Sector watch: robotics
Agility's market debut tests if humanoids are a business
Agility is the first pure humanoid robot company on the stock market. Investors are being asked to back a robot that works today, with a revenue line that is still tiny.
Sector watch: security
Palo Alto's $500M bet that AI agents need their own bodyguards
Palo Alto Networks is reportedly in talks to buy Clutch, a three-year-old startup, at about 50 times its revenue. Agent security is turning into a seller's market.
Palo Alto Networks is in talks to acquire Clutch Security for $500 million in cash, plus additional payouts tied to milestones, according to a person familiar with the discussions cited by TechCrunch. The Information reported the talks first. Neither company responded to requests for comment, so nothing is final.
Clutch builds tools that control what AI agents can reach inside a company's systems. It is three years old. In January 2025 it raised a $20 million Series A at an $85 million valuation, led by Lightspeed and SignalFire. The reported price is roughly six times that figure.
The price per dollar of revenue
Clutch is approaching $10 million in annual recurring revenue. At $500 million, the deal would value it at about 50 times that figure. That is a steep multiple for a business of that size.
It is not an isolated case. Upwind, which uses AI to secure cloud infrastructure, recently turned down an offer from Datadog that valued it at roughly 40 times ARR. When a founder walks away from a multiple that high, it suggests sellers expect buyers to pay even more.
A buyer that shops constantly
Palo Alto Networks has a habit of buying technology rather than building it. If the Clutch deal closes, PitchBook counts it as the company's seventh acquisition this year. The pace has picked up as AI-driven cyberattacks rise.
The other deals this year, per the report:
01
Chronosphere, $2.95 billion
An observability platform backed by Greylock and Lux Capital.
The price tag says buyers are paying for a position in a market that has barely formed, not for current revenue.
02
Embrace, $325 million
A startup backed by NEA.
03
Koi, $231 million
A cyber startup backed by Battery and Team8.
04
Console, $500 million
A two-year-old company that uses AI agents to automate routine IT help desk work. Palo Alto bought it in September for a mix of stock and cash.
Console is a useful comparison. Palo Alto has already paid the same headline price for a company that uses agents. Now it is reportedly willing to pay it for a company that polices them.
Rivals are being bought too
Clutch's competitors are going off the board. Cyera, valued at $12 billion earlier this year, bought Oasis Security for $1 billion. Oasis, like Clutch, focuses on managing the access AI agents have to systems. Cisco, according to Calcalist, bought Astrix, which is backed by Menlo Ventures, for roughly $400 million.
Three large buyers have now made moves in the same narrow niche, which is controlling what agents can touch. That looks like a land grab for the few independent specialists left. If it holds, Clutch's remaining peers will be pricing themselves off these deals.
Why now: agents are going on payroll
The demand side is easy to see. Perplexity just launched Teammates, always-on agents that take on several roles in a workspace. They report progress in the Perplexity app and can be reached in Slack. The Verge notes that OpenAI's Dots and Claude Duet work in a similar way. Perplexity's version requires its $200-a-month Max plan.
Perplexity's CEO, Aravind Srinivas, laid out the ambition on X: "Over time, we envision every org having hundreds of teammates working for each person."
Take that vision at face value, and every agent is a new identity with access to company systems. Someone has to decide what each one can open, and keep a record of it. That is the problem Clutch and Oasis were built for.
Agents also do things their users do not expect. A recent GitHub issue for Claude Code is a small example. The reporter said the tool put their email address in a request header during web searches. Anthropic's team replied that a built-in privacy mod in v2.1.317 and later now blocks this behavior. That is one user's account and one fix, so it is no proof of a trend. But it shows how an agent's default behavior can leak information without anyone deciding it should.
What it signals
The price tag says buyers are paying for a position in a market that has barely formed, not for current revenue. Ten million dollars of ARR is small. The bet is that agent deployments multiply fast enough to make access control a must-have line item.
There is a risk in that. Multiples of 40 to 50 times revenue assume the market arrives on schedule. Even so, the pattern is clear: the companies selling security are treating agents as the next large surface to defend, and they are paying up before it is crowded.
More from Sectors
Sector watch: inference
Fal's $16B valuation shows inference demand outrunning power
Fal has doubled its valuation since April as customers pile onto its platform. Meanwhile, data center builders are bolting retired jet engines onto their sites because the grid can't keep up.
Sector watch: cloud
Microsoft finally puts a dollar figure on Azure: $33.2 billion
For the first time, Microsoft reported Azure's quarterly revenue in dollars. The number lets investors compare the big clouds directly, and shows how much of the growth rests on a few AI labs.