Palo Alto Networks, Inc. (PANW)

News Summary

• Agentic AI traffic on PANW's SASE platform surged 9x over nine months, and a new class of infrastructure buyers—sovereign entities, neo-clouds, and frontier AI labs—drove multiple 7-figure bookings in Q4; PANW also disclosed it is the first certified commercial partner for Anthropic's Mythos 5, using it in a Frontier AI Defense stress-testing harness, with Arora framing cyber-capable frontier models as collapsing exploit timelines from months to minutes—a permanent demand tailwind for machine-speed security platforms.
• Prisma AIRS hit $120M ARR within one year of GA with 800+ customers (fastest product ramp in company history), XSIAM crossed 1,000 customers at $700M+ ARR growing 70% YoY, and Chronosphere observability ARR surpassed $500M after more than doubling since the Q2 acquisition—anchored by a $20M deal with a hyper-growth AI inference provider processing tens of trillions of tokens per day; PANW also closed the Console acquisition to deepen agentic capabilities in Cortex, with Arora's stated 5-year goal being fully autonomous security agents that self-configure across customer environments.
• Net new NGS ARR of ~$970M in Q4 was up 98% YoY and the strongest quarterly addition ever; platformization added ~220 net new customers (up 44% YoY) with net retention exceeding 120% among platformized accounts, and FY2027 guidance calls for Cortex revenues to grow ~30% while NGS ARR scales toward $11.1B—management flagged that a large LLM customer's Chronosphere migration will be a modest Q1 headwind before normalizing.
• Q4 revenue of $3.41B grew 34% YoY, beating consensus by ~$60M; non-GAAP EPS of $1.02 beat by $0.04; RPO hit a record $21.2B (+34% YoY); non-GAAP gross margin was 74.8% (down ~100bps YoY on SaaS mix shift) and non-GAAP operating margin was 29.6%; FY2027 guidance of $14.10–$14.20B revenue and $4.16–$4.19 adjusted EPS cleared Wall Street targets of $13.79B and $4.11 by meaningful margins.
• Shares initially jumped 5% after hours on the beat-and-raise but reversed to close the extended session ~2% lower after having already fallen ~5% in the regular session; BTIG had raised its price target to $380 ahead of earnings citing AI and identity platform strength, and analyst Q&A was broadly constructive—probing durability of the acceleration rather than questioning it—with PANW stock up nearly 100% year to date entering the print.

Financial Highlights

Earnings Call Highlights

Palo Alto Networks closed fiscal 2026 with unmistakable momentum, and management's tone was confident bordering on triumphant, framing AI not as a threat to the business but as a structural, multi-year demand accelerator across every platform. Nikesh Arora was unusually expansive in describing three discrete AI inflection points—agentic emergence, cyber-capable frontier models like Mythos, and open-weight model proliferation—positioning each as a new surface area requiring unified security platforms. Analysts were broadly constructive, probing the durability of the acceleration rather than questioning it, and the Q&A had the texture of a bull-case stress test rather than skeptical pushback. The dominant theme was that platformization is winning decisively, and that the cybersecurity industry is entering a forced modernization cycle driven by AI-speed threats that legacy, fragmented tools cannot address.

• Agentic traffic on PANW's SASE platform has surged 9x over the last 9 months, and Arora described a new class of infrastructure buyers—sovereigns, neo-clouds, and frontier labs—generating multiple 7-figure bookings in Q4, directly validating AI infrastructure as a durable hardware and software firewall demand driver.
• Prisma AIRS, PANW's AI security product, surpassed $100 million in ARR within four quarters of general availability, making it the fastest-scaling product in company history, with over 800 customers and the majority of largest Q4 transactions featuring multi-module adoption; a $53 million platformization deal with a global payments company included a high-7-figure Prisma AIRS commitment.
• Arora disclosed that PANW is the first certified commercial partner for Mythos 5, using it inside their Frontier AI Defense Service stress-testing harness, and framed cyber-capable models as collapsing the vulnerability exploitation timeline from months to minutes—a dynamic he called a permanent tailwind requiring machine-speed, unified platform defense.
• XSIAM crossed 1,000 customers with ARR growing 70% to over $700 million, and Chronosphere observability ARR more than doubled since the Q2 acquisition to surpass $500 million, with a $20 million deal signed with a hyper-growth AI inference provider processing tens of trillions of tokens per day—Arora noted this as the strongest possible platform validation.
• PANW closed the Console acquisition on the call date, described as an AI-first approach to IT and security operations that will integrate into Cortex; Arora's 5-year north star vision was explicit: agents that can autonomously understand, deploy, and configure security across customer environments with minimal human intervention, learning from thousands of prior deployments.

Sources

• Palo Alto Networks (PANW) Q4 2026 earnings
• investors.paloaltonetworks.com · news-releasesPalo Alto Networks Reports Fiscal Fourth Quarter and Fiscal ...
• Palo Alto Networks Q4 2026 earnings beat on AI security ...