Palo Alto Networks does not lack ambition. In fiscal 2026 alone it closed CyberArk, Chronosphere, Koi, and Portkey, a buying spree that pushed total revenue to $11.48 billion and NGS ARR to $9.10 billion, up 63% year-over-year. CEO Nikesh Arora described M&A as “a consequence of product development,” not a strategy unto itself. That framing matters, because one gap in the platform remains visible to any enterprise buyer doing a SASE evaluation.
That gap is Zscaler.
PANW’s own SASE ARR grew about 40% year-over-year through the second quarter of fiscal 2026, faster than almost any segment it runs. Yet Zscaler’s Zero Trust Exchange is now handling more than 750 billion requests per day and is used by more than 40% of the Forbes Global 2000. Zscaler also holds Gartner Leader status in both the 2026 SASE Platforms and SSE Magic Quadrant reports, the fifth consecutive year it has been recognized in the SSE category. In a direct customer comparison, Zscaler’s enterprise install base runs roughly 15 times deeper than Prisma’s named deployments.
The SASE market itself gives the thesis urgency. MarketsandMarkets sized it at $19.19 billion in 2026, projecting growth to $68.06 billion by 2032 at a 28.8% compound annual rate. Dell’Oro Group’s quarterly tracking put SASE revenue above $3 billion in just the first quarter of 2026. Whoever owns the broadest SASE platform as that market scales owns a disproportionate share of the renewal cycle.
The price has moved, but not out of reach. ZS closed at $260.15 on October 27, giving it a market cap of roughly $42.4 billion, still about 23% below its 52-week peak of $336.99. For a company whose Q4 fiscal 2026 revenue hit $898 million, up nearly 25% year-over-year, that valuation implies a deal could be structured at a manageable premium relative to PANW’s balance sheet and free cash flow.
The complication is integration fatigue. PANW absorbed the largest acquisition in its history less than nine months ago, and analysts have already flagged rising integration costs and meaningful share dilution as near-term risks. Buying a $42 billion-plus target before CyberArk’s synergies are fully realized would test even Arora’s platform story.
The antitrust angle also deserves attention. The zero trust market remains fragmented, with the top five vendors holding only an estimated 32% to 36% combined share. A combined PANW-ZS entity would still face Cisco, CrowdStrike, Netskope, and Cloudflare across overlapping segments, which likely gives regulators less cause for concern than the deal’s size implies.
The consolidation pressure extends beyond zero trust. Enterprise buyers collapsing hundreds of point-solution vendors into fewer mega-platform contracts is the same force compressing the SASE competitive field.
Traders watching ZS should track two things: whether PANW’s Q1 FY27 results (guiding $3.30 billion to $3.31 billion in revenue) show SASE momentum slowing organically, and whether Zscaler’s December 1 earnings call surfaces any softness in Zero Trust Everywhere customer additions, which rose to over 550 enterprises in Q2 fiscal 2026. Either data point shifts the calculus on how urgently PANW needs to buy what it cannot yet build fast enough.
