PANW can compound beyond its firewall base as AI risk lifts security budgets and platform breadth captures more customer spend.
Premium valuation leaves little room for error as organic growth quality, margins, and execution become harder to underwrite.
Cyber: JPM sees AI-driven vulnerability growth elevating security spend, with CRWD/PANW/SAIL preferred
JPM argues AI is compressing the vulnerability discovery-to-exploitation cycle and pushing cyber further into C-suite/board-level business continuity budgets, supporting spend across SASE, Zero Trust, next-gen endpoint, exposure management and incident resp...
The company's stock held up well as the cyber security sector continued to perform strongly, with a consensus view that hacking will worsen before improving.
The company benefits from rising cybersecurity budgets and AI security leading incremental spend.
MSFT dominates across cloud AI, infrastructure software and Copilot, while SNOW is the strongest next-tier infrastructure beneficiary and CRWD/PANW benefit from cybersecurity budgets +6.9% and AI security leading incremental spend. The key risk is ROI: only...
The stock caught a bid as cyber security names rallied following an increase in PHP2Shell attacks.
The company's stock rose significantly due to critical vulnerabilities identified in PHP, which highlighted the need for enhanced cybersecurity solutions.
The company was identified as a winner from the PHP vulnerability due to its web firewall and endpoint security offerings.
Stifel's C3Q26 VAR survey was the strongest in its 35-quarter history, with 80% of VARs growing year-over-year, all Tier-1 contacts at or above plan, and record pull-ins with record low push-outs.
Cyber budgets remain healthy, with most expecting 5–10% growth in CY26 and a plurality expecting over 10% in CY27.
AI is already generating pipeline for Palo Alto Networks, with the real purchasing inflection anticipated in C4Q26/CY27.
Palo Alto Networks is among Stifel's preferred names in the cybersecurity sector.
AI is already creating pipeline at PANW/CRWD, but the real purchasing inflection is expected in C4Q26/CY27. Preferred names: CRWD, PANW, NET, OKTA and ZS; FTNT likely another upside print, CHKP more subdued.
Wells Fargo's reseller survey indicates strengthening security spending, with 2027 budgets expected to increase by 10-15%, and AI security being the top growth area.
The company is identified as a clear AI winner, with 71% of partners recognizing its strength in AI security, and it leads in SASE share momentum and SIEM/SOAR.
PANW/CRWD remain the clearest AI winners at 71%/74%, with PANW also leading SASE share momentum at +66% and SIEM/SOAR at +63%.
CRWV -7% as investors and X focus on spiking bonds yields (‘32 bonds hit 14% yield, below 80c) while CDS almost at 1000bps. Cyber weaker (PANW/CRWD -3%) on OpenAI in early talks to acquire a Cyber co and OAI CFO saying cyber will be a revenue driver next year.
The company experienced healthy growth with traction in Prisma AIRS and demand for neocloud AI-infrastructure.
Cyber: Barclays VAR call positive on NET/OKTA/CRWD/PANW; mixed elsewhere
Barclays’ security VAR call was most positive on NET, OKTA, CRWD and PANW: NET saw healthy 3Q growth as AI-driven traffic pushed customers into higher tiers; OKTA saw healthy Aug/Sept growth with identity the VAR’s #1 CIO/CISO priority; CRWD posted strong y...
Reseller checks indicate an acceleration in quarter-over-quarter growth, with low 20s from high teens.
Early one today as I need to head out shortly. QQQs +61bps as of 2pm ET, after the S&P and NDX both tagged fresh record highs late morning before fading as crude bounced off its lows; small caps lagged (IWM -62bps; ARKK -1.8%). Software +1.2% outpaced semis...
faded from +6.8% as investos did the math: at ~17% growth, $10B doesn’t arrive until early FY33. Bears will say a dateless $10B target with no long-term margin framework doesn’t change their mid-teens-grower view (the long-term debate). Breach headlines kep...
The company faces tougher comparisons in the second half of 2027.
The company's valuation at 40x revenue is considered extremely high, posing a significant risk if the market sentiment shifts.
BTIG raised its price target after discussions with management, seeing upside to FY27 growth from Chronosphere and Prisma AIRS.
BTIG projects FY27 pro forma revenue growth of 17%+ versus Street at 14.6%, and Next-Generation Security (NGS) ARR growth of 26%+ versus 24.5%.
Chronosphere has already scaled past $500 million ARR and could reach over $800 million in FY27, while Prisma AIRS could grow from ~$120 million ARR in FQ4’26 to over $400 million by year-end, adding incremental growth beyond the core firewall business.
Cyber ripped off the open: PANW +4.6%; OKTA +3.6%; ZS +3.3%; CRWD +2.8%; S +1.6%; FTNT +1.7%; NET +1.5%. No bid pre-market despite a weekend of AI-agent breach headlines, but NVDA named CRWD and PANW as security partners on its agent safety platform.
Broader platform consolidation is expected to favor the company.
Bernstein stated that valuations were full.
Funda.AI sees the company as one of the clearest beneficiaries of the shift towards automated, cross-domain security platforms.
Cyber outperformed again: S +4%; OKTA +2%; ZS +1%. Funda.ai had a good report out yesterday saying AI says Dario Amodei’s “pace the frontier” essay and the linked METR investigation show agentic attacks already spanning zero-days, credentials, cloud workloa...
Wedbush added the stock to its Best Ideas list and raised its price target to $400 from $340, believing the company is positioned to reaccelerate growth through acquisitions that expand its platform without compromising cash generation.
The broader product suite is seen as strengthening platformization and increasing wallet share per customer.
Software: DDOG 9:30am (CFO) · RBRK 9:30am (CEO) · U 9:30am (CFO) · INTU 10:10am (CFO) · MDB 10:10am (CEO/CFO/CPO) · Capgemini 10:10am (CEO) · SpaceXAI 12:25pm (CFO) · CRWD 1:45pm (CEO) · SHOP 2:25pm (CFO/VP Product & Growth) · AUR 2:25pm (CEO) · SAIL 3:05pm...
The company reported record Net New NGS ARR, easily clearing buyside expectations, with estimated organic NNARR accelerating.
AI is showing up in various products, including AIRS, SASE traffic, XSIAM, Idira, and observability, indicating broad platform strength.
Management believes that frontier AI is not eating cybersecurity's lunch and that all players will enjoy the feast together, citing partnerships with OpenAI, Anthropic, and Google.
Demand was broad-based, with pro forma bookings growth accelerating for a second consecutive quarter, and the company added a record number of platformizations.
Reported NGS ARR grew significantly, and estimated organic NNARR showed real acceleration, despite the lack of a clean company-provided bridge.
F1Q27 revenue, RPO, and NGS ARR guidance were comfortably above Street estimates, and FY27 revenue guidance was also strong.
The company ended FY26 with approximately 2,500 platformizations and added approximately 220 during F4Q, with over 65% of NGS ARR coming from platformized customers whose NRR exceeded 120%.
AI is moving from narrative to measurable activity, with Prisma AIRS reaching approximately $120M of ARR and over 800 customers within four quarters, making it the fastest-scaling product.
SASE bookings grew 40% in FY26, and full-year displacement TCV reached approximately $450M, with management believing the company can move to SASE leadership.
Cortex XSIAM exited FY26 above $700M of ARR, growing 70% year-over-year, and surpassed 1,000 customers, with SIEM deployment time reportedly falling significantly.
CyberArk ACV growth accelerated, shared leads exceeded 400, and cost synergies are ahead of plan, broadening the addressable privileged-user base.
Chronosphere ARR surpassed $500M and more than doubled following the acquisition, with positive indicators like XSIAM attachment among net-new logos.
Non-GAAP operating margin reached 29.6%, as opex leverage offset gross-margin pressure, and FY27 operating-margin guidance is in line with Street readings.
Incremental operating leverage is expected from non-frontline selling functions, marketing, sales operations, G&A, and lower support-ticket volumes through automation, offsetting higher costs.
The core bull thesis is that AI makes the company's platform breadth more valuable, as AI-generated attacks require integrated tools and the platform can inspect traffic, govern identities, observe infrastructure, and enforce AI policies.
F4Q provided tangible evidence that the platform thesis is working, with record platformizations, high NRR for platformized customers, and strong growth in SASE bookings, XSIAM ARR, and AIRS.
Acquisitions like CyberArk and Chronosphere are performing better than feared, with accelerated ACV growth, improved margins, and successful cross-selling, demonstrating the ability to scale strategic assets.
The numbers-upside case rests on hopes of conservative initial guidance, as FY27 revenue guidance implies lower pro forma growth than recent trends, and organic NNARR appears flat to low-single-digit despite accelerating bookings.
The most debated aspect overnight among investors was the company's performance.
A single large Chronosphere migration and gross-margin pressure were the main nits keeping the quarter from being entirely clean.
The company's Q4 net new ARR included a nine-figure benefit from a large LLM customer migrating to Chronosphere from an incumbent vendor, which inflates the reported numbers.
CyberArk and Chronosphere materially inflated the headline rates for reported NGS ARR and NNARR, and the lack of a complete organic bridge leaves investors dependent on assumptions about acquired ARR.
The implied FY27 NNARR of approximately $2.025B essentially matched Street estimates and was below buyside expectations, indicating a potential slowdown.
Depending on acquisition assumptions, FY27 guidance implies approximately flat to low-single-digit organic NNARR growth, and a moderation in organic NGS ARR growth.
The advanced-subscription upgrade cycle, which historically provided a significant uplift, is largely behind the company, meaning new tailwinds are needed.
F4Q non-GAAP gross margin was down year-over-year and below Street estimates, reflecting faster-growing cloud/SASE revenue, higher hosting expense, and acquired-business mix.
The bear thesis is that headline growth has become increasingly difficult to separate from acquisition accounting, with a significant portion of the ending NGS ARR balance coming from Chronosphere and CyberArk.
The FY27 guide implies organic NGS ARR growth moderating and organic NNARR roughly flat to low-single-digit growth, despite accelerating F4Q bookings.
Chronosphere creates a clear near-term quality concern, as a large portion of F4Q NGS ARR came from one LLM migration, and quarterly observability NNARR could normalize sharply once that migration is completed.
The margin structure is a risk, with gross margin falling and cloud-hosting costs expected to grow faster than revenue, potentially keeping gross margin below historical levels.
The company is relying on opex automation and M&A synergies to offset cost pressures, but a shortfall in cost execution could put both the FY27 operating-margin guide and FY28 FCF target at risk.
Competition broadens as the company enters identity, observability, and IT operations, facing established players and potentially leading to customers preferring best-of-breed products.
PANW -2% the most debated overnight among investors. We’ll dive into DELL GTLB MDB and PANW then move onto the usual. We’ll put some CRDO Bull vs. Bear Takes in the Slack as soon as we’re done here. Semis -70bps and Software 40bps both down early.
The company delivered solid results, clearing high expectations due to sustained near-term security demand.
Next-Generation Security (NGS) performance exceeded targets, with ARR growth surpassing guidance and net new ARR exceeding bogeys.
The company guided for strong NGS ARR and total revenue growth, significantly above Street expectations.
Cybersecurity stocks were strong as the Hugging Face OpenAI incident reinforced the need for higher security spending, with enterprises needing to defend against autonomous attackers and control agent access.
The company remains a primary long-term competitive risk due to its ability to use account control, bundling, and price as competitive tools.
Competitive risks remain substantial from the company, Microsoft, and specialized cloud, identity, and vulnerability-management vendors.
BTIG's channel checks show material improvement, with core practice growth tracking higher due to larger platform deals, firewall refresh, and SASE/XSIAM adoption.
The company's FQ4 revenue is expected to be modestly above Street, with strong year-over-year and organic growth.
There is room for FY27 guidance to be above consensus, implying stronger pro forma growth than currently anticipated by the Street.
Evercore’s channel checks point to an in-line F4Q with limited upside, but growing concerns around FY27 as new-logo momentum softens, competitive intensity rises across SASE, and recent sales leadership turnover weighs on execution. It sees FY27 ARR growth...
Some investors have expressed concern that Anthropic will promote its own cybersecurity products, given the security talent it has hired to build and sell into cyber peer plays.
BNP Paribas says DDOG and CDNS hiring accelerated in July, while sales job openings also increased versus six months ago, a potentially positive leading indicator for future top-line growth. Rep quota attainment improved across much of software, particularl...
Evercore ISI's partner checks indicate resilient cyber demand, with budgets growing faster than broader IT spending.
The partner was very bullish on PANW, noting it is tracking well ahead of expectations with strong momentum in SASE, cloud security, and XSIAM.
Platform consolidation remains a key driver, benefiting larger vendors like PANW.
cyber budgets still outpacing broader IT spend at ~15% growth vs. ~7% and spending priorities centered on identity and AI-related security. The partner was most bullish on PANW and CRWD: PANW is tracking well ahead of expectations with strong SASE, cloud se...
The company has the preferred setup in cyber into FQ4 with improving partner checks, strong platform consolidation, and multiple catalyst paths.
A survey showed 58% of partners net above plan, with the company ranking #1 for consolidation and share gains in both SASE and security analytics.
XSiam was the most consistently positive Cortex signal, while Prisma AIRS is beginning to convert from proof-of-concept into deals.
AI security is expected to become a more meaningful contributor through FY27.
The company is a standout in Deutsche Bank’s survey of cybersecurity resellers, leading partner outperformance and supporting upside to revenue/NGS ARR in F4Q.
Wells Fargo sees a mixed near-term setup into FQ2 given a rising bar, but field work remains positive, led by Flex consolidation across Next-Gen SIEM and AI security. Partner surveys showed 31% net above plan and improving pipeline strength, while CRWD tied...
Channel checks indicate firm demand, with the forward growth curve flat-to-up rather than decelerating.
Reported May-Jul actuals showed a median year-over-year growth of 17.5%, with the Aug-Oct forecast at 18.8% (excluding an outlier) and the CY2026 expectation at 19.5%, suggesting acceleration in the back half.
All 12 experts surveyed met or exceeded their own plans for the May-Jul quarter, indicating strong performance against expectations.
One dissenting Global Account Manager reported business down by approximately 50% due to channel-strategy and pricing grievances, though this was considered an isolated, partner-specific issue.
Cybersecurity stocks continue to perform well, demonstrating that security is a budget AI cannot cannibalize.
Palo Alto Networks stood out as the clearest architectural winner at Black Hat, with Prisma AIRS combining endpoint and network context.
AI-security demand is still ahead of scaled enterprise adoption, with AI firewalls/gateways expected to gain traction over the next six months and broader agent governance becoming more meaningful next year.
Cyber continues to act well: PANW +6%; CRWD +5% as Cyber checks continue to demonstrate the one software budget AI can’t cannibalize is the one protecting AI.
Strong demand for firewalls and successful integration of acquisitions support a path toward higher free cash flow margins.
The cybersecurity sector, including PANW, showed strong performance.
Capital One upgraded the company to Overweight and raised its price target to $421 from $307, arguing that AI data-center expansion will create larger attack surfaces and drive incremental cybersecurity budget.
The firm sees the company benefiting from protecting both the infrastructure supporting AI deployments and the AI applications and workloads running on top of it.
Capital One views the company’s growing AI momentum and broad platform position as supporting stronger demand and a higher valuation.
Barclays' VAR check showed strong big-deal activity for the company, contributing to overall security revenue growth.
The company's performance supported continued momentum across platform consolidation, endpoint, SASE, and cyber resilience.
PANW/CRWD/ZS/RBRK Lead Barclays’ Strong 2Q Security VAR Check; FTNT/OKTA Mixed, CHKP Weak
PANW saw strong big-deal activity, CRWD accelerated in May/June, ZS grew 20% with a healthy pipeline, and RBRK posted 49% growth in June, supporting continued momentum across platform consolidation, endpoint, SASE and cyber resilience.
The stock performed well after IBM's negative pre-announcement, which cited rapidly evolving, industry-wide cybersecurity concerns.
Citi maintains Buy, citing constructive pre-quiet-period checks, favorable CIO survey read-throughs, and reseller feedback indicating resilient cybersecurity budgets and continued platform-consolidation wins.
The firm sees upside above its FY27 organic ARR estimate if the company sustains annual net-new platformizations and ARR per platformization.
The company is expected to achieve strong FCF margins, and AI, XSIAM, and Cortex momentum support continued estimate revisions.
Near-term headwinds include component inflation, weaker USD, Israeli headcount costs, and cloud migration drag.
Cyber partner checks reinforce a constructive sector view, with resilient budgets and AI security urgency moving into actual pipeline.
Firewall demand surprised to the upside, supporting near-term upside.
Readthroughs from cyber partner checks skew most positive for the company.
Cybersecurity: Evercore ISI Channel Checks Skew Positive on PANW, CRWD, FTNT — Incrementally Negative on ZS
Firewall demand surprised to the upside, though component-driven price increases (including one-week-valid quotes) are driving some pull-forward and complicating large refreshes — supporting near-term upside for FTNT, PANW, and CHKP but raising demand-durab...
Readthroughs skew most positive for CRWD, PANW, FTNT, and OKTA, and most mixed on ZS.
Component-driven price increases, including one-week-valid quotes, are driving some pull-forward and complicating large refreshes, raising demand-durability questions.
There are emerging signs of cracks in the demand narrative, despite continued positive sell-side checks.
Cyber weaker with PANW -5% / CRWD -2% as finally hearing some cracks on the edges of the Mythos demand ramp narrative despite continued positive sell side checks. We called these out yesterday:
Hyperscaler AI capex should continue expanding, supporting security leaders.
The stock underperformed within the cyber security software sector.
Cyber underperformed in software PANW -6% / ZS -60bps / CRWD -2.4%. A good thread on the space here in Slack:
Outside of semis, security continues to lead the way in software as names like OKTA, PANW, and CRWD all hitting 52wk highs after a couple of positive sell-side checks early which called out improving demand.
Palo Alto's broad platform strategy is driving larger deal sizes and cross-sell opportunities across various security segments, with Cortex XSIAM and Chronosphere on track to exceed $1 billion ARR.
Accelerating momentum in Prisma SASE, CyberArk integration, and Prisma AIRS creates an underappreciated second leg of growth that should support sustained mid-teens growth over the next several years.
Demand across network security, SOC, and AI remains strong as enterprises expand security spending beyond vulnerability management into broader platform consolidation.
AI-driven products such as Mythos, Cortex, and CyberArk integration are expected to drive incremental growth through FY27/28, and new segment reporting will better highlight the strength of the Network, Cortex, and Identity businesses.
The Street is modeling an overly conservative FY27 outlook by underestimating pro forma growth following recent acquisitions.
Upcoming product segmentation will clarify the business mix and remove much of the organic-versus-inorganic debate, while FY27 guidance, CyberArk synergies, and AI-driven subscription growth provide multiple near-term catalysts.
There is upside to consensus free cash flow, and a valuation re-rating is expected as investors gain confidence in the company’s normalized growth profile.
A slower margin ramp is expected as CyberArk integration, Chronosphere, and higher hardware component costs weigh on FY27 profitability before margin synergies emerge in FY28.
The stock finished in the green, indicating outperformance.
Some slight outperformance from SNOW/DDOG only down 1-2% on some positive sell side mentions while cyber names PANW/CRWD finished in the green.
Piper became increasingly constructive on the company's AI opportunity after meetings with management, highlighting strong customer interest in securing AI models, agents, and enterprise workflows.
The company has conducted hundreds of customer briefings on AI security following the launch of models like Claude, GPT-5.5, and Mythos, with enterprises prioritizing AI-related security investments.
AI is driving a broader security spending inflection that benefits multiple parts of the company's portfolio, including firewall, identity, observability, and CyberArk-related capabilities.
Management emphasized that AI models do not eliminate the need for security platforms, reinforcing the view that AI ultimately expands rather than reduces security demand.
The company outperformed within the software sector, specifically in cyber security.
In Tech, Semis +8% led the way higher with SOX crossing back above ST moving averages. Despite the index still being 3-4% below its highs, we’re already seeing some individual names/themes breakout: Semicap continues its strength with names like LRCX, AMAT...
Following meetings with PANW IR, Barclays came away more constructive on FY27 growth, estimating FY26 organic NNARR improved by at least $20M and arguing FY27 NNARR could exceed $1.9B. The firm sees several tailwinds, including easing headwinds from Prisma Cloud/Expanse/XSOAR, a tougher Chronosphere comp rolling off, and potential upside from Anthropic’s Mythos initiative that is not currently modeled. Barclays also pushed back on concerns around subscription revenue deceleration, arguing changing revenue-recognition mechanics and product mix are obscuring the underlying recurring revenue trends. The firm highlighted Network Security, now over 70% of revenue and accelerating, as an underappreciated driver that could reduce billing-duration headwinds and support PANW’s path toward a 40% FCF margin by FY28.
Identity is expected to be the earliest AI beneficiary within cybersecurity, as enterprises increasingly need to secure non-human identities and AI agents.
Identity-related demand is expected to strengthen as agentic AI adoption accelerates, with identity becoming a foundational layer for governance, access control, and machine authentication.
The company is favored due to structural tailwinds, improving adoption trends, and the potential for AI-driven revenue acceleration becoming more visible in 2027.
The company is well-positioned to capture incremental value in the security value chain due to its broad telemetry, workflow ownership, and closed-loop security capabilities.
OKTA/PANW/CYBR/SAIL: Jefferies Remains Constructive on Identity, Sees AI Adoption Driving Multi-Year Tailwind
remediation, response, governance, and audit workflows. As a result, platform vendors with broad telemetry, workflow ownership, and closed-loop security capabilities—such as PANW, MSFT, CRWD, GOOGL, and CYBR—appear best positioned to capture incremental val...
The company delivered solid numbers, with revenue, NGS, ARR, RPO, OM, and FCF all exceeding expectations, and the FY26 revenue guide of +24% was better than street estimates.
The NGS ARR guide of 59-60% was better than street estimates of 54% and slightly ahead of internal targets.
Organic NGS ARR of $6.5 billion, up 28% year-over-year, and organic net-new NGS ARR of approximately $370 million, up 18% year-over-year, exceeded buyside expectations.
Core NGS ARR upside contributed approximately $20 million to the headline beat, with the remainder driven by CyberArk/Chronosphere strength.
Management expressed confidence in FQ4 NGS ARR due to SASE/XSIAM momentum, hardware backlog with attached ARR, and continued Chronosphere contribution.
Management identified multiple monetization vectors tied to AI, including traffic inspection in NetSec, Prisma AIRS demand, XSIAM automation, Chronosphere telemetry for AI-native workloads, and identity/agent security.
Prisma AIRS surpassed 300 customers, up from over 100 last quarter, with visibility towards $100 million ARR in the next couple of quarters, including a significant deal with a global consulting customer.
Product revenue grew 31.2% year-over-year, exceeding street estimates of 25%, and hardware delivered its best quarter in a decade with NGFW bookings up nearly 40% year-over-year, driven by AI data centers and enterprise AI networking.
SASE ARR reached $1.6 billion, up 40% year-over-year, with nearly 50 displacement wins totaling approximately $200 million TCV.
XSIAM exceeded $600 million ARR, up 100% year-over-year, with approximately 740 customers.
Chronosphere's Observability ARR surpassed $300 million and nearly doubled since its acquisition announcement, with a leading frontier AI lab contributing over $200 million ARR.
CyberArk exceeded internal benchmarks, with profitability convergence 3-6 months ahead of plan, and synergies coming faster than expected.
Non-GAAP operating margin was 27.1% versus street estimates of 25.9%, and FCF was $910 million (30.3% margin) versus street estimates of approximately $741 million.
The FY26 FCF margin guide moved to 37.5% versus street estimates of 36.7%, with management reiterating a path to 40% FCF margin in FY28.
The quarter confirmed Palo Alto Networks is becoming a broad AI-era cybersecurity platform, beating on both reported and organic metrics, achieving its best hardware quarter in a decade, and significantly growing SASE, XSIAM, and Prisma AIRS.
The AI narrative broadened to suggest AI increases cyber spend, with management framing frontier models as expanding the industry's terminal value and various products directly supporting AI security workflows.
The large M&A strategy is now seen as de-risking rather than increasing risk, with CyberArk and Chronosphere performing well above expectations.
If the company can scale identity and observability while maintaining high FCF margins, the bull case becomes a "cyber platform compounder" story.
Concerns exist that the headline beats and raises were significantly aided by CyberArk and Chronosphere, with the core NGS ARR beat being modest and potentially below heightened expectations.
The decision to no longer disclose M&A contribution separately raises concerns about modeling organic growth and reduces transparency for a stock trading at premium multiples.
Despite strong product revenue, the FY26 product guide remained low-20s, raising questions about pull-forward, supply chain, lead times, and the sustainability of hardware strength.
Gross margin missed street estimates despite operating margin upside, due to memory/storage costs and hardware mix.
Some organic subscription/service math appears less clear depending on CyberArk term license assumptions, and Prisma Cloud to Cortex Cloud migration remains a near-term drag.
The broader platformization strategy faces competition from other cyber vendors, and expansion into identity and observability increases integration and category execution risk.
The company reported solid Q3 results, with EPS and revenue exceeding Street expectations.
Q4 EPS and revenue guidance were strong, both exceeding Street estimates.
Full-year EPS and revenue guidance were raised, indicating a positive outlook.
JPM raised its price target to $300 from $200 ahead of earnings, citing peer multiple expansion and the company’s positioning as a key AI security beneficiary.
The firm’s channel checks point to healthy demand, with AI-related security spending increasingly supplementing traditional IT budgets and accelerating pipeline activity.
JPM also highlights Project Glasswing as a differentiated near-term catalyst and views CYBR guidance as conservative, leaving room for upside as integration progresses.
The analyst expects continued strength in SASE and software mix, supporting margins and reinforcing the AI security narrative.
In Tech, we have a busy week coming up with Earnings from AVGO, CRWD, CRDO, HPE, GTLB, PANW, CIEN, DOCU and more. Computex continues through the week with keynotes INTC’s Lip Bu Tan, and MRVL CEO. BAML’s and ISI’s TMT conferences start Tuesday as well as th...
PANW: JPM Raises PT to $300 Ahead of Print, Sees AI Security Demand and CYBR Upside
Clev is positive on the company, stating that Mythos is supporting increased awareness and is likely to accelerate security investments into the second half of 2026.
The company is benefiting from strong spending trends in Data/Infra Apps, Cyber, and Dev Tools, as CIOs increasingly view data quality/security as the biggest AI scaling bottlenecks.
Wedbush raised its price target, highlighting the company as a top AI-cyber beneficiary, with its Prisma AIRS/Idra platform strategy becoming increasingly differentiated as AI-native security demand accelerates.
Cybersecurity: Wedbush Raises PTs on PANW and CRWD, Says AI Is Creating the Strongest Cyber Demand Environment in 20 Years
The stock was down early, along with other cyber names, due to ZS's horrid print.
MU +8% getting close to $1k. Lots of your favorite AI semi names up 4-6%. Internet and Software down early, the latter led lower by ZS’s -25% horrid print, which is bringing down other cyber names as well (PANW/CRWD -4%). Interestingly, hyperscalers largely...
Wells also noted CIOs increasingly view data quality/security as the biggest AI scaling bottlenecks, supporting continued spending toward names like $SNOW, $CRWD, and $PANW, while customer-service seat counts appear most at risk from AI automation.
Cybersecurity stocks are taking a bit of a breather from recent highs in sympathy with ZS's decline.
Evercore ISI says recent survey/channel data points to improving demand trends and strengthening platform consolidation momentum for the company heading into F3Q.
The firm highlighted increasingly constructive feedback around CYBR integration, with partners seeing growing cross-sell opportunities across identity, SOC, and broader platform consolidation workflows.
Evercore noted healthy NGS ARR bogeys, stronger firewall/application demand following FTNT commentary, and improving sentiment around the company’s AI-native security positioning, raising its price target to $320 from $250.
PANW: Evercore Says Survey Data and CYBR Momentum Support More Constructive View Into F3Q
The company is a close second to DDOG as a most loved software stock, specifically in the cybersecurity sector.
Chronosphere traction remains earlier-stage and more mixed.
The company's stock continued to rip to new highs, indicating strong performance in the cyber security sector.
The CEO believes that Wall Street investors are largely correct in their assessment that AI will significantly impact a portion of the SaaS world, with 80% of user interfaces potentially disappearing as AI models generate interfaces on the fly.
The company is uniquely well-positioned for the shift towards agentic AI due to its broad platform architecture covering various security aspects.
Prisma AIRS is an increasingly differentiated AI security/control layer for securing agents, models, applications, and data flows.
There is growing demand for AI-aware SOC/security platforms as enterprises adapt to machine-speed AI threats.
The stock saw an increase, driven by positive commentary on the cybersecurity space and anticipated White House executive order on cybersecurity and AI safety.
Industry/channel checks point to a solid demand backdrop into F3Q26, with investors increasingly focused on whether platformization momentum and discounted conversions can drive higher-value ARR commitments back into the low-30% range.
The company is benefiting from competitor execution issues following CHKP’s weaker results, creating incremental share gain opportunities.
Prisma AIRS momentum and CyberArk/Chronosphere integration milestones are additional areas of investor focus.
TD Cowen says industry/channel checks point to a solid demand backdrop for PANW into F3Q26, with investors increasingly focused on whether platformization momentum and discounted conversions can drive higher-value ARR commitments back into the low-30% range...
The stock is taking a breather, consistent with the broader cybersecurity sector.
Cyber largely taking a breather: PANW -3%; OKTA -1.5% although FTNT contineus to rocket to new highs
KeyBanc reported that Palo Alto checks improved materially both quarter-over-quarter and year-over-year, with stronger U.S. Federal momentum and improving Prisma AIRS pipeline trends highlighted by partners.
Cybersecurity: KeyBanc More Positive on PANW, OKTA, and ZS; Sees CRWD Demand Staying Strong
KeyBanc's checks indicated materially improved performance both quarter-over-quarter and year-over-year.
The stock saw a positive movement as cybersecurity continues to hit new highs.
The cybersecurity sector continues to perform well, with the stock showing positive movement.
The company's performance lifted the entire cyber security space.
FTNT +20% shaking off the bearish concerns that the big beat was a pull forward. Brought up the whole cyber space with CRWD/PANW +7-8% and ZS +10%.
BTIG's checks indicated strong performance for Prisma SASE, with partners highlighting the company's ability to upsell its firewall base and sustain growth.
Sentiment around Cloud Security improved significantly after previous migration concerns.
Partnerships and ecosystems, such as Palo Alto Networks', are becoming critical to address increasingly complex cyber threats, with autonomous defensive tools emerging as a core enterprise requirement.
CRWD/PANW/ZS: JPMorgan Sees AI Expanding Cyber Attack Surface, Driving Structural Security Spend Growth
The stock showed strong performance, as JPM was bullish on the cybersecurity sector, noting that agentic AI is significantly expanding the cyber attack surface, accelerating vulnerability discovery and exploit timelines beyond current remediation capacity.
PANW 3% / OKTA 2%+/ FTNT +3% / ZS +3.5%. Mythos Here’s Axios on Mythos and Chatgpt Cyber:
The stock was up early on news of Bessent meeting with bank chiefs ahead of the Mythos release, suggesting positive anticipation for the product.
PANW/CRWD +2% on more Mythos news - this time Bessent meeting with bank chiefs ahead of the release.
The company's performance was broadly constructive, with March activity inflecting higher, and the firm believes the high end of its revenue and NGS ARR guidance is achievable.
Morgan Stanley became more constructive after a CFO meeting, noting continued momentum in platformization, with early deals reducing friction points and SASE ARR reaching ~$1.5bn.
Prisma AIRS, though early, is seeing strong engagement from CISOs regarding AI runtime protection and workflow security.
Management emphasized that recent gross margin variability is mix-driven, not structural, and reinforced discipline on ensuring M&A scales to Palo Alto Networks' margin profile, supporting a path to 40%+ FCF margins.
Benchmark initiated coverage with a Buy rating and a $200 price target, calling Palo Alto a core cybersecurity holding with clear visibility to more than doubling Next-Generation Security (NGS) ARR to $20 billion by FY2030.
The firm argues that cybersecurity maintains a sufficient competitive moat against AI/GenAI disruption, unlike application software.
The AI super cycle is seen as a long-term tailwind, similar to the prior cloud/digital transformation wave.
Palo Alto finished FY25 with a Rule of 52.8, expected to approach ~60 in FY26, with AI and Quantum Security upside not yet factored into projections.
The CEO, Nikesh Arora, purchased $10 million worth of shares.
The company is seen as the most insulated from memory-driven cost pressure among firewall vendors.
JPMorgan highlights memory pricing as a potential headwind for firewall vendors, noting that memory can account for roughly 10%–25% of firewall BOM, and expects cost pressure to gradually flow through the channel.
Budget reallocation from other IT spend categories exposed to rising memory costs could weigh on firewall demand at the margin.
PANW / FTNT / CHKP: JPM Flags Memory Price Risk as Potential Overhang for Firewall Vendors
Chinese authorities have instructed domestic companies to stop using cybersecurity software from U.S. and Israeli firms, including Palo Alto Networks, due to national security concerns.
Citi added the company to its Analyst Focus List, reiterating Buy and a $235 target, citing its "pole position" in consolidating enterprise security spend following a positive CISO survey.
The company shows healthier pipelines into January, despite being down in November/December.
The company was down in November/December, contributing to security growth being slightly below plan in Q4.
PANW and CHKP were down in Nov/Dec, though both show healthier pipelines into January, while
Barclays' checks indicated security growth of approximately 10% year-over-year in Q4, which was slightly below plan, despite improving sequentially through October–December and lagging networking/hardware.
Cyber weaker with CRWD -3, PANW -1.6%, FTNT -2.5% as barclays had some mixed checks saying security grew ~10% y/y in Q4, slightly below plan but improving sequentially through Oct–Dec and lagging networking/hardware
The company delivered a sufficient quarter with steady momentum in SASE, XIM, and software firewalls.
The risk-reward profile has turned unfavorable as the stock trades at a premium valuation while revenue growth continues to decelerate.
Platforming deals are shifting revenue classifications rather than driving true incremental growth.
Solid F1Q setup supported by easier product comps and stronger cRPO trends.
Valuation is elevated, and concerns persist regarding contract duration and deal scrutiny.
Strengthening platform adoption across SASE and XSIAM with reduced pricing friction.
Positive integration and cross-sell prospects from the CYBR acquisition.
PANW: BTIG Upgrades to Buy; Partner Checks and CYBR Integration Bolster Growth Conviction
BTIG upgrades Palo Alto Networks (PANW) to Buy with a $248 price target, citing strengthening platform adoption and rising confidence in both near-term execution and medium-term synergy potential from the CYBR acquisition. The firm’s latest partner checks r...
Research through 2026-10-27 · 2025-10-09 to 2026-10-27 · 72 source reports.
| Range | Prices through |
|---|---|
| 1W | |
| 1M | |
| 3M | |
| 6M | |
| 1Y | |
| 2Y | |
| 3Y |
Research through 2026-11-03. Artifact validity does not establish factual accuracy or research freshness.