Governance & Risk Management , IT Risk Management , Security Operations
Palo Alto Networks Acquiring Expanse for $800 MillionAcquisition Is Palo Alto's Third So Far This Year
Palo Alto Networks plans to acquire security startup Expanse in an $800 million deal. It will integrate Expanse’s attack surface monitoring capabilities into its Cortex product suite.
See Also: Webinar | How the SASE Architecture Enables Remote Work
The pending deal, announced Wednesday, includes Palo Alto Networks paying $670 million in cash and stock to acquire Expanse and an additional $130 million in equity awards to the startup's employees.
San Francisco-based Expanse, founded in 2012, says it’s been developing tools to help enterprises better understand and monitor their attack surface, especially those assets that could be exposed or not properly tracked within the network. The company says its technology also provides ways to prioritize risk and mitigate attacks that target vulnerable assets.
"By integrating Expanse's attack surface management capabilities into Cortex after closing, we will be able to offer the first solution that combines the outside view of an organization's attack surface with an inside view to proactively address all security threats," says Nikesh Arora, chairman and CEO of Palo Alto Networks.
Since its founding, Expanse has raised about $136 million in funding, including a $70 million Series C round in April 2019, according to Crunchbase. The company's co-founders, Tim Junio and Matt Kraning, will join Palo Alto Networks, according to the Wednesday announcement.
Expanse's customer base includes financial, healthcare, entertainment and technology firms as well as U.S. government entities, including the departments of Defense and Energy, according to a company blog post.
Over the last two years, Palo Alto Networks, a publicly traded company, has been on an acquisitions streak, acquiring at least 10 firms as part of its push to deliver next-generation and cloud security product offerings.
The company acquired two other companies earlier this year: The Crypsis Group, a consulting firm that focuses on data breach response and risk management, and CloudGenix, which offers SD-WAN products that will be integrated into Palo Alto's secure access service edge, or SASE, platform.
In a client note published on Oct. 20, analysts at JPMorgan say that Palo Alto Networks' acquisitions, along with its networking, endpoint, cloud security and orchestration portfolios, are helping the company compete against other firms, including Cisco Systems and Check Point Software Technologies.
"Spending in cybersecurity has been a top priority for the past five years,” the JPMorgan analysis states. “If that spending focus by customers were to fade … then share performance could suffer."
In other merger and acquisition news this week, Barracuda announced Wednesday that it plans to acquire startup Fyde, which provides zero trust network access. Financial details were not disclosed.
Barracuda plans to integrate Fyde's technology into its CloudGen SASE platform.