Palo Alto Networks FY2026四季度业绩强劲但利润率压力引发股价回落

Wall Street slides to kick off historically worst month as oil prices, yields rise
Introduction & Market Context
Palo Alto Networks (NASDAQ:PANW) presented its fiscal fourth-quarter 2026 earnings results on September 1, 2026, showcasing record financial performance across multiple metrics while facing investor scrutiny over margin pressures and rising costs. Despite beating guidance on all key measures, the stock fell 5.25% during the regular session to $362.08 and declined an additional 1.78% in after-hours trading to $355.64.
The cybersecurity company’s presentation highlighted a transformative year marked by accelerating platformization, artificial intelligence-driven demand, and successful integration of major acquisitions including CyberArk and Chronosphere. However, the market reaction suggests investors remain concerned about gross margin compression and the company’s ability to sustain profitability expansion amid rising cloud hosting and hardware costs.
Quarterly Performance Highlights
Palo Alto Networks delivered what management characterized as a "Strong Finish to a Transformative Year in FY’26," with the company exceeding its own guidance across all major financial metrics. As shown in the following performance summary, the company demonstrated accelerating growth momentum across its key business indicators.
Total revenue reached $3.41 billion in Q4’26, representing 34% year-over-year growth and surpassing the company’s guidance range of $3.345-3.355 billion. Remaining Performance Obligations (RPO) climbed to $21.2 billion, marking a 34% increase and crossing the $20 billion threshold for the first time in company history.
The company’s Next-Generation Security Annual Recurring Revenue (NGS ARR) demonstrated particularly strong momentum, reaching $9.10 billion with 63% year-over-year growth. This metric exceeded guidance of $8.90-8.95 billion and represented nearly $970 million in net new NGS ARR added during the quarter—a 98% increase compared to the prior-year period.
The following chart illustrates the consistent acceleration in the company’s top-line metrics throughout fiscal 2026.
For the full fiscal year 2026, Palo Alto Networks generated $11.48 billion in total revenue, up 24% year-over-year. Non-GAAP operating margin reached 29.2%, expanding 40 basis points from the prior year, while adjusted free cash flow totaled $4.41 billion with a 38.4% margin.
Platformization Strategy Gains Traction
A central theme of the presentation was the company’s progress in converting customers to its integrated platform approach. Management highlighted record net new platformizations in Q4’26, with approximately 220 customers adopting multiple product families—a 44% increase year-over-year.
As illustrated in the following chart, the company’s total platformized customer base reached approximately 2,500 by the end of Q4’26, including roughly 1,830 NetSec & Cortex platformizations and 670 Identity & Observability platformizations.
The company reported that platformized customers now generate more than 65% of NGS ARR and demonstrate a net retention rate exceeding 120%. Management reaffirmed its long-term target of achieving 4,000+ platformizations driving the majority of $20 billion in NGS ARR by fiscal 2030.
The presentation showcased four significant customer wins that exemplify the platformization strategy in action, including deals ranging from $42 million to $126 million.
These wins spanned diverse industries including telecommunications, technology services, payments, and financial services. The company also reported 223 customers with greater than $5 million in NGS ARR (up 45% year-over-year) and 78 customers exceeding $10 million (up 50% year-over-year).
AI-Driven Growth Across Platforms
Management emphasized three major AI inflections accelerating the evolution of cybersecurity: the shift from prompting to AI agency, the weaponization of AI coding capabilities, and the normalization of open-weight models. These trends are driving demand across all three of the company’s platform businesses.
In the Network & AI Security segment, which generated $8.35 billion in fiscal 2026 revenue (up 17% year-over-year), the company highlighted accelerating growth in both hardware and software firewalls. As shown in the following performance breakdown, total firewall bookings growth accelerated from 13% in FY’25 to 17% in FY’26.
Software firewall AI traffic increased more than 4x since June 2026, while the company achieved over $250 million in next-generation firewall competitive displacement bookings. In the SASE market, agentic traffic increased more than 9x over the preceding nine months, with competitive displacements reaching approximately $450 million—roughly double the prior year across about 100 accounts.
The company’s Prisma AIRS platform, launched in April 2025, achieved a significant milestone by surpassing $100 million in ARR within four quarters of general availability, as illustrated in the following product evolution timeline.
Prisma AIRS ARR reached approximately $120 million with over 800 customers (more than 2x quarter-over-quarter growth). The platform evolved from securing AI models and applications to addressing the rising threat landscape created by AI agents, including capabilities for agent artifact scanning, red teaming, security posture management, and runtime security.
Cortex and Idira Platform Performance
The Cortex platform, encompassing security operations and observability products, generated $1.92 billion in fiscal 2026 revenue, representing 25% year-over-year growth. The presentation highlighted strong momentum in both XSIAM and the recently acquired Chronosphere observability business.
XSIAM ARR grew from over $400 million in FY’25 to more than $700 million in FY’26, representing approximately 70% year-over-year growth. The platform now serves roughly 1,000 customers (more than 2x year-over-year growth) and demonstrated 45% year-over-year growth in deals exceeding $10 million.
Observability ARR, driven primarily by the Chronosphere acquisition, more than doubled in two quarters from over $200 million in Q2’26 to over $500 million in Q4’26. Management highlighted that 50% of observability net new logos in the second half of fiscal 2026 included XSIAM cross-sell, demonstrating early platform synergies.
The Idira platform (formerly CyberArk) showed accelerating growth momentum following its integration into Palo Alto Networks, as shown in the following integration metrics.
CyberArk annual contract value growth accelerated from 20% in Q2’26 to 27% in Q4’26, while secrets and AI bookings achieved approximately 40% fiscal 2026 growth. Integration efforts yielded over 400 shared leads between sales teams (up roughly 50% from May 2026) and over 200 new logo wins from the core Palo Alto Networks installed base. The platform generated $1.26 billion in pro forma fiscal 2026 revenue, representing 21% pro forma growth.
Revenue Momentum and Platform Contributions
The presentation detailed revenue performance across the company’s three platform businesses, showing balanced growth contributions from each segment.
Network & AI Security revenue grew 17% to $8.35 billion, Cortex revenue increased 25% to $1.92 billion, and Idira generated $1.26 billion in pro forma revenue with 21% pro forma growth. The company reported $0.61 billion in Idira revenue for the post-acquisition period in fiscal 2026.
Forward Outlook and Guidance
For fiscal first-quarter 2027, Palo Alto Networks provided guidance calling for NGS ARR of $9.54-9.56 billion (63% year-over-year growth), RPO of $20.8-20.9 billion (34-35% growth), total revenue of $3.30-3.31 billion (33-34% growth), and non-GAAP diluted EPS of $0.96-0.98.
The following table presents the company’s complete guidance for Q1 and full fiscal year 2027.
For the full fiscal 2027, management guided to NGS ARR of $11.075-11.175 billion (22-23% year-over-year growth), RPO of $25.2-25.4 billion (19-20% growth), and total revenue of $14.10-14.20 billion (23-24% growth). The company expects non-GAAP operating margin of 29.5% (30 basis points expansion) and adjusted free cash flow margin of 38.0%.
Management acknowledged that cloud hosting costs will rise faster than total revenue in fiscal 2027 due to the shift toward software-as-a-service offerings, and rising memory and storage costs will continue pressuring the hardware business. These cost dynamics contributed to investor concerns despite the strong top-line performance.
Long-Term Market Opportunity
The presentation reaffirmed the company’s confidence in achieving $20 billion in NGS ARR by fiscal 2030, supported by an expanding total addressable market. As illustrated in the following market size projections, management estimates the TAM will grow from approximately $200 billion in 2025 to roughly $340 billion by 2030.
The expansion reflects growth across all three platform categories: Network & AI Security (including Firewall, SASE, and AIRS) projected to reach $90 billion, Cortex (SOC, Observability, and Cloud) expected to reach $180 billion, and Idira (Identity Security) estimated at $67 billion by 2030.
The company’s actual Q4’26 results compared favorably to its previously issued guidance across all metrics, as shown in the following performance comparison.
Total revenue of $3.41 billion exceeded the guidance range of $3.345-3.355 billion, RPO of $21.2 billion surpassed the $20.9-21.0 billion target, NGS ARR of $9.10 billion beat the $8.90-8.95 billion forecast, and non-GAAP diluted EPS of $1.02 exceeded the $0.96-0.98 guidance range.
Despite these beats, the market’s negative reaction to the results highlights investor sensitivity to margin trends and cost pressures. With the stock trading near the upper end of its 52-week range of $139.57-$398.88 prior to the earnings release, the combination of gross margin compression to 74.8% (down 100 basis points year-over-year) and management’s commentary about rising cloud and hardware costs appears to have overshadowed the strong growth metrics and guidance beats.
The presentation positions Palo Alto Networks at the intersection of several powerful secular trends—AI-driven infrastructure buildout, the shift to platform-based security architectures, and the increasing sophistication of cyber threats. However, the company’s ability to sustain margin expansion while navigating these cost headwinds will likely remain a key focus for investors in the quarters ahead.
Full presentation:
This article was generated with the support of AI and reviewed by an editor. For more information see our T&C.