satisfaction of customary closing conditions, including shareholder and regulatory approvals. Palo Alto Networks anticipates successfully integrating CyberArk's businesses and technologies, with an expectation of achieving benefits and synergies from the transaction. The cash portion of the merger consideration is planned to be financed with cash on hand. The companies will work to obtain necessary tax rulings and regulatory clearances to facilitate the transaction and ensure tax continuity for certain equity awards.

Management Comments

• The board of directors of the Company (CyberArk) unanimously determined that the terms of this Agreement and the transactions contemplated hereby, including the Merger, are fair to, and in the best interests of, the Company and its shareholders.
• The board of directors of the Company (CyberArk) resolved to recommend that the Company Shareholders approve this Agreement and the Transactions, including the Merger.
• The board of directors of Parent (Palo Alto Networks) unanimously approved this Agreement and the issuance of Parent Common Stock in connection herewith and determined that this Agreement and the Transactions, including the Merger and the issuance of Parent Common Stock in connection therewith, are advisable and fair to, and in the best interests of, Parent and the stockholders of Parent.

Industry Context

This merger represents a significant consolidation within the cybersecurity industry, with Palo Alto Networks, a leader in network and cloud security, acquiring CyberArk, a prominent player in identity security and privileged access management. This move aligns with the broader industry trend of cybersecurity vendors expanding their portfolios to offer more comprehensive, integrated security platforms. The acquisition could enhance Palo Alto Networks' ability to provide end-to-end security solutions, particularly in the critical area of identity and access, which is increasingly targeted by cyber threats. It also reflects the ongoing demand for robust security solutions as organizations face evolving and sophisticated cyberattacks.

Comparison to Industry Standards

• The acquisition of CyberArk by Palo Alto Networks is consistent with the industry trend of large cybersecurity firms expanding their capabilities through strategic acquisitions, similar to Broadcom's acquisition of Symantec's enterprise security business or IBM's acquisition of Red Hat, aiming for broader market reach and integrated offerings.
• The deal structure, combining cash and stock, is a common approach in large technology mergers, balancing immediate liquidity for target shareholders with participation in the acquiring company's future growth, comparable to Microsoft's acquisition of Activision Blizzard or Salesforce's acquisition of Slack.
• The inclusion of significant termination fees for both parties is standard practice in major M&A agreements, providing a deterrent against deal abandonment and compensation for the non-breaching party, similar to provisions seen in the proposed Adobe-Figma acquisition or the NVIDIA-Arm deal (which was ultimately terminated).

Legal Proceedings

• The filing notes the potential for legal proceedings to be instituted against Palo Alto Networks, CyberArk, or their respective directors related to the merger or transactions.
• The Company will provide prompt notice of any litigation brought by stockholders relating to the merger and allow Parent to participate in defense or settlement.

Stakeholder Impact

• Shareholders of CyberArk will receive a combination of cash and Palo Alto Networks common stock, providing both immediate value and participation in the combined entity's future.
• Shareholders of Palo Alto Networks will experience dilution due to the issuance of new shares as part of the merger consideration.
• Continuing employees of CyberArk will receive comparable base salary, target incentive cash compensation, and severance benefits for 12 months post-merger, and their unvested equity awards will convert to Palo Alto Networks awards.
• The merger could impact relationships with current or prospective customers, suppliers, distributors, partners, financing sources, and sales representatives for both companies.
• Creditors of CyberArk will see their obligations become those of the Surviving Company, with specific provisions for the Convertible Notes and the Company Credit Agreement.

Next Steps

• Palo Alto Networks will prepare and file a registration statement on Form S-4 with the SEC, which will include CyberArk's proxy statement/prospectus.
• The registration statement must be declared effective by the SEC.
• CyberArk will mail the proxy statement/prospectus to its shareholders.
• CyberArk will convene an extraordinary general meeting of its shareholders to seek approval for the merger and its 2024 Share Incentive Plan.
• Palo Alto Networks will seek approval for the listing of its common stock on Nasdaq, subject to official notice of issuance.
• Both companies will work to obtain all necessary regulatory clearances and approvals, including under the HSR Act and other antitrust/foreign investment laws.
• CyberArk will apply for and seek to obtain various Israeli Tax Rulings (Options Tax Ruling, 104H Tax Ruling, Withholding Tax Ruling) from the Israeli Tax Authority.
• Palo Alto Networks will cause the Surviving Company to deliver the IIA Notice and IIA Undertaking to the Israeli Innovation Authority post-closing.
• The Company will cooperate with Parent to facilitate the settlement of Convertible Notes Hedge Obligations.
• The Company will facilitate the termination of its Credit Agreement and repayment of outstanding obligations on the Closing Date.
• The Company will cause the restrictive legend on the Convertible Notes to be removed and assigned unrestricted CUSIP and ISIN numbers after the Resale Restriction Termination Date.

Key Dates

Recommendation

The filing announces a definitive merger agreement, which is a significant corporate action. For existing investors in both Palo Alto Networks and CyberArk, the recommendation is to hold. The terms of the merger are set, and the focus now shifts to the successful completion of regulatory approvals and the integration process. While the strategic rationale appears sound, the inherent risks of large-scale integrations and the potential for regulatory hurdles warrant a cautious 'hold' stance rather than an immediate 'buy' or 'sell' based solely on this announcement.

Keywords

Cybersecurity, Merger, Acquisition, Palo Alto Networks, CyberArk, PANW, CYBR, SEC Filing, 8-K, Stock-for-Cash, Corporate Acquisition, Security Software, Identity Security, Cloud Security, Network Security