Palo Alto Networks began in 2005 with one idea: a firewall should decide by application, user and content, not by port. Its next-generation firewalls, as hardware for offices and data centers and as software for clouds and Kubernetes, still anchor the business, and every one runs PAN-OS. Customers then subscribe to the cloud services that do the inspection (Advanced Threat Prevention, WildFire, URL and DNS security, data loss prevention), so the box is the start of a recurring relationship.

Over the last decade the company has bought and built its way into most of a customer's security, an approach it calls platformization. It now sells four groups of products:

• Network & AI Security: the firewalls, Prisma SASE (the same security delivered from its own cloud to remote users and branches, replacing VPNs and web proxies), Prisma Browser, and Prisma AIRS for AI apps and agents.
• Cortex: Cortex XSIAM, which replaces a SOC's SIEM, endpoint and automation tools with one data platform; Cortex XDR on the endpoint; Cortex Cloud, the successor to Prisma Cloud; and Chronosphere observability, bought in January 2026.
• Idira: identity security from the CyberArk acquisition, completed in February 2026, covering privileged access, workforce sign-in, secrets and machine identities.
• Unit 42: threat research, incident response, consulting and managed detection and response.

The technical thread is data. The firewalls, Prisma SASE, the endpoint agent and cloud workloads all produce telemetry, and Cortex is built to collect it in one schema, so a detection can use what the network, the device, the identity and the cloud each saw. Unit 42's research and every customer's WildFire submissions feed protections back to all customers.

The people who choose it are security and network teams at enterprises, service providers and government agencies in more than 180 countries, including almost all of the Fortune 100. They pick Palo Alto Networks for depth of protection and for consolidation: one vendor, one policy and one SOC platform in place of dozens of point products. Most sales go through distributors and resellers, with the company's own sales force and sales engineers working the large accounts.

A firewall estate is hard to replace. Its rule base, often thousands of rules written over years in PAN-OS terms, has to be translated and tested before a cut-over, and network teams are trained and certified on the product. Replacing it with Fortinet or Check Point is a migration project, usually timed to a hardware refresh.

The platforms add to that. A customer that runs Prisma SASE on the same policy as its firewalls, sends their logs to Cortex XSIAM and has rebuilt its SOC's detections and playbooks there would have to unwind several products at once to leave, and give up the correlations that come from one vendor's data in one schema. Idira's privileged access vault holds the credentials to a company's most sensitive systems, and auditors know it; few teams want to move that.

What customers would move to depends on the layer: Fortinet for cheaper firewalls, Zscaler or Cloudflare for remote access, CrowdStrike or Microsoft for endpoint and SIEM, Wiz for cloud security, Okta or Microsoft Entra ID for sign-in. The consolidation that keeps customers is also a weakness: a customer unhappy with one product can sour on the bundle, and point-product rivals argue that the best tool in each layer beats one vendor's set.

Revenue was $11.48B in fiscal 2026 (the year to July 2026), up 24.5%, after 16.5% and 14.9% in the two years before; the jump includes part of a year of Chronosphere and CyberArk. Over five years it grew about 22% a year, from $4.26B in fiscal 2021.

Software and subscriptions carry high gross margins and hardware lower ones. Gross margin was 70.4% in fiscal 2026, down from 73.4% in fiscal 2025, as the company amortized the intangible assets it bought and hardware margins fell. Operating income fell from $1.24B to $695M and the operating margin from 13.5% to 6.1%, on acquisition costs and amortization. Net income was $307M.

Cash tells a different story from income, because customers pay for multi-year subscriptions largely up front. Operating cash flow was $4.55B and free cash flow $4.11B, 35.8% of revenue, after capital spending of $440M. Equity pay is large: $1.77B, 15.5% of revenue, so free cash flow after equity pay was $2.34B, 20.4% of revenue. The company ended the year with $3.07B of cash and short-term investments against $1.77B of convertible notes, net cash of $1.30B.

The direction is more of each customer's security, and now its operations data, on fewer platforms. Fiscal 2026 added identity (CyberArk, now Idira), observability (Chronosphere), agentic endpoint security (Koi) and an AI gateway (Portkey); Embrace, for real user monitoring, and Console, for agentic workflows, closed after the year ended. Observability takes the company outside security for the first time: site reliability teams, not only SOCs, become its users, and the same telemetry pipeline can feed both.

AI shows up in two ways. Inside the products, Cortex XSIAM and Strata Cloud Manager use it to automate triage and configuration. As something to secure, Prisma AIRS, Idira's AI agent controls and Unit 42's Frontier AI Defense services aim at companies' own AI agents, which act on their own with credentials and tools.

Within the core, the shift is from boxes to cloud delivery: firewall customers moving branches and remote users to Prisma SASE, and SIEM customers moving to XSIAM. Hardware stays, since data centers and campuses still need physical firewalls, but the growth is in subscriptions measured by users, data and workloads rather than appliances.

• Integrating what it bought. Four acquisitions completed in fiscal 2026, CyberArk the largest in the company's history, and two more since, have to become products that share data, a console and a sales motion, without losing CyberArk's and Chronosphere's customers and engineers in the merge. Prisma Cloud's history, several acquired products behind one login, is the outcome to avoid.
• Consolidation against the best in each layer. CrowdStrike, Zscaler, Wiz, Okta and Fortinet each argue that the leader in a layer beats a bundle, and Microsoft includes security in licenses many customers already pay for.
• Its own product security. A security vendor's flaws carry high stakes: exploited PAN-OS vulnerabilities in GlobalProtect and the management interface forced urgent patching, and each new one tests customers' trust.
• Margins after the acquisitions. The operating margin fell to 6.1% in fiscal 2026 on amortization and deal costs; the products have to grow into what was bought.
• Hardware supply. Component shortages and costs, memory and storage among them, cut hardware margins in fiscal 2026.
• Securing AI before the market is defined. Prisma AIRS and agent security are new categories where the threats, the buyers and the budgets are still forming.