Palo Alto Networks Inc

Palo Alto Networks, Inc. operates as a global cybersecurity provider, delivering platforms and services that help secure enterprise users, networks, clouds, and endpoints through comprehensive cybersecurity backed by artificial intelligence and automation. The company's strategy centers on platformization, which combines various products and services into a tightly integrated architecture to help customers simplify their security architectures by consolidating disparate point products. The filing does not disclose an overall market size or growth rate for the cybersecurity industry.

The company faces intense competition in the enterprise security industry, with main competitors falling into four categories: large companies that incorporate security features in their products such as Cisco Systems, Inc., Microsoft, and Alphabet; independent security vendors such as Check Point Software Technologies Ltd., Fortinet, Inc., CrowdStrike Holdings, Inc., Zscaler, Inc., and Wiz, Inc.; startups and point-product vendors; and public cloud vendors and startups offering cloud security solutions. Management states that the company generally competes favorably on the basis of product features, reliability, performance, effectiveness, product line breadth, price and total cost of ownership, adherence to industry standards, strength of sales and marketing, and brand awareness, and that its products and services have been recognized as leading in 25 categories by third-party industry analyst firms.

The company generates revenue through two primary streams: product revenue, derived from sales of hardware products (primarily ML-Powered Next-Generation Firewalls) and software licenses (including SD-WAN, VM-Series, and Panorama); and subscription and support revenue, derived from sales of subscription and support offerings. Subscription and support revenue accounted for 80.5% of total revenue in fiscal 2025, 80.0% in fiscal 2024, and 77.1% in fiscal 2023. The company primarily sells through channel partners using a two-tier, indirect fulfillment model whereby it sells to distributors, which sell to resellers, which then sell to end-customers. End-customers consist of enterprises, service providers, and government entities across industries including education, energy, financial services, government entities, healthcare, Internet and media, manufacturing, public sector, and telecommunications, and include almost all of the Fortune 100 companies and a majority of the Global 2000 companies.

The company's network security platform is designed to deliver complete zero trust solutions and includes Secure Access Service Edge (Prisma Access, Prisma SD-WAN, Prisma Access Browser), Next-Generation Firewalls (hardware ML-Powered NGFWs and software NGFWs), Cloud-Delivered Security Services (including Advanced Threat Prevention, Advanced WildFire, Advanced URL Filtering, Advanced DNS Security, IoT/OT Security, GlobalProtect, Prisma Access Agent, Enterprise DLP, AIOps, SaaS Security, and AI Access Security), Prisma AIRS (a comprehensive AI security platform), and Strata Cloud Manager (a network security management solution). The security operations platform, Cortex, transforms end-to-end security operations with unified data, AI, and automation, and includes Cortex XSIAM for AI-powered security operations, Cortex XDR for prevention and detection, Cortex XSOAR for security orchestration and automation, Cortex Xpanse for attack surface management, and Cortex Cloud (a CNAPP combined with CDR). The company also offers threat intelligence and advisory services through Unit 42, which provides threat research, incident response, security consulting, managed detection and response, and managed threat hunting services.

During fiscal 2025, the company introduced several new offerings including Prisma Access Browser, new capabilities in its OT Security solution, Cortex Cloud, Prisma AIRS, and Cortex XSIAM 3.0. In August 2024, the company completed the acquisition of certain QRadar assets from International Business Machines Corporation for total purchase consideration of $1.1 billion ¹, which included $500.0 million ² in cash and a contingent consideration liability initially valued at $648.9 million ³. In July 2025, the company completed the acquisition of Protect AI, Inc. for total purchase consideration of $634.5 million ⁴, which included $607.4 million ⁵ in cash and $27.1 million ⁶ in fair value of replacement awards. In July 2025, the company also entered into a definitive agreement to acquire CyberArk Software Ltd., an identity security company, under which CyberArk shareholders will receive $45.00 ⁷ in cash and 2.2005 ⁸ shares of the company's common stock for each CyberArk share, representing an equity value for CyberArk of approximately $25 billion ⁹ based on the unaffected 10-day average daily volume-weighted average trading prices of the company's common stock as of July 25, 2025. The company's board of directors authorized a share repurchase program initially at $1.0 billion ¹⁰, subsequently increased to a total authorization of $4.1 billion ¹¹, with $1.0 billion ¹² remaining as of July 31, 2025, and the repurchase authorization will expire on December 31, 2025 ¹³.

For fiscal 2025, total revenue was $9,221.5 million ¹⁴, representing year-over-year growth of 14.9% ¹⁵ compared to $8,027.5 million ¹⁶ in fiscal 2024. Product revenue was $1,801.9 million ¹⁷ or 19.5% of total revenue, growing 12.4% ¹⁸ year-over-year. Subscription and support revenue was $7,419.6 million ¹⁹ or 80.5% of total revenue, growing 15.5% ²⁰ year-over-year. Gross margin was 73.4% ²¹ compared to 74.3% ²² in fiscal 2024. Operating income was $1,242.9 million ²³ with an operating margin of 13.5% ²⁴, compared to operating income of $683.9 million ²⁵ and an operating margin of 8.5% ²⁶ in fiscal 2024. Net income was $1,133.9 million ²⁷ compared to $2,577.6 million ²⁸ in fiscal 2024. Cash flow provided by operating activities was $3,716.0 million ²⁹ compared to $3,257.6 million ³⁰ in fiscal 2024. Free cash flow (non-GAAP) was $3,469.8 million ³¹ compared to $3,100.8 million ³² in fiscal 2024.

A key growth vector is the company's platformization strategy, which combines various products and services into a tightly integrated architecture to help customers simplify their security architectures through consolidating disparate point products. The company expects to benefit from recurring revenues and new revenues as it continues to grow its end-customer base. The company also expects to continue to grow its sales headcount to expand its reach in all key growth sectors. The acquisition of certain IBM QRadar assets is expected to help accelerate the growth of the Cortex business, and the acquisition of Protect AI is expected to enhance the capabilities of the AI security platform. The proposed acquisition of CyberArk is expected to close during the second half of fiscal 2026 and is anticipated to expand the scope and size of the business by adding substantial assets and operations, though the filing notes that the efforts to realize anticipated benefits and synergies will be a complex process.

The company expects operating expenses generally to increase in absolute dollars and to decrease over the long term as a percentage of revenue as it continues to scale its business. The filing does not provide specific margin or cost trajectory targets with exact figures.

The company outsources the manufacturing of its products to various manufacturing partners, including its electronics manufacturing services provider Flextronics International, Ltd., who assembles products using design specifications, quality assurance programs, and standards that the company establishes. All hardware products are assembled in the U.S. The company's manufacturing and supply contracts generally do not guarantee a certain level of supply or fixed pricing. The company expects to continue to invest in research and development efforts as it evolves and extends the capabilities of its portfolio. As of July 31, 2025, the company had 16,068 ³³ employees, and expects headcount to continue to grow over the next year.

The company expects to continue to significantly invest in research and development efforts. As of July 31, 2025, the company expects to recognize approximately $2.2 billion ³⁴ of share-based compensation expense over a weighted-average period of approximately 2.5 years ³⁵, excluding additional share-based compensation expense related to any future grants. Capital expenditures for property, equipment, and other assets were $246.2 million ³⁶ in fiscal 2025. As of July 31, 2025, the company had $1.0 billion ³⁷ available under its share repurchase program, which will expire on December 31, 2025 ³⁸ and may be suspended or discontinued at any time. The company has never declared or paid any cash dividends on its common stock and does not anticipate declaring or paying any cash dividends in the foreseeable future.

The company identifies several headwinds and constraints. Unfavorable economic and market conditions and the uncertain geopolitical environment, including hostilities in Israel and the surrounding region, the Russia-Ukraine war, inflation, changes in public policies, tariffs, and trade regulations, could have a material and adverse impact on the business. The company notes that its revenue growth rate in recent periods may not be indicative of future performance, and that it may not be able to maintain profitability. The company also faces risks related to the pending acquisition of CyberArk, including that it may not be completed within the anticipated timeframe or at all, and that under specified circumstances in connection with termination of the definitive agreement, the company would be required to pay CyberArk a termination fee of $1.0 billion ³⁹.

The company faces intense competition from large companies such as Cisco, Microsoft, and Alphabet, independent security vendors such as Check Point, Fortinet, CrowdStrike, Zscaler, and Wiz, and startups and point-product vendors, and may lack sufficient financial or other resources to maintain or improve its competitive position. The company relies on channel partners for substantially all revenue, and for fiscal 2025, three distributors individually represented 10% or more of total revenue and in the aggregate represented 44.2% ⁴⁰ of total revenue, and as of July 31, 2025, three distributors individually represented 10% or more of gross accounts receivable and in the aggregate represented 44.8% ⁴¹ of gross accounts receivable. The company is exposed to the credit and liquidity risk of customers, and increases in deferred payments subject it to risk of non-payment. The company may not complete the acquisition of CyberArk within the anticipated timeframe or at all, and under specified circumstances in connection with termination of the definitive agreement, the company would be required to pay CyberArk a termination fee of $1.0 billion ⁴². A network or data security incident may allow unauthorized access to the company's network or data, and as a well-known provider of security solutions, the company may be a more attractive target for such attacks. The company's hardware products contain key components from limited sources of supply, including outside the United States, and the company is susceptible to supply shortages, supply changes, and international regulations, which have disrupted or delayed scheduled product deliveries and increased costs.

Management's message emphasizes the company's vision of a world where each day is safer and more secure than the one before, and its mission to be the cybersecurity partner of choice for enterprises, organizations, service providers, and government entities. The key strategic priorities emphasized for the period ahead include the platformization strategy to help customers simplify their security architectures through consolidating disparate point products, continued investment in AI-powered innovation across networking security, cloud security, endpoint security, and security operations, and the integration of recent and pending acquisitions including the IBM QRadar assets, Protect AI, and CyberArk to expand capabilities and accelerate growth.