Story Stocks^®

Palo Alto Networks (PANW) is lower today despite closing FY26 on a strong note and issuing an above-consensus FY27 outlook. Adjusted EPS of $1.02 beat expectations, while revenue increased 34.5% yr/yr to $3.41 bln, also above consensus. Q1 guidance of $0.96-0.98 in EPS and $3.30-3.31 bln in revenue exceeded consensus, as did FY27 guidance of $4.16-4.19 and $14.10-14.20 bln. Demand trends remained solid, with platformization reaching a record and broad strength across PANW's security platforms. CEO Nikesh Arora also described AI as a long-term tailwind for cybersecurity as expanding AI infrastructure, rising agentic traffic, and increasingly capable cyber models increase the need for real-time defense.

• Bookings and ARR: NGS ARR increased 63% yr/yr to $9.1 bln, including nearly $1 bln of net new ARR. RPO surpassed $20 bln for the first time, rising 34% to $21.2 bln, while cRPO also increased 34% to $9.3 bln. Pro forma bookings growth accelerated for the second straight quarter, supported by platformization and rising demand tied to AI infrastructure and real-time security.
• Platformization: PANW added approximately 220 net new platformizations in Q4, roughly twice the pace of Q3, while NRR among platformized customers remained above 120%. More than 65% of NGS ARR now comes from platformized customers, while the number of customers generating more than $5 mln and $10 mln of NGS ARR increased 45% and 50% yr/yr, respectively.
• Network and AI Security: PANW saw broad strength across Network Security, including strong Gen 5 hardware firewall demand and 29% ARR growth in software firewalls. SASE continued to take share, with displacement wins across nearly 100 accounts representing $450 mln in TCV, roughly double the prior year. Agentic traffic across SASE increased 9x over the past nine months, while Prisma AIRS surpassed $100 mln in ARR and 800 customers.
• Cortex and acquisitions: XSIAM surpassed $700 mln in ARR, up 70%, while Observability ARR exceeded $500 mln. PANW also acquired Console, which will join Cortex to further automate security operations. CyberArk integration remains ahead of plan, with more than 200 net new logos sourced from PANW's installed base, $5 mln-plus TCV deals up 50%, and cost synergies running 3-6 months ahead of schedule.
• Margins: Q4 gross margin declined 100 bps yr/yr to 74.8%, reflecting the shift toward faster-growing SaaS offerings, while non-GAAP operating margin declined 70 bps to 29.6%. PANW expects cloud-hosting costs to grow faster than revenue in FY27 and hardware component costs to remain elevated, but expects operating leverage and M&A synergies to offset those pressures. FY27 operating margin is guided to 29.5%, up roughly 30 bps from 29.2% in FY26.

Briefing.com Analyst Insight

PANW delivered a strong Q4 and an initial FY27 outlook that came in nicely above expectations, including NGS ARR guidance for 22-23% growth, with demand trends remaining solid. Pro forma bookings accelerated for a second straight quarter, while approximately 220 net new platformizations marked a record and roughly doubled the Q3 pace, providing further evidence that customers are consolidating more of their security spending onto PANW's platforms. The longer-term backdrop also remains favorable, with management particularly bullish on AI as rising infrastructure investment, agentic traffic, and faster-moving cyber threats increase the need for hardware and software firewalls, observability, identity security, and real-time defense. The decline appears more reflective of the elevated expectations following PANW's strong run this year than any notable deterioration in execution. Margin pressure from higher cloud-hosting and hardware component costs bears watching, although operating leverage and M&A synergies should provide some offset and, importantly, the pressure does not appear to reflect weakening demand.