BREAKING Palo Alto Networks Q3 FY2026 revenue up 31% to ~$3.0B
●
NGS ARR surpasses $8.13B, up ~60% year over year
●
M&A CyberArk acquisition adds identity security pillar
●
REACH ~70,000 organizations across 150+ countries
●
GUIDANCE FY2026 revenue outlook raised to ~$11.4B
●
RATING PANW upgraded to Overweight, target lifted to $421
●
BREAKING Palo Alto Networks Q3 FY2026 revenue up 31% to ~$3.0B
●
NGS ARR surpasses $8.13B, up ~60% year over year
●
M&A CyberArk acquisition adds identity security pillar
●
REACH ~70,000 organizations across 150+ countries
●
GUIDANCE FY2026 revenue outlook raised to ~$11.4B
●
RATING PANW upgraded to Overweight, target lifted to $421
●
The Dossier
What Palo Alto Networks Actually Does
Palo Alto Networks is, at its simplest, a company that sells trust to people who cannot afford to be breached. It builds the technology that sits between an organization and the internet, watching what moves in and out, and deciding what to allow. What began as a single product - a smarter firewall - has grown into a broad security platform that reaches into corporate data centers, public clouds, employee laptops and, increasingly, the digital identities that tie all of it together.
The company was founded in 2005 by Nir Zuk, an engineer who had already spent years inside the firewall industry at Check Point and NetScreen. His conviction was blunt: the firewalls of the mid-2000s were obsolete. They sorted traffic by ports and protocols, a scheme that made sense when the internet was simpler, but was useless against a web where thousands of applications tunneled through the same handful of open ports. Zuk's answer was a firewall that could identify the actual application, the user behind it, and the content passing through - and then apply policy to that. He called the result the next-generation firewall, and it created a category.
"The firewall you knew was blind to the thing it most needed to see - the application. That blindness was the whole opportunity."
Nearly two decades later, the ambition is larger. Under chairman and CEO Nikesh Arora, who arrived from SoftBank in 2018, Palo Alto Networks has pursued a strategy it calls "platformization" - the unglamorous but consequential work of stitching dozens of security functions into a smaller number of unified platforms. The pitch to customers is a promise of subtraction: replace a sprawl of disconnected point tools, each with its own console and blind spots, with an integrated system that shares data and gets smarter as a whole.
The Portfolio
Three Platforms, One Idea
The product line is organized around three pillars - network security, cloud security and security operations - with identity added most recently through the CyberArk acquisition.
Strata · NetworkNext-Generation Firewalls
The founding product line: hardware, virtual and cloud-delivered firewalls that classify traffic by application, user and content, layered with cloud-delivered security services.
Prisma · CloudPrisma Cloud
A cloud-native application protection platform securing applications from code to runtime across multi-cloud environments.
Prisma · AccessPrisma SASE
Secure Access Service Edge that combines cloud-delivered networking and zero-trust security for a hybrid, distributed workforce.
Cortex · SecOpsCortex XDR & XSIAM
Extended detection and response plus an AI-driven security operations platform built to modernize - and largely automate - the SOC.
Cortex · ExposureXSOAR & Xpanse
Security orchestration and automation (XSOAR) alongside attack surface management (Xpanse) for proactive exposure reduction.
Unit 42 · IntelUnit 42 & Identity
Threat intelligence and incident response consulting, now paired with privileged access and identity security from CyberArk.
Details That Amuse and Inform
- Founder Nir Zuk built his career at two firewall companies - Check Point and NetScreen - then set out to make their products obsolete.
- The company is named for the city of Palo Alto, but is actually headquartered in neighboring Santa Clara.
- Its threat-intel team is called Unit 42, a nod to "42" as the answer to everything in The Hitchhiker's Guide to the Galaxy.
- The first product did not ship until 2007 - two years after founding.
- More than two dozen acquisitions have been folded into the platform, making M&A a core part of product strategy.
By The Numbers
A Business That Kept Compounding
Annual Revenue Trajectory
Approximate figures · fiscal years · USD billions · FY2026 = company guidance
* FY2026 figure reflects raised company guidance and includes contributions from recent acquisitions. Figures are approximate and rounded.
The growth is not just top-line. Next-Generation Security ARR - the recurring software revenue that Palo Alto Networks watches most closely - surpassed $8.13 billion in FY2026, up roughly 60% year over year, a sign that the shift from selling boxes to selling subscriptions has taken hold.
The Competition
How It Stands Apart
Cybersecurity is a crowded, well-funded market, and Palo Alto Networks has capable rivals in every category it enters. What distinguishes it is breadth: few competitors span network, cloud, endpoint and identity under a single management plane. That integration is the company's core argument - and also the crux of the debate about it.
| Rival | Strength | Where They Compete |
|---|
| CrowdStrike | Endpoint / XDR leadership, fast innovation | Cortex, Prisma Cloud |
| Zscaler | Cloud-native zero-trust access | Prisma SASE |
| Fortinet | Price-performance, custom ASIC firewalls | Strata firewalls, SASE |
| Wiz | Cloud-native security, rapid adoption | Prisma Cloud |
| Microsoft | Bundled security across its cloud estate | Cortex, identity, cloud |
The strategic tension is real. Rivals like CrowdStrike market flexibility - swap modules without renegotiating - as an alternative to what they frame as Palo Alto's all-in suite. Palo Alto counters that deep integration, not loose coupling, is what closes the gaps attackers exploit. Both arguments have merit, and the market has been large enough to reward more than one of them.
"Complexity is a tax the defender pays and the attacker collects. The whole platform thesis is an argument about who should pay it."
