Palo Alto Networks builds firewalls and other security software that protects company and government networks from hackers, sells most of it as a subscription, and plows that recurring cash back into new products and acquisitions — most recently the largest deal in its history, CyberArk — to broaden what it sells to existing customers.
How Palo Alto Networks makes money
Palo Alto Networks builds firewalls and security software that protects company and government networks from hackers, sells most of it through a two-tier network of distributors and resellers rather than directly, and plows the resulting subscription cash back into new product development and acquisitions — like its 2025 purchase of CyberArk — to keep expanding what it can sell into the same customer base.
Subscription and support revenue (80.5% of FY2025 sales) flows back to PANW and gets reinvested in R&D and acquisitions like CyberArk to widen the product line. Three distributors alone accounted for 44.2% of FY2025 revenue. Source: 10-K FY2025, p.4, p.34.
Where the revenue comes from
Revenue by type — FY2025
PANW operates as a single reportable segment, so segment-level operating margins (network security vs. Cortex, etc.) aren't disclosed. Source: 10-K FY2025, p.72.
| Region | Revenue | Share |
|---|---|---|
| Americas | $6,205.1M | 67.3% |
| EMEA | $1,917.4M | 20.8% |
| APAC | $1,099.0M | 11.9% |
With a third of revenue from outside the Americas, results are exposed to currency swings and export/trade regulation in individual countries — notably U.S.-China trade tension and Israel-related geopolitics.
Source: 10-K FY2025, p.72.
Customers and competitors
An entirely B2B/B2G customer base spanning 180+ countries, including most of the Fortune 100 and a large share of the Global 2000. Actual sales contracts, though, run through distributors rather than end customers directly — three distributors made up 44.2% of FY2025 revenue and 44.8% of receivables, a real concentration risk. No single end customer accounts for more than 10% of revenue.
Source: 10-K FY2025, p.4, p.34, p.70.
- CrowdStrike — competes head-on in endpoint and SOC automation (against Cortex XSIAM/XDR), seen by some as lighter-weight and more cloud-native.
- Fortinet — the largest incumbent in traditional firewalls; undercuts on price and is strong in the small/mid-market.
- Zscaler — a cloud-native SASE (secure remote access) specialist, competing directly with PANW's Prisma Access.
Source: 10-K FY2025, p.26, p.87.
The metric that matters most in this sector
Next-Generation Security ARR (NGS ARR) strips out one-time hardware sales to isolate purely recurring subscription revenue — the number that has to keep growing for the "real subscription business" to be growing. Remaining Performance Obligations (RPO) shows how much revenue is already contracted but not yet recognized — a forward look at revenue already banked.
| FY2023 | FY2024 | FY2025 | Q3 FY2026 | |
|---|---|---|---|---|
| NGS ARR | — | $4.2B | $5.6B | $8.1B |
| RPO | $10.6B | $12.7B | $15.8B | $18.4B |
The Q3 FY2026 NGS ARR figure includes the CyberArk and Chronosphere acquisitions; organic growth alone was +28%.
Source: 10-K FY2023 p.68, 10-K FY2025 p.44, Q3 FY2026 earnings call.
Leadership and ownership
Nikesh Arora has been Chairman and CEO since June 2018 (about 7 years) — previously Google's Chief Business Officer and President/COO of SoftBank. Founder Nir Zuk is now "Founder Emeritus" — the former CTO, no longer on the board, so this is a company the founder has stepped back from running. Officers and directors together hold a low 1.4% of shares; the largest holders are institutional index funds — Vanguard (8.2%) and BlackRock (7.3%).
Source: DEF 14A 2025, p.56, p.147.
Capital returns
No dividend, ever — the company has stated it has no current plans to pay one. FY2025 share buybacks were $0, paused to preserve cash for the CyberArk acquisition (FY2024 buybacks were $566.7M).
Source: 10-K FY2025, p.86, p.54.
How this company could fail
- CyberArk integration risk. The 2025 CyberArk acquisition (identity security, the largest in company history) plus the Chronosphere deal might not deliver the expected synergies, or integration could run long — either would put the FY2028 target of a 40% free-cash-flow margin at risk.
- Distribution channel concentration. 44.2% of revenue runs through just three distributors; trouble at any one of them could shake the entire sales network.
- Competitive price pressure. Intensifying AI-security competition from CrowdStrike, Fortinet and Zscaler is driving bigger bundled discounts across multi-product deals — revenue could keep growing even as per-unit pricing and margin come under pressure.
Source: 10-K FY2025, p.15-29 (Risk Factors summary); Q3 FY2026 earnings call.
Five-year financials
| FY2021 | FY2022 | FY2023 | FY2024 | FY2025 | |
|---|---|---|---|---|---|
| Revenue | 4,256.1 | 5,501.5 | 6,892.7 | 8,027.5 | 9,221.5 |
| YoY growth | +24.9% | +29.3% | +25.3% | +16.5% | +14.9% |
| Operating income | (304.1) | (188.8) | 387.3 | 683.9 | 1,242.9 |
| Operating margin | (7.1%) | (3.4%) | 5.6% | 8.5% | 13.5% |
| Free cash flow | 1,387.0 | 1,791.9 | 2,631.2 | 3,100.8 | 3,469.8 |
| Convertible notes outstanding | n/a | 3,676.8 | 1,991.5 | 963.9 | 0 |
Source: 10-K FY2025, p.44-45, p.54, p.86; 10-K FY2023, p.40, p.68.
What we still don't know
- Combined financials reflecting the completed CyberArk and Chronosphere acquisitions (both closed in early/mid 2026) aren't in the FY2025 10-K yet — the FY2026 10-K (expected around August 2026) is needed to see the actual post-acquisition margin picture.
- FY2026 Q4 results (fiscal year ended July 2026) weren't public as of this card's writing (August 2026) — check the latest guidance separately.
- Whether the "40% FCF margin by FY2028" target survives once full CyberArk integration costs are reflected can't be determined from this data alone.
Frequently asked questions
How does Palo Alto Networks make money?
Palo Alto Networks builds firewalls and other security software that protects company and government networks from hackers, sells most of it as a subscription, and plows that recurring cash back into new products and acquisitions like its CyberArk purchase.
What is Palo Alto Networks's market cap?
As of this article's data, Palo Alto Networks's market cap was about $293.3B, on FY2025 revenue of $9.22B.
What is NGS ARR?
Next-Generation Security Annual Recurring Revenue (NGS ARR) strips out one-time hardware sales to isolate purely recurring subscription revenue — it reached $8.1B by Q3 FY2026.