Palo Alto Networks Inc
For the period ended Apr 30, 2026. Filed Jun 3, 2026.
View on SEC.govAbout this filing
A company's report for each of its first three quarters. The financial statements are not audited. It shows how the business has moved since the last annual report, and what management says changed.
Apr 30, 2026 · Filed Jun 3, 2026
PANW$313.84-0.3%Stored close · as of Nov 6, 2026
What changed in Management’s Discussion and Analysis?
Read the current filingPrevious report: 10-Q
Period ended 2026-01-31; filed 2026-02-18.
0001327567-26-000005
Item 2. Management’s Discussion and Analysis of Financial Condition and Results of OperationsCurrent report: 10-Q
Period ended 2026-04-30; filed 2026-06-03.
0001327567-26-000015
Item 2. Management’s Discussion and Analysis of Financial Condition and Results of OperationsThe baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.
Compared 116 previous paragraphs and 128 current paragraphs.
69 unchanged; 44 reworded; 15 added; 3 removed; 0 previous and 0 current paragraphs rearranged.
Tables are not compared: 19 previous and 19 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.
A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.
Added paragraphs (15)
Current report
Identity Security
Current report
Idira™, our next-generation identity security platform, is designed to secure human, agentic and machine identities across the enterprise with intelligent privilege controls and continuous threat prevention. By unifying identity access management, privilege access management and identity governance and administration, organizations can continuously discover and protect against identity risk throughout the end-to-end identity lifecycle. The platform includes:
Current report
•Workforce Identity Security. Our solutions apply identity assurance and modern access controls for the entire workforce, including through adaptive multi-factor authentication, single sign-on, secure browsing, web session protection, workforce password management, and automated identity lifecycle management. Our approach enforces least privilege by elevating access only when required.
Current report
•Information Technology (“IT”) and Developer Identity Security (Modern Privilege Access Management). Our solutions secure high-risk access for IT administrators, third-party vendors, developers, and cloud operations teams across hybrid and multi-cloud environments, delivering just-in-time privileged access, session isolation, credential protection, and zero standing privileges while providing native, secure access to cloud services, workloads, and development and operations pipelines. Organizations can eliminate excessive permissions, automate access to dynamic cloud resources, and maintain developer velocity while strengthening identity controls across infrastructure and application environments.
Current report
•Machine Identity Security. Our solutions secure the growing volume of non-human identities—such as workloads, applications, containers, service accounts, certificates, and keys, including through centralized discovery and management of secrets, certificate lifecycle automation, workload identity issuance, public key infrastructure-as-a-service, Kubernetes certificate management, and secure code signing.
Current report
•Identity Governance and Administration (“IGA”). IGA enables visibility into entitlements, automated joiner–mover–leaver processes, access certification, and ongoing identity compliance. AI-supported policy automation helps organizations govern access at scale and enforce a zero-trust model across all identities.
Current report
•AI Agents Security. Our solution discovers AI agents, assigns identity attributes, and restricts their access to task-specific resources. It helps monitor and record agent activity for audit purposes, allows organizations to suspend or revoke access if behavior deviates from expected norms, and governs the lifecycle of the agent and the actions taken to support compliance.
Current report
IMPACT OF ACQUISITIONS
Current report
On February 11, 2026, we completed our acquisition of CyberArk for a total purchase consideration of $21.1 billion. In connection with completing the acquisition, we paid approximately $2.3 billion in cash and issued 112 million shares of our common stock with a fair value of $18.5 billion. In addition, we issued $945 million of replacement equity awards, of which $265 million attributable to services performed prior to the acquisition date was allocated to purchase consideration.
Current report
The comparability of our operating results for the three and nine months ended April 30, 2026 compared to the same periods in 2025 was impacted by our recent acquisitions, including CyberArk. In discussions of our results of operations, we may qualitatively or quantitatively disclose the impact of our acquisitions on revenue, costs, and expenses for the one year period subsequent to the acquisition date where such discussions would be meaningful.
Current report
Sales and marketing expense increased for the three and nine months ended April 30, 2026 compared to the same periods in 2025 primarily due to increased personnel costs, which grew $254 million and $408 million for the three and nine months ended April 30, 2026, respectively, compared to the same periods in 2025, largely due to headcount growth, including headcount from our recent acquisitions. The increase in sales and marketing expense in both periods were further driven by higher amortization of intangible assets as a result of our recent acquisitions.
Current report
In March 2026, the Knesset Finance Committee approved the Law for the Encouragement and Incentivization of Research and Development (the “R&D Law”) that provides incentives for qualifying research and development expenditures incurred after January 1, 2026. The R&D Law introduces a tax credit, at varying rates based on specified thresholds, for qualifying research and development expenditures incurred in Israel, subject to meeting defined eligibility criteria. It provides that all or a portion of the unutilized R&D tax credit will be paid in cash upon the lapse of a period stipulated by the R&D Law. The Israeli Knesset has indicated plans to issue additional regulations regarding the implementation of the R&D Law. For the three and nine months ended April 30, 2026, the impact of the R&D Law was not material to our condensed consolidated financial statements.
Current report
As of April 30, 2026, our total cash, cash equivalents, and investments of $7.0 billion were held for general corporate purposes. As part of the acquisition of CyberArk, we executed an intercompany transaction to repatriate $3.5 billion of foreign earnings, resulting in immaterial income tax expense related to state and other taxes. Our remaining unremitted earnings are indefinitely reinvested.
Current report
In February 2026, in connection with the acquisition of CyberArk, we entered into a supplemental indenture (the “Supplemental Indenture”) to the Indenture, dated as of June 10, 2025 (together with the Supplemental Indenture, the “Indenture”), between CyberArk, as issuer, and U.S. Bank Trust Company, National Association, as trustee, governing CyberArk’s $1.25 billion aggregate principal amount of 0.0% Convertible Senior Notes due 2030 (the “2030 Notes”). As a result of our acquisition of CyberArk and pursuant to the Supplemental Indenture, the 2030 Notes are now exchangeable into shares of our common stock and cash. The 2030 Notes mature on June 15, 2030; however, under certain circumstances, holders may surrender their 2030 Notes for conversion prior to the maturity date. Upon conversion of the 2030 Notes, we will pay cash equal to the aggregate principal amount of the 2030 Notes to be converted, and, at our election, we will pay or deliver cash and/or a combination of cash and shares of our common stock for the amount of our conversion obligation in excess of the aggregate principal amount of the 2030 Notes converted. During the three and nine months ended April 30, 2026, holders surrendered $153 million in aggregate principal amount of the 2030 Notes for conversion, which were settled for $160 million in cash on May 7, 2026. After giving effect to these conversions, the remaining outstanding principal balance of the 2030 Notes was $1.1 billion.
Current report
The sale price condition for the 2030 Notes was not met during the calendar quarter ended March 31, 2026, and as a result, our 2030 Notes are not convertible pursuant to that condition during the calendar quarter ending June 30, 2026. If the sale price condition for the 2030 Notes is met during the calendar quarter ending June 30, 2026 and all of the holders elect to convert their 2030 Notes during the calendar quarter ending September 30, 2026, we would be obligated to settle the $1.1 billion principal amount of the 2030 Notes and a portion of our conversion obligation in excess of the aggregate principal amount of the 2030 Notes, if any, in cash. We believe that our cash provided by operating activities, our existing cash, cash equivalents, and investments, and existing sources of and access to financing, including any proceeds that may be received from the settlement or termination of the outstanding capped call transactions we assumed in connection with our acquisition of CyberArk, will be sufficient to meet our anticipated cash needs should the holders choose to convert their 2030 Notes during the fiscal quarter ending July 31, 2026 or hold the 2030 Notes until maturity on June 15, 2030. Refer to Note 9. Debt in Part I, Item 1 of this Quarterly Report on Form 10-Q for more information on the 2030 Notes.
Removed paragraphs (3)
Previous report
Research and development expense was relatively flat for the three months ended January 31, 2026 compared to the same period in 2025. Research and development expense increased for the six months ended January 31, 2026 compared to the same period in 2025 primarily due to increased personnel costs, which grew $41 million for the six months ended January 31, 2026 compared to the same period in 2025, largely due to headcount growth.
Previous report
As of January 31, 2026, our total cash, cash equivalents, and investments of $7.9 billion were held for general corporate purposes. As of January 31, 2026, we had no unremitted earnings when evaluating our outside basis difference relating to our U.S. investment in foreign subsidiaries. However, there could be local withholding taxes due to various foreign countries if certain lower tier earnings are distributed. Withholding taxes that would be payable upon remittance of these lower tier earnings are not material.
Previous report
On July 30, 2025, we entered into a definitive agreement to acquire CyberArk. Under the terms of the definitive agreement, CyberArk shareholders were entitled to receive $45.00 in cash and 2.2005 shares of our common stock for each CyberArk share. On February 11, 2026, we completed the acquisition of CyberArk for $2.3 billion in cash and 112 million shares of our common stock. The cash portion of the consideration was funded with our cash on hand. Refer to Part II, Item 1A “Risk Factors” and Note 7. Acquisitions in Part I, Item 1 of this Quarterly Report on Form 10-Q for more information on the acquisition.
Reworded paragraphs (44)
Previous wording
The following discussion and analysis of our financial condition and results of operations should be read in conjunction with our condensed consolidated financial statements and related notes appearing elsewhere in this Quarterly Report on Form 10-Q. This Quarterly Report on Form 10-Q, including, without limitation, the following discussion and analysis, contains forward-looking statements within the meaning of Section 27A of the Securities Act of 1933 and Section 21E of the Securities Exchange Act of 1934. Forward-looking statements generally can be identified by words such as “anticipate,” “believe,” “continue,” “could,” “estimate,” “expect,” “intend,” “may,” “plan,” “potentially,” “projects,” “will,” “will be,” “will continue,” “will likely result,” “would” and similar expressions that convey uncertainty of future events or outcomes. These forward-looking statements include, but are not limited to, statements concerning the following: expectations regarding the cybersecurity landscape; expectations regarding our platformization strategy and related progress and opportunities; expectations regarding annual recurring revenue, remaining performance obligations, and product development strategy; expectations regarding artificial intelligence; expectations regarding our strategic partnerships; expectations regarding drivers of and factors affecting growth in our business; statements regarding expected profitability, trends in annual recurring revenue, trends in remaining performance obligations, our mix of product and subscription and support revenue, cost of revenue, gross margin, cash flows, operating expenses, including future share-based compensation expense, income taxes, investment plans, and liquidity; expected recurring revenues resulting from growth in our end-customers and increased adoption of our products and cloud-delivered security solutions; the performance advantages of our products and subscription and support offerings and the potential benefits to our customers; expectations regarding future investments in research and development and product development, customer support, in our employees and in our sales force, including expectations regarding growth in our sales headcount; expectations that we will continue to expand our global presence; expectations regarding our revenues, including the seasonality and cyclicality from quarter to quarter; expectations relating to our customer financing activities; the sufficiency of our cash flow from operations with existing cash, cash equivalents, and investments to meet our cash needs for the foreseeable future; our ability to successfully acquire and integrate companies and assets and expectations and intentions with respect to the assets, products and technologies that we acquire, including with respect to our acquisition of CyberArk Software Ltd. and our expectations regarding the benefits and synergies of the acquisition; expectations regarding contingent consideration obligations; sta…
Excerpt shortened here; the source contains the full paragraph.
Current wording
The following discussion and analysis of our financial condition and results of operations should be read in conjunction with our condensed consolidated financial statements and related notes appearing elsewhere in this Quarterly Report on Form 10-Q. This Quarterly Report on Form 10-Q, including, without limitation, the following discussion and analysis, contains forward-looking statements within the meaning of Section 27A of the Securities Act of 1933 and Section 21E of the Securities Exchange Act of 1934. Forward-looking statements generally can be identified by words such as “anticipate,” “believe,” “continue,” “could,” “estimate,” “expect,” “intend,” “may,” “plan,” “potentially,” “projects,” “will,” “will be,” “will continue,” “will likely result,” “would” and similar expressions that convey uncertainty of future events or outcomes. These forward-looking statements include, but are not limited to, statements concerning the following: expectations regarding the cybersecurity landscape; expectations regarding our platformization strategy and related progress and opportunities; expectations regarding annual recurring revenue, remaining performance obligations, and product development strategy; expectations regarding artificial intelligence; expectations regarding our strategic partnerships; expectations regarding drivers of and factors affecting growth in our business; statements regarding expected profitability, trends in annual recurring revenue, trends in remaining performance obligations, our mix of product and subscription and support revenue, cost of revenue, gross margin, cash flows, operating expenses, including future share-based compensation expense, income taxes, investment plans, and liquidity; expected recurring revenues resulting from growth in our end-customers and increased adoption of our products and cloud-delivered security solutions; the performance advantages of our products and subscription and support offerings and the potential benefits to our customers; expectations regarding future investments in research and development and product development, customer support, in our employees and in our sales force, including expectations regarding growth in our sales headcount; expectations that we will continue to expand our global presence; expectations regarding our revenues, including the seasonality and cyclicality from quarter to quarter; expectations relating to our customer financing activities; the sufficiency of our cash flow from operations with existing cash, cash equivalents, and investments to meet our cash needs for the foreseeable future; our ability to successfully acquire and integrate companies and assets and expectations and intentions with respect to the assets, products and technologies that we acquire; expectations regarding the benefits and synergies from our acquisition and integration of companies, assets and technology, including with respect to our acquisition of CyberArk Software Ltd.; expectations rega…
Excerpt shortened here; the source contains the full paragraph.
Previous wording
•Results of Operations. A discussion of the nature and trends in our financial results and an analysis of our financial results comparing the three and six months ended January 31, 2026 to the three and six months ended January 31, 2025.
Current wording
•Results of Operations. A discussion of the nature and trends in our financial results and an analysis of our financial results comparing the three and nine months ended April 30, 2026 to the three and nine months ended April 30, 2025.
Previous wording
Our mission is to be the cybersecurity partner of choice for enterprises, organizations, service providers, and government entities to protect our digital way of life. Our cybersecurity platforms and services help secure enterprise users, networks, clouds, and endpoints by delivering comprehensive cybersecurity backed by artificial intelligence (“AI”) and automation. A key element of our strategy is to help our customers simplify their security architectures through consolidating disparate point products. We execute on this strategy by developing our capabilities and packaging our offerings into platforms which are able to cover many of our customers’ needs in the markets in which we operate. Our platformization strategy combines various products and services into a tightly integrated architecture for more secure, faster and cost-effective outcomes.
Current wording
Our mission is to be the cybersecurity partner of choice for enterprises, organizations, service providers, and government entities to protect our digital way of life. Our cybersecurity platforms and services help secure enterprise users, networks, clouds, endpoints, and identities by delivering comprehensive cybersecurity backed by artificial intelligence (“AI”) and automation. A key element of our strategy is to help our customers simplify their security architectures through consolidating disparate point products. We execute on this strategy by developing our capabilities and packaging our offerings into platforms which are able to cover many of our customers’ needs in the markets in which we operate. Our platformization strategy combines various products and services into a tightly integrated architecture for more secure, faster and cost-effective outcomes.
Previous wording
•Secure Access Service Edge (“SASE”). Prisma® Access, when combined with Prisma SD-WAN, provides a comprehensive SASE offering that secures users working from anywhere and pioneers the modernization of branch offices. Prisma Browser further extends zero-trust security and data protection to the browser, where the majority of work is done today, providing users with the freedom to work securely using our secure browser from any device.
Current wording
•Secure Access Service Edge (“SASE”). Prisma® Access, when combined with Prisma SD-WAN, provides a comprehensive SASE offering that secures users working from anywhere and on any device, and pioneers the modernization of branch offices. Prisma Browser further extends zero-trust security and data protection to the browser, where the majority of work is done today, providing users with the freedom to work securely using our secure browser from any device.
Previous wording
•Prisma AIRS. Prisma AIRS™ is a comprehensive AI security platform that has been designed to protect customers’ entire AI ecosystem by providing AI Model Security, AI Posture Management, AI Red Teaming, AI Runtime Security, and AI Agent Security.
Current wording
•Prisma AIRS. Prisma AIRS™ is a comprehensive AI security platform designed to protect customers’ entire AI ecosystem by providing AI Model Security, AI Posture Management, AI Red Teaming, AI Runtime Security, and AI Agent Security.
Previous wording
•Security Operations. We deliver the next generation of security operations capabilities that unifies standalone Security Information and Event Management (“SIEM”) tools, endpoint security, security automation, cloud detection and response (“CDR”), as well as attack surface management (“ASM”) capabilities on our Cortex® platform. These include Cortex XSIAM®, for AI-powered security operations replacing traditional SIEM tools; Cortex XDR®, for the prevention, detection, and response to complex cybersecurity attacks; Cortex XSOAR®, for security orchestration, automation, and response (“SOAR”); and Cortex Xpanse®, for ASM. Additionally, Cortex XSIAM integrates with the Chronosphere Telemetry Pipeline to ingest and optimize massive data volumes, promoting cost-effective scaling of autonomous operations.
Current wording
•Security Operations. We deliver the next generation of security operations capabilities that unifies standalone Security Information and Event Management (“SIEM”) tools, endpoint security, security automation, cloud detection and response (“CDR”), as well as attack surface management (“ASM”) capabilities on our Cortex® platform. These include Cortex XSIAM®, for AI-powered security operations replacing traditional SIEM tools; Cortex XDR®, for the prevention, detection, and response to complex cybersecurity attacks; Cortex XSOAR®, for security orchestration, automation, and response (“SOAR”); Cortex Xpanse®, for ASM; and our recent acquisition of Koi Security Ltd. (“Koi”) for agentic endpoint security. Additionally, Cortex XSIAM integrates with the Chronosphere Telemetry Pipeline to ingest and optimize massive data volumes, promoting cost-effective scaling of autonomous operations.
Previous wording
•Unit 42 brings together world-renowned expertise across threat research, incident response, and security consulting to deliver intelligence-driven, response-ready outcomes that help customers reduce cyber risk. Our elite consultants serve as trusted advisors to our customers by assessing and testing their security controls against sophisticated threats, transforming their security strategy with a threat-informed approach, and responding to security incidents on behalf of our clients. Additionally, Unit 42 offers managed detection and response (“MDR”) and managed threat hunting services.
Current wording
•Unit 42 brings together world-renowned expertise across threat research, incident response, and security consulting to deliver intelligence-driven, response-ready outcomes that help customers reduce cyber risk. Our elite consultants serve as trusted advisors to our customers by assessing and testing their security controls against sophisticated threats, transforming their security strategy with a threat-informed approach, and responding to security incidents on behalf of our clients. Additionally, Unit 42 offers managed detection and response (“MDR”) and managed threat hunting services. In April 2026, we launched a new suite of Unit 42 Frontier AI Defense services to help customers proactively discover and neutralize threats introduced by next-generation AI models.
Previous wording
For the second quarter of fiscal 2026 and 2025, total revenue was $2.6 billion and $2.3 billion, respectively, representing year-over-year growth of 15%. Our growth reflects the increased adoption of our portfolio, which consists of product, subscriptions, and support. We believe our portfolio will enable us to benefit from recurring revenues and new revenues as we continue to grow our end-customer base. As of January 31, 2026, we had end-customers in over 180 countries. Our end-customers represent a broad range of industries, including education, energy, financial services, government entities, healthcare, Internet and media, manufacturing, public sector, and telecommunications, and include almost all of the Fortune 100 companies and a majority of the Global 2000 companies. We maintain a field sales force that works closely with our channel partners in developing sales opportunities. We primarily use a two-tiered, indirect fulfillment model whereby we sell our products, subscriptions, and support to our distributors, which, in turn, sell to our resellers, which then sell to our end-customers.
Current wording
For the third quarter of fiscal 2026 and 2025, total revenue was $3.0 billion and $2.3 billion, respectively, representing year-over-year growth of 31%. Our growth reflects the increased adoption of our portfolio, which consists of product, subscriptions, and support, and our recent acquisitions. We believe our portfolio will enable us to benefit from recurring revenues and new revenues as we continue to grow our end-customer base. As of April 30, 2026, we had end-customers in over 180 countries. Our end-customers represent a broad range of industries, including education, energy, financial services, government entities, healthcare, Internet and media, manufacturing, public sector, and telecommunications, and include almost all of the Fortune 100 companies and a majority of the Global 2000 companies. We maintain a field sales force that works closely with our channel partners in developing sales opportunities. We primarily use a two-tiered, indirect fulfillment model whereby we sell our products, subscriptions, and support to our distributors, which, in turn, sell to our resellers, which then sell to our end-customers.
Previous wording
Our product revenue grew to $514 million, or 19.8% of total revenue, for the second quarter of fiscal 2026, representing year-over-year growth of 22%. Product revenue is derived from sales of hardware products, primarily our ML-Powered Next-Generation Firewall and software licenses, including SD-WAN, VM-Series, and Panorama®. Our ML-Powered Next-Generation Firewall incorporates our PAN-OS operating system, which provides a consistent set of capabilities across our entire network security product line. Our hardware products and software licenses include a broad set of built-in networking and security features and functionalities. Our products are designed for different performance requirements throughout an organization, ranging from our PA-400, which is designed for small organizations and remote or branch offices, to our top-of-the-line PA-7500, which is designed for large-scale data centers and service provider use. The same firewall functionality that is delivered in our hardware products is also available in our VM-Series virtual firewalls, which secure virtualized and cloud-based computing environments, and in our CN-Series container firewalls, which secure container environments and traffic.
Current wording
Our product revenue grew to $594 million, or 19.8% of total revenue, for the third quarter of fiscal 2026, representing year-over-year growth of 31%. Product revenue is derived from sales of hardware products, primarily our ML-Powered Next-Generation Firewall and software licenses, including SD-WAN, VM-Series, and Panorama®. In connection with the acquisition of CyberArk Software Ltd. (“CyberArk”) in February 2026, our product revenue also includes on-premise software licenses of certain identity security offerings. Our ML-Powered Next-Generation Firewall incorporates our PAN-OS operating system, which provides a consistent set of capabilities across our entire network security product line. Our hardware products and software licenses include a broad set of built-in networking and security features and functionalities. Our products are designed for different performance requirements throughout an organization, ranging from our PA-400, which is designed for small organizations and remote or branch offices, to our top-of-the-line PA-7500, which is designed for large-scale data centers and service provider use. The same firewall functionality that is delivered in our hardware products is also available in our VM-Series virtual firewalls, which secure virtualized and cloud-based computing environments, and in our CN-Series container firewalls, which secure container environments and traffic.
Previous wording
Our subscription and support revenue grew to $2.1 billion, or 80.2% of total revenue, for the second quarter of fiscal 2026, representing year-over-year growth of 13%. Our subscriptions provide our end-customers with near real-time access to the latest intrusion prevention, web security, modern malware prevention, data loss prevention, cloud security access broker and AI security capabilities across the network, endpoints, and the cloud. Our subscriptions also include security operations, which enable customers to leverage the AI-powered Cortex platform for advanced capabilities such as security information and event management, next-generation antivirus, endpoint detection and response, extended detection and response, identity threat detection and response, cloud detection and response, SOAR, ASM, and CNAPP for comprehensive cloud security. In connection with our acquisition of Chronosphere, Inc. (“Chronosphere”) in January 2026, our subscriptions also include a next-generation observability platform for cloud-native infrastructure and applications as well as telemetry pipeline management that is designed to handle vast cloud data volumes with cost-efficiency and reliability. Additionally, we offer MDR for Cortex subscriptions, powered by Unit 42’s elite expertise. When customers purchase our physical, virtual, or container firewalls, or certain cloud offerings, they typically purchase support in order to receive ongoing security updates, upgrades, bug fixes, and repairs. In addition to the subscriptions purchased with these firewalls, customers may also purchase other subscriptions on a per-user, per-endpoint, or capacity-based basis. We also offer professional services, including incident response, risk management, and digital forensic services.
Current wording
Our subscription and support revenue grew to $2.4 billion, or 80.2% of total revenue, for the third quarter of fiscal 2026, representing year-over-year growth of 31%. Our subscriptions provide our end-customers with near real-time access to the latest intrusion prevention, web security, modern malware prevention, data loss prevention, cloud security access broker and AI security capabilities across the network, endpoints, and the cloud. Our subscriptions also include security operations, which enable customers to leverage the AI-powered Cortex platform for advanced capabilities such as security information and event management, next-generation antivirus, endpoint detection and response, extended detection and response, identity threat detection and response, cloud detection and response, SOAR, ASM, and CNAPP for comprehensive cloud security. In connection with our acquisition of Chronosphere, Inc. (“Chronosphere”) in January 2026, our subscriptions also include a next-generation observability platform for cloud-native infrastructure and applications as well as telemetry pipeline management that is designed to handle vast cloud data volumes with cost-efficiency and reliability. With the acquisition of CyberArk, our subscriptions include a next-generation identity security platform designed to secure human, AI, and machine identity across the enterprise with intelligent privilege controls and continuous threat prevention. Additionally, we offer MDR for Cortex subscriptions, powered by Unit 42’s elite expertise. When customers purchase our physical, virtual, or container firewalls, or certain cloud offerings, they typically purchase support in order to receive ongoing security updates, upgrades, bug fixes, and repairs. In addition to the subscriptions purchased with these firewalls, customers may also purchase other subscriptions on a per-user, per-endpoint, or capacity-based basis. We also offer professional services, including incident response, risk management, digital forensic services, and technical account management.
Previous wording
We continue to invest in innovation as we evolve and further extend the capabilities of our portfolio, as we believe that innovation and timely development of and investment in new features and products are essential to meeting the needs of our end-customers and improving our competitive position. On February 11, 2026, we completed the acquisition of CyberArk Software Ltd. (“CyberArk”), forming our next-generation identity security platform. Additionally, on January 29, 2026, we completed the acquisition of Chronosphere, forming our next-generation observability platform.
Current wording
We continue to invest in innovation as we evolve and further extend the capabilities of our portfolio, as we believe that innovation and timely development of and investment in new features and products are essential to meeting the needs of our end-customers and improving our competitive position. For example, we launched Next-Generation Trust Security that unifies certificate lifecycle management and Prisma AIRS 3.0 that discovers, assesses, and protects agentic AI. On February 11, 2026, we completed the acquisition of CyberArk, forming our next-generation identity security platform. Additionally, on April 14, 2026, we completed the acquisition of Koi, to add agentic endpoint security capabilities to our security operations platform and enhance Prisma AIRS. On May 29, 2026, we completed the acquisition of Portkey, Inc., a privately-held AI Gateway company, to enhance our Prisma AIRS capabilities.
Previous wording
Our overall performance depends in part on worldwide economic and geopolitical conditions and their impact on customer behavior. Changes in legislation or regulations and actions by regulators, including changes in enforcement and administration policies, may have an impact on our results of operations and financial condition. Significant changes in U.S. or global trade policy, including further expansion of U.S. export/imports controls and tariffs, as well as retaliatory actions by other countries, may materially and adversely affect our business. Further, economic conditions, including inflation, high interest rates, slow growth, fluctuations in foreign exchange rates, supply chain disruptions, such as a memory or other component shortage, impacts of trade regulations or international trade disputes, and other conditions, may adversely affect our results of operations and financial performance.
Current wording
Our overall performance depends in part on worldwide economic and geopolitical conditions and their impact on customer behavior. Changes in legislation or regulations and actions by regulators, including changes in enforcement and administration policies, may have an impact on our results of operations and financial condition. Significant changes in U.S. or global trade policy, including further expansion of U.S. export/imports controls and tariffs, as well as retaliatory actions by other countries, may materially and adversely affect our business. Further, economic conditions, including inflation, high interest rates, slow growth, fluctuations in foreign exchange rates, supply chain disruptions, including increased memory, storage or other component shortages, impacts of trade regulations or international trade disputes, and other conditions, may adversely affect our results of operations and financial performance.
Previous wording
The hostilities in Israel and the surrounding region have continued to result in economic and political uncertainty. While we have business operations in Israel, and intend to continue growing our presence in Israel, we currently do not expect significant business disruption. We are actively monitoring, evaluating, and responding to the situation.
Current wording
The hostilities in Israel, Iran and the surrounding region have continued to result in economic and political uncertainty. While we have business operations in Israel, and intend to continue growing our presence in Israel, we currently do not expect significant business disruption. We are actively monitoring, evaluating, and responding to the situation.
Previous wording
We monitor the key financial metrics set forth in the tables below to help us evaluate growth trends, establish budgets, measure the effectiveness of our sales and marketing efforts, and assess operational efficiencies. We discuss revenue, gross margin, and the components of operating income and margin below under “Results of Operations.”
Current wording
We monitor the key financial metrics set forth in the tables below to help us evaluate growth trends, establish budgets, measure the effectiveness of our sales and marketing efforts, and assess operational efficiencies. We discuss revenue, gross margin, and the components of operating income (loss) and margin below under “Results of Operations.”
Previous wording
Our revenue consists of product revenue and subscription and support revenue. Revenue is recognized upon transfer of control of the corresponding promised products and subscriptions and support to our customers in an amount that reflects the consideration we expect to be entitled to in exchange for those products and subscriptions and support. We expect our revenue to vary from quarter to quarter based on seasonal and cyclical factors.
Current wording
Our revenue consists of product revenue and subscription and support revenue. Revenue is recognized upon transfer of control of the corresponding promised products and subscriptions and support to our customers in an amount that reflects the consideration we expect to be entitled to in exchange for those products and subscriptions and support. We expect our revenue to vary from quarter to quarter based on seasonal and cyclical factors and business acquisitions.
Previous wording
Product revenue is derived from sales of hardware products, primarily our ML-Powered Next-Generation Firewall, and software licenses, including SD-WAN, VM-Series, and Panorama. Our hardware products and software licenses include a broad set of built-in networking and security features and functionalities. We recognize product revenue at the time of hardware shipment or delivery of software license. As a percentage of product revenue, we expect our revenue from software licenses to vary from quarter to quarter and increase over the long term as we improve features and capabilities of our on-premise software, renew our software license contracts, and expand our installed end-customer base.
Current wording
Product revenue is derived from sales of hardware products, primarily our ML-Powered Next-Generation Firewall, and software licenses, including SD-WAN, VM-Series, Panorama, and certain identity security offerings. Our hardware products and software licenses include a broad set of built-in networking and security features and functionalities. We recognize product revenue at the time of hardware shipment or delivery of software license. As a percentage of product revenue, we expect our revenue from software licenses to vary from quarter to quarter and increase over the long term as we improve features and capabilities of our on-premise software, renew our software license contracts, and expand our installed end-customer base.
Previous wording
Product revenue increased for the three and six months ended January 31, 2026 compared to the same periods in 2025, driven by increased revenue from software licenses and increased demand for our new generation of hardware products.
Current wording
Product revenue increased for the three and nine months ended April 30, 2026 compared to the same periods in 2025, driven by increased revenue from software licenses and increased demand for our new generation of hardware products. The increase in product revenue for the three and nine months ended April 30, 2026 was also driven by increased software licenses revenue from our CyberArk acquisition closed in February 2026.
Previous wording
Subscription and support revenue increased for the three and six months ended January 31, 2026 compared to the same periods in 2025 due to increased demand for our subscription and support offerings from our end-customers. The mix between subscription revenue and support revenue will fluctuate over time, depending on the introduction of new subscription offerings, renewals of support services, and our ability to increase sales to new and existing end-customers.
Current wording
Subscription and support revenue increased for the three and nine months ended April 30, 2026 compared to the same periods in 2025 due to increased demand for our subscription and support offerings from our end-customers and our recent acquisitions. The mix between subscription revenue and support revenue will fluctuate over time, depending on the introduction of new subscription offerings, renewals of support services, and our ability to increase sales to new and existing end-customers.
Previous wording
Revenue from the Americas, EMEA, and APAC increased for the three and six months ended January 31, 2026 compared to the same periods in 2025 as we continued to increase investment in our global sales force in order to support our growth and innovation, with the Americas contributing the highest increase in revenue due to its larger scale.
Current wording
Revenue from the Americas, EMEA, and APAC increased for the three and nine months ended April 30, 2026 compared to the same periods in 2025 as we continued to increase investment in our global sales force in order to support our growth and innovation, with the Americas contributing the highest increase in revenue due to its larger scale.
Previous wording
Cost of product revenue primarily includes costs paid to our manufacturing partners for procuring components and manufacturing our products. Our cost of product revenue also includes personnel costs, which consist of salaries, benefits, bonuses, share-based compensation, and travel associated with our operations organization, inventory excess and obsolete charges, shipping and tariff costs, amortization of intellectual property licenses, product testing costs, and shared costs. Shared costs consist of certain facilities, depreciation, benefits, recruiting, and information technology costs that we allocate based on headcount. We expect our cost of product revenue to fluctuate with our revenue from hardware products.
Current wording
Cost of product revenue primarily includes costs paid to our manufacturing partners for procuring components and manufacturing our products. Our cost of product revenue also includes personnel costs, which consist of salaries, benefits, bonuses, share-based compensation, and travel associated with our operations organization, inventory excess and obsolete charges, shipping and tariff costs, amortization of intangible assets, product testing costs, and shared costs. Shared costs consist of certain facilities, depreciation, benefits, recruiting, and information technology costs that we allocate based on headcount. We expect our cost of product revenue to fluctuate with our revenue from hardware products.
Previous wording
Cost of product revenue increased for the three and six months ended January 31, 2026 compared to the same periods in 2025 primarily due to increased demand for our hardware products and higher tariff costs, partially offset by a decrease in inventory excess and obsolete charges.
Current wording
Cost of product revenue increased for the three and nine months ended April 30, 2026 compared to the same periods in 2025 primarily due to higher amortization of intangible assets as a result of our CyberArk acquisition, increased demand for our hardware products and higher tariff costs, partially offset by a decrease in inventory excess and obsolete charges.
Previous wording
Cost of subscription and support revenue includes personnel costs for our global customer support and technical operations organizations, data center and cloud hosting service costs, third-party professional services costs, amortization of acquired intangible assets and capitalized software development costs, customer support and repair costs, and shared costs. We expect our cost of subscription and support revenue to increase as our installed end-customer base grows and adoption of our cloud-based subscription offerings increases.
Current wording
Cost of subscription and support revenue includes personnel costs for our global customer support and technical operations organizations, data center and cloud hosting service costs, third-party professional services costs, amortization of intangible assets and capitalized software development costs, customer support and repair costs, and shared costs. We expect our cost of subscription and support revenue to increase as our installed end-customer base grows and adoption of our cloud-based subscription offerings increases.
Previous wording
Cost of subscription and support revenue increased for the three and six months ended January 31, 2026 compared to the same periods in 2025 primarily due to increased costs to support the growth of our subscription and support offerings. Cloud hosting service costs, which support our cloud-based subscription offerings, increased $48 million and $97 million for the three and six months ended January 31, 2026, respectively, compared to the same periods in 2025. Personnel costs grew $11 million and $25 million for the three and six months ended January 31, 2026, respectively, compared to the same periods in 2025, primarily due to headcount growth.
Current wording
Cost of subscription and support revenue increased for the three and nine months ended April 30, 2026 compared to the same periods in 2025 primarily due to increased costs to support the growth of our subscription and support offerings. Cloud hosting service costs, which support our cloud-based subscription offerings, increased $75 million and $171 million for the three and nine months ended April 30, 2026, respectively, compared to the same periods in 2025. Amortization of intangible assets increased $117 million and $109 million for the three and nine months ended April 30, 2026, respectively, compared to the same periods in 2025 as a result of our recent acquisitions. Personnel costs grew $71 million and $97 million for the three and nine months ended April 30, 2026, respectively, compared to the same periods in 2025, primarily due to headcount growth, including headcount from our recent acquisitions.
Previous wording
Product gross margin increased for the three and six months ended January 31, 2026 compared to the same periods in 2025 primarily due to continued shift in our product revenue mix toward software, and a decrease in inventory excess and obsolete charges, partially offset by a decrease in gross margin on our hardware products.
Current wording
Product gross margin decreased for the three and nine months ended April 30, 2026 compared to the same periods in 2025 primarily due to a decrease in gross margin on our hardware products and higher amortization of intangible assets, partially offset by increased software licenses revenue from our CyberArk acquisition. The decrease in product gross margin for the nine months ended April 30, 2026 was further offset by continued shift in our product revenue mix toward software and a decrease in inventory excess and obsolete charges.
Previous wording
Subscription and support gross margin were flat for the three and six months ended January 31, 2026 compared to the same periods in 2025.
Current wording
Subscription and support gross margin decreased for the three and nine months ended April 30, 2026 compared to the same periods in 2025 primarily due to higher amortization of intangible assets as a result of our recent acquisitions.
Previous wording
Our operating expenses consist of research and development, sales and marketing, and general and administrative expenses. Personnel costs are the most significant component of operating expenses and consist of salaries, benefits, bonuses, share-based compensation, travel and entertainment, and with regard to sales and marketing expense, sales commissions. Our operating expenses also include shared costs, which consist of certain facilities, depreciation, benefits, recruiting, and information technology costs that we allocate based on headcount to each department. We expect operating expenses generally to increase in absolute dollars and to decrease over the long term as a percentage of revenue as we continue to scale our business. As of January 31, 2026, we expect to recognize approximately $2.9 billion of share-based compensation expense over a weighted-average period of approximately 2.6 years, excluding additional share-based compensation expense related to any future grants of share-based awards. Share-based compensation expense is generally recognized on a straight-line basis over the requisite service periods of the awards.
Current wording
Our operating expenses consist of research and development, sales and marketing, and general and administrative expenses. Personnel costs are the most significant component of operating expenses and consist of salaries, benefits, bonuses, share-based compensation, travel and entertainment, and with regard to sales and marketing expense, sales commissions. Our operating expenses also include shared costs, which consist of certain facilities, depreciation, benefits, recruiting, and information technology costs that we allocate based on headcount to each department. We expect operating expenses generally to increase in absolute dollars and to decrease over the long term as a percentage of revenue as we continue to scale our business. As of April 30, 2026, we expect to recognize approximately $3.6 billion of share-based compensation expense over a weighted-average period of approximately 2.6 years, excluding additional share-based compensation expense related to any future grants of share-based awards. Share-based compensation expense is generally recognized on a straight-line basis over the requisite service periods of the awards.
Previous wording
Sales and marketing expense increased for the three and six months ended January 31, 2026 compared to the same periods in 2025 primarily due to increased personnel costs, which grew $69 million and $154 million for the three and six months ended January 31, 2026, respectively, compared to the same periods in 2025, largely due to headcount growth.
Current wording
Research and development expense increased for the three and nine months ended April 30, 2026 compared to the same periods in 2025 primarily due to increased personnel costs, which grew $192 million and $233 million for the three and nine months ended April 30, 2026 compared to the same periods in 2025, largely due to headcount growth, including headcount from our recent acquisitions.
Previous wording
Sales and marketing expense consists primarily of personnel costs, including commission expense. Sales and marketing expense also includes costs for market development programs, promotional and other marketing costs, professional services, and shared costs. We continue to strategically invest in headcount and have grown our sales presence. We expect sales and marketing expense to continue to increase in absolute dollars as we increase the size of our sales and marketing organizations to grow our customer base, increase touch points with end-customers, and expand our global presence, although our sales and marketing expense may fluctuate as a percentage of total revenue.
Current wording
Sales and marketing expense consists primarily of personnel costs, including commission expense. Sales and marketing expense also includes costs for market development programs, promotional and other marketing costs, professional services, amortization of intangible assets, and shared costs. We continue to strategically invest in headcount and have grown our sales presence. We expect sales and marketing expense to continue to increase in absolute dollars as we increase the size of our sales and marketing organizations to grow our customer base, increase touch points with end-customers, and expand our global presence, although our sales and marketing expense may fluctuate as a percentage of total revenue.
Previous wording
General and administrative expense consists primarily of personnel costs and shared costs for our executive, finance, human resources, information technology, and legal organizations, and professional services costs, which consist primarily of legal, auditing, accounting, and other consulting costs. General and administrative expense also includes change in fair value of contingent consideration liability. We expect general and administrative expense to increase in absolute dollars over time as we increase the size of our general and administrative organizations and incur additional costs to support our business growth, although our general and administrative expense may fluctuate as a percentage of total revenue.
Current wording
General and administrative expense consists primarily of personnel costs and shared costs for our executive, finance, human resources, information technology, and legal organizations, and professional services costs, which consist primarily of legal, auditing, accounting, and other consulting costs. General and administrative expense also includes change in fair value of contingent consideration liability. Excluding the near-term impact of our recent acquisitions, we expect general and administrative expense to increase in absolute dollars over time as we increase the size of our general and administrative organizations and incur additional costs to support our business growth, although our general and administrative expense may fluctuate as a percentage of total revenue.
Previous wording
General and administrative expense increased for the three months ended January 31, 2026 compared to the same period in 2025 primarily due to an increase in acquisition-related costs. General and administrative expense increased for the six months ended January 31, 2026 compared to the same period in 2025 primarily due to the partial release of litigation-related accrual of $42 million during the six months ended January 31, 2025. The increase in general and administrative expense for the six months ended January 31, 2026 was further driven by increased personnel costs, which grew $43 million, largely due to increased share-based compensation and headcount growth.
Current wording
General and administrative expense increased for the three and nine months ended April 30, 2026 compared to the same periods in 2025 primarily due to increased personnel costs, which grew $195 million and $237 million for the three and nine months ended April 30, 2026, respectively. The increase in personnel costs in both periods was primarily due to the accelerated vesting of certain equity awards in connection with our recent acquisitions, employee severance charges in connection with our CyberArk acquisition, and headcount growth, including headcount from our recent acquisitions. The increase in general and administrative expense in both periods were further driven by an increase in acquisition-related costs, partially offset by a gain of $110 million for the change in fair value of contingent consideration liability during the three months ended April 30, 2026. The increase in general and administrative expense for the nine months ended April 30, 2026 was also driven by a partial release of litigation-related accrual of $40 million during the nine months ended April 30, 2025.
Previous wording
Interest expense decreased for the three and six months ended January 31, 2026 compared to the same periods in 2025 due to the maturity of our 2025 Notes in June 2025. Refer to Note 9. Debt in Part I, Item 1 of this Quarterly Report on Form 10-Q for more information on the Notes.
Current wording
Interest expense decreased for the three and nine months ended April 30, 2026 compared to the same periods in 2025 due to the maturity of our 2025 Notes in June 2025. Refer to Note 9. Debt in Part I, Item 1 of this Quarterly Report on Form 10-Q for more information on the Notes.
Previous wording
Other income, net includes interest income earned on our cash, cash equivalents, and investments, and gains and losses from foreign currency remeasurement and foreign currency transactions.
Current wording
Other income, net includes interest income earned on our cash, cash equivalents, and investments, gains and losses from foreign currency remeasurement and foreign currency transactions, and change in fair value of convertible senior notes and capped calls.
Previous wording
Other income, net increased for the three and six months ended January 31, 2026 compared to the same periods in 2025 primarily due to higher interest income as a result of higher average cash, cash equivalents, and investment balances for the three and six months ended January 31, 2026 compared to the same periods in 2025. The increase was further driven by increased gains on sales of our investments to fund recent acquisitions.
Current wording
Other income, net decreased for the three months ended April 30, 2026 compared to the same period in 2025 primarily due to a loss from change in fair value of our convertible senior notes and lower interest income as a result of lower average cash, cash equivalent and investment balances for the three months ended April 30, 2026 compared to the same period in 2025. Other income, net increased for the nine months ended April 30, 2026 compared to the same period in 2025 primarily due to increased gains on sales of our investments to fund acquisitions and higher interest income as a result of higher average cash, cash equivalent and investment balances for the nine months ended April 30, 2026 compared to the same period in 2025, partially offset by a loss from change in fair value of our convertible senior notes.
Previous wording
Provision for income taxes consists primarily of U.S. and foreign income taxes. Our effective tax rate during the three and six months ended January 31, 2026 was lower than our statutory tax rate primarily due to excess tax benefits from share-based compensation. We continue to maintain a valuation allowance for our California deferred tax assets due to the uncertainty regarding realizability of these deferred tax assets as they have not met the “more likely than not” realization criterion. We expect future research and development tax credit generation in California to exceed our ability to use the existing tax credits.
Current wording
Provision for income taxes consists primarily of U.S. and foreign income taxes. Our effective tax rate during the three and nine months ended April 30, 2026 differed from our statutory tax rate primarily due to our CyberArk acquisition and excess tax benefits from share-based compensation. We may continue to see fluctuations in our effective tax rate as we further integrate CyberArk into our corporate structure and intercompany relationships. We continue to maintain a valuation allowance for our California deferred tax assets due to the uncertainty regarding realizability of these deferred tax assets as they have not met the “more likely than not” realization criterion. We expect future research and development tax credit generation in California to exceed our ability to use the existing tax credits.
Previous wording
Our provision for income taxes for the three and six months ended January 31, 2026 was primarily due to U.S. and foreign income taxes. Our effective tax rate increased for the three and six months ended January 31, 2026 compared to the same periods in 2025 primarily due to decreased excess tax benefits from share-based compensation relative to our increased business profits. Refer to Note 13. Income Taxes in Part I, Item 1 of this Quarterly Report on Form 10-Q for more information.
Current wording
Our effective tax rate varied for the three and nine months ended April 30, 2026 compared to the same periods in 2025 primarily due to our CyberArk acquisition and decreased excess tax benefits from share-based compensation. Refer to Note 14. Income Taxes in Part I, Item 1 of this Quarterly Report on Form 10-Q for more information.
Previous wording
In February 2019, our board of directors authorized a $1.0 billion share repurchase program. Our board of directors subsequently authorized additional increases to this share repurchase program, bringing the total authorization to $4.1 billion. Repurchases will be funded from available working capital and may be made at management’s discretion from time to time. As of January 31, 2026, $1.0 billion remained available for future share repurchases under this repurchase program. The repurchase authorization will expire on December 31, 2026, and may be suspended or discontinued at any time without prior notice. Refer to Note 11. Stockholders’ Equity in Part I, Item 1 of this Quarterly Report on Form 10-Q for more information on this repurchase program.
Current wording
In February 2019, our board of directors authorized a $1.0 billion share repurchase program. Our board of directors subsequently authorized additional increases to this share repurchase program, bringing the total authorization to $5.1 billion. Repurchases will be funded from available working capital and may be made at management’s discretion from time to time. As of April 30, 2026, $1.0 billion remained available for future share repurchases under this repurchase program. The repurchase authorization will expire on December 31, 2026, and may be suspended or discontinued at any time without prior notice. Refer to Note 12. Stockholders’ Equity in Part I, Item 1 of this Quarterly Report on Form 10-Q for more information on this repurchase program.
Previous wording
We have entered into various non-cancelable operating leases, primarily for our offices and data centers, with lease terms expiring through fiscal 2036. As of January 31, 2026, we have total operating lease obligations of $459 million recorded on our condensed consolidated balance sheet.
Current wording
We have entered into various non-cancelable operating leases, primarily for our offices and data centers, with lease terms expiring through fiscal 2040, with the most significant leases relating to our corporate headquarters in Santa Clara, California. As of April 30, 2026, we have total operating lease obligations of $778 million recorded on our condensed consolidated balance sheet.
Previous wording
As of January 31, 2026, our commitments to purchase products, components, cloud hosting and other services totaled $6.9 billion. Refer to Note 10. Commitments and Contingencies in Part I, Item 1 of this Quarterly Report on Form 10-Q for more information on these commitments.
Current wording
As of April 30, 2026, our commitments to purchase products, components, cloud hosting and other services totaled $8.6 billion. Refer to Note 11. Commitments and Contingencies in Part I, Item 1 of this Quarterly Report on Form 10-Q for more information on these commitments.
Previous wording
Our acquisition of certain QRadar assets from International Business Machines Corporation (“IBM”) on August 31, 2024 included contingent consideration that requires potential future payments through the fiscal quarter ending October 2028. As of January 31, 2026, we have total contingent consideration obligation of $369 million recorded on our condensed consolidated balance sheet. Refer to Note 3. Fair Value Measurements in Part I, Item 1 of this Quarterly Report on Form 10-Q for more information on our contingent consideration obligation.
Current wording
Our acquisition of certain QRadar assets from International Business Machines Corporation (“IBM”) on August 31, 2024 included contingent consideration that requires potential future payments through the fiscal quarter ending October 2028. As of April 30, 2026, we have total contingent consideration obligation of $240 million recorded on our condensed consolidated balance sheet. Refer to Note 3. Fair Value Measurements in Part I, Item 1 of this Quarterly Report on Form 10-Q for more information on our contingent consideration obligation.
Previous wording
The following table summarizes our cash flows for the six months ended January 31, 2026 and 2025:
Current wording
The following table summarizes our cash flows for the nine months ended April 30, 2026 and 2025:
Showing the first 40 of 44 pairs. Open the source sections for the rest.