Back
Nikesh Arora
Chairman & Chief Executive Officer, Palo Alto Networks Inc

Palo Alto Networks Inc ($PANW) Q3 2026 Earnings Call

🎥 Jun 02, 2026 📺 Castify Earnings Call ⏱ 60m 👁 1 views
Hey everyone and welcome to PaloAlto Network's fiscal third quarter 2026 earnings conference call i am James Farala senior vice ...
Watch on YouTube

About Nikesh Arora

Nikesh Arora, chairman and CEO of Palo Alto Networks, has been discussing the impact of artificial intelligence on cybersecurity in several public appearances. During the company’s fiscal third quarter 2026 earnings call on June 2, 2026, Arora said that “we have entered the era of truly cyber capable systems” and described a model called “Mythos” as possessing “the autonomous capability to execute comprehensive attack campaigns from start to finish.” He stated that the company’s AI tool found vulnerabilities in six weeks that “would have normally taken us five to seven years to find.” Arora also said that “analytical SaaS is dead” and that “if you’re an analytical SaaS company, it’s over,” arguing that customers can now run models against data themselves. He declared on the earnings call that “we officially declare SaaS Eclipse for cyber security dead.” Arora also discussed Palo Alto Networks’ acquisition strategy, calling the integration of CyberArk “existential for me” and “existential for my team,” adding that “if I can prove that, the market will give me the license to go win again.” He expressed optimism about AI, stating that “AI is going to be amazing” and that it will “reshape everything we do around us.” Arora noted that the company has had 1,200 customer interactions following the Mythos announcement and that Palo Alto Networks is “hiring more people” on the technology side. He also said he believes Google will be “the first 10 trillion dollar company in our lifetime.”

Source: AI-verified profile updated from Nikesh Arora's recent appearances. Browse all interviews →

Transcript (52 segments)
✨ AI-enhanced transcript with speaker attribution
M
Mohammad Zubair Owalla0:00
Good afternoon everyone, and welcome to Palo Alto Networks fiscal third quarter 2026 earnings conference call. I'm Mohammad Zubair Owalla, senior vice president of investor relations and strategic finance. Please note that this call is being recorded today, Tuesday, June 2nd, 2026 at 1:30 p.m. Pacific Time. With me on today's call to discuss our fiscal third quarter results are Nikesh Arora, our chairman and chief executive officer, and Dipak Kalra, our chief financial officer. Following our prepared remarks, Lee Klarich, our chief product and technology officer and board member, will join us for the questions and answer portion. You can find the press release and other information to supplement today's discussion on our website at investors.paloaltonetworks.com. While there, please click on the link for quarterly results to find the Q3 2026 supplemental financial information and Q3 2026 earnings presentation. During the course of today's call, we'll be making forward-looking statements and projections regarding the company's business operations and financial performance, as well as the company's recent acquisitions. These statements made today are subject to a number of risks and uncertainties that could cause our actual results to differ from these forward-looking statements. Please review our press release and recent SEC filings for a description of these risks and uncertainties. We assume no obligation to update any forward-looking statements made in today's presentation. Our presentation also contains non-GAAP financial measures and key metrics relating to the company's past and expected future performance. Non-GAAP financial measures should not be considered a substitute for financial measures made in accordance with GAAP. The most directly comparable GAAP financial metrics and reconciliations are in the press release and the appendix of the investor presentation. Unless otherwise noted, all results and comparisons are on a fiscal year-over-year basis. I will now turn the call over to Nikesh.
N
Nikesh Arora2:14
Thank you, Hamza, and good afternoon everyone for joining us today for our earnings call. As you can see, our Q3 performance was exceptional as we delivered a record quarter. Our results surpassed every guided metric fueled by an acceleration in organic bookings momentum, the sustained tailwinds from our platformization strategy, and surging cybersecurity needs as AI transitions from experimental stages to enterprise-wide production. Within our core portfolio, we achieved significant traction in network security and SIEM, while Prisma SASE continues to establish itself as the fastest-scaling product in our history. Altogether, we delivered $8.1 billion in NGSAAR during the third quarter, representing 60% year-over-year growth. This is our most significant quarterly outperformance to date and surpassed our guidance. Our RPO reached $18.4 billion, up 36% compared to last year when adjusting for recent CyberArk and CloudGenix acquisitions, both of which are exceeding expectations in their first quarter post-close. Our organic NGSAAR and RPO rose 28% and 22% respectively. This is also materializing as AI fundamentally redefines the enterprise tech stack, elevating cybersecurity to a mission-critical priority for every organization. Much has been said about Minos over the last many months. Over the past quarter, frontier AI development reached a critical inflection point. We have entered the era of truly cyber-capable systems where models like Minos possess the autonomous capability to execute comprehensive attack campaigns from start to finish. This represents a fundamental paradigm shift for the cybersecurity industry. The most critical factor in this transition is speed. When weaponized by adversaries, these frontier models can identify and weaponize vulnerabilities in mere minutes, a process that previously required months of manual effort. Earlier this year, our Unit 42 researchers demonstrated the acceleration by simulating a comprehensive ransomware campaign from initial entry to data exploitation in just 25 minutes. In contrast, the typical enterprise still requires days to identify a breach. These existing latency gaps are already a concern, but the emergence of these latest models makes them completely unsustainable. We believe this is merely the opening act. As frontier AI development continues to accelerate, we anticipate a 3-6 month window before these systems evolve into more sophisticated hacking entities globally. Within a few years, we expect generative AI to reach a level of autonomous execution that is truly unprecedented, scanning environments, generating bespoke exploits, and orchestrating end-to-end campaigns at machine speed without human intervention. That is the trajectory of the modern threat landscape. However, this same technological leap provides a powerful defensive advantage. We validated this potential during the quarter. Leveraging our strategic partnerships with leading frontier labs, we utilized early access to their most advanced models to complete the equivalent of years' worth of fantastic in less than 3 weeks. This unique vantage point allowed us to introduce Unit 42 frontier AI defense, enabling our customers to fortify their environments against AI-driven attacks. Market reception has been exceptional. With north of 1,200 customers asking to meet us, we have already completed 800 meetings in the last 6 weeks to help our customers think through their cybersecurity future. These meetings are driving conversations across the platform. In fact, we're already seeing strong interest in our agentic endpoint security offering since the acquisition of Coy and have already generated interest for over 150 customers. This is critical for securing rights in the AI coating tools agents as they proliferate our endpoints. While identifying vulnerabilities is a critical first step, true mission-critical production is achieved at runtime. Real-time inline defense is the only way to shield even unpatched infrastructure as an attack sequence unfolds. This is where the cybersecurity battle will be won or lost. Countering the next generation of adversaries requires a comprehensive architectural vision that goes far beyond simple large language models. While the capabilities of these frontier systems are impressive, they're not a silver bullet for cybersecurity. We currently see two major structural challenges. First, the prevalence of false positives with error rates often reaching 25% forcing manual intervention that destroys the speed advantage of automation. Second, these models always fail at the last mile of complexity, leaving critical gaps in remediation and vulnerability management. In today's threat landscape, the most subtle 1% of novel attack techniques are what lead to the most devastating breaches. For every enterprise, the defensive bar must be perfect while the attacker only needs to succeed once. The probabilistic nature of even the most advanced systems leads to inaccuracies. In a mission-critical environment, the cost of a false positive is simply too high. One wrong enforcement decision can take down a global production network. Just as autonomous vehicles require constant real-time validation, an automated defense must be built on high-fidelity telemetry and battle-tested against every edge case to be mission ready. An AI model is only as effective as the data it can see. As frontier models become available to everyone, the real competitive advantage shifts from model to the data you have. That is why having sensors that sit in line with live traffic is so vital. They provide the telemetry and context needed to outmaneuver bad actors while serving as a critical enforcement point. The logic is simple. The more you integrate, the more you see, the more data you unify. The better the AI performs, the more you inspect the runtime, the faster you can stop an attack. Our global footprint now exceeds 125 million sensors across network, endpoint, and cloud, ingesting over 17 petabytes of daily telemetry. This scale creates a powerful flywheel. Every new sensor makes our entire platform more intelligent, which leads to more deployments, more data, and even stronger real-time protection. This reality is why platformization is the only sustainable answer. The legacy approach of query-based tools that wait for human reaction cannot keep up with machine-speed threats. We're transforming the industry by consolidating data onto a single platform, reducing breach response times from days to minutes through AI-driven pre-analysis. Point products that silo data and increase latency are becoming obsolete. As the battle moves to fighting AI with AI, we believe Palo Alto Networks is in pole position, and our Q3 results prove that momentum. As AI compresses attack timelines, only a platform that gets smarter with scale can respond fast enough. In the third quarter, we received 110 net new platformizations. This figure includes 20 from our CyberArk console integration. These strategic additions expand our reach into large addressable markets within data and observability. Given the fragmented nature of these sectors, they're perfectly aligned with our overarching platformization vision. We concluded Q3 with roughly 2,280 total platformized customers, bolstered by the inclusion of our latest acquisitions. These engagements represent deep architectural commitments rather than simple transactions. When organizations reach this integration milestone, they standardize their infrastructure on our platform, yielding superior long-term retention and expansion. This is reflected in 120% net retention and single-digit churn rates amongst this cohort. Moving forward, we remain confident in surpassing 4,000 platformizations by fiscal 2030, providing the primary momentum towards our $20 billion target for NGSAR. The scale and quality of our customer business this quarter reflect how strategic these platform commitments have become, and how customers are increasingly bringing us in to secure production AI deployments at scale. Let me share a few examples. In Q3, we surpassed $200 million in ARR with a leading frontier AI lab that relies on us for observability across its most demanding training and inference clusters. We expect that to continue to grow again next quarter as they complete their migration to Cortex XDR. One of our largest Q3 deals was an $80 million transaction with a leading power producer in the United States, an organization at the center of the AI infrastructure expansion. They selected our next-generation firewalls and also adopted SASE to secure a distributed workforce of over 25,000 employees. A global consulting leader signed a deal for over $20 million, selecting Prisma AI, our AI security platform, to secure its rapidly growing fleet of AI assets and agents that are running more than 2 trillion tokens per month on our platform. This was an existing platformized customer who spent several months working closely with us to secure this entirely new frontier. It was also a record Prisma AI win and speaks to our customers partnering with us for the AI transformation journey. As AI redefines the stack, these deals further validate our position as the cybersecurity partner of choice. That was particularly notable in our network security business, where we had our strongest Q3 in several years. Our largest business unit, network security, delivered its most robust third quarter performance in years. This momentum underscores the mission-critical role of real-time network traffic inspection as enterprise-wide AI initiatives continue to transition to production. This Q3, we saw strong growth in hardware, SASE, and software firewalls during the period. Following the earnings, we anticipate that AI will serve as a structural catalyst for deeper traffic inspection requirements. The initial phase of AI adoption was primarily conversational, but the shift towards agentic AI represents a fundamental change. Unlike simple chatbots, autonomous agents trigger a massive volume of secondary machine-to-machine interactions, consistently accessing tools and data to complete complex workflows. This creates a surge in nonstop, high-volume traffic that must be secured at runtime. This evolution directly translates into heightened demand for high-throughput hardware, expanded cloud-based software capacity, and the necessity for unified policy enforcement across the entire platform. Our Q3 results featured the strongest hardware performance in a decade, with next-generation firewall bookings rising nearly 40% year over year. This was supported by our latest Gen 5 appliances in early access and AI data center build-outs. We're seeing early adoption from a new class of buyers, including sovereign infrastructure providers and AI labs, representing a significant new market as deployments move beyond traditional hyperscalers. A key differentiator for our hardware portfolio remains the strength of our subscription attach, illustrating how customers are standardizing their security stack on our platform. Within our installed base, we currently average more than four subscriptions per device. Our innovation engine continues to expand this opportunity, and we now provide 11 advanced subscriptions, including our next-generation trust security, which utilizes Fiber Arc certificate management to address emerging compliance standards for shorter certificate lifespans. Palo Alto Networks remains the fastest growing provider in the SASE market. In Q3, SASE ARR reached $1.6 billion, growing 40% year over year as customers prioritize unified protection across hybrid workforces and AI applications. Competitive momentum remains high, with nearly 50 displacement wins totaling $200 million in contract value year to date. Secure browser also achieved a major milestone, scaling to 11 million licenses, a fourfold increase that cements its status as a critical control point in the AI enterprise. Furthermore, software firewalls remain a high growth pillar of our strategy. ARR was up 25% in Q3, accelerating as organizations expand their capacity to inspect growing traffic between cloud and AI workloads. As these environments scale, the requirements for high-fidelity telemetry only increase. The common architecture approach is also driving increased customer growth in Prisma SASE, which continues to be the fastest growing product in our history. Organizations are aggressively moving beyond the experimental phase, deploying AI agents and applications to production. This transition creates entirely new mission-critical security demands. We believe we are the first in the industry to embrace AI security platformization. Yes, AI security platformization, capable of securing and monitoring AI end-to-end. We have effectively doubled our capabilities in this space in just over 9 months. Our journey began with securing models and runtime defense. We then integrated identity security to govern agent access and observability to trace agent behavior across complex infrastructure. Most recently, we expanded agent endpoint security as AI tools proliferate across the edge. Our recent acquisition of Portshift marks yet another strategic milestone. As a leading AI gateway processing trillions of tokens monthly, Portshift provides a critical enforcement point to monitor every request, apply real-time policy to agent-to-agent interactions at scale. This relentless innovation has established Prisma SASE as our fastest growing product ever. We reached over 300 customers in Q3, tripling our Q2 count, and have clear visibility towards $100 million ARR within the next couple of quarters for a product that was not in the market 1 year ago. Ultimately, securing the AI enterprise generates a massive volume of runtime telemetry. Data is only actionable if processed at machine speed, which is a core mission of our Cortex platform. XSIAM remains our primary response to the emerging frontier model threat. As attack cycles compress to machine speed, organizations can no longer rely on legacy query-based architectures or manual dashboards. Effectively countering AI necessitates a defensive strategy powered by AI. Upon the introduction of XSIAM 42 months ago, we entered the sector as a disruptive innovator, engineering our platform from the ground up to redefine security operations. Today, our platform processes more than 17 petabytes of daily telemetry, a volume unmatched by any other pure-play security vendor. We ended the third quarter with more than $600 million in ARR, representing a 100% year-over-year increase across a growing base of 740 customers. The most significant metric, however, is the outcome. The majority of our customers are now responding to threats in under 10 minutes. This is a dramatic reduction from the days or weeks previously required, and serves as a blueprint for the modern SOC. In observability, our Q3 performance was well above our initial expectations. As AI initiatives generate a surge in telemetry, Cortex XDR is a purpose-built capability to scale alongside these workloads. Our observability ARR surpassed $300 million this quarter, nearly doubling since our acquisition announcement last autumn. Furthermore, 80% of our net new customer acquisitions this year adopted multiple products, reinforcing our platformization momentum. The world's leading AI natives, including two of the top five frontier labs, have adopted Cortex XDR, validating our ability to provide observability at AI scale. Beyond our early investments in markets where AI would drive a positive inflection, we also recognized early where AI would overhaul existing security capabilities. Consider posture management. Traditional periodic scanning is insufficient when attack timelines are measured in minutes. As a result, we proactively transitioned our cloud portfolio from static posture to real-time detection with Cortex XDR. We're making steady progress and anticipate most Prisma customers will be migrated to Cortex Cloud by the end of the fiscal year. Now, as these agents proliferate, every autonomous entity represents a new identity that must be managed, which leads directly to our progress with CyberArk. In our inaugural quarter post-close, CyberArk has surpassed our internal benchmarks as we move to execute our unified vision for identity security. Last month, we launched Ideara, our next-generation identity platform for the AI-driven enterprise. For years, the industry operated under the IAM fallacy, the belief that you only needed to secure a handful of privileged administrators. In the era of agentic AI, that distinction has vanished. Every identity, whether human, machine, or software agent, now possesses the potential to access a sensitive system at machine speed. Ideara addresses this shift by democratizing modern PAM controls across all users, extending protection to agentic identities, which represent the primary attack vectors of the future. Our execution in Q3 was strong. Joint go-to-market efforts have already initiated approximately 1,000 cross-organizational engagements. This has sustained CyberArk's growth trajectory while improving its profitability profile through our integration initiatives. Given our rapid progress, we're now 3 to 6 months ahead of our original timeline for converging CyberArk's profitability with our own, a milestone we expect to reach within the next 12 to 18 months. This acceleration reinforces our path towards a 40% free cash flow margin in fiscal 2028, which Deepak will talk about more. The events of the third quarter represent a watershed moment for cybersecurity and have elevated our category even higher on the CIO priority list. Mark my words, this all has increased the terminal value of the entire cybersecurity industry. We're identifying several structural catalysts for the AI cycle driving growth across our platform. First, AI creates a massive surge in traffic and connection points requiring real-time inspection as agents trigger hundreds of secondary actions. Network security becomes an indispensable foundation for SASE adoption. Second, countering machine-speed adversaries requires real-time automated defense. This is the core mission of XSIAM, consolidating data onto a single platform so AI can respond to threats in minutes rather than days. And third, in an environment populated by both humans and agents, identity serves as a primary defensive layer. When autonomous entities can execute actions independently, securing access to identity becomes mission critical. The convergence of these trends validates our platformization strategy. Managing fragmented data and siloed point products is no longer viable in an AI-driven landscape. A unified platform that gains intelligence with scale is the only path forward. While we're still in the early stages of this shift, we remain committed to innovating ahead of the threat landscape and earning our customers' trust every day. I will now turn the call over to Deepak to discuss our financial results in greater detail.
D
Dipak Kalra20:07
Thank you, Nikesh, and good afternoon everyone. We delivered a record Q3 with broad-based demand across our platforms and geographies. We exceeded our guidance ranges across the board driven by an acceleration in organic bookings growth and outperformance from our recent acquisitions as we made early progress on our integration efforts. Please note that during my remarks, I will discuss results with and without the impact of Chronosphere and CyberArk. The financial impact of our acquisition of Coy, which closed later in the quarter, was immaterial to our Q3 results. Starting with next-generation security ARR, we delivered 60% year-over-year growth in Q3, reaching $8.13 billion. This included $1.63 billion from CyberArk and Chronosphere. We surpassed $300 million in ARR for Chronosphere, our next-generation observability platform. That was an over 50% increase from Q2 and far exceeded our expectations driven by an existing LLM customer increasing consumption as they continue to migrate from the incumbent vendor. Excluding the impact of CyberArk and Chronosphere, NGS ARR was $6.5 billion, up 28% year-over-year, and net new NGS ARR was $370 million, up 18% year-over-year. Please note that this excludes ARR attached to a hardware backlog that also reached record levels for a Q3 quarter. We saw notable strength in network security, which is our largest segment and accounts for approximately 70% of our total revenue. All network security form factors delivered sustained or accelerating growth in Q3. In SASE, ARR reached $1.6 billion, up 40% year-over-year, more than two times the overall market growth rates. We've seen nearly 60% increase in SASE net new NGS ARR over the trailing 12 months, driven by continued scale, strong performance in net new logos, and displacement wins. Software firewall showed strength once again this quarter with ARR up 25% year-over-year, driven in part by the increase in Prisma Access and firewall flex deals. As Nikesh highlighted, Prisma SASE continues to be our fastest growing product ever. We have over 300 Prisma SASE customers as of Q3, up from just 100 at the end of Q2. As AI adoption grows in the enterprise, we believe SASE is the foundational infrastructure to secure AI deployment. Turning to remaining performance obligation, or RPO, we ended the quarter at $18.4 billion, growing 36% year-over-year. Excluding $1.8 billion from CyberArk and Chronosphere, RPO grew 22% year-over-year, which we believe is a direct result of our platformization strategy driving deeper customer commitment across our platforms. Current RPO was $8.3 billion, up 34% year over year. Excluding the impact from CyberArk and Chronosphere, current RPO was $7.2 billion and grew 17% year over year, an acceleration versus 15% in Q2. Total revenue for the quarter was $3 billion, growing 31% year over year. Product revenue was $594 million and total services revenue was $2.4 billion, both growing 31% year over year. As I highlighted in previous quarters, software and recurring revenue now represents a large and growing portion of the product line item. Today, product revenue includes major growth drivers including software firewalls and Prisma SASE, SD-WAN, and self-hosted identity security subscriptions. As a result, 46% of our trailing 12-month product revenue in Q3 included recurring software revenue, a significant increase from just 22% 3 years ago. Hardware, which is approximately 10% of our total revenue, delivered its best quarter in a decade fueled by strong demand for our next generation firewalls and we saw early AI data center wins contributing to record Q3 backlog. Our next generation firewall bookings grew nearly 40% year over year in Q3 as we continued to gain share. AI data centers and AI-driven enterprise networking needs are driving a new market opportunity for us which could potentially be additive to our long-term growth for firewall appliances. From a geographic perspective, we saw broad-based growth across all of our major theaters with the Americas growing 32% year over year, EMEA up 32% year over year, and JAPAC growing 26% year over year. Moving down the P&L, our Q3 strength was not confined simply to our top line metrics as we continue to drive profitable growth across the P&L and execute against our M&A integration strategy. Total gross margin for the quarter was 75.8%. This included services gross margin of 75.1%. We continue to balance services gross margins by driving efficiencies in cloud hosting while the mix shift of our high growth SaaS offerings increases. Within this, product gross margin was at 78.8%, which is a 40 basis point improvement year-over-year. Turning to the supply chain, we are closely monitoring rising component costs particularly in memory and storage. Please note that we have approximately 1 million firewalls in the field and our required component volumes are not as significant as some of our peers. Furthermore, we remain well positioned to navigate these dynamics for the following reasons. First, our higher recurring revenue mix acts as a natural hedge. Hardware today accounts for approximately 10% of our total revenue compared to 20% in fiscal year 21. Second, our vendors view us as a critical infrastructure provider and we have a track record of leveraging our prior supply chain experience and expertise to mitigate these impacts. This includes evaluating alternative sources of supply and extending purchase commitments with our suppliers. Thirdly, we continue to evaluate further pricing actions. As a reminder, we implemented a 10% price increase on hardware in early April. The impact of pricing and rising component costs are reflected in our Q4 and fiscal 2026 outlook. These dynamics paired with continued operating efficiency resulted in non-GAAP operating margin of 21.3% in Q3, flat versus Q3 of 2025. Looking forward, we expect to drive operating leverage as we scale and continue to make progress against our M&A integration plans. In Q3, we made a lot of progress on our integration plans. This was driven by strong execution and collaboration by our teams across every function, including our new colleagues from our recent acquisitions who have truly risen to the occasion. This is already driving tangible results. Our integration philosophy starts with product and our relentless focus on driving innovation. Just months after closing the CyberArk transaction, we introduced Ideara, our next-generation identity security platform. This includes the key innovations that Nikesh highlighted, including modern PAM and agentic identity security integrated with Prisma Access, as well as deeper integration of identity signals with our Cortex XDR and Cortex platforms. Early go-to-market collaboration has also been encouraging, with more than 1,000 cross-organization engagements initiated between the core and identity sales organizations to date. On the expense side, we're leveraging our combined scale to drive improved cloud hosting economics for the acquired CyberArk business. Post-close, we're optimizing our organizations to deliver a unified, one-team culture so that it's future-ready. We are carefully reviewing every single line item across each of our financial statements to drive operating leverage across vendors and functions. This includes streamlining our combined real estate footprint, which includes over 40 new facilities from our acquisitions, to enhancing and fostering collaboration post-close. Additionally, we're optimizing our marketing and our IT vendor footprint. To date, we've identified more than 300 IT vendors to streamline and have already displaced approximately 20%. All of these factors combined will enable us to hit our CyberArk synergy targets about 3 to 6 months earlier than we initially anticipated. This visibility paired with our continued operating leverage across the overall company reinforces our confidence in reaching 40% free cash flow margin in fiscal 2028. In Q3, we generated adjusted free cash flow of $910 million, a 57% increase year over year. On a trailing 12-month basis, we generated $4.08 billion in adjusted non-GAAP free cash flow. This represents a margin of 38.5%, a 430 basis points improvement year over year, even with the inclusion of CyberArk and Chronosphere. We will, of course, have a full year of CyberArk and Chronosphere expenses next year, but these results solidify our continued ability to deliver best-in-class free cash flow margin and enabled us to raise our fiscal 2026 guidance. The strong cash flow generation supports our opportunistic share repurchase program. During Q3, we utilized $1 billion to buy back 6.8 million shares at an average cost of $147.69. We currently maintain $1 billion in remaining capacity under our existing repurchase authorization. Moving to the non-GAAP items, stock-based compensation increased sequentially to 17% of revenue in Q3, primarily driven by SBC related to our recent acquisitions.
While M&A-related SBC will continue to be amortized in future quarters, we expect stock-based compensation as a percentage of revenue to return to pre-acquisition levels on a run rate basis in approximately 12 to 18 months. Beyond stock-based compensation, our GAAP will reflect transaction and integration costs from these acquisitions, further detailed in our SFI. These non-recurring charges resulted in a GAAP net loss per share of 22 cents for the quarter. Our diluted non-GAAP EPS, which adjusts for SBC and one-time items, reached 85 cents, which came in 5 cents above the high end of our Q3 guidance. Reflecting on my five years in the seat, I've always maintained that our business model scales well across every line item of our P&L. This financial framework is precisely what allows us to execute our broader corporate strategy from a position of strength. When you look at our M&A trajectory, we initially proved this execution capability by integrating over 20 tuck-in acquisitions to build out our platforms. Today, we are successfully integrating larger, highly strategic acquisitions, all while driving durable growth and balancing against our profitability commitments. Now, turning to guidance. Given the acceleration in our Q3 organic bookings growth, our early progress on M&A integration, and the strong Q4 pipeline, we are raising our full year fiscal 2026 guidance across all metrics for both our core and acquired businesses. This quarter and last, we provided a breakout of performance for both our core business and our recent acquisitions. Our intention was always to make this a one-time in nature and move our disclosures closer in line to how we run the business. Therefore, we'll be moving to total company guidance moving forward. Beginning in fiscal 2027, we intend to provide segment-level revenue disclosures across network security, Cortex, and identity. This will align our reporting with how we run the business and our platform strategy post-integration. Now, let me take you through guidance in detail. For the fourth quarter of 2026, we expect NGS ARR of 8.9 billion to 8.95 billion dollars or 59% growth. We expect RPO of 20.9 to 21 billion dollars or 32% growth. And we expect revenue of 3.345 billion to 3.355 billion dollars or 32% growth. Fully diluted share count of 830 to 840 million shares. Diluted non-GAAP EPS to be in the range of 96 to 98 cents. For the fiscal year 2026, we expect NGS ARR of 8.9 billion to 8.95 billion dollars or 59% growth. We expect RPO of 20.9 to 21 billion dollars or 32% growth. We expect revenue of 11.415 billion to 11.425 billion dollars or 24% growth. Operating margins to be in the range of 28.9 to 29.2%. Diluted non-GAAP EPS to be in the range of 3.77 to 3.79 dollars. Fully diluted share count of 763 to 766 million shares. And adjusted free cash flow margin of 37.5%. We've included our typical pool model points in the presentation for your review. And with that, I will turn it back over to Hamza for Q&A.
M
Mohammad Zubair Owalla34:13
Okay. Thank you, Deepak. To allow for broader participation, I would ask each analyst to ask only one question. First question goes to Saket Kalia from Barclays followed by Brian Essex from JP Morgan.
S
Saket Kalia34:35
Okay, can you guys hear me?
N
Nikesh Arora34:40
Yes, we can hear you.
S
Saket Kalia34:41
Okay, excellent. I have a little trouble with video, but I'll ask the question. Guys, thank you so much for taking my question here, and congrats to the team on the results and the guide. Nikesh, maybe for you, there's tons to talk about, but I'd love to dig into your network security business just a little bit more, since you mentioned a potential multi-year tailwind there. Maybe the question is, can you talk about how much AI data center demand is contributing to that? And outside of AI data center builds, how are your other customers thinking about their network security needs as AI traffic grows?
N
Nikesh Arora35:17
Thanks, I guess first of all, I thought you were asking me about the 40% free cash flow question you mentioned on CNBC, but anyway, we can save that one for the...
S
Saket Kalia35:24
That would speak for itself.
N
Nikesh Arora35:25
Yeah, okay. Look, you saw across the board, we've always maintained that as more traffic traverses networks, more inspection is needed. When more inspection is needed, hardware is the cheapest and fastest throughput mechanism to inspect the data. I think the multi-year tailwind will come from the fact that more and more data needs to be stored both by organizations, needs to be used for training all these frontier labs out there, and you can see the explosion of data centers being built, whether it's by hyperscalers, frontier labs, or neo cloud labs out there. And you're seeing that demand fall through to some of the hardware vendors in the space. I think couple that with the scarcity and component pricing, you've seen some pricing increases, you've seen some of that mixture of price uplift as well as demand uplift, but I think, you know, maybe the number's gone from 5% to 8% to 10% to 12%, so that's a 50% increase in demand for the industry, I think. I think you'll see that. I think you'll tell me before I can tell you when you see when data center growth starts to taper off or plateau, you know, this thing is going to come to roost, but I expect that this trend should continue for the next few quarters, if not few years. Lee, did you want to ask? Hopefully you think I gave a good answer.
S
Saket Kalia36:44
Very helpful. Thank you.
M
Mohammad Zubair Owalla36:45
All right. Thank you, Sachin. Next we'll go to Brian Essex from JP Morgan, followed by Matthew Hedberg from RBC.
B
Brian Essex36:54
Yeah, thanks, all. And congrats on the results, guys. But thank you for taking the question. Hey Nikesh, I'd love to ask you about Prisma Access. Great to see the traction there, and would love to understand it from a customer perspective. One of the things I thought was very important that you mentioned was the ability for a platform to have more effective speed or mean time to detection and response. How are your customers evaluating that as they look at, you know, the elevated threat environment they have, following the emergence of Mitos and GPT and Glasswing, you know, Project Glasswing announcement?
N
Nikesh Arora37:32
So, let's do a double team with this. I'm going to start off and I'll have Lee talk about some of the capabilities that we'll need in the AI future. But one of the things which we have done, as many of you know, over the last many years, we actually built native VM capability in many of the hyperscalers. Now you're seeing that is where a lot of the models are being hosted, a lot of the AI artifacts are sitting for customers because AI is not an on-prem event. It's typically a cloud event, hyperscaler event. And the fact that we have native firewalls sitting in those hyperscalers allow us to inspect traffic, not just regular cloud traffic, but also AI traffic. And I'll have Lee talk about all the capabilities we've built in Prisma Access over the last 12 months, which have allowed us to provide all the security capabilities that AI needs.
L
Lee38:16
Yeah. So, there's, like every cybersecurity space, I'll call it, there's an end-to-end component. There's what sort of shift left which is even before you deploy AI in what you do in terms of model scanning and AI red teaming and validating the application itself and the AI usage of that, all the way through the runtime components which are very focused on real-time threats, how to detect and prevent them. And then all of that also becomes a feed into the SOC and the SOC has to be able to ingest data from all of these different sensors, analyze them in real time using AI, and then apply automation in order to achieve the mean time remediation that Nick was talking about earlier in his prepared remarks where we can't be operating in a model where sort of legacy model of mean time to detection of days when attackers, particularly with these new models, are able to carry out attacks start to finish in tens of minutes. And so the feed into XSIAM, the amount of data that XSIAM can ingest, speed of processing, AI, automation, and response, that ability to prove to customers of all the rest that have already been deployed that we can achieve MTTR in minutes is a very powerful proof point for them of believing that they will be able to achieve the same outcomes as well.
B
Brian Essex39:42
Great. Thank you. I'll leave my follow for later, but thank you.
M
Mohammad Zubair Owalla39:44
All right. Thank you, Brian. Next we'll go to Matt Hedberg from RBC followed by Mandeep Marshall from Morgan Stanley.
M
Matthew Hedberg39:51
Great, guys. Very impressive results, to say the least. I guess, you know, within your observability platform, the 200 million AI frontier lab customer, 100 million of net new ARR added this quarter, super impressive. Yeah, I guess can you talk about how observability and security is converging and how that positions you really to take share versus competitors that, you know, primarily start with an observability first solution?
L
Lee40:14
Yeah, I think first of all it's important to note that these are each specialized environments. So, meaning you have to be really, really good at observability regardless of any potential integration with security, and the same is true with security. And I start there because if you look at all of the previous attempts to try to expand from one to the other, what you saw was perhaps a strength in one, but then trying to apply the same logic to the other. You can't take an observability platform, just add a little bit, and all of a sudden say that it's a good security platform and vice versa. And so, I say that because it's very important. XSIAM is best-in-class in what it does, and we've proven that. Cortex XDR from an observability perspective is best-in-class, and we've proven that. And in both cases, we have very strong roadmaps of capabilities that we'll continue to add to them. What you'll see over time going forward is data collected for the observability use case will be valuable as a sensor to the security use case, meaning XSIAM will start to leverage that data to expand the data it can analyze for security purposes. And importantly, vice versa, data collected for the security use case will be valuable to having additional context, broader context for the observability use case. So, the first part is the data that is collected for each of these independent use cases starts to cross-pollinate to the other. The second part is really related to agentic, and what you're seeing across these spaces is a need for AI-driven automated response, and agentic we believe is that foundation that will be leveraged across all of our platforms, obviously starting with Cortex, and expanding to Cortex XDR. And so, agentic becomes the other key point where you'll start to see increased integration across the observability and security space from us. But again, in both cases, this is starting from a position of strength independently, and the cross-pollination adds to those capabilities.
M
Matthew Hedberg42:20
Superb. Thanks, Lee.
M
Mohammad Zubair Owalla42:21
Thank you, Matt. Next, we'll go to Mandeep Marshall from Morgan Stanley, followed by Shaul Eyal from Cowen.
M
Mandeep Marshall42:28
Great. Thanks. The question for me is just building on the $200 million opportunity that you guys have with the Frontier Lab. How does that tell your thinking about the opportunities of AI native? And just can you give a sense of the breadth of the platform that they were combining with in that deal? Thanks.
N
Nikesh Arora42:50
Well, look, each of the models has a different approach in terms of how they do the observability. Some have their own approach on a DIY basis. Some of them are using third-party vendors like us. So, I don't think it's one-size-fits-all. What we are seeing is that Chronosphere is particularly good at AI native platforms, whether it's frontier AI labs, or whether it's SaaS software, I call them modern SaaS software companies, and not older SaaS software companies. Typically, what's happening is the observability market is maturing. Companies are beginning to realize as volume scales, it's not okay to be DIY. I think the general reluctance in the observability industry historically has been cost. I mean, even at Palo Alto, when we were deploying a third-party vendor, we chose to turn it off because it was prohibitively expensive. And what Chronosphere has done has been able to deliver that same capability at approximately half the cost of what the industry charges. So, it starts to meet the number at which you're better off not building your own or using open source with some enterprise capabilities; you're better off using platforms like Chronosphere. So, it's early days. At least they said we have a roadmap that requires us to bolster a few more capabilities in the platform to make sure it's competitive in its space, but the advanced practitioners already see the capability and the ability and are happy to use it, and we continue to make progress on the roadmap to make sure that becomes a full comprehensive platform and hopefully it becomes another mainstay platform for us in the future.
M
Mohammad Zubair Owalla44:23
Thank you, Amit. Next we'll go to Shaul Eyal from Cowen followed by Fatima Boolani from Citi.
S
Shaul Eyal44:35
Hey, good afternoon, guys. Congrats on results and guidance. Nikesh, I know most are focused on the ongoing progress of CyberArk and Chronosphere. Great results on that front. I actually want to ask and double-click on Coy and the agentic endpoint and the progress and interest that you guys are seeing on that angle. There's definitely some sort of a renaissance taking place at endpoint. Can you tell us what's driving that?
L
Lee45:05
Sure. The, you know, it's I feel like it's been maybe a little while since the endpoint really changed. The types of applications deployed seem to be pretty similar. The types of attack seem to be kind of similar. They evolve, but what's happened really in the last 12 months is all of the activity now in the endpoint, I shouldn't say all, but most of it now is becoming agentic. And so, you think about some of these vibe coding tools, think about things like Open Cloud in its brief history, it's not just a new application that gets deployed there. It's the application and it brings a whole ecosystem with it. So, you look at these vibe coding tools, it's not just a vibe coding application. You have skills and hooks and scripts and MCP servers and all sorts of other stuff that come with it. And so it's almost like you have a whole new endpoint ecosystem on top of the one that already existed. And that requires specialized functionality. It's not as simple as just adding a couple features and claiming to be able to secure the new agentic endpoint. And that's what we observed. We observed this starting last fall and as we started to look around we identified that Coy was very unique in their ability to provide this type of security capability. That is what got us excited about it enough to actually deploy to Palo Alto Networks. That is what led to the acquisition. And now with the advent of what we're seeing with these new AI frontier models, that is adding to the already high level of interest because it's very clear that vibe coding and AI development and agentic endpoints in general are going to be critical to the success of every organization and it has to be secured.
S
Shaul Eyal47:01
Thank you, Nick.
M
Mohammad Zubair Owalla47:03
Thank you, Nick. So, next we have Fatima Boolani from Citi followed by Michael Turan from Wells Fargo.
F
Fatima Boolani47:09
Oh, good afternoon. Thank you for taking my questions. Nick, I guess this one is for you. There is a voracious appetite for any large company that's basically had the rug pulled under them as it relates to the risk of novel AI attacks. So, in the context of Unit 42, I want to get a sense of how much incremental investment do you expect to put behind that franchise? How capacity constrained are you? And maybe to take it up another level, this whole notion of the agentic SOC and agentic remediation, how much of that are you dog fooding or champagne drinking? You can choose your flavor inside Unit 42, whereby you can drive both scale and efficiency and a strong product feedback loop into the portfolio.
N
Nikesh Arora48:06
Well, Fatima, thank you for the question. Look, we have repurposed our Unit 42 team to focus primarily on frontier AI defense. As I mentioned, we've had north of 1,200 outreaches from customers both in both directions where we reached out to our customers and they to us. Both Lee and I and a lot of people in my team have personally done tons of meetings. You know, I've done close to 100, Lee's done close to 100. We're doing these meetings to talk to our customers about how they want to strategize, not just about how to react to models like Me Too's because we believe it's real, but also to prepare for something that can get better and better and how does the infrastructure need to change in the next 6 to 12 months from now? We are firmly of the belief that people will have to deploy the new endpoint capability like Coy, go to Prisma Access browser or secure browsers. They will have to put virtual patching capability in the firewalls and fundamentally reimagine their SOC and use XDR. So, all of that is true, but the conversation usually starts with Unit 42 trying to help them test their code, make sure their code is safe, their code is robust, test their configurations and help them with some form of managed patching for their environment because every vendor is going to show up with lots of patches that need to be done this time. So, that's primarily where Unit 42's focus is short-term. Long-term, they're focused on transforming architectures where again, all of Palo Alto is focused on delivering that capability. As it relates to agentic dog fooding or champagne drinking or dogs drinking champagne, I think, yeah, we have, and I don't want to say, you know, this is sometimes better to be lucky than good. We did design XSIAM with the idea of pre-analyzing everything before we ingest the data. So, XSIAM is turning out to be a great tool in this regard in terms of reducing the mean time to detect and remediate for customers. And it has agents running in it to give you that capability. I think that capability will increase. And you know, we can have a long conversation about what exactly an agent is. I think there's a lot of deterministic workflows that run to reduce the task of a SOC analyst. A lot of automation that exists in XSIAM and over time perhaps our customers will trust those agents to act independently. For now, the customers want to sort of see, observe, and approve, which is where it's set up. And then as customers get comfortable with deployment, we'll get to give it agency. So, we're not seeing the rush demanding agency. I think right now customers are in phase zero where they're saying, "I better collect all my data because if I don't have all the data, I don't have all the context. If I don't have all the context, I can't actually react to any attack."
F
Fatima Boolani50:53
Thank you.
M
Mohammad Zubair Owalla50:54
Agreed. To give the team a, next question is Michael Turan from Wells Fargo, followed by Adam Borg from Sequr.
M
Michael Turan51:02
Hey, great. Thanks and congrats on the strong results here in the quarter. You had some useful details throughout the prepared remarks, but hoping you could expand on some of what you're seeing in terms of AI-driven demand, specifically how some of the larger customer conversations you had at account in terms of customer conversations you're having have evolved since May. So, is there a greater sense of urgency there heading into fiscal Q4? And in terms of the metrics, is it RPO, platform wins, or what are the key metrics you'd point us to to help us gauge progress as you continue to work towards those opportunities?
N
Nikesh Arora51:35
So, Michael, I don't want to make sure all of you understand. Six months ago, cybersecurity stocks were doomed because AI was going to protect every one of us and we were all out of a job, right? And suddenly, we're hiring more people. AI is not taking jobs away. And suddenly, you can't execute a cyber protection scenario without using a platform subject to a vendor. And think about it, right? I think the part which you must pay attention to, Michael, is I said there's a 25% false positive rate. It means an AI model can say, "Oh my god, I see a vulnerability." And one time out of four, it's not seeing the right vulnerability, which means if you let AI do the job, it could try and patch something that's working perfectly fine. And if you let AI go protect that, you might have screwed up something else. So, I think you got to take this with a grain of salt to understand that the three big takeaways, if I was in your shoes I would take from this is if you thought that the terminal value of cybersecurity was gone, like many SaaS companies, this terminal value is here to stay. You actually just created a longer-term G in your model for long-term growth rate for cybersecurity. I think to the extent you felt the demand was going to get weak in Q4 or Q1 or Q2 for someone, it's not going to get weak. Now, I wouldn't get ahead of my skis and start throwing the kitchen sink at numbers for cybersecurity companies because there is still a process, a mechanism, a cycle that people buy in, and there's execution and deployment. So, to the extent that do I see good demand? Yes. To the extent that I believe that the demand will continue for longer? Yes. To the extent do I expect a windfall next quarter, the holiday quarter? No, I expect robust growth.
M
Michael Turan53:10
It's great. Thank you.
M
Mohammad Zubair Owalla53:12
Thank you, Michael. Next we'll go to Adam Borg from Sequr and we'll end with John DeFucci from Guggenheim.
A
Adam Borg53:20
Awesome. Thanks so much for taking the question. Great to see the continued traction. Nikesh, maybe go deeper into SASE. These results have been great, outpacing the market. Talk more about the traction you're seeing overall. And maybe help us just rank order, is that traction across SSE, SD-WAN, Prisma Browser, etc. Any more color there would be really helpful. Thanks.
N
Nikesh Arora53:41
Look, I think, Adam, we are what I'd like to call the second wave of SASE. The first wave of SASE was internet access or VPNs. And that's what you could call them SASE, but they were effectively feature capabilities in that market. And you saw the VPN people, like the firewall guys, win the VPN battles. You saw the internet access companies, which were the early SASE players, win the SASE battle. I think as we evolve from there, what we're seeing is the desire for a comprehensive network stack. Only what I mean by desire for a comprehensive network stack, people call it zero trust, people call it a single policy across multiple network capabilities, people call it a network for the architecture. People are figuring out that if you want to secure your traffic, you want to dynamically route your traffic, you know, there's a lot of contention between SD-WAN and security, you need to have a common platform. Now, we got SD-WAN many years ago, and we only sell it as part of this SASE platform because we don't believe we should be in the solo SD-WAN business for the most part. And that was the strategy. Now, we're seeing network architecture projects show up where people are saying, "My god, I really understand Palo Alto's security framework because we use Palo Alto firewalls. Amazing. You're telling me I can just replicate those policies across my entire network stack and not have to go learn a new stack, write a new set of policies. That's cool. Oh, wait, I can do that in software firewalls and Prisma Access as well." So, I think what we're seeing is the benefit of consolidation. Now, I think one more thing has changed in the mind of the customer. This is my eighth year, the eighth week anniversary in 4 days I'll hit 8 years at Palo Alto, surprise, surprise. And I'll tell you, there was a lot more willingness to take best of breed 8 years ago. I think that willingness has slowly subsided where the customers see the value. Perhaps the products have normalized, perhaps the companies have matured, but customers are much more comfortable talking about a consolidated strategy with hardware, software, and SASE. And I think what you're seeing is our ability to present that capability to the platform. We are taking share from some of the SASE-only customers, and unfortunately, to their chagrin, firewalls are not dead. Just the way hardware is not dead, and PCs aren't dead, and storage isn't dead, firewalls aren't dead, either. So, having a firewall leader who has the ability to deploy world-class SASE is helping in the market, and that's what you're seeing.
A
Adam Borg55:59
Excellent. Thanks again.
M
Mohammad Zubair Owalla56:00
Thank you, Adam. And our last question will go to John DiFucci from Guggenheim.
J
John DiFucci56:05
Thanks, Adam. Because everything looked pretty good this quarter. Like everything. Like you had some of your competitors on the hardware side did well, so I think people kind of expected that. But everything was good. So, the one I wanted that wasn't asked here is CyberArk. I mean, we all modeled CyberArk before we had models, and I know it's a month off, but jeez, that looked better than I had modeled it before, and CyberArk was one of the...
N
Nikesh Arora56:37
You just don't trust me, John.
J
John DiFucci56:39
I trust you. I do. I trust you.
N
Nikesh Arora56:43
Okay.
J
John DiFucci56:43
And I wish I was not where I am right now. But...
N
Nikesh Arora56:49
Do you have a selling point?
J
John DiFucci56:49
I guess if you think about CyberArk, is it something like, okay, this first quarter that you have your go-to-market behind it, or have you even done that yet? And is it really the core PAM from CyberArk? Are you seeing any machine identity actually taking hold yet, or can you talk a little bit about CyberArk and how come it got so strong?
N
Nikesh Arora57:15
So, the one which I think we've talked about fleetingly, John, and I'll tell you, you know, a lot of things are going well, and we continue to toil through migrating our Prisma Cloud customers to Cortex Cloud. I wish that was behind us, but that is still ahead of us for the next 6 months, so we'll keep grinding through that. That was not contributing as well as some of the other products are. So, that's fine. You know, that's why you have a portfolio of platforms and some do amazingly well and they cover up for their slightly slower brethren, and the slower brethren come from behind and go win after that. So, I think we feel not everything's perfect, John, but a lot of things are doing well. So, thank you for that part. As far as CyberArk is concerned, I think we have a very, very measured strategy around CyberArk. Remember, this is our first large acquisition. The biggest fear in large acquisitions people think is that we will break it. I think the most important part is we did not break it. Look, I didn't break it. It's working. Okay? We worked with the company. We made sure that we talked to every one of the leaders. In fact, the entire CyberArk product team is in Palo Alto right now in our offices. We spent most of yesterday and this morning with them and we'll continue to spend the next 2 days with them. The plan was, just the way when I found Palo Alto 8 years ago, it was a great company, it is a great company, so CyberArk, we have to make sure that that product gets more modern and more innovative. And that's what the team's very focused on. I've been seeing commitments where I'm going out to customers, showing them the roadmap, promising them that the PAM product is going to even get better than compared to what it already is, and we're going to show them great outcomes. There are Palo Alto customers who are asking to meet CyberArk. There are CyberArk customers asking to meet Palo Alto. We have 1,000 meetings where Palo Alto and CyberArk people are talking to each other and going to the customer together. Two independent sales teams, but they are connected in 1,000 different places, which is already creating some degree of momentum. So, you know, our plan is don't hurt the top line. Make sure that the existing customers still love us, want to buy, want to upgrade, and they're going to see better product. That's phase zero. Take out all the places that could be friction or overlap, which allowed us to streamline and get better operating margins. You know, I just got an email this morning. We have migrated one of our critical systems from CyberArk independent system to Palo Alto and CyberArk on the same system. We have four more major systems to get through in the next 4 months. We think we'll get there before the end of this calendar year. If we can integrate their back-end systems to common systems, we're using AI to write a whole bunch of new coding capabilities, sales capabilities. So, topic number one, trim the fat or trim the overlap and don't break the top line. We think we're on track not to break the top line. Improve the profitability, which we've done. As we said, we think we're going to be six months ahead on profitability because we found ways to get there faster. Our job is then to make sure that if we can deliver the next capability of products which is incremental to what they already had, that allows us to look at the whole fiscal year and say, "How do we go out and hit the ground running in the following fiscal year to deliver better top line?" So, CyberArk is our chance to prove that we are capable of doing amazing large acquisitions. We're capable of integrating large teams. And if I can prove that, the market will give me the license to go win again. So, this is existential for me. It's existential for my team, and they know it. So, we're going to work hard to make sure that CyberArk succeeds, allowing us to do more and more of that in the future. So, the bottom line is, thank you for the question, John.
J
John DiFucci1:00:28
That makes a lot of sense. Thanks, Nikesh.
M
Mohammad Zubair Owalla1:00:30
Thank you, John. This concludes the Q&A portion of the call. I'll pass it back to Nikesh for any closing remarks.
N
Nikesh Arora1:00:37
Well, I just want to say thank you. Officially declare Cylance and ClearSky Cyber Security dead. I want to thank our partners and employees and all of you guys for supporting us. I'll see you guys next quarter.