Palo Alto Networks acquires Israeli startup BridgeCrew, which develops and delivers security as code, for $156M
Context & Ripple Effects
This deal opens what becomes a defining M&A arc for Palo Alto Networks: a five-year run of Israeli cybersecurity tuck-ins. Bridgecrew's security-as-code approach — embedding checks into infrastructure code before deployment — is followed by the Cider Security purchase for DevOps pipeline risk in 2022, then the back-to-back Tel Aviv deals for Dig Security's cloud data protection and Talon Cyber Security's enterprise browsers in 2023.
The price itself is a story: CTech reported a $200M figure a day earlier (the initial sourcing), and the confirmed $156M lands below it — a reminder that early acquisition numbers are often soft. What's firm is the direction: each deal adds a layer between developers and production.
First-order effects
- Bridgecrew's team and its policy-as-code tooling join Palo Alto Networks, giving the company a native foothold in developer workflow security rather than a bolt-on scanner.
- Buyers evaluating standalone infrastructure-code security tools now face a vendor-consolidation question: the category leader just folded into one of the largest platform vendors.
Second-order effects
- Rivals in cloud-native application protection must respond to a competitor that can bundle code-stage security with network, workload, and — later via Dig — data-layer offerings in a single contract.
- Israeli founders gain a proven exit template: Bridgecrew's outcome makes Tel Aviv-based security startups more legible targets for US platform acquirers, a pattern the Dig/Talon negotiations and the reported Koi talks extend.
Third-order effects
- If the cadence holds, security purchasing shifts structurally toward platform suites assembled by acquisition — squeezing independent point-tool vendors on distribution rather than product quality.
- Security moves leftward into the software delivery lifecycle as standard practice: when the biggest platform vendor owns code-stage controls, 'shift-left' stops being a differentiator and becomes table stakes.
The trend: Palo Alto Networks is building its platform through a steady drumbeat of Israeli tuck-in acquisitions — security-as-code, DevOps pipelines, cloud data, enterprise browsers — pulling developer-stage security inside the platform suite.