Palo Alto Networks sells network firewalls and a widening stack of security subscriptions — threat prevention, web and domain filtering, cloud and data protection — to large enterprises, service providers and governments. Its pitch to customers is consolidation: replace a dozen point vendors with one contract, one console, one renewal. Over the past year it has been buying the pieces to make that pitch bigger.

What the headline number contains

The metric management steers by is next-generation security ARR, the recurring subscription base outside legacy hardware. In the April quarter it reached $8.1bn, up 60% year over year, and the company guided the full year to $8.90-8.95bn, growth of 59-60%.

About $1.6bn of that balance came in through acquisition. That leaves organic growth near 28% — still fast for a business of this size, but less than half the headline rate. The contracted backlog reads the same way: remaining performance obligations, the value of signed business not yet recognized as revenue, stood at $18.4bn, up 36%, and 22% excluding roughly $1.8bn from the two deals. Reported revenue of $3.0bn grew 31.1%, of which $388m was contributed by the acquired businesses.

What they cost

CyberArk, which secures privileged credentials and machine identities, closed on 11 February for $21.1bn of total consideration — about $2.3bn in cash and 112m Palo Alto shares. Chronosphere, an observability company, was bought for $3.35bn in cash and replacement equity on ARR above $160m as of September 2025, and is being folded into Palo Alto's agent-security platform.

The accounting shows up immediately. Gross margin fell to 67.6% from 72.9%, so gross profit grew 21.5% against revenue growth of 31.1% — purchase-accounting amortization of acquired intangibles sits in cost of revenue. The quarter carried a GAAP operating loss of $183m and a net loss of $177m. Cash is unaffected: adjusted free cash flow was $910m against $578m a year earlier.

The strategic logic is coherent. As enterprises deploy software agents that need credentials to act and telemetry to be audited, identity and observability stop being adjacent categories and become part of the security contract. That is the durable basis on which Palo Alto takes revenue from point vendors — and the reason Microsoft's bundled security suite is the competitor that matters. But a $15bn recurring-revenue target for 2030 requires sustained 20%-plus compounding from here, and the organic line is the one that has to deliver it.

The price got there first

The shares have risen about 38% in three months and 135% in six. In that entire three-month stretch the company published no financial statements; the last were filed on 2 June. Price per dollar of trailing gross profit went from roughly 16.7x in February to 28.3x in May to 38.1x now, a 128% expansion — flattered somewhat by the depressed acquired-margin denominator, though 29.2x forward gross profit and 86.9x forward earnings are unflattered. Consensus has revenue growing 24.3% this fiscal year and 21.2% next, with earnings per share of $3.77 and $4.10.

So the question the 1 September print answers is narrow: whether the recurring base grows fast enough without help to justify a multiple that more than doubled on no new information.

The setup

Where it stands — Headline recurring-revenue growth of 60% is roughly 28% organic, while the multiple has more than doubled since February on no new disclosure.

Would confirm — Fiscal fourth-quarter next-generation security ARR at or above $8.95bn with organic growth holding near 30%.

Would invalidate — Organic ARR growth slipping toward 20% or gross margin falling further below 67.6%.

Watch next — Fiscal fourth-quarter and full-year results on 1 September 2026.

Valuation — 38.1x trailing and 29.2x forward gross profit, against 16.7x trailing in February; 86.9x forward earnings.