Palo Alto Networks has announced that it has signed a definitive agreement to acquire Cider Security (Cider), who specialise in application security (AppSec) and software supply chain security.
The proposed acquisition supports Palo Alto Networks Prisma Cloud’s platform approach to securing the entire application security lifecycle from code to cloud.
Combined with its recently announced Software Composition Analysis (SCA) capabilities, Prisma Cloud will now provide the industry’s most comprehensive supply chain security solution as part of its code-to-cloud security platform.
The diversity, velocity, and dynamic nature of today’s software engineering ecosystem have introduced a wide array of new security challenges and gaps, which have made the software supply chain one of the biggest emerging attack vectors for cyber attackers.
The average CI/CD pipeline can have hundreds of developer tools connected to it, which poses an enormous security risk. While much attention has been put on where code comes from, very little has been placed on the applications and software used in the development pipeline.
Speaking about the acquisition, Lee Klarich – Chief Product Officer for Palo Alto Networks – said Cider have a hugely innovative solution that can help them really improve their output, which was a big contributing factor.
“Any organisation using public cloud has an application infrastructure with hundreds of tools and applications that can access their code and yet, they have limited visibility to their configuration or if they are secured,” Klarich said. “Cider has made it possible to connect into infrastructure, analyse the tools and identify the risks, as well as how to remediate them.
“We are acquiring Cider for their innovation that will help enable Prisma Cloud to provide this capability that anyone doing cloud operations has to have.”
Adding further comment, Guy Fletcher – CEO at Cider Security – believes that the fit is perfect for Cider and that there is perhaps no surprise the two have joined forces, given Palo Alto Networks’ innovation down the years.
“We designed an AppSec platform that allows engineering to continue to move fast, without making compromises on security,” Fletcher said. “It’s only fitting that we join Palo Alto Networks, a company built upon landmark cybersecurity ‘firsts’.
“There couldn’t be a better fit for Cider. By scanning and securing the CI/CD pipeline, we can help identify where there may be vulnerabilities in your code. Prisma Cloud will now be the ultimate solution for code to cloud security.”
Under the terms of the agreement, Palo Alto Networks will acquire Cider Security for approximately $195 million in cash, excluding the value of replacement equity awards, subject to adjustment.
The proposed acquisition is expected to close during Palo Alto Networks’ second quarter of fiscal 2023, subject to the satisfaction of customary closing conditions.