Palo Alto Networks Inc (PANW) - Stock Report

The latest quarter ended 30 April 2026 was strong, but it should not be annualized mechanically because acquired revenue and ARR are now part of the reported base. Fiscal Q3 2026 revenue grew 31% to $3.00 bn, including $388 m from CyberArk and Chronosphere; Next-Generation Security ARR grew 60% to $8.1 bn, including $1.6 bn from those acquisitions; and remaining performance obligation grew 36% to $18.4 bn, including $1.8 bn from those acquisitions. The earnings bridge is mixed rather than weak: reported diluted EPS was $(0.22), adjusted diluted EPS was $0.85, reported operating loss was $183 m and adjusted operating income was $814 m, so acquisition costs, amortization and share-based compensation are still a large bridge between strategic scale and reported profit. Cash remains the best cash-conversion proof point, with Q3 operating cash flow of $871 m, strict cash after capex of $788 m, adjusted free cash flow of $910 m and trailing twelve-month company-reported free cash flow of $3.79 bn.

The key macro issue is not cybersecurity relevance in isolation, but whether enterprise consolidation passes through billing quality, cloud-delivery cost and integration spending into retained free cash flow per diluted share; if it does, Palo Alto can justify a premium platform multiple, but if demand shows up through discounts, longer terms or acquired ARR, the same growth optics leave weaker cash-conversion proof.

Palo Alto Networks is a cybersecurity platform company built around three operating pillars. Network Security includes next-generation firewalls, software firewalls, secure access service edge, SD-WAN and cloud-delivered security services. Cortex carries security operations, detection, response, automation and SIEM-like workflows. Prisma carries cloud and application security, while Unit 42 adds threat intelligence and incident response that can deepen customer relationships and expose product gaps customers need to close.

The economic role of the stack is not identical across those assets. Firewalls and network security still provide the installed-base beachhead and a renewal surface. SASE and cloud-delivered security convert that footprint into recurring subscription economics. Cortex is the operational consolidation engine, where customers can retire fragmented security tools if the platform performs. Prisma and identity security are the forward value bridge, because cloud workloads, machine identities and AI agents expand the attack surface beyond the legacy perimeter.

Distribution is mostly indirect through distributors and resellers, which gives Palo Alto Networks broad reach but creates channel concentration and renewal-quality risk. Three distributors accounted for 44.2% of fiscal 2025 revenue, while no single end customer accounted for more than 10%. That matters because the valuation test is not simply whether end demand exists; it is whether the channel, sales incentives and platform bundles produce durable billings without excessive discounting or deferred billing concessions.