Ask most people what International Business Machines (IBM) does, and you’ll hear about mainframes, consulting and business software. A few might mention the Watson computer that won on Jeopardy in 2011.
Cybersecurity rarely comes up, and IBM’s own moves help explain why.
In 2024, it sold its QRadar cloud security assets to Palo Alto Networks (PANW), which paid $500 million in cash at closing, according to Palo Alto’s annual report.
The same filing valued the whole deal at about $1.1 billion, counting future payments tied to customers.
But IBM never walked away from security entirely. On Thursday, November 12, 2026, IBM said it was acquiring AuthMind, a young identity security firm, and adding its technology to HashiCorp Vault. It didn’t disclose a price.
Also read: IBM spent $11 billion on growth as its own software stalls
That raises a new question for investors. IBM sold one piece of its security business two years ago, and now it’s paying to expand into a newer one: protecting AI agents. Investors have to judge whether this is a one-off fix or a quiet rebuild.
What AuthMind actually does
Think about leaving a spare key with a house sitter. Handing over the key is easy. Knowing what happens once they’re inside is harder.
AuthMind works on that second problem. Vault already hands out digital keys, such as passwords and access tokens, to software that needs them. AuthMind’s technology shows how those credentials get used after they leave Vault, according to IBM.
The timing comes down to AI agents, software bots that complete tasks on their own. IBM said these agents work nonstop, connect to many systems, and can pass work to other agents, often without a human approving each step.
AuthMind’s tools watch network traffic to find “shadow agents,” bots operating outside a company’s security rules, the company said.
IBM isn’t buying a stranger. Its venture arm backed AuthMind’s seed round in 2023, and IBM already worked with the startup through its Identity Protection product, according to the same announcement. IBM test-drove this car for years before buying it.
IBM is taking the cheaper route
Seen side by side, IBM’s two deals tell one story. QRadar pulled security alerts from across a company’s systems, and IBM let it go. Vault, which IBM owns through HashiCorp, guards the keys, and AuthMind adds a camera pointed at whoever uses them.
Rivals have written far bigger checks. Palo Alto agreed in 2025 to pay $25 billion for identity security firm CyberArk, according to CNBC.
Wall Street didn’t cheer at first. Palo Alto shares fell 16% in the days after news of the deal leaked, CNBC reported. Big checks invite big doubts.
More IBM:
- IBM’s ‘true ROI’ comment hits shares, exposing ETF risks
- IBM, Amazon quantum pricing gets a challenger in Postquant Labs
- After a brutal slide, IBM sells smaller firms an ‘AI-ready’ core
The same report named IBM’s HashiCorp among the identity rivals Palo Alto would face, along with Okta (OKTA) and Microsoft (MSFT). IBM was in this race before AuthMind.
IBM’s version is narrower. Instead of a full identity platform, it’s buying the piece that watches behavior and plugging it into a product companies already use.
A startup that raised seed money in 2023 is unlikely to cost anything near CyberArk.
What it means for IBM stock
Investors shrugged, at least at first. IBM shares were little changed in premarket trading after the news, according to Seeking Alpha. A deal this small is unlikely to move earnings soon.
The bigger issue is how investors see IBM: a legacy company working to show it belongs in the AI era, not just the mainframe era.
Wall Street has paid up for pure security names, and CrowdStrike (CRWD) had topped $100 billion in market value by mid-2025, according to CNBC.
So the deal may matter more than its size. If AI agents spread the way IBM is betting, every bot will need a key, and every key will need watching. Owning both the key cabinet and the camera could make IBM harder to replace inside large companies.
Open questions remain:
- The price is unknown. Investors can’t judge whether IBM paid sensibly.
- No launch date was given. IBM gave no availability date, so revenue impact is hard to model.
- The field is crowded. IBM faces Okta, Microsoft and a Palo Alto that now owns CyberArk.
Security is following the bots
For decades, cybersecurity meant guarding the front door with firewalls and passwords. AI agents move the risk inside the house, where software keeps acting long after the door closes.
Customers are tired of juggling tools. A January 2025 report by IBM and Palo Alto found that the average organization uses 83 security products from 29 companies, according to CNBC. That fatigue favors vendors who build security into tools companies already use, which is IBM’s bet with Vault.
IBM once took Palo Alto’s money to step back from part of the security business. Whether that quiet purchase becomes a real growth line is what to watch in its next few earnings reports.
