Palo Alto Networks is executing well on platformization, with strong ARR growth, rising recurring revenue, and robust free cash flow. The stock remains a Buy, but valuation is demanding and limits upside from here.
Palo Alto Networks(PANW) remains one of the strongest platform stories in cybersecurity, with the investment case resting on three hard facts. First, the business is still growing at scale, with fiscal 2025 revenue of $9.22B, up from $8.03B in fiscal 2024, and Q3 fiscal 2026 revenue of $3.00B, up 31% y/y. Second, the company is becoming more recurring and more cash generative, with fiscal 2025 subscription revenue of $4.97B, support revenue of $2.45B, and trailing 12-month adjusted free cash flow of $4.08B at a 38.5% margin in Q3 fiscal 2026. Third, management is using that scale to push a platformization strategy that is showing measurable traction, including $8.13B of Next-Generation Security ARR, up 60% y/y, 110 net new platformizations in Q3 fiscal 2026, and 120% net retention among platformized customers.
The bull case is straightforward. PANW is no longer just a firewall vendor with a good brand. It now spans network security, SASE, cloud security, security operations, AI security, identity, and observability. That breadth matters because cybersecurity budgets are moving toward consolidation and AI-driven defense. Gartner said enterprise spending on cybersecurity software and network security will grow 14% in 2025 to $118.5B, while PANW is already posting faster growth in key categories such as SASE, where management reported $1.6B of ARR in Q3 fiscal 2026 and called it the fastest-growing vendor at scale.
The catch is valuation. The stock carries a trailing P/E of 300.1, a forward P/E of 86.2, an EV/revenue multiple of 26.95, and a PEG ratio of 5.75. Those are premium numbers even for a high-quality cybersecurity leader. They leave little room for execution slips, integration trouble, or slower growth in acquired businesses. For a balanced, moderate-risk investor, that makes PANW a quality business with a less forgiving stock. The company earns a Buy rating, but only when the entry price offers a better margin of safety than the current premium implies.
Palo Alto Networks is a global cybersecurity company headquartered in Santa Clara, California. It was incorporated in 2005, went public on July 20, 2012, and employs 21,491 people. The company sells to enterprises, service providers, and government entities across the Americas, Europe, the Middle East, Africa, Asia Pacific, and Japan. Its products are delivered both directly and through channel partners.
The company’s structure reflects a broad security platform rather than a single-product vendor. Its portfolio covers network security through next-generation firewalls, SASE, and cloud-delivered security services; security operations through Cortex XSIAM, XDR, XSOAR, and Xpanse; cloud security through Cortex Cloud; AI security through Prisma AIRS; and threat intelligence and advisory services through Unit 42. The 2025 10-K describes this as a platformization strategy designed to consolidate point products into a tightly integrated architecture.
The revenue mix shows why investors treat PANW as a recurring software and services business with hardware roots rather than a hardware company with subscriptions attached. In fiscal 2025, total revenue was $9.22B, with Product at $1.80B or 19.5% of total revenue, Subscription at $4.97B or 53.9%, and Support at $2.45B or 26.5%. That means 80.5% of fiscal 2025 revenue came from subscription and support. Three years earlier, in fiscal 2023, Product was 22.9% of revenue. The mix is moving in the right direction.
Management is led by CEO and Chairman Nikesh Arora, President William Jenkins, founder emeritus Nir Zuk, CFO Dipak Golechha, and Chief Product Officer and CTO Lee Klarich. The strategic message from this team has been consistent: use product breadth, AI, and acquisitions to make PANW the cybersecurity partner of choice for large organizations that want fewer vendors and better integrated protection.
PANW reports revenue by Product, Subscription, and Support, but the operating story is better understood through platform lines. The first engine is network security, which includes hardware firewalls, software firewalls, SASE, and cloud-delivered security services. Management said network security is the company’s largest segment and accounts for about 70% of total revenue. In Q3 fiscal 2026, next-generation firewall bookings rose nearly 40% y/y, hardware delivered its best quarter in a decade, software firewall ARR rose 25%, and SASE ARR reached $1.6B.
The second engine is security operations. Cortex XSIAM is the flagship here, and management reported more than $600M in ARR in Q3 fiscal 2026, up 100% y/y, across 740 customers. That growth matters because security operations is one of the stickiest parts of enterprise security. Once a customer centralizes telemetry, workflows, and remediation on one platform, switching becomes painful. In plain English, this is where software stops being a tool and starts becoming the plumbing.
The third engine is AI security and cloud-adjacent security. Prisma AIRS reached more than 300 customers in Q3 fiscal 2026, up from 100 at the end of Q2, making it the fastest-growing product in company history according to management. The company also said it has clear visibility toward $100M in ARR within the next couple of quarters. That is still small relative to PANW’s total size, but the growth rate is the point. A product that did not exist a year earlier is already becoming a meaningful cross-sell wedge into enterprise AI deployments.
The fourth engine is support and advisory services, especially Unit 42. This business does more than add service revenue. It deepens customer relationships, feeds threat intelligence back into the product stack, and supports platform adoption. In security, consulting can be a margin drag if it stands alone. At PANW, it functions more like a sensor network for customer pain points and a sales bridge into larger platform commitments.
The segment mix over time also shows healthy evolution. Subscription revenue rose from $3.34B in fiscal 2023 to $4.19B in fiscal 2024 and $4.97B in fiscal 2025. Support revenue rose from $1.98B to $2.24B to $2.45B over the same period. Product revenue rose too, from $1.58B in fiscal 2023 to $1.80B in fiscal 2025, but at a slower pace than recurring lines. That is exactly what investors want to see in a maturing cybersecurity platform.
Get AI research on any stock
Instant reports, daily intelligence, and an AI analyst in your pocket.
The flagship product set is no longer a single SKU. PANW’s core franchise now rests on a stack of flagship platforms: next-generation firewalls in network security, Prisma Access in SASE, Cortex XSIAM in security operations, and Prisma AIRS in AI security. Each matters, but the most strategically important products today are XSIAM and Prisma AIRS because they sit closest to the AI and automation spending wave.
Cortex XSIAM stands out because it combines SIEM, XDR, SOAR, attack surface management, threat intelligence management, identity threat detection and response, and cloud detection and response into one platform. Management said the product reached more than $600M in ARR in Q3 fiscal 2026, up 100% y/y, with most customers now responding to threats in under 10 minutes. That is a sharp contrast to the days or weeks previously required, according to the company.
Prisma AIRS is the newer but more explosive product. The 2025 10-K describes it as a comprehensive AI security platform covering model scanning, posture management, red teaming, runtime security, and AI agent security. In Q3 fiscal 2026, management said Prisma AIRS had over 300 customers, tripling from Q2, and cited a record deal with a global consulting leader using the platform to secure AI apps and agents running more than 2T monthly tokens. That is a real commercial signal, not a lab demo.
The firewall franchise still matters because it remains the installed-base anchor. PANW said it has about 1M firewalls in the field and averages more than four subscriptions per device in its installed base. That subscription attach is the quiet strength of the model. Firewalls bring the customer in, subscriptions expand wallet share, and platformization raises switching costs. It is less glamorous than AI security headlines, but it is the engine room.
Prisma Access also deserves attention. SASE ARR reached $1.6B in Q3 fiscal 2026, and the investor presentation said SASE ARR grew 56% y/y. Even using the more conservative 40% figure cited on the call, this is still one of the fastest-growing large-scale businesses in the portfolio. Secure browser licenses reached 11M, up 4x, which reinforces PANW’s push to make the browser another enforcement point in enterprise security.
PANW’s competitive advantage rests on integration, telemetry scale, installed base, and cross-sell economics. The company’s 2025 10-K says its strategy is to simplify customer security architectures by consolidating disparate point products. That matters because enterprise buyers increasingly want fewer consoles, fewer agents, and fewer vendors promising perfect security from one narrow angle.
Management tied that strategy directly to AI-era security in Q3 fiscal 2026. The company said its global footprint now exceeds 125M sensors across network, endpoint, and cloud, ingesting over 17 petabytes of daily telemetry. In security, data is not just a byproduct. It is the fuel for detection quality, automation, and model performance. PANW’s argument is that a broader platform sees more, learns faster, and enforces policy closer to runtime.
That telemetry advantage is reinforced by platformized customers. PANW ended Q3 fiscal 2026 with roughly 2,280 total platformized customers, including recent acquisitions, and management said these customers show 120% net retention and single-digit churn. The investor presentation also said about 65% of NGS ARR came from platformized customers. That is a strong sign that the integrated model is not just a slide-deck slogan.
Innovation is also being accelerated through acquisitions. The 10-K highlighted Protect AI and the announced CyberArk deal, while management discussed Chronosphere, Portkey, and Koi in Q3 fiscal 2026 commentary. The strategic logic is clear: identity, observability, and AI gateway controls all fit the same platform thesis. The risk, of course, is that serial acquisitions can create integration drag. But so far management said CyberArk and Chronosphere are exceeding expectations in the first quarter post close and that synergy targets are being reached 3 to 6 months earlier than initially anticipated.
PANW also benefits from brand trust. The company said it is trusted by more than 70,000 organizations worldwide. In cybersecurity, trust is not a soft metric. It directly affects win rates, incident response engagement, and the willingness of CIOs and CISOs to standardize on a vendor. When a company is defending critical infrastructure, brand is less about marketing gloss and more about whether a board is comfortable signing the check.
PANW’s operating model is increasingly software-heavy, but supply chain execution still matters because hardware remains part of the network security franchise. Management said hardware is about 10% of total revenue today, down from 20% in fiscal 2021. That lower mix reduces exposure to component inflation and logistics issues compared with more hardware-centric peers.
In Q3 fiscal 2026, CFO Dipak Golechha said the company was closely monitoring rising component costs, especially memory and storage, but also noted that PANW has about 1M firewalls in the field and that its component volumes are not as significant as some peers. He added that vendors view PANW as a critical infrastructure provider and that the company is evaluating alternative supply sources and extending purchase commitments where needed.
That price increase is important because it shows pricing power. A company without product relevance cannot push through a 10% hardware increase while also reporting nearly 40% y/y growth in next-generation firewall bookings. PANW did both. That does not make it immune to margin pressure, but it does suggest the franchise has more elasticity than a commodity hardware vendor.
Operationally, the bigger story is integration discipline. Management said it identified more than 300 IT vendors to streamline and had already dispositioned about 20% of them. It also cited real estate rationalization across more than 40 new facilities from acquisitions, improved cloud hosting economics for CyberArk, and broader vendor optimization. Those are not glamorous items, but they are exactly the kind of details that separate a serial acquirer with a plan from one with a shopping habit.
The cash flow profile confirms that operations are scaling. In Q3 fiscal 2026, adjusted free cash flow was $910M, up 57% y/y. On a trailing 12-month basis, adjusted free cash flow was $4.08B, with a 38.5% margin, up 430 basis points y/y. That is elite territory for a company still investing heavily in growth and acquisitions.
PANW operates in one of the better parts of enterprise software: cybersecurity infrastructure. Gartner said enterprise spending on cybersecurity software and network security will grow 14% in 2025 to $118.5B, with securing GenAI, cloud adoption, and SASE as major growth drivers. That aligns almost perfectly with PANW’s portfolio, which spans network security, SASE, cloud security, security operations, and AI security.
The company is also positioned for the shift from reactive security to preemptive and automated defense. Gartner said preemptive cybersecurity could reach 50% of IT security spending by 2030, up from less than 5% in 2024. PANW’s messaging around XSIAM, AI-driven pre-analysis, and runtime protection fits that trend well. In other words, the market is moving toward the kind of architecture PANW is already selling, not away from it.
AI is expanding the market in two ways. First, it creates new attack surfaces around models, prompts, agents, and AI infrastructure. That supports products like Prisma AIRS. Second, it increases the volume and speed of machine-to-machine traffic, which supports firewalls, SASE, observability, and security operations. Management leaned heavily into this point in Q3 fiscal 2026, arguing that AI is a structural catalyst for deeper traffic inspection and faster automated defense.
The company’s long-term target reflects confidence in that market setup. PANW is targeting more than 4,000 platformizations and $20B in NGS ARR by fiscal 2030. That is ambitious, but it is not detached from current momentum. NGS ARR already reached $8.13B in Q3 fiscal 2026, up 60% y/y, while organic NGS ARR growth excluding CyberArk and Chronosphere was still 28%.
The market backdrop is favorable, but not frictionless. Cybersecurity remains crowded, and buyers still mix best-of-breed tools with platform vendors. PANW’s opportunity is large because the market is fragmented. The irony is that fragmentation is both the problem customers want solved and the reason competition never gets boring.
Like what you're reading?
Get full access to AI-powered research reports, market analysis, and portfolio tools.
PANW sells primarily to enterprises, service providers, and government entities across industries including education, energy, financial services, healthcare, manufacturing, telecommunications, and the public sector. The 10-K said no single end-customer accounted for more than 10% of total revenue in fiscal 2025, 2024, or 2023. That diversification reduces customer concentration risk.
The customer base skews toward large and complex organizations. The investor presentation said PANW had 67 customers with more than $10M in NGS ARR, up 49% y/y, and 195 customers with more than $5M in NGS ARR, up 51% y/y. Those are meaningful figures because they show expansion at the high end of the market, where platform adoption tends to be deepest and churn tends to be lowest.
PANW also has a broad route to market. The 10-K said the company had more than 8,500 channel partners as of July 31, 2025, and that 44.2% of fiscal 2025 revenue came from sales to three distributors. It also sells through cloud marketplaces including AWS, Azure, Google Cloud, and Oracle Cloud. That combination gives PANW reach, but it also means channel execution remains important.
Recent deal examples show the type of customer problems PANW is solving. In Q3 fiscal 2026, management cited an $80M transaction with a leading U.S. power producer that selected next-generation firewalls and SASE for more than 25,000 employees, a more than $20M Prisma AIRS deal with a global consulting leader securing AI apps and agents, and an observability expansion with a leading frontier AI lab that pushed ARR above $200M with that customer. These are not small pilot projects. They are architectural decisions.
PANW competes across several fronts. Its 2025 10-K names large platform vendors such as Cisco, Microsoft, and Alphabet; independent security vendors such as Check Point, Fortinet, CrowdStrike, Zscaler, and Wiz; startups and point-product vendors; and public cloud vendors. That means PANW is fighting on a wide battlefield, from firewalls and SASE to cloud security and security operations.
The company’s advantage is breadth plus integration. Fortinet and Check Point are strong in network security. CrowdStrike is strong in endpoint and security operations. Zscaler is strong in SASE and zero trust. Wiz is strong in cloud security. PANW’s pitch is that it can cover more of the attack surface under one architecture. That does not guarantee it wins every category, but it does improve its odds in large enterprise deals where consolidation matters.
Management also cited competitive traction in specific areas. In Q3 fiscal 2026, nearly 50 SASE displacement wins totaled $200M in contract value year-to-date. SASE ARR reached $1.6B, and the company said it remained the fastest-growing provider in the SASE market. XSIAM reached more than $600M in ARR, while observability ARR surpassed $300M. Those figures suggest PANW is not merely defending legacy turf. It is taking share in newer categories.
The risk is that PANW’s broad portfolio also exposes it to more competitive pressure than a single-category vendor. It has more ways to win, but also more ways to get undercut, bundled against, or out-innovated in a niche. Competition in cybersecurity has a habit of looking rational in analyst notes and irrational in live deals.
The macro backdrop for PANW is better than for many enterprise software names because cybersecurity spending tends to be more resilient than discretionary IT projects. The company’s Q3 fiscal 2026 results showed broad-based geographic growth, with the Americas up 32% y/y, EMEA up 32%, and JPAC up 26%. That kind of consistency suggests demand is not tied to one region or one spending pocket.
Geopolitically, the threat environment remains a tailwind for cybersecurity demand. PANW’s Unit 42 research has highlighted AI-assisted attacks, cloud and software supply-chain attacks, and faster disruption-driven extortion. Management said Unit 42 simulated a campaign from initial entry to data exfiltration in just 25 minutes, while the typical enterprise still requires days to identify a breach. That speed gap is the kind of fact that keeps security budgets alive even when CFOs get stingy elsewhere.
Regulation also supports demand. The 10-K notes that PANW is subject to numerous U.S. and foreign laws and regulations, while broader market context points to rising emphasis on secure software development, AI governance, and interoperability. For PANW, these trends generally support spending on identity, cloud security, runtime defense, and policy enforcement. Regulation rarely feels like a gift when you are the one filing the paperwork, but it often helps the vendors selling the tools required to comply.
The main macro risk is not demand collapse. It is valuation sensitivity. Premium software stocks can sell off sharply when rates rise, when growth decelerates, or when integration costs muddy the margin story. PANW’s business is resilient. The stock multiple is less so.
PANW earns an A for balance sheet health, reflecting a financial profile strong enough to support continued platform investment and acquisitions.
Unlock the full analysis
Premium members get the complete breakdown — pick rationale, financial metrics, and recent earnings detail.
Get Full Access →Fiscal 2025 revenue reached $9.22B, with subscription and support making up 80.5% of sales as the business shifts deeper into recurring revenue.
Unlock the full analysis
Premium members get the complete breakdown — pick rationale, financial metrics, and recent earnings detail.
Get Full Access →Q3 fiscal 2026 revenue rose 31% year over year to $3.00B, while Next-Generation Security ARR climbed 60% to $8.13B.
Unlock the full analysis
Premium members get the complete breakdown — pick rationale, financial metrics, and recent earnings detail.
Get Full Access →PANW trades at 300.1x trailing earnings, 86.2x forward earnings, and 26.95x EV/revenue, leaving the shares priced for near-perfect execution.
Unlock the full analysis
Premium members get the complete breakdown — pick rationale, financial metrics, and recent earnings detail.
Get Full Access →The report’s fair value sits at $290, which supports a Buy rating but still implies the stock needs a better entry point for a wider margin of safety.
Unlock the full analysis
Premium members get the complete breakdown — pick rationale, financial metrics, and recent earnings detail.
Get Full Access →Palo Alto Networks is one of the rare software companies that can credibly claim both breadth and momentum. Fiscal 2025 revenue reached $9.22B. Q3 fiscal 2026 revenue reached $3.00B, up 31% y/y. NGS ARR hit $8.13B, up 60% y/y. Trailing adjusted free cash flow reached $4.08B at a 38.5% margin. Those are the numbers of a company with real operating strength, not just a fashionable narrative.
The strategic case is equally strong. PANW has built a platform that spans firewalls, SASE, cloud security, security operations, AI security, identity, and observability. It has more than 70,000 organizations as customers, over 125M sensors feeding telemetry into the platform, and a growing base of platformized customers with 120% net retention. In a market moving toward consolidation and AI-driven defense, that is a powerful position.
The only real problem is the one investors often prefer to ignore when a company is executing well: price. PANW is not a broken story that needs fixing. It is a strong story that needs valuation discipline. For a medium-term investor, that supports a Buy rating with patience on entry points and a fair value estimate of $290.
Get AI-powered research reports, daily market intelligence, and a personal analyst in your pocket.
Get Full Access →Not ready to subscribe? ·
Palo Alto Networks, Inc. (PANW) drops after a sharp post-earnings reversal, even as the company raised full-year guidance and analysts lifted price targets. The move looks driven more by valuation and profit-taking than by weak fundamentals, with investors reacting to a rich multiple after a strong report.
Palo Alto Networks is scaling revenue, margins, and next-gen ARR while expanding its security platform into identity and observability. The stock is expensive, but the report still rates PANW a Buy with fair value at $205.
Palo Alto Networks, Inc. (PANW) rises after BTIG lifted its price target and added the cybersecurity leader to its Top Picks list. The move comes as software and security stocks benefit from an AI-driven tech rally, reinforcing PANW’s status as a premium platform name.