Palo Alto Networks, Inc. (PANW) Business Profile

What it does

Palo Alto Networks is a global AI cybersecurity provider founded in 2005 and headquartered in Santa Clara, California. Nikesh Arora is chief executive officer.

The company sells software, hardware, cloud services and advisory services that protect an organization’s users, networks, cloud systems, devices, applications, AI systems and identities. Its strategy is to replace separate security tools with integrated platforms that share data, security policies and automation.

Network & AI Security covers secure access for remote users and branches, firewalls for on-premises and cloud networks, cloud-delivered threat prevention and data protection, and Prisma AIRS for protecting AI applications, models and agents. Strata Cloud Manager is the management layer for firewall and secure-access deployments.

Cortex is the company’s security-operations, cloud-security and observability platform. It combines data from endpoints, networks, identities and cloud systems to detect, investigate and respond to threats, while Chronosphere monitors cloud-native infrastructure, applications and AI workloads. Idira is its identity-security platform, covering workforce access, privileged access, machine identities and identity governance. Unit 42 provides threat intelligence, incident response, managed detection and response, consulting and testing services.

The company serves enterprises, service providers and government entities that need to secure their technology environments and respond to cyber threats.

How it makes money

Palo Alto Networks earns revenue from product sales, subscriptions and support. Product revenue comes mainly from hardware firewalls and software licenses, including SD-WAN, VM-Series virtual firewalls and Panorama; it also includes certain on-premises identity-security licenses. Subscription revenue provides cloud-delivered security capabilities across networks, endpoints and cloud environments, including security operations, cloud security, observability and identity security. Support revenue covers security updates, software upgrades, bug fixes, repairs and service levels for firewall and cloud customers.

The company reported FY2026 revenue of $11.5 billion; fourth-quarter revenue was $3.41 billion. Subscription revenue was $6.2 billion in FY2026, support revenue was $3.0 billion, and product revenue was $2.3 billion. Subscriptions and support together represented 80.1% of FY2026 revenue.

Customers commonly buy support when purchasing physical, virtual or container firewalls, and can buy other subscriptions per user, endpoint or capacity. Support terms are typically one year or longer and are typically renewed for successive one-year or longer periods. The company also sells professional services, such as incident response, risk management, digital forensics and technical account management.

Most sales use a two-tier indirect model: Palo Alto Networks sells to distributors, distributors sell to resellers, and resellers sell to end customers. The company also sells VM-Series and Cloud NGFW through AWS, Azure, Google Cloud and Oracle Cloud marketplaces, either directly or through the cloud provider’s usage-based offering. In fiscal 2027, the company expects revenue of $14.1 billion to $14.2 billion.

Customers and how it sells

Palo Alto Networks sells to enterprises, service providers and government entities in industries including education, energy, financial services, healthcare, manufacturing, telecommunications, Internet and media, and the public sector. It had end customers in more than 180 countries as of July 31, 2026, including almost all Fortune 100 companies and a majority of Global 2000 companies. No single end customer accounted for more than 10% of revenue in fiscal 2026, 2025 or 2024.

The United States generated $7.1 billion, or 61.9%, of FY2026 revenue. EMEA, APAC and Other Americas accounted for the remaining geographic revenue; Other Americas generated $571.0 million, or 4.97%.

Distribution is predominantly indirect. The company had more than 8,700 channel partners as of July 31, 2026, including distributors, resellers, systems integrators, service providers, managed security service providers and cloud hosting providers. Two distributors together accounted for 30% of total FY2026 revenue, creating distribution concentration even though end-customer concentration was limited.

Suppliers and costs

The company sells hardware firewalls alongside software and cloud services. It depends on manufacturing partners and limited sources of supply for hardware products, which can expose it to manufacturing delays, supply shortages, component-price changes and international trade risks.

Hardware represented approximately 10% of total company revenue in fiscal 2026. The company uses strategic supplier relationships and selective pricing actions to manage component costs, particularly for memory and storage. It expects those commodity costs to persist in the hardware business.

The revenue mix is moving toward cloud and SaaS offerings. The company expects cloud-hosting costs to grow faster than total revenue in fiscal 2027 as this mix becomes a larger part of the business. It also uses a third-party logistics provider for worldwide deployment of service-related spare hardware.

Competitive position

Palo Alto Networks operates in enterprise security and observability markets characterized by changing threats, technologies and customer requirements. In security, named competitors include Alphabet, Cisco, Microsoft, Check Point Software Technologies, CrowdStrike, Delinea, Fortinet, Okta, SailPoint and Zscaler. In observability, named competitors include DataDog, Dynatrace and Elasticsearch. It also competes with startups, point-product vendors, public-cloud vendors and potential security vendors acquired by larger companies.

Competition covers firewall and network security, secure access, endpoint and security operations, cloud security, identity security and observability. Competitive factors include features, reliability, effectiveness, integration, breadth of product line, price and total cost of ownership, standards, sales reach and brand reputation. Some rivals have greater financial and technical resources, larger sales and marketing budgets, broader distribution, more diversified products and more mature intellectual-property portfolios.

Our reading: An integrated portfolio is a meaningful moat because the company combines network security, security operations, cloud security, observability and identity security on shared platforms; it depends on customers choosing to consolidate tools and deploy them together. (item1; item7)

Our reading: Its channel reach is a supporting moat, with more than 8,700 partners, but larger vendors can have broader distribution and budgets. (item1)

Our reading: Scale in data and operations is a supporting moat where integrated telemetry can reduce deployment friction, but specialized security and observability vendors remain direct alternatives. (item1; call_prepared)

Growth opportunities

Palo Alto Networks’ growth plan centers on platformization: selling more integrated network and AI security, Cortex and Idira capabilities to customers that otherwise use separate tools. The company expects AI adoption to create more infrastructure, data, machine identities and security requirements across networks, clouds, endpoints and AI applications.

Within network security, the company reported FY2026 SASE bookings growth of 40% and said it displaced legacy SASE incumbents in nearly 100 accounts representing more than $400 million in total contract value. Prisma AIRS surpassed $100 million in ARR within four quarters of general availability and had more than 800 customers. XSIAM ended FY2026 with more than $700 million in ARR and more than 1,000 customers. Observability ARR surpassed $500 million after more than doubling since the Chronosphere acquisition closed.

The company sizes its total addressable market at $340.0 billion by 2030. It targets platformizations and $20 billion in next-generation security ARR by fiscal 2030. For fiscal 2027, it expects revenue of $14.1 billion to $14.2 billion, Cortex revenue growth of approximately 30%, and Idira revenue of approximately $1.5 billion.

Structural risks

• Competition and product adoption. The enterprise-security industry is intensely competitive, and the company must sell new and additional products, subscriptions and support to existing customers while attracting new customers, particularly large enterprises.

• Product, subscription and update failures. Problems in products, subscriptions, migrations or updates, whether actual or perceived, can lead to customer or channel-partner losses, delayed revenue, warranty costs, litigation, regulatory inquiries and reputational harm.

• Hardware supply chain exposure. Dependence on manufacturing partners and limited hardware supply sources creates exposure to manufacturing delays, shortages, pricing changes and international trade risks that can prevent timely customer shipments.

• Cloud and hardware costs. The company expects cloud-hosting costs to grow faster than revenue in fiscal 2027 as cloud and SaaS become a larger mix of revenue, and expects higher memory and storage costs in its hardware business.

• Integration and execution. The company has completed major acquisitions and must integrate their technologies, teams and go-to-market activities while managing growth, systems, processes and controls.

• Regulatory, privacy and geopolitical exposure. Compliance with U.S. and foreign laws may increase operating costs or affect competitiveness; international operations also face political, economic, social and conflict-related uncertainty.

Bottom line

Our reading

Our reading: Palo Alto Networks is a cybersecurity platform company whose revenue combines hardware with a larger base of subscriptions and support, sold mainly through an indirect channel. Its business rests on customers consolidating network, cloud, security-operations, observability and identity tools onto its platforms. (item1; item7)

Our reading: The main operating trade-off is that cloud and SaaS expansion supports recurring revenue but is expected to make cloud-hosting costs grow faster than revenue, while hardware retains supply-chain and commodity-cost exposure. Competition spans larger technology vendors and specialized security and observability providers. (call_prepared; item1; item1a)