Palo Alto Networks is a cybersecurity company that helps enterprises, governments, and service providers protect their networks, cloud environments, and IT infrastructure from cyberattacks. The company organizes its products into three platforms: Network Security, Security Operations (Cortex), and Threat Intelligence (Unit 42). Network Security is the largest business and centers on next-generation firewalls (NGFWs) in both hardware and software form factors, as well as SASE (Secure Access Service Edge), which secures remote workers and branch offices via a cloud-delivered solution. The Cortex platform is Palo Alto's AI-driven security operations business, anchored by XSIAM, an AI-powered SOC platform that replaces traditional SIEM tools by ingesting and correlating data across endpoints, networks, cloud, and identity sources to automate threat detection and response. Unit 42 is a professional services business offering incident response, threat research, and security consulting. Palo Alto sells primarily through distributors and resellers, supplemented by a direct sales force on large accounts. Revenue comes from hardware firewall sales, recurring software subscriptions, and support contracts, with subscriptions being the fastest-growing stream. The company's core strategy, which it calls "platformization," encourages customers to consolidate multiple security point products onto Palo Alto's platforms, resulting in larger, stickier, multi-year deals with high net retention. In July 2025, Palo Alto announced an agreement to acquire CyberArk, the leading privileged access management company, to expand into identity security.
Read full business overview →Mid to long-term bullish thesis
View →Mid to long-term bearish thesis
View →Mid to long-term bull-bear debate
View → NEWSummary and scoring of the bull-bear debate
View →Find ideas with similar bull or bear theses
View →Investor-relevant company attributes
View →Key risks to the business
View →Comparisons of annual risk disclosures
View →