FEATURED

PANW: The Trading Cheat Sheet

Palo Alto Networks reports Q3 FY2026 results tonight after the close. Analysts are projecting $2.94 billion in revenue, up roughly 28% year over year, with non-GAAP EPS in the $0.78 to $0.80 range. NGS ARR guidance for Q3 sits at $7.94 to $7.96 billion. Options are pricing approximately 8% implied move in either direction. That is the setup.

The Quick Numbers

• Q3 Revenue Guidance: $2.941B to $2.945B, up 28 to 29% year over year
• Q2 Revenue (Actual): $2.59B
• Q3 NGS ARR Guidance: $7.94B to $7.96B, up roughly 56% year over year including M&A
• Q2 NGS ARR (Actual): $6.33B
• Q3 RPO Guidance: $17.85B to $17.95B, up 32 to 33% year over year
• Q2 RPO (Actual): $16.0B
• Q3 Non-GAAP EPS Guidance: $0.78 to $0.80 (roughly flat year over year)
• Q2 Non-GAAP EPS (Actual): $0.939
• Full-Year Revenue Guide: $11.28B to $11.31B, up 22 to 23%
• Full-Year NGS ARR Guide: $8.52B to $8.62B, up 53 to 54%

One note on those NGS ARR numbers: they now include roughly $1.47 billion from M&A, primarily the CyberArk acquisition closed early Q3 and Chronosphere at approximately $200M in ARR. Organic NGS ARR growth ran at 28% year over year in Q2. Worth separating those two figures before drawing conclusions about underlying business acceleration.

What Analysts Are Watching Tonight

• Organic vs. inorganic NGS ARR split. The headline NGS ARR number balloons post-CyberArk. What matters is how fast the core platform is growing without acquisition math doing the heavy lifting.
• FCF margin defense. PANW guided roughly 37% adjusted free cash flow margin for FY2026 despite acquisition overhead. Any downward revision here will punish the stock, probably harder than a revenue miss would.
• Platformization deal count. Q2 saw 110 net new platform customers and roughly 1,550 total platformized customers, up 35% year over year. The pace of new deals closing is the real forward indicator.
• EPS dilution clarity. Share count expansion from CyberArk is pressuring non-GAAP EPS. Q3 guidance implies flat EPS year over year despite revenue growing nearly 29%. Management commentary on the path back to EPS reacceleration will matter.
• CyberArk integration update. Now rebranded as Idira, this acquisition positions PANW as the only vendor offering unified coverage across network, cloud, and identity security at scale. Early customer reception is the key read.

The stock has been strong heading in. Up roughly 56% year-to-date as of late May, trading near all-time highs around $271 to $281, and carrying a P/E above 160x. That is a lot priced in. A beat on the top line alone probably does not move this higher in any sustained way. The Q2 setup was similar and shares slid 5% to 7% post-release despite beating revenue estimates – the culprit was lighter EPS guidance from acquisition costs. Same risk exists tonight.

Here is the thing about PANW at this price level. You are not buying a revenue story. You are buying a margin and free cash flow story. The market already knows cyber spending is non-discretionary. What it wants to know is whether the company can absorb two major acquisitions, maintain platform retention, and grow free cash flow toward the 40%+ target they have flagged for FY2028. Those are the questions tonight.

The Business Case (For Those Less Familiar)

Ransomware complaints filed with the FBI’s Internet Crime Complaint Center increased 9% year over year in 2024. Separately, ransomware attacks on U.S. organizations surged roughly 149% year over year in early 2025, according to threat research firm Cyble. The attack volume is not cycling down. State-sponsored campaigns against energy grids, defense contractors, financial institutions, and hospital networks are coordinated and persistent. The perimeter as an enterprise concept is effectively gone, and cloud infrastructure is the new attack surface.

That is the demand environment PANW operates in. The global cybersecurity market sits at roughly $272 billion in 2025 and is projected to reach $663 billion by 2033, growing at about 11.9% annually. Cloud-delivered security is expanding faster, at a 15% CAGR. This is not a cyclical trade. It is structural, and the spending is increasingly treated as a fixed operating cost, not a discretionary IT line item that gets reviewed when budgets tighten.

Slight tangent, but it matters: tariffs and trade tensions are largely a non-event for PANW. The overwhelming majority of its revenue flows from software subscriptions and cloud services, not hardware subject to import duties. While other tech names have been caught up in tariff uncertainty, PANW is mostly insulated from that conversation.

FY2025 revenue came in at $9.22 billion, up about 15% from $8.03 billion the prior year. Through the first half of FY2026, the company has already delivered $2.47 billion in Q1 and $2.59 billion in Q2, with growth accelerating as acquisition revenue layers in. The $20 billion NGS ARR target by FY2030 – raised from a prior $15 billion target – gives some sense of management’s conviction on the trajectory.

The Stickiness Argument

PANW’s platformization strategy is the core of why this business is hard to compete against once it is embedded. Rather than selling discrete point solutions, the company consolidates network security, cloud security, and security operations into a single platform. Customers who commit to that consolidation are deeply embedded. Switching is operationally painful and financially irrational.

Net retention rate among platformized customers runs at 119%. Platformized customers grew 35% year over year to roughly 1,550 in Q2. The company closed a $50M-plus security transformation deal with a global automotive company in Q2 alone, with $30 million allocated to SASE and $20 million to XSIAM for global security operations. SASE ARR crossed $1.3 billion with 34% year-over-year growth, now supporting roughly one-third of the Fortune 500. The company’s NATO cyber defense partnership, announced recently, validates its government and defense positioning at the highest level.

The deals are getting bigger. The customers are staying. That is the simple version of the bull case.

Where Analysts Stand Right Now

Consensus is bullish and moving higher. TipRanks shows 32 Buy ratings, zero Holds, zero Sells in the current period, with a 3-month average price target of roughly $261. The most recent upgrades heading into tonight’s report: Jefferies to $300, Wedbush to $300, Benchmark to $270, Baird to $300, and JPMorgan to $300. Wedbush specifically cited AI becoming a major growth driver for the cybersecurity sector and flagged PANW alongside CrowdStrike as their top picks. S&P Global’s broader consensus across 54 analysts sits at Buy with an average target of approximately $234.

The pushback is almost entirely valuation-based. A P/E above 160x and EV/NTM FCF around 37x leave very little room for disappointment. HSBC had the most bearish target at $157, issued in November 2025, and it looks increasingly out of step with where the stock has gone. But the underlying concern about premium valuation absorbing execution risk is a real one at these levels.

What I’m watching for tonight: FCF margin guidance and whether management quantifies organic NGS ARR growth clearly. Revenue beating consensus is almost a given based on the track record – PANW has beaten earnings estimates in each of the last four quarters with an average surprise of 6.8%. The question is what happens to EPS guidance as CyberArk integration costs roll through, and whether the platformization deal count continues to accelerate or shows any sign of slowing.

The floor on this business is reasonably well-defined by $16 billion in contracted RPO and a retention rate that does not move much. What happens above that floor tonight is the trader’s call to make.

For informational and educational purposes only. Not investment advice. Trading involves risk, including loss of principal.