Palo Alto Networks Completes CyberArk Deal, Expanding Zero Trust to Machine Identity
Palo Alto Networks (PANW) has officially completed its acquisition of CyberArk, bringing privileged access management, machine identity protection, and secrets management directly into Palo Alto’s broader zero trust and AI security platform. The combined company positions itself as a unified security fabric spanning cloud, network, endpoint, identity, and AI workloads.
CyberArk adds hardened identity controls to Palo Alto’s footprint, eliminating one of the biggest weak points in AI deployments: unmanaged credentials and machine-to-machine access. For customers, the value is reduced breach risk, simplified policy management, and a single vendor for both network and identity-centric security. For AI initiatives, it offers a foundation to secure agentic workflows, LLMs accessing internal systems, and automated machine-to-machine pipelines.
CIOs are under pressure to deliver AI outcomes without blowing up risk exposure. Every AI system – agents, models, orchestration layers – operates through identities. Machine identities are already growing faster than human identities, and unmanaged credentials are now implicated in most cloud breaches. This acquisition signals a shift: identity security is no longer an add‑on; it is a prerequisite for enterprise AI maturity.
Secrets management and non-human identity management are must-haves in this next wave of identity security solutions. The closest competition includes leaders in the space: Segura, BeyondTrust, and Delinea.
The real differentiation:
Technically: CyberArk brings mature authority in privileged access, vaulting, and machine identity protection – areas Palo Alto previously lacked.
Strategically: Palo Alto is betting that customers want one platform for both identity and network controls, especially as AI agents start making autonomous system changes.
Reality check: Integration risk is high. Palo Alto has a history of acquisitions that take time to fully fuse. CyberArk’s user base values independence, and platform consolidation will not be universally welcomed. Competitors like Microsoft will argue they already deliver a unified identity fabric at a larger scale.
Our Take
This acquisition is a clear acknowledgment that AI has blown past traditional identity models and that securing machine privilege is now the highest‑impact control surface in the enterprise. Palo Alto is trying to become the control plane for AI‑driven environments, and integrating CyberArk is its most credible move toward that goal. The strategic logic is sound, but execution will decide everything. If Palo Alto delivers seamless integration, it will set the standard for AI‑era zero trust. If not, Microsoft and CrowdStrike will capitalize quickly. CIOs should view this as a forcing function: accelerate your identity security modernization now, because AI does not wait for your architecture to catch up.