Palo Alto Networks 10-Kyear ended 2026-07-31

Executive Summary

Palo Alto Networks accelerated FY2026 revenue growth to 25%, but acquisition-led expansion weakened profitability: operating income fell 44% despite a broader cybersecurity platform. CyberArk and Chronosphere extend its opportunity in identity security and observability, while AI-agent protection creates another potential growth driver. Operating cash flow rose, supported by upfront customer payments and non-cash expenses, but substantial acquisition-related share issuance outweighed repurchases. The investment thesis now depends on converting this enlarged portfolio into durable customer expansion and improved margins—not simply sustaining reported growth.

Key Financial Highlights

FY ended 7/31/2026; comparisons are with FY2025.

• Revenue mix: subscription and support contributed $9.2B, or 80%; product revenue grew 27%, helped by CyberArk software licenses and newer hardware.
• Earnings quality: OCF of $4.55B vs net income of $307M; capital expenditures of $440M left FCF of $4.11B. Deferred-revenue growth added $1.2B, while deferred contract costs absorbed $795M; the cash-flow statement also added back $1.77B of stock-based compensation.
• Capital return and dilution: $1B repurchased, but outstanding shares increased 22%, from 668M to 815M, including acquisition issuance. Reported stock-based compensation rose 40% to $1.82B; repurchases did not shrink the share count.
• Non-operating volatility: a $620M fair-value loss on acquired convertible notes was partly offset by a $58M capped-call gain; the effective tax rate increased to 42.7%, partly reflecting nondeductible items.
• Acquisition accounting: goodwill reached $22B and net acquired intangibles $7.02B. Amortization rose to $640M from $166M; estimated FY2027 amortization of $1.08B creates an additional GAAP earnings burden.

Business Developments

Management’s platformization strategy combines network, cloud, security operations, identity, observability and AI security to capture customers consolidating vendors. FY2026 acquisitions totaled ≈$24.4B, dominated by CyberArk at $21.1B and Chronosphere at $2.95B. Together, these businesses contributed $930M of post-acquisition revenue and a $797M operating loss, illustrating both their growth contribution and near-term profitability burden.

CyberArk anchors the Idira identity platform, including controls for machine and AI-agent identities; Chronosphere adds telemetry management and observability. Koi and Portkey broaden endpoint and AI-gateway capabilities, while post-year-end Embrace and Console transactions involve $825M of cash consideration.

Next-Generation Security annual recurring revenue reached $9.1B from $5.6B, and remaining performance obligations increased to $21.2B from $15.8B. These support the expanded platform’s demand story, but acquisition contributions prevent treating headline growth as purely organic.

Risk Assessment

• Audit scope: CyberArk was excluded from management’s internal-control assessment and the auditor’s controls audit; the enlarged business therefore has an integration-related assurance gap.
• Integration and valuation: CyberArk added ≈4,223 employees, while $29B of goodwill and acquired intangibles exposes shareholders to impairment if integration or expected growth disappoints.
• Margin and commitments: higher hosting, component and personnel costs pressured margins; $7.69B of cloud-service purchase commitments could constrain flexibility if usage or demand slows.
• Competition and renewals: bundled rival offerings, long enterprise sales cycles and usage-based pricing can weaken pricing and renewals, with service-period recognition delaying visibility into deterioration.
• Product security and litigation: the authentication-bypass vulnerability disclosed in 5/2026 threatens trust if remediation fails; the Centripetal patent dispute carries a $151M accrued liability including estimated interest.
• Channel concentration: two distributors generated 30% of revenue, and one held 19% of gross receivables, exposing sales and collections to partner disruption.
• Conversion and dilution: acquired notes have $1.1B principal outstanding and $1.8B fair value; cash settlement requirements and further equity issuance could compete with investment and shareholder returns.

Strategic Outlook and Investor Actionables

Management is betting that integrated identity, observability and AI security will deepen customer relationships and improve competitiveness. The opportunity is broader wallet share; the threat is that integration costs, amortization and dilution consume the benefits.

• Acquisition execution: CyberArk and Chronosphere contributed $930M revenue and a $797M operating loss. Subsequent filings should show expanding acquired-business revenue and narrowing losses; contraction or impairment would undermine the bet.
• Platform adoption: Next-Generation Security annual recurring revenue starts at $9.1B and remaining performance obligations at $21.2B. Continued expansion would support customer uptake; slowing growth would challenge the platformization strategy.
• Profitability and cash: operating margin starts at 6.1%, with OCF of $4.55B. Recovery alongside sustained revenue and collections would validate scaling; further cost-led margin erosion would not.
• Dilution discipline: shares increased to 815M despite $1B of repurchases. Slower net issuance would improve per-share participation; continued rapid dilution would weaken shareholder capture of business growth.