From privileged accounts to AI agents: How the CyberArk acquisition shifts Palo Alto Networks’ focus

Palo Alto Networks, Inc. (NASDAQ: PANW) is set to redefine its identity security ambitions with the $25 billion acquisition of CyberArk Software Ltd. (NASDAQ: CYBR), announced on July 30, 2025. While the deal delivers a 26 percent premium to CyberArk shareholders, its strategic implications go far beyond traditional privileged access management (PAM). The real pivot is toward securing “agentic AI” — autonomous AI agents that operate with high-level system permissions — and in doing so, expanding Palo Alto Networks’ total addressable market.

How is agentic AI reshaping the definition of privileged identities in cybersecurity?

In traditional enterprise environments, privileged identities referred to human administrators, root accounts, and high-level service accounts with broad control over systems. CyberArk built its reputation as the global leader in protecting those accounts through PAM controls, vaulting, and just-in-time access.

But in the AI era, the landscape is shifting. Agentic AI — autonomous software agents capable of initiating transactions, deploying code, or accessing sensitive data — are emerging as a new class of privileged identity. These agents can perform tasks once limited to senior IT staff or DevOps engineers, but at machine speed and scale. If compromised, they could enable large-scale exploitation faster than human-driven attacks.

CyberArk has already moved to secure these non-human identities, applying least-privilege principles, continuous authentication, and behavior monitoring to machine accounts and AI workloads. By bringing CyberArk into its platform, Palo Alto Networks can now extend identity-aware protection across both human and AI agents — a capability few competitors can match at scale.

Why does adding AI agent security expand Palo Alto Networks’ addressable market?

The expansion into AI agent security isn’t just a technical evolution — it’s a commercial opportunity. Enterprises across sectors such as finance, healthcare, manufacturing, and government are rapidly integrating AI agents into workflows for automation, data analysis, and customer engagement. Each AI agent requires identity provisioning, access controls, and ongoing security governance.

This creates a parallel growth track alongside traditional identity security. Palo Alto Networks can now target budgets earmarked for AI risk management, machine identity protection, and regulatory compliance in emerging AI safety frameworks. Analysts suggest that the convergence of PAM, identity governance, and AI security could create one of the fastest-growing sub-segments in enterprise cybersecurity.

For Palo Alto Networks, the move effectively enlarges its total addressable market by overlapping with categories historically served by specialized AI security firms. And because identity is central to zero-trust architectures, the CyberArk integration also strengthens Palo Alto Networks’ competitive position in broader digital transformation projects.

How will CyberArk’s platform fit into Palo Alto Networks’ multi-platform security model?

Palo Alto Networks has spent the past five years transitioning from a network-security company to a multi-platform cybersecurity provider. Its portfolio now spans Strata for network security, Prisma Cloud for cloud-native protection, and Cortex for SOC automation. Yet until now, identity was not a core pillar.

By embedding CyberArk’s identity security platform into Strata and Cortex, Palo Alto Networks gains the ability to apply real-time privilege intelligence across all enforcement points. For example, if an AI agent suddenly requests elevated permissions outside of normal operating patterns, the system can automatically trigger a Cortex-driven incident response while Strata blocks the access attempt at the network layer.

This closed-loop model — combining identity signals, threat analytics, and automated enforcement — could become a blueprint for securing hybrid environments where human and AI actors work side by side. It also allows Palo Alto Networks to differentiate from rivals whose identity offerings remain siloed.

What does this shift mean for the competitive landscape in identity and AI security?

The CyberArk acquisition could force a realignment among both traditional IAM vendors and emerging AI security players. Companies like Okta, BeyondTrust, SailPoint, and HashiCorp have strengths in identity management, but few have integrated AI agent security deeply into their offerings.

Palo Alto Networks’ move positions it to capture enterprise accounts that want a single vendor to handle network, cloud, SOC, and identity security — including the emerging AI identity layer. This one-stop-shop model could resonate with large enterprises aiming to simplify procurement and reduce the integration burden of multi-vendor identity stacks.

At the same time, AI-security-focused startups may find themselves under pressure to partner with larger platform players or risk being outpaced by the scale, distribution, and integration capabilities Palo Alto Networks can now deploy.