---

ticker: PANW step: 01 generated: 2026-05-12 source: quick-research

Palo Alto Networks, Inc. (PANW) — Business Overview

Business Description

Palo Alto Networks is the world's largest pure-play cybersecurity company by revenue, providing integrated security across network, cloud, and security operations. CEO Nikesh Arora (since 2018, former SoftBank president + Google CBO) has executed the multi-year "platformization" strategy: consolidating customer security spend onto PANW's three integrated platforms (Strata for network, Prisma for cloud, Cortex for security operations). The pending CyberArk acquisition would extend the consolidation strategy into identity security. Arora bought $10M PANW stock March 2026 — strong CEO confidence signal.

Revenue Model

• Next-Generation Security (NGS) ARR — strategic focus: $6.33B as of Q2 FY26 (+33% YoY)
• Product revenue (~25% of total): Firewalls (Strata)
• Subscription & Support revenue (~75%): Recurring cloud-delivered security across all three platforms

Products & Services

Strata (Network Security)

• Next-Generation Firewalls (NGFW): Hardware (PA-Series) + virtual (VM-Series) + cloud (Cloud NGFW)
• Prisma SASE: Secure Access Service Edge (SD-WAN + cloud security)
• Prisma Access: Cloud-delivered ZTNA
• AIOps for NGFW: Network security automation

Prisma (Cloud Security)

• Prisma Cloud: CNAPP — Cloud Native Application Protection Platform (code-to-cloud)
• Cortex Cloud (new 2025): Real-time cloud security integrating Prisma Cloud + Cortex XDR
• Container security, IaC scanning, cloud workload protection

Cortex (Security Operations)

• Cortex XSIAM: AI-driven SIEM + SOAR + XDR — replacing legacy SIEM (Splunk, etc.)
• Cortex XDR: Extended detection + response
• Cortex Xpanse: Attack surface management
• Cortex AutoFocus: Threat intelligence
• Mythos response: Anthropic AI security partnership announced 2026

Pending: CyberArk acquisition

• Identity security platform extension
• Privileged access management (PAM)

Customer Base & Go-to-Market

• Enterprise customers: ~85,000+ globally
• Platform customers (using 2+ products): ~1,550 (+35% YoY)
• Platform net retention rate: ~119%
• Platform churn: Low single-digit
• Government: Federal + state + local strong
• Geographic mix: ~70% Americas, ~20% EMEA, ~10% APAC
• Channel: Channel partners + direct enterprise sales

Competitive Position

Palo Alto Networks is the largest pure-play cybersecurity vendor by revenue (~$10B+ run rate). Competitors: CrowdStrike (endpoint + cloud, similar size + growth), Fortinet (firewall, smaller deals), Zscaler (SASE/SSE), Cisco (Splunk + integrated networking), Microsoft Defender (bundled with M365), SentinelOne (endpoint AI). Moats: (1) integrated platform = lowest TCO + consolidation, (2) Cortex XSIAM growth taking SIEM share from Splunk (Cisco-owned), (3) network firewall dominance, (4) Prisma Cloud + Cortex Cloud differentiation. Bears worry about AI-native disruptors (Anthropic Mythos AI security report drove March 2026 selloff).

Key Facts

• Founded: 2005 (Nir Zuk)
• Headquarters: Santa Clara, CA
• Employees: ~16,000
• Exchange: NASDAQ
• Sector / Industry: Technology / Application Software (Security)
• Market Cap: ~$110B (May 2026)
• CEO: Nikesh Arora (since 2018)
• No dividend
• FY end: July
• Major pending M&A: CyberArk (proposed transaction)

---

ticker: PANW step: 04 generated: 2026-05-12 source: quick-research

Palo Alto Networks, Inc. (PANW) — Financial Snapshot

Note: PANW's fiscal year ends in late July. "FY2025" = fiscal year ended July 2025.

Income Statement Summary

Metric	FY2023	FY2024	FY2025	YoY
Total Revenue	$6.9B	$8.0B	$9.22B	+15%
NGS ARR (year-end)	$3.5B	$4.5B	$5.58B	+24%
Non-GAAP Operating Margin	25%	27%	28%	+1pp
Non-GAAP EPS	$4.44	$5.45	$6.65	+22%
Free Cash Flow	$2.8B	$3.1B	$3.4B	+10%

Q1 FY2026 Highlights

Metric	Q1 FY26	YoY
Revenue	$2.5B	+16%
NGS ARR	$5.9B	+29%
RPO	$15.5B	+24%

Q2 FY2026 Highlights

Metric	Q2 FY26	YoY
Revenue	$2.59B	+15%
NGS ARR	$6.33B	+33% (beat $6.11-6.14B guide)
RPO	$16.0B	+23%
Non-GAAP EPS	$1.03	+27%
Net new platform customers	~110
Total platform customers	~1,550
Q2 new platformizations	~75 (vs 45 prior year)

NGS ARR Trajectory

Period	NGS ARR	YoY Growth
FY24 exit	$4.5B	+43%
FY25 exit	$5.58B	+24%
Q1 FY26	$5.9B	+29%
Q2 FY26	$6.33B	+33% (accelerating)
FY26 guide	$8.52-8.62B	+53-54%

Platform Strategy Metrics

Metric	Value
Total platformized customers	1,550 (+35% YoY)
Net retention rate (platform)	~119%
Platform churn	Low single-digit
New platformizations Q2 FY26	75

Cash Flow & Balance Sheet (FY2025)

Metric	Value
Operating Cash Flow	~$3.5B
Capital Expenditures	~$0.1B
Free Cash Flow	$3.4B (37% FCF margin)
Cash & Investments	~$9B
Total Debt	~$0 (debt-free)
Net Cash Position	~$9B (pre-CyberArk)

Key Ratios (approximate, May 2026)

• P/E (forward): ~44x | EV/Sales: ~11.7x | FCF Yield: ~3%
• Net Cash Position: ~$9B (pre-CyberArk close)
• Rule of 40: ~50 (15% growth + 37% FCF margin)

Growth Profile

NGS ARR accelerating: +24% (FY25) → +29% (Q1 FY26) → +33% (Q2 FY26). FY26 NGS ARR guide $8.52-8.62B = +53-54%. Platform consolidation working — 35% growth in platformized customers + 119% net retention. Free cash flow margin 37%. CEO Nikesh Arora insider buy of $10M March 2026 = strong confidence signal.

Forward Estimates

• FY2026E Revenue: ~$10.7B (+16%)
• FY2026E NGS ARR: $8.52-8.62B (mgmt; +53%+)
• FY2026E Non-GAAP EPS: ~$7.65
• FY2027E Revenue: ~$12.5B
• FY2027E EPS: ~$9 (+18%)
• Long-term Rule of 40 target: 50+

Capital Return

• No dividend
• Buybacks moderated for CyberArk acquisition
• Net cash $9B provides flexibility

---

ticker: PANW step: 12 generated: 2026-05-12 source: quick-research

Palo Alto Networks, Inc. (PANW) — Investment Catalysts & Risks

Bull Case Drivers

1. NGS ARR accelerating to $8.52-8.62B FY26 guide (+53-54%) — NGS ARR trajectory: $4.5B (FY24) → $5.58B (FY25) → $6.33B (Q2 FY26) → $8.5B target (FY26 exit). Q2 +33% YoY accelerating from +29% in Q1. Management raised full-year NGS ARR guide. Platform deals adding 35% YoY in customer count + 119% net retention.

2. Platformization strategy validated by data — Total platformized customers at 1,550 (+35%); ~75 new platformizations per quarter (vs 45 prior year). Net retention rate ~119% — customers expanding spend. Low single-digit churn. Bears who criticized free trials in 2024 are quiet now as ARR + revenue accelerate together.

3. CEO Arora $10M insider buy March 2026 — Nikesh Arora purchased $10M PANW stock March 31, 2026 at ~$147 average. Sent stock +5% next day. Strong confidence signal during AI-disruption noise. Arora has been the chief architect of platformization — his personal capital backing the strategy is a meaningful signal.

4. CyberArk acquisition extends to identity security — Proposed CyberArk transaction aligns with consolidation strategy. Identity security (privileged access management) is the fastest-growing security category and complements PANW's network + cloud + SOC platforms. Creates a "Super Platform" across all four security domains.

Bear Case Risks

1. AI-native security disruption — Anthropic Mythos report — In March 2026, Fortune reported on "Mythos" — an Anthropic AI model demonstrating advanced autonomous cybersecurity capabilities. Drove ~10% PANW stock decline as investors worried AI-native competitors could disintermediate traditional security vendors. CrowdStrike + Okta + Netskope also sold off on same theme.

2. 44x forward P/E + 11.7x EV/Sales — premium valuation — Stock trades at ~44x forward earnings — premium to security peers + broader software. PEG ratio elevated. Bears argue valuation has fully priced platformization success + leaves no margin for execution slips. Stock has been volatile in 2026 (March selloff, March CEO buy bounce, ongoing).

3. CrowdStrike + SentinelOne competitive intensity — CrowdStrike (similar size, faster organic growth) is direct competitor across XDR + cloud + SIEM. SentinelOne pricing aggressive in endpoint. Microsoft Defender bundled with M365 = price-competitive baseline. Zscaler in SASE. PANW's platformization advantage requires customer to commit to multiple modules.

4. CyberArk integration risk — CyberArk close + integration introduces execution risk. Large deals (PANW has done many smaller M&A) have integration complexity. If platformization is the brand and core thesis, any CyberArk integration setbacks would meaningfully impair narrative.

Upcoming Events

• Q3 FY26 earnings (May 2026) — NGS ARR trajectory; platformization milestones
• Q4 FY26 earnings (August 2026) — FY27 outlook; CyberArk integration plan
• CyberArk close (TBD 2026) — Major integration milestone
• Cortex XSIAM ramp — Replacing Splunk SIEM in enterprise accounts
• RSA Conference May 2026 — Industry showcase

Analyst Sentiment

Sell-side consensus is Strong Buy — 38 of 52 analysts rate Strong Buy. Average price targets in the $200-220 range vs. recent ~$160 trading levels (~25-38% upside). Bulls cite NGS ARR acceleration + platformization + Arora insider buy + CyberArk consolidation. Bears focus on AI disruption + 44x P/E + integration risk. Stock has been a beta-name through 2026.

Research Date

Generated: 2026-05-12