Skip to content
    PANW
    Earnings call· Jul 2025(Q4 FY25)

    Palo Alto Networks Inc PANW

    Aug 18, 2025 Source

    Executive summary

    Palo Alto Networks Q4 FY25 — Strong Platformization and AI-Driven Growth

    Palo Alto Networks concluded FY25 with robust performance, driven by its platformization strategy and strong execution across network security, cloud, and SecOps. The company's focus on integrated security solutions, particularly in the context of AI transformation, is resonating with customers, leading to significant deal wins and accelerated ARR growth. The proposed acquisition of CyberArk aims to further strengthen its identity security offerings, positioning the company for continued leadership in the evolving cybersecurity landscape.

    Highlights

    5
    • Total revenue grew 16% to $2.54 billion, exceeding guidance.

    • Bookings growth was the highest in 2.5 years, driven by platformization deals.

    • Next-Generation Security (NGS) ARR grew 32% to $5.58 billion, with net new NGS ARR up 12% year-on-year.

    • Non-GAAP operating margin expanded by 340 basis points to over 30%, a company record.

    • Adjusted free cash flow margin was 38% for FY25, with a target of 40%+ for the combined company by FY28.

    Concerns

    3
    • New and complex attack surface from AI adoption

    • Agentic AI driving 'browser wars' and enterprise security challenges

    • Hardware demand growth

    Guidance & targets

    14
    CategoryTargetConfidence
    NGS ARR
    $7.0B to $7.10B
    high materiality
    High
    Remaining Performance Obligation (RPO)
    $8.6B to $8.7B
    high materiality
    High
    Revenue
    $10.47B to $10.525B
    high materiality
    High
    Operating Margin
    29.2% to 29.7%
    high materiality
    High
    Diluted Non-GAAP EPS
    $3.75 to $3.85
    high materiality
    High
    Adjusted Free Cash Flow Margin
    38% to 39%
    high materiality
    High
    NGS ARR
    $5.82B to $5.84B
    medium materiality
    High
    Remaining Performance Obligation (RPO)
    $15.4B to $15.5B
    medium materiality
    High
    Revenue
    $2.45B to $2.47B
    medium materiality
    High
    Diluted Non-GAAP EPS
    $0.88 to $0.90
    medium materiality
    High
    Product Revenue Growth
    approximately 20%
    medium materiality
    High
    Product Revenue Growth
    low teens
    medium materiality
    High
    Hardware Demand Growth
    mid-single-digit grower
    low materiality
    Medium
    Adjusted Free Cash Flow Margin (Combined Company)
    40% plus
    high materiality
    High

    Segment performance

    5
    SegmentRevenueYoYQoQMargin
    Americas
    Saw double-digit growth.
    15%
    EMEA
    Saw double-digit growth.
    19%
    JPAC
    Saw double-digit growth.
    13%
    Next-Generation Network Security (including SASE and software firewalls)
    Believed to be the largest and fastest-growing next-generation network security player at scale.
    ARR: $3.9BARR growth year-on-year: 35%
    Cortex and Cloud
    Saw broad-based strength.
    Combined ARR growth year-on-year: 25%

    Operational metrics

    30
    Total Revenue
    $2.54B16% YoY
    Q4 FY25

    Above the high end of guided range.

    Product Revenue from Software Form Factors
    56%
    Q4 FY25

    Significant driver of product revenue growth.

    Product Revenue from Software Form Factors
    40%
    TTM

    Proportion of product revenue from software surpassed 40% on a trailing 12-month basis.

    Net New NGS ARR
    $490M12% YoY
    Q4 FY25
    AI ARR
    $545M2.5x YoY
    Q4 FY25
    Total Gross Margin
    75.8%
    Q4 FY25
    Product Gross Margin
    76.8%
    Q4 FY25

    Impacted by a reserve for excess and obsolete inventory.

    Product Gross Margin
    high 70s or low 80sincrease relative to '25
    FY26

    Expected to increase due to transition to contract manufacturing facility in Texas.

    Services Gross Margin
    75.5%slight sequential increase in Q3
    Q4 FY25

    Pleased by sustained growth in SaaS offerings and cloud cost efficiencies.

    Operating Margin
    30%+340 bps expansion
    Q4 FY25

    First time in company's history.

    Operating Margin
    28.8%
    FY25

    Above the high end of guided range.

    Diluted Non-GAAP EPS
    $0.95
    Q4 FY25

    Ahead of the high end of guided range.

    Debt Balance Reduction
    $383M
    Q4 FY25

    Due to 2025 convertible notes maturity, settled in cash and equity.

    Share Buyback Authorization Remaining
    $1B
    through December 2025

    Buyback strategy remains opportunistic.

    Rule of 50
    above
    last 5 years

    Expected to be above Rule of 50 in FY26 as well.

    Operating Margin Expansion
    almost 1,000 bps
    since FY22

    Expected to continue in FY26 and beyond.

    Free Cash Flow Margin
    38%
    FY25

    Third consecutive year at this level.

    Net Retention Rate
    120%
    Q4 FY25

    Ultimate proof of value delivered and deep strategic partnerships.

    Software Firewall Market Share
    nearly 50%
    Q4 FY25

    Product is native in all major public clouds.

    SASE Customers
    over 6,300
    Q4 FY25
    Fortune 500 Penetration (SASE)
    1/3
    Q4 FY25
    Prisma Access Browser Licenses Sold
    over 3M
    Q4 FY25
    Prisma Access Browser Cumulative Seats
    over 6Mmore than doubling on a sequential basis
    Q4 FY25
    XSIAM Customers
    approximately 400
    Q4 FY25
    XSIAM Average ARR per Customer
    over $1M
    Q4 FY25
    Global 2000 Representation (XSIAM)
    nearly 1/4
    Q4 FY25

    Of XSIAM customers.

    GenAI Traffic Increase
    over 890%
    2024

    Based on internal study amongst customers.

    Data Security Incidents Related to GenAI
    more than doubled
    since last year
    Exposure Management and Email Security TAM
    $18B
    FY26 and beyond

    Represents significant upsell opportunities from new modules.

    Attack Time
    25 minutes
    current

    Time for an attack to occur, highlighting the need for real-time security.

    Industry KPIs

    12
    MetricValueDetails
    Revenue growth$2.54BUSD
    Arr net new arr$5.58BUSD
    Rpo current rpo$15.8BUSD
    Bookings billingshighest in 2.5 years
    Pricing model mix56%%
    Customer account count6,300+customers
    Large deal new logo metricsapproximately 50%%
    Gross retention renewal ratenearly 0%
    Multi product platform attach
    Operating FCF margin rule of 4030%+%
    Ai product adoption monetizationover 890%%
    Net revenue net dollar retention120%%

    Orderbook & backlog

    2
    Remaining Performance Obligation (RPO)$15.8BQ4 FY25

    24% YoY

    Highest RPO growth in 7 quarters at a significantly larger scale.

    Current Remaining Performance Obligation (cRPO)$7.0BQ4 FY25

    17% YoY

    Product announcements

    5
    ProductTypeDetails
    Prisma AIRSlaunch
    PAN-OS 12.1 Orionlaunch
    Application Security Posture Management (ASPM)launch
    Exposure Managementlaunch
    Email Securitylaunch

    Deals & partnerships

    8
    CyberArkProposed acquisition to strengthen identity security offerings.

    Strategic alignment with CyberArk team and common culture of innovation. Palo Alto Networks has nearly 10x the number of core sellers and sees opportunity to expand CyberArk's presence into its 75,000 customer base. Aims to double the value of joint businesses over the next 5 years.

    Leading global consulting firmPlatformization deal for cloud security and SASE, including AI access security product.$100M

    Customer lacked identity entitlement controls over AI and cloud environments and required comprehensive secure access globally across employees, contractors, and clients. Deep relationship with C-suite was critical.

    Leading European bankPlatformization deal for XSIAM with multiple goals.$60M+

    Customer undergoing significant digital transformation, adopted XSIAM to address expanding attack surface, simplify security stack, and control costs. Platformization was a competitive edge.

    Leading U.S. insurance companyPurchase across network security, SASE, SecOps, and Cloud Security.$33M

    Customer needed to improve security posture, level up SOX analysts, and drive automation to achieve 15-minute mean time to contain, using AI/ML. Now platformized on network security, cloud, and security operations.

    Leading U.S.-based cloud providerSignificantly expanded partnership, including a software firewall deal.$60M

    Deal for software firewalls, leveraging Palo Alto Networks' native product in all major public clouds.

    Global professional services companyDeal for AI runtime security with Prisma AIRS.8-figure deal

    Customer looking to secure the growing AI attack surface.

    Global professional services firmLargest SASE deal ever.$60M

    Covering nearly 200,000 seats. Part of a record number of 8-figure SASE deals.

    Leading U.S. pharmaceutical companyPurchase of Prisma Access Browser.over $3M

    For over 80,000 seats.

    Risks & headwinds

    3
    New and complex attack surface from AI adoptionCurrent and ongoing

    GenAI traffic up over 890% in 2024; data security incidents related to GenAI more than doubled since last year.

    Mitigation: Prisma AIRS platform for end-to-end AI security; AI access solutions for third-party AI use; integrated DLP controls.

    Agentic AI driving 'browser wars' and enterprise security challengesNext 12-24 months

    Attack time reduced to 25 minutes.

    Mitigation: Secure browser solutions becoming a critical part of the SASE stack; acquisition of CyberArk to address identity security as a key enforcement point.

    Hardware demand growthFY26

    Modest improvements in Q4, but expected to be a mid-single-digit grower in FY26.

    Mitigation: Focus on software form factors (SASE, software firewalls) which drive double-digit product revenue growth.

    What to watch in Q1 FY26

    5

    Q1 FY26 NGS ARR Growth

    Q1 FY26
    Current32% YoY (Q4 FY25)
    Target29% YoY

    Why it matters

    NGS ARR is a key indicator of the company's strategic shift to next-generation security and platformization success.

    For the first fiscal quarter of 2026, we expect NGS to be in the range of $5.82 billion to $5.84 billion, an increase of 29%

    Q&A highlights

    5

    How is security consolidation progressing, and how is Agentic AI catalyzing this market need?

    Consolidation is driven by platformization, with large ARR deals ($50M) demonstrating the potential. AI, particularly Agentic AI, accelerates the need for consolidation because disparate infrastructures cannot effectively defend against attacks that now occur in under 25 minutes. A single, integrated platform is essential for real-time threat detection and response, making identity security a critical component.

    If the answer is more than 25 minutes, I got news for you. These wonderful agents are going to come. And make sure they're able to exfiltrate data and breach your enterprise, it doesn't matter how much you're spending in under 25 minutes.

    asked by Robbie Owens · answered by Nikesh Arora

    3 min read6 chapters

    Detailed Narrative

    01

    Platformization Driving Growth and Customer Commitment

    Palo Alto Networks' strategy of platformization is yielding significant results, with customers making larger, more strategic commitments. The company reported its highest bookings growth in 2.5 years, driven by deals across its integrated platforms. This approach is validated by an impressive 120% net retention rate among platform customers and nearly 0% churn, demonstrating the value customers find in consolidated security outcomes rather than fragmented point products. The company aims to more than double the number of platformization deals in the next five years.

    02

    AI as a Catalyst for Security Transformation

    The rapid adoption of GenAI, with traffic up over 890% in 2024, is creating a new and complex attack surface, making security a foundational enabler. Palo Alto Networks is addressing this with its Prisma AIRS platform, providing end-to-end security for AI applications, agents, models, and datasets, alongside solutions for securing employee use of third-party AI. The company sees a strong combined pipeline for AI security offerings and expects AIRS to be a growing contributor in the next five years, including an 8-figure deal with a global professional services company in Q4.

    03

    Strength in Network Security and Software Form Factors

    Network security had a strong Q4, accounting for over 75% of bookings. Over 60% of network security bookings are now driven by software form factors like SASE and virtual firewalls, which are growing well above the market. Product revenue grew 19% year-over-year, largely due to this shift, with software form factors making up 56% of product revenue in Q4. The next-generation network security business, including SASE and software firewalls, reached $3.9 billion in ARR, up approximately 35% year-on-year, making it the largest and fastest-growing player at scale.

    04

    SASE and Prisma Access Browser Momentum

    SASE continues to be the fastest-growing product in network security, with ARR up 35% year-over-year, more than twice the overall market rate. The company secured its largest SASE deal ever, a $60 million contract covering nearly 200,000 seats. Prisma Access Browser is also gaining significant traction, with over 3 million licenses sold in Q4, doubling cumulative seats to over 6 million. This growth is driven by the browser becoming the primary interface for AI and cloud applications, necessitating secure access.

    05

    Cortex and Cloud Innovation

    Cortex and Cloud combined ARR grew nearly 25% year-over-year. XSIAM, the autonomous SOC platform, continues its rapid growth, modernizing the SOC market with AI and reducing mean time to respond to under 10 minutes for over 60% of deployed customers. The Cortex Cloud platform unifies CNAPP with the AI-powered SOC, enabling real-time cloud attack prevention. New modules like Exposure Management and Email Security, leveraging integrated data, represent an $18 billion opportunity for FY26 and beyond.

    06

    Strategic Acquisition of CyberArk and Leadership Transition

    Palo Alto Networks announced the proposed acquisition of CyberArk, aiming to address the critical and evolving identity security market, which is expected to inflect in the next 12-24 months due to Agentic AI. The acquisition will combine CyberArk's leadership in identity security with Palo Alto's AI-powered platforms and go-to-market capabilities. Additionally, founder Nir Zuk retired, with Lee Klarich appointed Chief Product and Technology Officer and Board member, ensuring continuity in innovation.

    AI-generated summary of the company’s earnings call. Not investment advice.