Optional product analytics
With your permission, we use privacy-limited analytics to understand which research journeys work. We do not run advertising trackers or session replay. You can change this choice in Preferences. Read the Privacy Policy.
Bull: Bull (20%): Rapid AI-driven security adoption, significant margin expansion, fair value $101.35.
Fundamental: Intrinsic models heavily penalize extreme SBC dilution and modest current operating margins.
Palo Alto Networks is successfully transitioning to a cloud and subscription-led model, consolidating enterprise security. However, its current valuation at $196.53 reflects massive market optimism, implying unsustainable 30.9% growth while completely ignoring the dilutive impact of extreme stock-based compensation (~14% of revenue). Intrinsic cash flows support a fair value closer to $77.
Palo Alto Networks is successfully transitioning to a cloud and subscription-led model, consolidating enterprise security. However, its current valuation at $196.53 reflects massive market optimism, implying unsustainable 30.9% growth while completely ignoring the dilutive impact of extreme stock-based compensation (~14% of revenue). Intrinsic cash flows support a fair value closer to $77.
High switching costs driven by consolidated enterprise security architecture.
Comprehensive platform spanning network, cloud, and security operations.
Fundamental: Intrinsic models heavily penalize extreme SBC dilution and modest current operating margins.
Sell. Valuation is completely decoupled from dilution-adjusted cash flow realities, carrying immense expectations burden.
Palo Alto Networks, Inc. provides cybersecurity solutions in the Americas, Europe, the Middle East, Africa, the Asia Pacific, and Japan. It offers Prisma Access, a secure access service edge solution; Strata Cloud Manager, a network security management solution; and Prisma AIRS to protect customers' entire AI ecosystem. It provides a comprehensive cloud native application protection platform; and Code to Cloud platform, as well as offers VM-Series and CN-Series virtual firewalls for inline network security on multi- and hybrid-cloud environments. It provides security operation solutions through the Cortex platform that includes Cortex XSIAM, an AI-driven security operations platform; Cortex XDR to prevent, detect, and respond to cybersecurity attacks; and Cortex XSOAR for security orchestration, automation, and response; and Cortex Xpanse for attack surface management, as well as offers threat intelligence and advisory services under the Unit 42 name. It provides subscription services covering the areas of threat prevention, malware and persistent threat, URL filtering, laptop and mobile device protection, DNS security, Internet of Things security, SaaS security API, and SaaS security inline; and threat intelligence, data loss prevention, services to resolve network disruptions, and sensitive data protection. It offers professional services, including architecture design and planning, implementation, configuration, and firewall migration; education services, such as certifications, as well as online and in-classroom training; and support services. It sells its products and services through its channel partners, as well as directly to enterprises, service providers, and government entities operating in various industries, including education, energy, financial services, government entities, healthcare, Internet and media, manufacturing, public sector, and telecommunications. The company was incorporated in 2005 and is headquartered in Santa Clara, California.
Under a macroeconomic downturn, enterprise IT budgets contract, delaying large-scale platform migrations. PANW's premium pricing faces pressure, while elevated SBC remains fixed, structurally compressing margins and pushing free cash flow below the required $3.4B maintenance threshold.
High switching costs driven by consolidated enterprise security architecture.
Comprehensive platform spanning network, cloud, and security operations.
Network effects from vast threat intelligence telemetry (Unit 42).
Economic profit is supported when reported returns exceed the company cost-of-capital hurdle.
Unavailable
FCFF DCF remains positive at the base case: base FCFF $1.2B after capex $276.6M, with terminal value at 59.8% of enterprise value. No FCF cliff is projected unless capex/ or materially resets.
If NGS ARR growth beats and operating margins exceed 22%, momentum sustains the premium multiple. If SBC remains high or growth decelerates, multiple compression accelerates.
If NGS ARR growth beats and operating margins exceed 22%, momentum sustains the premium multiple. If SBC remains high or growth decelerates, multiple compression accelerates.
High industry capital requirements for R&D are partially offset by software margins, but heavy reliance on equity compensation creates silent dilution.
Rising cyber threats and AI-driven attacks force accelerated enterprise adoption of unified security platforms, expanding PANW's addressable market.
Macroeconomic tightening forces enterprises to optimize software spend, lengthening sales cycles and delaying large-scale cybersecurity deployments.
High industry capital requirements for R&D are partially offset by software margins, but heavy reliance on equity compensation creates silent dilution.
Zero weight.
Sell existing positions. Capitalize on market optimism driven by transition momentum before GAAP realities compress multiples.
Fundamental: Intrinsic models heavily penalize extreme SBC dilution and modest current operating margins.
Market: internal valuation cross-checks prices in 30.9% sustained growth, ignoring structural dilution.
Sell. The market benchmark trades on immense forward expectations and relative multiples, fundamentally decoupling from current-state and dilution-adjusted cash flow realities.
Downside case: Fundamental: Intrinsic models heavily penalize extreme SBC dilution and modest current operating margins.
Capture your own thesis, position size, and follow-up questions. Stays on this device, only you can see it.
Bear (20%): Pricing pressure, delayed migrations, multiple compression, fair value $54.82.
Persistently high stock-based compensation (~14% of revenue) prevents meaningful GAAP earnings inflection, eroding shareholder value despite top-line growth.
Major cloud providers bundle native security tools, commoditizing PANW's core network and cloud security modules, forcing significant pricing concessions.
Enterprises revert to best-of-breed point solutions in response to a major vulnerability or breach within the consolidated Cortex platform.
The five developments that would weaken our investment case.
Next-generation security ARR represents Palo Alto's core strategic growth engine as hardware firewalls mature. Slower cloud and security operations growth undermines the platformization strategy, signaling enterprise resistance to vendor consolidation and depressing future cash flow generation.
Current:Revenue growth was 14.9% for the period ended 2025-07-31.
Alert ifNGS ARR growth decelerates below 20.0% year-over-year for two consecutive quarters.
Failing to expand operating margins toward management targets demonstrates an inability to generate structural operating leverage. Persistent margin stagnation undercuts earnings power, limiting GAAP net income expansion and leaving the stock vulnerable to valuation derating.
Current:Operating margin was 13.5% for the period ended 2025-07-31.
Alert ifOperating margin stalls below 22.0% over four consecutive quarters.
Elevated stock compensation creates a misleading divergence between reported free cash flow and true economic profit. Persistent heavy share-based dilution reduces per-share intrinsic value, eroding long-term shareholder equity and delaying genuine GAAP profitability inflection.
Current:SBC was ~14% of revenue as of the 2026-05-08 analysis date.
Palo Alto's platformization thesis relies on displacing fragmented point products across network, cloud, and security operations. Losing major accounts to specialized peers or native cloud providers invalidates the multi-product consolidation thesis and impairs long-term contract value.
Current:Revenue was $9.22B for the period ended 2025-07-31.
Alert ifDocumented loss or competitive displacement of two or more major enterprise platform consolidation deals to rival cybersecurity vendors within a single fiscal year.
A sharp contraction in cash conversion highlights worsening billing terms, shorter customer contract durations, or declining upfront deferred revenue collections. Weakened conversion constrains balance sheet flexibility and reduces the discretionary cash available for share repurchases and strategic acquisitions.
Current:Operating cash flow to net income was 3.277 as of the report's 2026-05-08 analysis date.
Each lens answers a different valuation question. Only included lenses set Fair value; floors and diagnostics provide context.
Project SBC-adjusted EPS, discount each year's earnings at cost of equity, then add a Gordon-growth terminal value.
Project EPS through the explicit advantage period, fade growth as competition catches up, and discount the full stream at cost of equity.
Apply a terminal P/E to the dated forward EPS path, then discount that future share value back to the analysis date.
Convert the revenue and margin path into after-tax free cash flow, discount the annual per-share amounts and at , then adjust for signed per current share.
Add depreciation to net income, subtract maintenance capex, divide by diluted shares, and apply a normalized valuation multiple.
Multiply the peer median PEG by this stock's forecast growth to derive an implied forward P/E, then apply it to forward EPS.
Bull (20%): Rapid AI-driven security adoption, significant margin expansion, fair value $101.35.
Base (60%): Steady platform consolidation, 22% operating margins, fair value $77.35.
If NGS ARR growth beats and operating margins exceed 22%, momentum sustains the premium multiple. If SBC remains high or growth decelerates, multiple compression accelerates.
If NGS ARR growth beats and operating margins exceed 22%, momentum sustains the premium multiple. If SBC remains high or growth decelerates, multiple compression accelerates.
Warning level: NGS ARR growth decelerates below 20.0% year-over-year for two consecutive quarters. Next-generation security ARR represents Palo Alto's core strategic growth engine as hardware firewalls mature. Slower cloud and security operations growth undermines the platformization strategy, signaling enterprise resistance to vendor consolidation and depressing future cash flow generation.
Warning level: Operating margin stalls below 22.0% over four consecutive quarters. Failing to expand operating margins toward management targets demonstrates an inability to generate structural operating leverage. Persistent margin stagnation undercuts earnings power, limiting GAAP net income expansion and leaving the stock vulnerable to valuation derating.
Warning level: SBC expense remains above 10.0% of total revenue over any trailing twelve-month measurement window. Elevated stock compensation creates a misleading divergence between reported free cash flow and true economic profit. Persistent heavy share-based reduces per-share , eroding long-term shareholder equity and delaying genuine GAAP profitability inflection.
Warning level: Documented loss or competitive displacement of two or more major enterprise platform consolidation deals to rival cybersecurity vendors within a single fiscal year. Palo Alto's platformization thesis relies on displacing fragmented point products across network, cloud, and security operations. Losing major accounts to specialized peers or native cloud providers invalidates the multi-product consolidation thesis and impairs long-term contract value.
Warning level: Cash flow to net income conversion ratio drops below 2.0x over any trailing twelve-month period. A sharp contraction in cash conversion highlights worsening billing terms, shorter customer contract durations, or declining upfront deferred collections. Weakened conversion constrains balance sheet flexibility and reduces the discretionary cash available for share repurchases and strategic acquisitions.
| $6.89B |
| $8.03B |
| $9.22B |
| +18.8% |
| Gross profit | $3.78B | $4.98B | $5.97B | $6.77B | +21.4% |
| Operating income | $-187.0M | $586.8M | $993.1M | $1.60B | — |
| Net income | $-267.0M | $439.7M | $2.58B | $1.13B | — |
| EPS (diluted) | $-0.45 | $0.64 | $3.64 | $1.60 | — |
| EBITDA | $95.6M | $869.0M | $1.28B | $1.94B | +172.8% |
| R&D | $1.42B | $1.60B | $1.81B | $1.98B | +11.9% |
| SG&A | $2.55B | $2.99B | $3.48B | $3.54B | +11.5% |
Capital allocation should be evaluated against reinvestment needs, balance-sheet strength, and shareholder returns.
| Revenue | 9,221,500,000 |
|---|---|
| Cost of revenue | 2,451,600,000 |
| Gross profit | 6,769,900,000 |
| Operating expenses | 5,527,000,000 |
| Operating income | 1,242,900,000 |
| Non-operating items and tax | -109,000,000 |
| Net income | 1,133,900,000 |
| Total assets | 23,576,200,000 |
|---|---|
| Cash | 2,268,600,000 |
| Current assets | 7,522,800,000 |
| Total liabilities | 15,751,800,000 |
| Current liabilities | 7,988,000,000 |
| Shareholders’ equity | 7,824,400,000 |
Point-in-time financial data used in the 2026-05-08 analysis.
| Period | Revenue | EBITDA | Net income | Operating cash flow | Free cash flow | Capex | Depreciation and amortization | Stock-based compensation | Share repurchases | Dividends paid | Net debt issuance | Investing cash flow | Financing cash flow | Beginning cash | Ending cash | Cash and investments | Total debt | Operating margin | ROIC | WACC | ROIC − WACC spread |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2022-07-31 | 5.5B | 95.6M | -267M | 2B | 1.8B | 192.8M | 282.6M | 1B | 892.3M | — | -600K | — | — | — | — | 2.1B | 4B | -3.4% | — | 7.2% | — |
| 2023-07-31 | 6.9B | 869M | 439.7M | 2.8B | 2.6B | 146.3M | 282.2M | 1.1B | 272.7M | — | -1.7B | — | — | — | — | 1.1B | 2.3B | 5.6% | — | 9.2% | — |
| 2024-07-31 | 8B | 1.3B | 2.6B | 3.3B | 3.1B | 156.8M | 283.3M | 1.1B | 566.7M | — | -1B | — | — | — | — | 1.5B | 1.3B | 8.5% | — | 9.3% | — |
| 2025-07-31 | 9.2B | 1.9B | 1.1B | 3.7B | 3.5B | 246.2M | 343.4M | 1.3B | 0 | — | -965.6M | — | — | — | — | 2.3B | 338.2M | 13.5% | — | 10.1% | — |
PANW trades at 49.5x forward earnings against a peer median of 65.8x; EV/EBITDA of 101.7x against a peer median of 25.0x; 5 peers.
Alert ifCash flow to net income conversion ratio drops below 2.0x over any trailing twelve-month period.
| Oracle Corporation |
| 24.2x |
| 8.7x |
| 25.0x |
| 57.6% |
| 32.7% |
| PLTR | Palantir Technologies Inc. | 65.8x | 61.4x | 154.9x | 32.6% | 46.2% |
| CRWD | CrowdStrike Holdings Inc. | 75.9x | 24.8x | -2,450.4x | -4.1% | 1.0% |
