425: Palo Alto Networks to Acquire CyberArk in Strategic Cybersecurity Merger

Sentiment:

Merger Announcement


Palo Alto Networks has entered into a definitive agreement to acquire CyberArk Software Ltd., expanding its cybersecurity portfolio through a cash and stock transaction.

Delay expectedThe 'Outside Date' for consummation of the merger is July 30, 2026, but can be automatically extended to October 30, 2026, specifically to obtain required regulatory approvals, indicating a potential for delays related to antitrust and foreign investment clearances.The closing conditions include the expiration of waiting periods under the HSR Act and receipt of other approvals under specified antitrust and foreign investment laws, which are common sources of transaction delays.
Capital raiseThe cash portion of the merger consideration is expected to be financed with cash on hand, indicating a use of existing capital resources.Palo Alto Networks is seeking cooperation from CyberArk for 'any financing' obtained or to be obtained for the purpose of financing the transactions, which could imply potential debt or other capital market activities, although not explicitly stated as a 'raise' from new external equity.

Summary

  • Palo Alto Networks, Inc. (PANW) has agreed to acquire CyberArk Software Ltd. (CyberArk) through a merger, with CyberArk becoming a wholly owned subsidiary of PANW.
  • Each outstanding ordinary share of CyberArk will be converted into the right to receive 2.2005 shares of PANW common stock and $45.00 in cash.
  • The cash portion of the merger consideration is expected to be financed with cash on hand.
  • The merger agreement and the transactions have been unanimously approved by the boards of directors of both Palo Alto Networks and CyberArk.
  • CyberArk's board of directors has resolved to recommend that CyberArk shareholders approve the merger agreement.
  • Completion of the merger is subject to customary closing conditions, including CyberArk shareholder approval, Nasdaq listing approval for PANW shares, effectiveness of a Form S-4 registration statement, and various regulatory approvals including HSR Act clearance.
  • The merger is expected to close by July 30, 2026, with a potential extension to October 30, 2026, for regulatory approvals.

Sentiment

Score: 8

Explanation: The filing announces a definitive merger agreement that has received unanimous board approval from both companies, indicating a strong strategic alignment and a clear path forward for the transaction. The terms are well-defined, and the financing is expected to be covered by cash on hand, suggesting financial stability. While inherent risks of integration and regulatory hurdles exist, the overall tone and nature of the announcement are highly positive for the strategic growth of Palo Alto Networks and a beneficial exit for CyberArk shareholders.

Positives

  • The merger has been unanimously approved by the boards of directors of both Palo Alto Networks and CyberArk, indicating strong internal support.
  • CyberArk's board of directors recommends the merger to its shareholders, suggesting a favorable outcome for them.
  • The cash portion of the merger consideration is expected to be financed with cash on hand, indicating financial stability for Palo Alto Networks in funding the acquisition.
  • The transaction is structured to provide CyberArk shareholders with a combination of cash and stock, offering both immediate value and participation in the future growth of Palo Alto Networks.

Negatives

  • The merger is subject to various closing conditions, including regulatory approvals, which could delay or prevent consummation.
  • The agreement includes termination fees: CyberArk would pay $750 million to PANW under certain circumstances, and PANW would pay $1 billion to CyberArk if the merger fails due to regulatory approval issues.
  • The announcement and pendency of the proposed transaction could affect business relationships and operations for both parties, including with customers, suppliers, and employees.
  • There is a risk that the expected benefits and synergies of the proposed transaction may not be fully achieved in a timely manner, or at all.

Risks

  • The occurrence of any event, change, or other circumstance that could give rise to the termination of the proposed transaction.
  • Palo Alto Networks' ability to successfully integrate CyberArk's businesses and technologies.
  • The risk that the expected benefits and synergies of the proposed transaction may not be fully achieved in a timely manner, or at all.
  • The risk that Palo Alto Networks or CyberArk will be unable to retain and hire key personnel.
  • The risk associated with CyberArk's ability to obtain the approval of its shareholders required to consummate the proposed transaction.
  • The risk that the conditions to the proposed transaction are not satisfied on a timely basis, or at all, or the failure of the proposed transaction to close for any other reason or to close on the anticipated terms.
  • The risk that any regulatory approval, consent or authorization that may be required for the proposed transaction is not obtained or is obtained subject to conditions that are not anticipated or that could adversely affect the expected benefits of the transaction.
  • Significant and/or unanticipated difficulties, liabilities or expenditures relating to the transaction.
  • The effect of the announcement, pendency or completion of the proposed transaction on the parties' business relationships and business operations generally.
  • The effect of the announcement or pendency of the proposed transaction on the parties' common or ordinary share prices and uncertainty as to the long-term value of Palo Alto Networks' or CyberArk's common or ordinary shares.
  • Risks related to disruption of management time from ongoing business operations due to the proposed transaction.
  • The outcome of any legal proceedings that may be instituted against Palo Alto Networks, CyberArk or their respective directors.
  • Developments and changes in general or worldwide market, geopolitical, economic, and business conditions.
  • Failure of Palo Alto Networks' platformization product offerings.
  • Failure to achieve the expected benefits of Palo Alto Networks' strategic partnerships and acquisitions.
  • Changes in the fair value of Palo Alto Networks' contingent consideration liability associated with acquisitions.
  • Risks associated with managing Palo Alto Networks' growth.
  • Risks associated with new product, subscription and support offerings, including product offerings that leverage AI.
  • Shifts in priorities or delays in the development or release of new product or subscription or other offerings, or the failure to timely develop and achieve market acceptance of new products and subscriptions as well as existing products, subscriptions and support offerings.
  • Defects, errors, or vulnerabilities in products, subscriptions or support offerings.
  • Customers' purchasing decisions and the length of sales cycles.
  • Competition.
  • Ability to attract and retain new customers.
  • Ability to acquire and integrate other companies, products, or technologies in a successful manner.
  • Share repurchase program, which may not be fully consummated or enhance shareholder value, and any share repurchases which could affect the price of its common stock.

Future Outlook

The filing outlines the definitive agreement for the acquisition of CyberArk by Palo Alto Networks, with the expectation of financing the cash portion of the merger consideration with cash on hand. It highlights the strategic intent behind the merger, aiming for successful integration and realization of anticipated benefits and synergies, while acknowledging the inherent uncertainties and risks that could cause actual results to differ materially from forward-looking statements.

Management Comments

  • The board of directors of Palo Alto Networks unanimously approved the merger agreement and the issuance of common stock in connection with the transaction, determining it to be advisable and in the best interests of Palo Alto Networks and its stockholders.
  • The board of directors of CyberArk Software Ltd. unanimously determined that the terms of the merger are fair to, and in the best interests of, CyberArk and its shareholders, and resolved to recommend that CyberArk shareholders approve the merger agreement.

Industry Context

This acquisition represents a significant consolidation within the cybersecurity industry, with Palo Alto Networks, a leader in network security, acquiring CyberArk, a prominent player in identity security and privileged access management. This move suggests a strategic effort by Palo Alto Networks to expand its comprehensive security platform, integrate identity-centric security capabilities, and address the evolving threat landscape, potentially increasing its competitive posture against other broad cybersecurity solution providers.

Management Changes

RolePrevious PersonNew PersonEffective DateReason
DirectorAll current directors of CyberArkN/AEffective Time of MergerResignation upon merger completion as CyberArk becomes a wholly owned subsidiary of Palo Alto Networks.

Corporate Governance

Change TypeDescriptionEffective DateImpact Assessment
Board ApprovalThe merger agreement and transactions were unanimously approved by the boards of directors of both Palo Alto Networks and CyberArk.July 30, 2025Indicates strong internal alignment and commitment to the transaction from both companies' leadership.
Shareholder RecommendationCyberArk's board of directors resolved to recommend to its shareholders to approve the merger agreement and the transactions.July 30, 2025Provides a clear endorsement for CyberArk shareholders to vote in favor of the merger.
Indemnification and D&O InsurancePalo Alto Networks will indemnify and hold harmless past and present Office Holders of CyberArk and its subsidiaries for seven years post-merger, maintaining D&O insurance coverage substantially equivalent to current policies, subject to a cost cap.Effective Time of MergerEnsures continued protection for CyberArk's former directors and officers, addressing potential liabilities arising from their service prior to the merger.
Takeover Statute InapplicabilityThe Company Board of Directors has taken all action necessary to render inapplicable to this Agreement and the Transactions any Takeover Statute or any similar provisions in the Company Articles.July 30, 2025Removes potential legal hurdles that could impede the merger, facilitating its consummation.

Legal Proceedings

  • The filing notes the risk of 'any legal proceedings that may be instituted against Palo Alto Networks, CyberArk or their respective directors' arising out of or relating to the merger agreement or the transactions.
  • The Company and Parent commit to provide prompt notice of any litigation brought by stockholders relating to the merger and to cooperate in defense or settlement, with Parent having participation rights and consent over settlement terms.

Related Party Transactions

  • The Company is restricted from entering into any transactions or Contracts with any affiliate or other Person that would be required to be disclosed under Item 7.B. of Form 20-F, except as set forth in the Company Securities Filings.

Stakeholder Impact

  • Shareholders of CyberArk will receive a combination of cash and Palo Alto Networks common stock, providing a premium and continued equity participation in the combined entity.
  • Employees of CyberArk who continue employment with Palo Alto Networks or its subsidiaries will receive base salary/wage rates and target incentive cash compensation opportunities no less favorable than prior to closing, and substantially comparable other employee benefits for 12 months.
  • Relationships with current or prospective customers, suppliers, distributors, partners, and sales representatives could be affected by the announcement, pendency, or completion of the proposed transaction.
  • The transaction involves the termination of CyberArk's credit agreement and potential settlement of convertible notes hedge obligations, impacting creditors and financial counterparties.

Next Steps

  • Palo Alto Networks to file a registration statement on Form S-4 with the SEC for the shares to be issued in the merger.
  • CyberArk to call, give notice of, convene, and hold an extraordinary general meeting of its shareholders to seek approval of the merger agreement and the merger.
  • Both parties to prepare and file a merger proposal with the Israeli Companies Registrar.
  • Both parties to seek and obtain all necessary regulatory approvals, including HSR Act clearance and other antitrust/foreign investment laws.
  • Palo Alto Networks to cause the shares of its common stock to be issued in the merger to be approved for listing on Nasdaq.
  • CyberArk to take actions to cause the treatment of its equity awards and ESPP as contemplated by the agreement.
  • CyberArk to deliver notices and take actions to facilitate the termination of its credit agreement and the repayment of outstanding obligations on the closing date.
  • Palo Alto Networks to cause the delisting of CyberArk shares from Nasdaq and termination of its registration under the Exchange Act after the Effective Time.
  • Palo Alto Networks to file a registration statement on Form S-8 for assumed equity awards.
  • Palo Alto Networks to cause the Surviving Company to deliver the IIA Notice and IIA Undertaking to the Israeli Innovation Authority.

Key Dates

DateDescription
July 10, 2014Date of Fourth Amended Investor Rights Agreement.
June 25, 2024Date of Company Credit Agreement.
October 1, 2024Date of Registration Rights Agreement.
January 1, 2025Reference date for absence of certain changes or events for both companies.
April 30, 2025Date of Parent's consolidated balance sheet included in SEC filings.
June 5, 2025Date of Base Call Option Transactions (Capped Call Confirmations).
June 6, 2025Date of Additional Call Option Transactions (Capped Call Confirmations).
June 10, 2025Date of Convertible Notes Indenture.
June 25, 2025Date of Mutual Nondisclosure Agreement (Confidentiality Agreement).
July 25, 2025Company and Parent Capitalization Date for share and equity award counts.
July 30, 2025Date of the Agreement and Plan of Merger.
July 31, 2025Date of Report (earliest event reported) for the Form 8-K filing.
July 30, 2026Initial Outside Date for consummation of the Merger.
October 30, 2026Extended Outside Date for consummation of the Merger, if required for regulatory approvals.

Recommendation

buy

For Palo Alto Networks, this acquisition of CyberArk is a significant strategic move to enhance its cybersecurity portfolio, particularly in identity security and privileged access management. This expansion into critical security domains is expected to drive long-term growth and strengthen its competitive position. For CyberArk shareholders, the merger offers a clear exit at a premium, providing immediate cash value and continued equity exposure to a larger, more diversified cybersecurity leader. The unanimous board approvals from both companies underscore the strategic rationale and perceived benefits of the transaction, making it a compelling opportunity for investors seeking exposure to the consolidating cybersecurity market.

Keywords

Palo Alto Networks, CyberArk, Merger Agreement, Acquisition, Cybersecurity, Security Software, Enterprise Security, Cloud Security, Identity Security, Network Security, M&A, SEC Filing, Form 8-K, PANW, CYBR

Disclaimer:The information provided here is for general informational purposes only and does not constitute financial advice, recommendation, or endorsement of any kind. It may contain errors or omissions. You should not rely on this information to make financial decisions. Always seek the advice of a qualified financial professional before making any investment or financial decisions. Use of this information is at your own risk.