10-Q: Palo Alto Networks Q1 FY26 Revenue Jumps 16% Amid Acquisitions

Palo Alto Networks reports strong first-quarter fiscal 2026 results with total revenue up 16% year-over-year, driven by increased demand for its cybersecurity platforms and strategic acquisitions.

Summary

• Total revenue for the first quarter of fiscal 2026 was $2.474 billion, a 16% increase compared to $2.139 billion in the same period of fiscal 2025.
• Product revenue grew 23% year-over-year to $434 million, while subscription and support revenue increased 14% to $2.040 billion.
• Net income for the quarter was $334 million, down from $351 million in the prior year, resulting in diluted net income per share of $0.47, compared to $0.49 previously.
• Next-Generation Security Annualized Recurring Revenue (NGS ARR) reached $5.9 billion as of October 31, 2025, up from $5.6 billion as of July 31, 2025.
• Remaining performance obligations stood at $15.5 billion as of October 31, 2025, with approximately $6.9 billion expected to be recognized as revenue over the next 12 months.
• Cash provided by operating activities was $1.771 billion, and non-GAAP free cash flow was $1.687 billion for the quarter.
• The company announced a definitive agreement to acquire CyberArk Software Ltd. for approximately $25 billion in cash and stock, expected to close in Q3 fiscal 2026.
• A subsequent event includes the definitive agreement to acquire Chronosphere, Inc. for $3.35 billion in cash and replacement awards, expected to close in H2 fiscal 2026.
• The share repurchase program was extended to December 31, 2026, with $1.0 billion remaining available for future repurchases.

Sentiment

Score: 7

Explanation: Strong revenue growth and strategic acquisitions position the company for future expansion, but a decline in net income and diluted EPS, coupled with increased tax provision and G&A expenses, present near-term challenges. The ongoing legal proceedings and integration risks for large acquisitions also temper the overall positive sentiment.

Positives

• Total revenue increased by 16% year-over-year to $2.474 billion, demonstrating strong top-line growth.
• Product revenue showed robust growth of 23% to $434 million, driven by increased demand and enhanced software features.
• Subscription and support revenue grew 14% to $2.040 billion, indicating continued demand for recurring services.
• Next-Generation Security Annualized Recurring Revenue (NGS ARR) increased to $5.9 billion, reflecting a strong trajectory for next-gen offerings.
• Cash provided by operating activities rose by $261 million to $1.771 billion, and non-GAAP free cash flow was healthy at $1.687 billion.
• Strategic acquisitions of CyberArk Software Ltd. ($25 billion) and Chronosphere, Inc. ($3.35 billion) are expected to expand market presence into identity security and observability.
• Introduced innovations like PAN-OS 12.1 Orion for quantum security readiness and Prisma AIRS 2.0 with Protect AI integration, showcasing continued investment in technology leadership.
• Maintains a broad global customer base, including almost all Fortune 100 companies and a majority of Global 2000 companies.
• The share repurchase program was extended to December 31, 2026, with $1.0 billion remaining, signaling commitment to shareholder returns.

Negatives

• Net income decreased by 5% to $334 million from $351 million in the prior year period.
• Diluted net income per share declined to $0.47 from $0.49 year-over-year.
• Operating margin decreased to 12.5% from 13.4% in the comparable prior year period.
• Provision for income taxes increased significantly to $78 million from $17 million, impacting net income.
• General and administrative expense increased by 83% to $179 million, partly due to a prior-year litigation accrual release not recurring and increased personnel costs.
• An ongoing legal proceeding with Centripetal Networks, Inc. resulted in a $114 million judgment (plus interest), with $147 million accrued as of October 31, 2025, which is currently under appeal.

Risks

• Operating results may be adversely affected by unfavorable economic and market conditions and the uncertain geopolitical environment, including hostilities in Israel and the Russia-Ukraine war.
• Inability to effectively manage future growth or improve systems, processes, and controls could adversely affect operating results.
• Revenue growth rate in recent periods may not be indicative of future performance, and the company may not be able to maintain profitability.
• Operating results may vary significantly from period to period due to seasonality and other factors, making them difficult to predict.
• Failure to sell new and additional product, subscription, and support offerings, especially to large enterprise customers, could harm future revenue and operating results.
• Inability to attract new customers could harm future results of operations.
• Reliance on subscription and support offerings means downturns or upturns in sales or renewals are not immediately reflected in full in operating results.
• Sales prices of products, subscriptions, and support offerings may decrease, reducing revenue and gross profits.
• Reliance on channel partners to sell substantially all products, and their potential failure to perform, could limit sales and distribution.
• Exposure to the credit and liquidity risk of customers, and to credit exposure in weakened markets, could result in material losses.
• Sales to government entities are subject to a number of challenges and risks, including competitive, expensive, and time-consuming processes, and changing requirements.
• Intense competition in the market from established competitors and new market entrants, including large companies, independent security vendors, startups, and public cloud vendors.
• Acquisitions of other businesses (including CyberArk and Chronosphere) could subject the company to adverse claims or liabilities, require significant management attention, disrupt business, and may not result in expected benefits or may dilute stockholder value.
• Failure to complete the acquisition of CyberArk within the anticipated timeframe or at all could negatively impact future business and financial results, including potential termination fees of $1.0 billion.
• The CyberArk acquisition is anticipated to substantially change the scope and size of the business, resulting in incremental risks, including increased competition.
• Failure to accurately predict, prepare for, and respond promptly to rapidly evolving technological and market developments and successfully manage product and subscription introductions could harm competitive position.
• Issues in the development and deployment of AI may result in reputational harm and legal liability and could adversely affect results of operations.
• A network or data security incident may allow unauthorized access to networks or data, harm reputation, create additional liability, and adversely impact financial results.
• Defects, errors, or vulnerabilities in products, subscriptions, or support offerings, or failure to block a virus or prevent a security breach, could harm reputation and operating results.
• Ability to sell products and subscriptions is dependent on the quality of technical support services.
• Claims by others that the company infringes their intellectual property rights could harm the business.
• Proprietary rights may be difficult to enforce or protect, enabling others to copy or use aspects of products or subscriptions without compensation.
• Use of open source software in products and subscriptions could negatively affect ability to sell and subject the company to possible litigation.
• Inability to maintain licenses for technology from third parties could harm the business.
• Dependence on manufacturing partners for hardware products makes the company susceptible to manufacturing and logistics delays and pricing fluctuations.
• Managing the supply of hardware products and product components is complex; insufficient supply or excess inventory could harm gross margins.
• Hardware products contain key components from limited sources of supply, including outside the United States, leading to susceptibility to supply shortages and international regulations.
• Inability to attract, retain, and motivate key technical, sales, and management personnel could harm the business.
• Significant revenue from international sales and operations subjects the company to risks associated with international business.
• Exposure to fluctuations in foreign currency exchange rates could negatively affect financial condition and operating results.
• Risks associated with having operations and employees located in Israel, including political instability and military actions.
• Subject to international trade regulations and governmental export and import controls that could subject the company to liability or impair its ability to compete.
• May incur increased costs to comply with privacy and data protection laws, and failure to comply could lead to government enforcement actions, private litigation, and adverse publicity.
• Exposure to tax liabilities that are greater than anticipated, including from new U.S. federal tax legislation.
• Operating results differing from publicly announced guidance or expectations due to changes in estimates or judgments could result in a decline in stock price.
• Obligated to maintain proper and effective internal control over financial reporting, and failure to do so could adversely affect investor confidence.
• Reputation and/or business could be negatively impacted by corporate responsibility matters and/or reporting of such matters.
• Failure to comply with governmental laws and regulations could harm the business.
• The market price of common stock historically has been volatile, and the value of an investment could decline.
• Warrant transactions may affect the value of common stock.
• Issuance of additional stock in connection with financings, acquisitions, investments, or stock incentive plans will dilute stock held by other stockholders.
• Share repurchase program may not be fully consummated or enhance shareholder value, and could affect the price of common stock.
• No intention to pay dividends for the foreseeable future.
• Charter documents and Delaware law could discourage takeover attempts and lead to management entrenchment.
• Business is subject to risks of earthquakes, fire, power outages, floods, health risks, and other catastrophic events, and to interruption by man-made problems, such as terrorism.
• Failure to raise additional capital or generate the significant capital necessary to expand operations and invest in new products and subscriptions could reduce ability to compete and harm business.

Future Outlook

The company anticipates continued investment in research and development, customer support, and sales force expansion, expecting operating expenses to increase in absolute dollars but decrease as a percentage of revenue over the long term. It plans to expand its global presence and believes its cash flow from operations will be sufficient to meet anticipated cash needs for the foreseeable future. The acquisitions of CyberArk and Chronosphere are expected to close in Q3 fiscal 2026 and H2 fiscal 2026, respectively, further expanding the company's market reach. Future research and development tax credit generation in California is expected to exceed the company's ability to use existing tax credits.

Management Comments

• Our mission is to be the cybersecurity partner of choice for enterprises, organizations, service providers, and government entities to protect our digital way of life.
• A key element of our strategy is to help our customers simplify their security architectures through consolidating disparate point products.
• We execute on this strategy by developing our capabilities and packaging our offerings into platforms which are able to cover many of our customers needs in the markets in which we operate.
• Our growth reflects the increased adoption of our portfolio, which consists of product, subscriptions, and support.
• We believe our portfolio will enable us to benefit from recurring revenues and new revenues as we continue to grow our end-customer base.
• We continue to invest in innovation as we evolve and further extend the capabilities of our portfolio, as we believe that innovation and timely development of and investment in new features and products are essential to meeting the needs of our end-customers and improving our competitive position.
• We believe that our cash flow from operations with existing cash and cash equivalents will be sufficient to meet our anticipated cash needs for at least the next 12 months and thereafter for the foreseeable future.

Industry Context

The cybersecurity industry is characterized by intense competition, rapid technological advancements, and evolving threat landscapes. Palo Alto Networks' platformization strategy aligns with the industry trend of consolidating disparate security products into integrated architectures for simplified and more cost-effective outcomes. The company's expansion into identity security through the CyberArk acquisition and observability with Chronosphere reflects a broader industry movement towards comprehensive security ecosystems that cover the entire digital attack surface, including cloud and AI-driven threats. Macroeconomic factors such as inflation, high interest rates, and geopolitical instability continue to influence customer spending patterns and priorities within the sector.

Comparison to Industry Standards

• The company operates in an intensely competitive cybersecurity market, facing large integrated players like Cisco and Microsoft, as well as specialized vendors such as Check Point, Fortinet, CrowdStrike, Zscaler, and Wiz. Its platformization strategy aims to consolidate disparate point products, a trend observed across the industry as customers seek simplified security architectures.
• The acquisitions of CyberArk (identity security) and Chronosphere (observability) position the company to expand beyond its core network security, addressing broader enterprise security needs, a common strategy among leading tech firms to create comprehensive ecosystems.

Legal Proceedings

• Centripetal Networks, Inc. v. Palo Alto Networks: A lawsuit alleging patent infringement resulted in a jury verdict of non-willful infringement. After post-trial motions, a judgment was issued on October 3, 2024, reducing damages to $114 million plus statutory interest. The company has posted a surety bond and is appealing the judgment. An accrual of $147 million was recorded as of October 31, 2025.
• Finjan, Inc. v. Palo Alto Networks: A lawsuit alleging patent infringement where the judge granted summary judgment of non-infringement on March 21, 2025. The plaintiff filed a Notice of Appeal on April 21, 2025. The company is currently unable to reasonably estimate a possible loss.
• Eire OG Innovations. v. Palo Alto Networks: A lawsuit asserting infringement of multiple patents, with a trial set for February 17, 2026. An immaterial amount has been accrued for this matter as of October 31, 2025.

Stakeholder Impact

• Shareholders: Potential dilution from the stock component of the CyberArk acquisition, potential benefit from the extended share repurchase program, and exposure to stock price volatility. No dividends are anticipated in the foreseeable future.
• Employees: Continued headcount growth, significant share-based compensation, and potential impacts from the integration of acquired companies. Employees in Israel face risks related to geopolitical instability.
• Customers: Benefit from increased product demand, new innovations (PAN-OS 12.1 Orion, Prisma AIRS 2.0), and an expanded portfolio through strategic acquisitions in identity security and observability. Reliance on high-quality technical support is critical.
• Suppliers/Manufacturing Partners: Continued dependence on manufacturing partners and limited sources of key components, exposing them to potential supply chain disruptions, logistics delays, and pricing fluctuations.
• Creditors: The company remains in compliance with all covenants under its $400 million unsecured revolving credit facility, with no outstanding amounts as of October 31, 2025.

Next Steps

• Close the acquisition of CyberArk Software Ltd. during the third quarter of fiscal 2026.
• Close the acquisition of Chronosphere, Inc. during the second half of fiscal 2026.
• Continue to invest in research and development to enhance existing products and introduce new offerings, particularly in AI.
• Manage the integration of acquired businesses and technologies to realize anticipated benefits and synergies.
• Address ongoing legal proceedings, including the appeal in the Centripetal Networks case and the upcoming trial for Eire OG Innovations.
• Evaluate and prepare for the impact of recently issued accounting pronouncements on future financial disclosures.
• Potentially repurchase shares under the extended $1.0 billion authorization by December 31, 2026.

Key Dates

Recommendation

Palo Alto Networks demonstrates robust top-line growth with a 16% increase in total revenue and significant expansion in its Next-Generation Security ARR. The strategic acquisitions of CyberArk and Chronosphere are transformative, positioning the company for leadership in identity security and observability, which are critical and growing segments of the cybersecurity market. While net income and diluted EPS saw a slight decline, primarily due to increased tax provisions and G&A expenses, the underlying business momentum and strategic investments suggest strong future potential. The healthy cash flow and ongoing share repurchase program also provide a solid financial foundation. Investors should consider the long-term growth trajectory driven by platformization and market expansion, despite near-term profitability fluctuations and integration risks associated with large acquisitions.

Keywords

Cybersecurity, Network Security, Cloud Security, AI Security, SASE, Next-Generation Firewall, Subscription Services, Software Licenses, CyberArk Acquisition, Chronosphere Acquisition, Q1 Earnings, Financial Results, PANW, Identity Security, Observability, SEC Filing