Palo Alto Networks Q4 2026 Earnings Analysis

More earnings analysis: https://betafinch.com──────────WELCOME TO BETA FINCH — PANW Q4 FY2026ALEX: Welcome to Beta Finch, your AI-powered earnings breakdown. I'm Alex, here with Jordan, and today we're digging into Palo Alto Networks' fiscal Q4 2026 results. This one's a big report to close out their fiscal year.JORDAN: Before we jump in — this podcast is AI-generated content for educational and entertainment purposes only. Nothing we discuss should be considered investment advice. Always do your own research and consult a qualified financial advisor before making any investment decisions.ALEX: Right, so let's get into it, because Palo Alto had a genuinely record quarter. RPO — that's remaining performance obligations, basically the backlog of contracted future revenue — crossed $20 billion for the first time, landing at $21.2 billion, up 34%.JORDAN: And the number that really jumped out to me was Next-Generation Security ARR, or NGS ARR, hitting $9.1 billion, up 63%. They added almost $1 billion in net new NGS ARR in a single quarter. CFO Dipak Golechha pointed out that's roughly what the entire company's NGS ARR was back in his first quarter as CFO in 2021. That's the kind of comparison that really puts scale into perspective.ALEX: Total revenue for the quarter was $3.41 billion, up 34%, and full-year revenue came in at $11.5 billion, up 24%. Non-GAAP EPS beat guidance at $1.02, and operating margin for the year expanded to 29.2%.JORDAN: What's notable is that margin expansion happened while they were digesting their two biggest acquisitions ever — CyberArk, now rebranded Idira, and Chronosphere. Usually big M&A drags on margins for a while, but management said CyberArk's cost synergies are three to six months ahead of schedule.ALEX: Let's talk strategy, because CEO Nikesh Arora spent a lot of time on what he called three AI "inflection points" over the last several months — the shift from prompting to autonomous agents, the "Mythos moment" where AI models got scary good at finding vulnerabilities, and now a move toward open-weight, sovereign AI models. His overall thesis: all three point toward the same conclusion.JORDAN: Which is platformization — get customers to consolidate onto one unified security architecture instead of stitching together point products. They hit about 220 net new "platformizations" in the quarter, more than double the pace from two years ago, and platformized customers are showing net revenue retention above 120%.ALEX: They also called out some serious deal sizes — a $126 million deal with a global telecom, $72 million with an IT services firm, $53 million with a payments company. And Prisma AIRS, their AI security product, crossed $100 million in ARR in just four quarters — fastest product scale in company history.JORDAN: XSIAM, their security operations platform, is also cruising — over $700 million in ARR, up 70%, past 1,000 customers. And on the observability side, since closing Chronosphere, that ARR has more than doubled past $500 million. Combined, XSIAM and observability are now a billion-dollar-plus business that basically didn't exist a few years ago.ALEX: There was also a bit of breaking news on the call — they closed an acquisition of a company called Console the same day, focused on AI-driven IT and security operations, folding into their Cortex team.JORDAN: On the Q&A side, I thought the most candid moment was Nikesh basically saying M&A isn't a strategy for them — it's a consequence of watching 40 or 50 funded startups and jumping in when one of them nails a technology shift before Palo Alto's internal roadmap gets there. Refreshingly blunt for a CEO.ALEX: There was also a fun exchange about the CyberArk integration — a new "Modern PAM" product just went GA, and Nikesh made the case that identity security for AI agents and machine identities is a wide-open category with no established leader yet, which is where he thinks Idira has a real head start.JORDAN:This episode includes AI-generated content.