0001327567-25-000027
SEC filingPANW's FY25 revenue grew 14.9% to $9.2B driven by subscription and support, with operating margin expanding 500 bps to 13.5%.
Palo Alto Networks is a global cybersecurity provider whose vision is a world where each day is safer and more secure than the one before. The company was incorporated in 2005 and is headquartered in Santa Clara, California. Its mission is to be the cybersecurity partner of choice for enterprises, organizations, service providers, and government entities, protecting the digital way of life through cybersecurity platforms backed by artificial intelligence and automation. A key strategic element is platformization: consolidating point products into integrated architectures for more secure, faster, and cost-effective outcomes.
The Business section describes three areas: Network Security, Security Operations, and Threat Intelligence and Advisory Services. However, the filing does not provide a revenue breakdown by segment. Network Security focuses on zero trust solutions including Secure Access Service Edge (SASE), next-generation firewalls (NGFWs), cloud-delivered security services (CDSS), the Prisma AIRS AI security platform, and Strata Cloud Manager for management. Security Operations is centered on the Cortex platform, which unifies data, AI, and automation for end-to-end security operations, encompassing products like Cortex XSIAM, XDR, XSOAR, Xpanse, and Cortex Cloud. Threat Intelligence and Advisory Services are delivered through Unit 42, which provides threat research, incident response, security consulting, MDR, and managed threat hunting.
Palo Alto Networks offers a broad portfolio of named products and platforms. In Network Security: Prisma Access (SASE), Prisma SD-WAN, hardware and software ML-Powered Next-Generation Firewalls, Cloud-Delivered Security Services (Advanced Threat Prevention, Advanced WildFire, Advanced URL Filtering, Advanced DNS Security, IoT/OT Security, SaaS Security API and Inline, GlobalProtect, Prisma Access Agent, Enterprise DLP, AI Access Security, AIOps), Prisma AIRS for AI ecosystem security, and Strata Cloud Manager with Strata Copilot and ADEM. In Security Operations: Cortex XSIAM (AI-powered SIEM/XDR/SOAR), Cortex XDR (EDR and cross-data analytics), Cortex XSOAR (SOAR), Cortex Xpanse (attack surface management), and Cortex Cloud (CNAPP with CDR). Additional offerings include Panorama for centralized policy management and Unit 42 services.
The company sells primarily through channel partners using a two-tier indirect fulfillment model. For fiscal 2025, 44.2% of total revenue came from sales to three distributors. Products are also sold directly through cloud marketplaces (AWS, Azure, Google Cloud, Oracle). No single end-customer accounted for more than 10% of revenue in the last three fiscal years. The sales organization uses a direct-touch approach with channel partners, and the NextWave Channel Partner program includes over 8,500 partners. Marketing focuses on brand building and pipeline generation, including signature events like Ignite, Cortex Symphony, and SASE Converge.
The company operates in an intensely competitive enterprise security market. Competitors are grouped into four categories: large companies incorporating security (Cisco, Microsoft, Alphabet); independent security vendors (Check Point, Fortinet, CrowdStrike, Zscaler, Wiz); startups and point-product vendors; and public cloud vendors offering cloud security solutions. Principal competitive factors include product features, breadth, integration, price, brand awareness, and reputation. The company believes it competes favorably due to its portfolio features, integration ease, and low total cost of ownership, but acknowledges that some competitors have greater resources and brand recognition.
The company’s strategy is built on several pillars: helping customers simplify security through consolidation of point products; a platformization approach integrating products into unified architectures; AI-powered innovation across all domains; supplementing organic R&D with acquisitions that accelerate platform development; and expanding leadership in enterprise security. Key acquisitions include QRadar assets from IBM (August 2024), Protect AI (July 2025), and a definitive agreement to acquire CyberArk (expected to close in second half of fiscal 2026). R&D efforts focus on AI-driven enhancements to network security, cloud security, endpoint security, and security operations.
As of July 31, 2025, Palo Alto Networks had a global workforce of 16,068 employees. The People Strategy is overseen by the Chief People Officer and covers attract, onboard, enable, listen, engage, and compensation. The company emphasizes AI integration into talent acquisition and enablement, with a focus on building a nimble, high-performing workforce. Values include disruption, execution, collaboration, inclusion, and integrity. Employee engagement is measured through surveys and external platforms, and the company has received recognition as a top workplace.
Palo Alto Networks reported strong fiscal 2025 results with total revenue of $9.22B, a 14.9% increase year-over-year. Subscription and support revenue grew 15.5% to $7.42B, representing 80.5% of total revenue, while product revenue increased 12.4% to $1.80B. Gross margin declined slightly to 73.4% from 74.3%, primarily due to unfavorable product mix and increased inventory charges in product, and higher cloud hosting costs in subscription and support. Operating income surged 81.7% to $1.24B, pushing operating margin to 13.5% from 8.5%, driven by lower general and administrative expenses (down 34.9%) from litigation-related adjustments and a gain on contingent consideration. Net income decreased to $1.13B from $2.58B, as the prior year benefited from a $1.6B income tax benefit from valuation allowance release. Cash flow from operations remained robust at $3.72B, and free cash flow reached $3.47B, up from $3.10B.
Revenue across all geographic theaters grew: Americas up 13.2% to $6.21B, EMEA up 19.7% to $1.92B, and APAC up 16.6% to $1.10B. The company continues to see strong adoption of its platformization strategy, with Next-Generation Security Annualized Recurring Revenue (NGS ARR) growing to $5.6B from $4.2B. Subscription revenue (excluding support) grew 18.8% to $4.97B, while support revenue increased 9.4% to $2.45B. Product revenue growth was driven by increased demand for new generation hardware and on-premise software licenses, partially offset by declines in prior generation hardware.
Management expressed confidence in sustaining growth through innovation and strategic acquisitions. During FY25, the company launched Prisma Access Browser, Cortex Cloud, Prisma AIRS, and Cortex XSIAM 3.0. The acquisition of IBM QRadar assets in August 2024 is expected to accelerate Cortex business growth, while the July 2025 acquisition of Protect AI will enhance AI security capabilities. In July 2025, PANW also announced a definitive agreement to acquire CyberArk for approximately $25 billion, expected to close in H2 FY26. The company maintains a strong liquidity position with $8.46B in cash, cash equivalents, and investments, and $1.0B remaining under its share repurchase authorization through December 2025. Macroeconomic uncertainties, including geopolitical tensions and trade policies, are monitored as potential headwinds.
As of July 31, 2025, Palo Alto Networks held $2.27B in cash and equivalents and $6.19B in marketable securities (short- and long-term), totaling $8.46B in liquid assets. The company had no outstanding debt following the full repayment and settlement of its 0.375% Convertible Senior Notes due 2025 during the fiscal year. Shareholders' equity grew to $7.82B from $5.17B a year earlier, driven by retained earnings and other comprehensive income. Inventory remained modest at $0.11B, reflecting an outsourced manufacturing model.
Total non-cancelable purchase commitments reached $6.96B as of July 31, 2025, a significant increase driven by cloud hosting agreements. Cloud commitments account for $6.58B, with payments extending through 2031 and beyond, including a $119M minimum purchase commitment through September 2027. Manufacturing commitments of $0.20B are concentrated in fiscal 2026, while other commitments totaling $0.19B cover subscriptions and other obligations. The company also has operating lease obligations of $493.9M (present value $417.4M) and a $400M undrawn revolving credit facility. Notably, a litigation accrual of $145.6M related to the Centripetal Networks case is recorded in other long-term liabilities.
No share repurchases were executed in fiscal 2025, leaving $1.0B remaining under the $4.1B board authorization. No dividends were paid. The company fully repaid $965.6M in convertible notes, eliminating all debt. Capital expenditures totaled $246.2M, or 2.67% of revenue, primarily for property and equipment, including data center and office expansion. Cash used in acquisitions was $1.05B, notably for the IBM QRadar assets and Protect AI.
Palo Alto Networks operates as a single reportable segment. The chief operating decision maker uses consolidated net income to assess performance. Revenue is disaggregated by geography: Americas generated $6.21B (67%), EMEA $1.92B (21%), and APAC $1.10B (12%). Subscription and support revenue constituted $7.42B (80%) of total revenue, while product revenue was $1.80B (20%). No further segment-level profit or margin information is provided in the notes.
Palo Alto Networks faces heightened geopolitical risks due to operations in Israel, exposure to Russia-Ukraine sanctions, US-China trade tensions, and potential tariffs. The pending acquisition of CyberArk, an Israeli company, adds regulatory approval risks (HSR Act, foreign investment laws) and could be delayed or blocked. The company also highlights compliance with evolving privacy laws (GDPR, CCPA) and AI regulations, which may increase costs.
Hardware product supply relies on a single EMS provider (Flex) and limited component suppliers, many outside the US. Tariffs and trade disputes have increased costs. Inventory management challenges could lead to lost sales or margin erosion. The company also notes risks from natural disasters and power outages in California.
Intense competition from large players (Cisco, Microsoft) and specialists (CrowdStrike, Zscaler) pressures pricing. AI investments may not yield returns and could create legal exposure. The company also risks intellectual property litigation, as evidenced by the $113.6M Centripetal verdict on appeal.
Revenue growth slowed to 14.9% in fiscal 2025. Subscription revenue (80.5%) means downturns in new sales are not immediately reflected. Seasonality causes quarterly fluctuations. The company also faces credit risk from customers and potential dilution from the CyberArk stock issuance.
As a security vendor, Palo Alto is a high-profile target. A vulnerability in PAN-OS (November 2024) required remediation. Product defects could lead to liability and reputational harm. The company maintains insurance but coverage may be insufficient.
The provided document excerpt does not contain the Consolidated Statements of Cash Flows; it only includes the audit report and critical audit matters. Therefore, no cash flow data is available for analysis.