Palo Alto Networks' $25 billion deal to acquire CyberArk cements identity security as the next must-win cybersecurity battleground.

Why it matters: Where the hackers go, so goes the money in cybersecurity.

Driving the news: Palo Alto agreed Wednesday to acquire identity security provider CyberArk in a $25 billion cash-and-stock deal — one of the largest cybersecurity acquisitions to date.

• The deal positions Palo Alto — a major endpoint detection, cloud and network security provider — to become a key competitor in identity security.

The big picture: Identity is now the frontline of cybersecurity. As hackers increasingly rely on stolen credentials and social engineering to infiltrate organizations, defenders are shifting their focus from firewalls to access controls.

• Identity-based attacks can include phishing, credential stuffing (reusing leaked passwords to access new accounts), and insider abuse.
• Now, security teams are also grappling with the risk of compromised AI agents, which could be misused to leak sensitive data or trigger unintended actions.

Between the lines: The identity market is fragmented and growing fast.

• Palo Alto CEO Nikesh Arora said in his letter to shareholders that there are more than 100 vendors offering some form of identity security today — a sign, he argued, that the space is ripe for consolidation and disruption.
• "Our market entry strategy has always been to enter categories at their inflection point, and we believe that moment for identity security is now," Arora said in a statement Wednesday.

By the numbers: Global M&A deal activity in cyber rose 16% last year, according to PitchBook, and there have been about 310 cyber M&A deals in 2025 so far. Identity has made up 16 of those, including:

• 1Password acquiring Trelica, which helps IT teams track the apps that employees use, for an undisclosed amount earlier this year.
• CyberArk acquiring Zilla Security in February in a $175 million deal.

The intrigue: CyberArk specializes in privileged access management, a niche within identity security focused on safeguarding high-risk accounts — such as IT admins, service accounts and cloud infrastructure identities.

• That includes machine identities, too: In April, CyberArk unveiled a suite of tools to secure AI agents and other automated workloads, giving them unique credentials and monitoring their behavior just like human users.
• This focus will give Palo Alto a leg up in managing the exploding universe of nonhuman identities that power AI and cloud environments.

Yes, but: Palo Alto is entering a fiercely competitive space. Major players like Microsoft, Okta, BeyondTrust and private-equity–backed SailPoint already have deep roots and loyal enterprise customers.

• "While others expand into identity from adjacent markets, we remain committed to leading from the inside out, with identity as our core mission, not a feature," Janine Seebeck, CEO of CyberArk competitor BeyondTrust, said in a statement.