Earnings/Recap
PANWPalo Alto Networks, Inc.

Earnings Recap — Q4 FY2026

CY Q3 2026 · Reported September 1, 2026 · Beat 6 of last 7 quarters

Palo Alto Networks, Inc. reported Q4 FY2026 revenue of $3.41B, a beat of 1.7% against consensus, and EPS of $1.02, a beat of 4.3%.

The Buildout is a website built on agentic AI tools, currently in beta, and could have factual errors.

Go to the full Palo Alto Networks, Inc. company page →Palo Alto Networks, Inc. is in the Software & Design layer →
What this means for the buildout

Palo Alto Networks' record quarter underscores the accelerating demand for security and observability as AI infrastructure scales. The company's growth in network security, SASE, and observability (Chronosphere) reflects the need to secure and monitor the massive data center buildout and agentic traffic. Management's commentary on the $5 trillion capex cycle and the rise of sovereign and neo-cloud buyers signals continued tailwinds for cybersecurity and observability platforms.

Results vs consensus
EstimateActualvs est
Revenue$3.35B$3.41B+1.7%beat
EPS$0.98$1.02+4.3%beat
What was said

Palo Alto Networks delivered a record Q4, exceeding guidance across all metrics. NGS ARR reached $9.1B, up 63% YoY, with nearly $1B added in the quarter. RPO surpassed $20B for the first time, ending at $21.2B, up 34%. The company closed the acquisitions of Console and Embrace, and reported strong momentum across platforms, including SASE bookings growth of 40%, XSIAM ARR growth of 70%, and Prisma AIRS surpassing $100M ARR. CyberArk (now Idira) and Chronosphere integrations are exceeding expectations, with observability ARR more than doubling since the Chronosphere acquisition.

Key metrics
NGS ARR
$9.1B
up 63% YoY; added nearly $1B net new in Q4, almost double YoY
RPO
$21.2B
up 34% YoY; surpassed $20B for first time
Platformizations
~22 net new
record quarter, more than double volume from 2 years ago
XSIAM ARR
$700M+
up 70% YoY; surpassed 1,000 customers
Prisma AIRS ARR
$100M+
within 4 quarters of GA; fastest-scaling product in company history
Management outlook

Management did not provide specific guidance numbers in the provided transcript. They highlighted three AI inflections—agentic AI, cyber-capable models (Mythos), and open-weight model proliferation—as structural tailwinds driving demand for platformization and real-time defense. They also noted continued cost headwinds from hardware commodity costs and cloud hosting, but expect operating leverage and M&A synergies to offset these.

From the call

“We achieved record RPO, surpassing the $20 billion threshold for the first time, to close the year at $21.2 billion representing a growth rate of 34%.”

on Record RPO

“As I have said before, AI is a long term tailwind for cybersecurity. While these models are becoming increasingly proficient at uncovering vulnerabilities, detection is merely the opening act.”

on AI tailwind

“We are now securing a whole new castle of machine identities with autonomous permissions. This surge in traffic data, and identity complexity represents a significant long term tailwind across every 1 of our platforms.”

on Agentic AI and identity

What analysts asked

How are you thinking about M&A and potential transformational acquisitions given the rapid market shifts?

Nikesh Arora said M&A is not a strategy but a consequence of product development. He noted that as AI shifts from LLMs to agents to open-weight models, security architecture needs to adapt, and they may acquire companies that have the right technology trend. He mentioned they have visibility into 40-50 funded companies in the category.

Can you provide more detail on the CyberArk integration, including the 200 net new logos and revenue synergies?

Nikesh Arora said they are excited about CyberArk, with cost synergies ahead of plan and margins reverting to standalone levels in about two quarters. He highlighted the launch of Modern PAM, a new expansion category, and strong go-to-market collaboration with over 400 shared leads and 200 net new logos. He emphasized the opportunity in non-human identities and agents.

How is buying behavior changing as AI threats become the new normal? Are customers more willing to platformize?

Nikesh Arora said that since Mythos, every CEO wants to discuss AI-driven vulnerabilities, leading to conversations about modernizing cyber estates and platformization. He noted that customers are moving toward consolidated platforms rather than fragmented point products, which is a tailwind for larger players. He expects this to be a long-term trajectory change, with potential major breaches driving further demand.

Potential supply chain impact
ANETPalo Alto's strong firewall and SASE demand could signal continued investment in secure networking infrastructure, which may benefit Arista as a partner in data center and campus networking.
CSCOPalo Alto's accelerating platformization and SASE displacements could pressure Cisco's security and networking offerings, particularly in the enterprise.
FTNTPalo Alto's record platformizations and SASE displacement wins may intensify competition with Fortinet in the firewall and SASE markets.
MSFTPalo Alto's growth in security and observability could challenge Microsoft's security suite, especially as customers consolidate on Palo Alto's platform.
NVDAPalo Alto's AI-driven security and observability offerings, including the Prisma AIRS collaboration with NVIDIA, could see increased adoption as AI infrastructure expands.
GOOGLPalo Alto's platformization and AI security momentum could compete with Google's cloud security offerings, though partnerships with frontier labs may also create opportunities.