Sources: Palo Alto Networks to buy Cider Security, which helps enterprises identify security risks in DevOps pipelines, for $200M in cash and $100M in shares
The startup, which develops an AppSec operating system, will receive $200 million in cash and $100 million in Palo Alto stock
Context & Ripple Effects
Cider Security's exit comes fast: the Tel Aviv startup raised a $32M Series A led by Tiger Global only months before this deal, and is now reportedly selling for $300M in cash-and-stock to Palo Alto Networks. The buyer is executing a deliberate build-out of the software-delivery security layer rather than a one-off purchase.
The pattern is well established in the related coverage: Palo Alto bought BridgeCrew for security-as-code in early 2021 (its first step into pipeline security), negotiated for Talon Cyber Security alongside Dig Security, then closed on Dig Security's cloud data-protection business weeks before this report. Cider's AppSec operating system slots directly between those acquisitions.
First-order effects
- Cider Security's investors get a roughly tenfold return on the Series A within the year, while Palo Alto gains an AppSec control point over enterprise DevOps pipelines it previously had to integrate with as a third party.
- Tiger Global-backed and Tel Aviv-based security founders now have a fresh comp: a sub-two-year path from $32M raised to a $300M exit.
Second-order effects
- Rival platform vendors competing for the same enterprise security budget face a Palo Alto that can bundle pipeline scanning (Cider), security-as-code (BridgeCrew), and cloud data protection (Dig) into one contract, pressuring standalone AppSec tools on price.
- Other DevOps-security startups in Israel become more expensive targets as acquirers race to complete equivalent stacks, raising valuations across the category.
Third-order effects
- If the serial-acquisition pattern holds, DevSecOps consolidates from best-of-breed point products into platform suites owned by a few large vendors, shifting buying decisions from tool-by-tool selection to single-vendor platform commitments.
- Tel Aviv cements its role as the R&D arm of US platform-security consolidation, with local startups increasingly built for exit rather than independence.
The trend: Platform security vendors are assembling end-to-end software-delivery control through rapid-fire Israeli acquisitions, compressing the time from startup funding round to strategic exit.