Sep 1, 2026 earnings call — Platformization and AI-driven ARR momentum
RPO closed at $21.2 billion and NGS ARR reached $9.1 billion with nearly $1 billion net new NGS ARR in Q4.
Revenue $3.4B (est $3.4B) · EPS $1.02 (est $0.98) · Next-quarter revenue outlook $3.3B–$3.3B
Key quotes
"During the fourth quarter, we achieved approximately 22 net new platformizations, surpassing our prior record representing more than twice the volume from when we initiated this metric 2 years ago."
"In FY 2026, our platform advantage drove exceptional results in our SASE business, where bookings grew 40%, with broad strength across access, SD WAN, and secure browser."
"We closed the 2 largest acquisitions in our history, with CyberArk and Chronosphere. Both of which are exceeding our initial expectation."
Analyst Q&A 10
Question about M&A plans
Q (Robbie Owens · Piper Sandler): The analyst asked how management is thinking about M&A and big transformational moves next fiscal year given market shifts and their past actions.
A: No management answer appears in this exchange of the transcript.
M&A joking reply
Q (Robbie Owens · Piper Sandler): Robbie asked for specifics on potential transformational M&A moves going forward.
A: Management joked and declined to give details, saying they would share the company name once they buy it. The reply was lighthearted and did not provide any concrete M&A plans or timing.
"Alright. Thank you, Robbie. I will keep your request. I will send you the company's name. As soon as I buy it. I appreciate that." — Nikesh Arora (CEO·CHAIR)
CyberArk deal progress and sales
Q (Brian Essex · JPMorgan): The analyst wanted details on CyberArk cross-sell: what conversations look like, deal sizes versus the rest of the platform, and penetration potential in the Palo Alto base.
A: Management said they hit cost synergy targets quickly and are focused on accelerating CyberArk's momentum and product expansion. They launched a new product, Modern PAM, and plan to upgrade traditional customers while pursuing upsell, expansion, and net-new sales.
"We just launched a new product called Modern PAM." — Nikesh Arora (CEO·CHAIR)
AI (Mythos) impact on buying behavior
Q (Saket Kalia · Barclays): The analyst asked how AI threats change customer buying—whether customers prefer platforms, pipeline growth, value appreciation, and price sensitivity.
A: Management said Mythos raised CEO-level interest and shifted conversations toward long-term modernization and platformization. They expect customers to favor consolidated platform approaches rather than buying many small vendors, creating a tailwind for larger vendors.
"And every conversation is not about fragmenting their estate and buying yet more smaller vendors." — Nikesh Arora (CEO·CHAIR)
Frontier AI and OT (operational tech) risks
Q (Fatima Boolani · Citi): The analyst asked about operational technology risk, gating factors to capture wallet share there, and how partnerships vs competition affect opportunity.
A: Management said customers want actionable fixes, not just vulnerability discovery, and noted OT is hard to patch. They built a capability to create signatures for OT and open source vulnerabilities and deploy fixes in under 4 hours to block bad actors quickly.
"we have actually built a capability where we could build signatures for OT vulnerabilities and open source vulnerabilities and deploy them in under 4 hours." — Nikesh Arora (CEO·CHAIR)
Observability product competitiveness (Chronosphere)
Q (Matthew Hedberg · RBC): The analyst asked where Chronosphere stands functionally versus historic leaders and whether growth is share shift or market growth from AI.
A: Management said Chronosphere was designed for the AI era and is significantly cheaper than incumbents on total cost of ownership. With Embrace and synthetics added, they expect parity across capabilities and the ability to pursue enterprise customers over the next 6 months.
"Chronosphere is on average 30% or 40% cheaper than any of the leading incumbent observability solutions out there." — Nikesh Arora (CEO·CHAIR)
How guidance was set for fiscal 2027
Q (Michael Turrin · Wells Fargo): The analyst asked how management approached the fiscal 2027 guide given AI inflections and early cybersecurity budget discussions.
A: Management said they consider consensus, underlying business plans, pipelines, trends, and resource needs, and that their process for making guidance is well established. They expect with execution and tailwinds to exceed consensus.
"we expect with our execution and the tailwinds, we are going to be able to exceed your consensus." — Nikesh Arora (CEO·CHAIR)
SASE displacements and strength
Q (Gregg Moskowitz): The analyst asked whether the competitive SASE displacement numbers were comparable and what drove the faster pace and SASE strength versus peers.
A: Management said displacements rose because of integration of SASE with SD-WAN, early CloudGenix acquisition, and alignment with their firewall hardware/software. That integrated platform makes it easier for existing Palo Alto customers to consolidate onto their SASE.
"Having our SASE fabric be consistent with our hardware and software firewall fabric, allows our customers who use Palo Alto firewalls to actually gravitate towards our SASE solution as opposed to elsewhere." — Nikesh Arora (CEO·CHAIR)
Helping customers address technical debt faster
Q (Meta Marshall · Morgan Stanley): The analyst asked how Palo Alto can help customers speed up paying down technical debt via services, investments, or payment options.
A: Management said they offer staggered payments and deployment approaches to accelerate platformization, but customers balance many priorities so transformations are phased. Typical transformations take 1–3 years and proceed as renewals or end-of-life timing allow.
"As a transformation plan, it is going to take 5 years, it is too long." — Nikesh Arora (CEO·CHAIR)
Future of autonomous security operations
Q (Brad Zelnick · Deutsche Bank): The analyst asked what customers would stop doing themselves if Palo Alto succeeded wildly in 5 years with autonomous security operations.
A: Management said their north star is reducing human intervention in detection, prevention, and remediation by using data and AI, so products can act agentically for customers. They aim for agents that understand deployments, replace products rapidly, and require much less human configuration.
"Our aspiration is to reduce the amount of human intervention in the act of detection, prevention, and remediation in the cyberspace." — Nikesh Arora (CEO·CHAIR)