PANW Q4 2026 Earnings Analysis
PANW closed FY2026 with record results beating guidance: $21.2B RPO (+34%), $9.1B NGS ARR (+63%), $11.5B revenue (+24%), driven by platformization adoption and AI security tailwinds.
Key Metrics
Puntos clave
- Nearly $1 billion in net new NGS ARR added in Q4 alone, second straight quarter of bookings acceleration.
- 220 net new platformizations in Q4 surpassed record; XSIAM crossed 1,000 customer milestone.
- Acquired CyberArk and Chronosphere gaining significant traction; Prisma AIRS hit $100M ARR in four quarters.
Escuchar en
Disponible en
Transcript
// Full episode scriptWelcome to Beta Finch, your AI-powered earnings breakdown. I'm Alex, here with Jordan, and today we're digging into Palo Alto Networks' fiscal Q4 2026 results. This one's a big report to close out their fiscal year.
Before we jump in — this podcast is AI-generated content for educational and entertainment purposes only. Nothing we discuss should be considered investment advice. Always do your own research and consult a qualified financial advisor before making any investment decisions.
Right, so let's get into it, because Palo Alto had a genuinely record quarter. RPO — that's remaining performance obligations, basically the backlog of contracted future revenue — crossed $20 billion for the first time, landing at $21.2 billion, up 34%.
And the number that really jumped out to me was Next-Generation Security ARR, or NGS ARR, hitting $9.1 billion, up 63%. They added almost $1 billion in net new NGS ARR in a single quarter. CFO Dipak Golechha pointed out that's roughly what the entire company's NGS ARR was back in his first quarter as CFO in 2021. That's the kind of comparison that really puts scale into perspective.
Total revenue for the quarter was $3.41 billion, up 34%, and full-year revenue came in at $11.5 billion, up 24%. Non-GAAP EPS beat guidance at $1.02, and operating margin for the year expanded to 29.2%.
What's notable is that margin expansion happened while they were digesting their two biggest acquisitions ever — CyberArk, now rebranded Idira, and Chronosphere. Usually big M&A drags on margins for a while, but management said CyberArk's cost synergies are three to six months ahead of schedule.
Let's talk strategy, because CEO Nikesh Arora spent a lot of time on what he called three AI "inflection points" over the last several months — the shift from prompting to autonomous agents, the "Mythos moment" where AI models got scary good at finding vulnerabilities, and now a move toward open-weight, sovereign AI models. His overall thesis: all three point toward the same conclusion.
Which is platformization — get customers to consolidate onto one unified security architecture instead of stitching together point products. They hit about 220 net new "platformizations" in the quarter, more than double the pace from two years ago, and platformized customers are showing net revenue retention above 120%.
They also called out some serious deal sizes — a $126 million deal with a global telecom, $72 million with an IT services firm, $53 million with a payments company. And Prisma AIRS, their AI security product, crossed $100 million in ARR in just four quarters — fastest product scale in company history.
XSIAM, their security operations platform, is also cruising — over $700 million in ARR, up 70%, past 1,000 customers. And on the observability side, since closing Chronosphere, that ARR has more than doubled past $500 million. Combined, XSIAM and observability are now a billion-dollar-plus business that basically didn't exist a few years ago.
There was also a bit of breaking news on the call — they closed an acquisition of a company called Console the same day, focused on AI-driven IT and security operations, folding into their Cortex team.
On the Q&A side, I thought the most candid moment was Nikesh basically saying M&A isn't a strategy for them — it's a consequence of watching 40 or 50 funded startups and jumping in when one of them nails a technology shift before Palo Alto's internal roadmap gets there. Refreshingly blunt for a CEO.
There was also a fun exchange about the CyberArk integration — a new "Modern PAM" product just went GA, and Nikesh made the case that identity security for AI agents and machine identities is a wide-open category with no established leader yet, which is where he thinks Idira has a real head start.
And Fatima Boolani's question about operational technology got a great answer — Nikesh talked about being able to build and deploy signatures for OT and open-source vulnerabilities in under 4 hours, compared to an industry standard of 55 days. That's the kind of speed gap that becomes a real selling point as AI-driven attacks accelerate.
So, what does this mean going forward? For fiscal 2027, guidance calls for revenue of $14.1–14.2 billion, 23–24% growth, NGS ARR growth of 22–23%, and operating margin around 29.5%. They're also reiterating a longer-term target of $20 billion in NGS ARR by fiscal 2030 and a 40% free cash flow margin by fiscal 2028.
One thing worth flagging for anyone modeling this out — a chunk of the observability ARR growth included a one-time nine-figure benefit from a large AI customer migrating off an incumbent vendor onto Chronosphere. Management said the tail of that migration continues into Q1 FY2027 but at a smaller scale, so that's a comp to watch rather than assume as a steady-state growth rate.
Also worth noting — hardware is still only about 10% of total revenue, and they flagged rising component costs in that business, particularly memory and storage, as something to manage into next year.
Before we wrap up — everything discussed is AI-generated analysis for educational purposes. Past performance doesn't guarantee future results. Please do your own due diligence.
Bottom line: this was a strong, broad-based quarter with real acceleration in bookings, and management is leaning hard into the idea that AI-driven threats are a long-term tailwind rather than a risk to their business model. Whether that thesis keeps translating into these kinds of numbers is what we'll be watching next quarter.
That's it for this episode of Beta Finch. Thanks for listening, and we'll catch you next time.