Palo Alto Networks, Inc. earnings call
Record platformization quarter with 110 net new customers
PANW delivered a strong Q2 FY26, beating on NGS ARR and revenue, with platformization momentum. Management announced the intent to acquire Koi for agentic endpoint security, highlighting the growing importance of this threat vector. The company is integrating its two largest acquisitions (CyberArk and Chronosphere) and provided guidance that implies continued strong growth. Q2 NGS ARR grew 33% YoY to $6.33B, including $200M from Chronosphere; organic growth was 28%.
Buzzberg read Record platformization quarter with 110 net new customers PANW delivered a strong Q2 FY26, beating on NGS ARR and revenue, with platformization momentum. Management announced the intent to acquire Koi for agentic endpoint security, highlighting the growing importance of this threat vector. The company is integrating its two largest acquisitions (CyberArk and Chronosphere) and provided guidance that implies continued strong growth. Q2 NGS ARR grew 33% YoY to $6.33B, including $200M from Chronosphere; organic growth was 28%. Read full analysisCollapse analysis
PANW delivered a strong Q2 FY26, beating on NGS ARR and revenue, with platformization momentum. Management announced the intent to acquire Koi for agentic endpoint security, highlighting the growing importance of this threat vector. The company is integrating its two largest acquisitions (CyberArk and Chronosphere) and provided guidance that implies continued strong growth. Q2 NGS ARR grew 33% YoY to $6.33B, including $200M from Chronosphere; organic growth was 28%.
- SASE ARR surpassed $1.5B, growing ~40% YoY, with strong momentum from customers replacing first-generation point products.
- XIM ARR passed $500M milestone with 600+ customers; 60% of deployed customers achieving MTR under 10 minutes.
- Chronosphere closed and signed a nine-figure expansion with a leading AI provider; ARR at ~$200M, above expectations.
What matters now
The highest-signal changes from the call.
Enterprises shifting from AI experimentation to control
SASE business passes $1.5B ARR, growing roughly 40%
Show 3 more callouts
XIM ARR crosses $500M with rapid SOC modernization adoption
Prisma AIRS tripled customers to 100+ in one quarter
Palo Alto announces intent to acquire Koi for agentic endpoint security
Actuals
| Metric | Reported | Change |
|---|---|---|
| Revenue | $2.594B | +5% QoQ |
| EPS | $1.03 | +11% QoQ |
| Gross margin | 73.59% | Reported |
| Operating margin | 15.42% | Reported |
| Free cash flow | $0.638B | Reported |
| Capex | $0.084B | Reported |
Forward guidance
| Metric | Period | Range | Midpoint | Status |
|---|---|---|---|---|
| EPS | FY2026 | $3.65–$3.70In line with consensus | $3.67 | Initiated |
| EPS | FY2026 Q3 | $0.78–$0.80In line with consensus | $0.79 | Maintained |
| Free cash flow | FY2026 | 37%In line with consensus | 37% | Initiated |
| Operating margin | FY2026 | 28.5%–29%In line with consensus | 28.75% | Initiated |
| Revenue | FY2026 | $11.28B–$11.31BIn line with consensus | $11.295B | Initiated |
| Revenue | FY2026 Q3 | $2.941B–$2.945BIn line with consensus | $2.943B | Maintained |
Management read
Confident
Management repeatedly highlighted record execution, accelerating platformization, and smooth integration planning for two large acquisitions, projecting confidence in the growth and margin trajectory.
Management AI read
Management framed AI as entering a new enterprise phase beyond experimentation, shifting the security question from capability to control and expanding the attack surface. They argued AI is a net positive for security demand, citing rapid early traction for Prisma AIRS and positioning acquisitions like Koi and CyberArk around agentic and AI-driven identity/endpoint risks.
Companiesreturns since call
Supply chain
CyberArk's business momentum is strong, and PANW is aligning go-to-market to cross-sell into its customer base.
Evidence
“CyberArk is coming off an exceptional December quarter. The record net new ARR and 30% of subscription ARR growth at scale.”
PANW is seeing a shift from first-generation SASE point products to comprehensive platforms as pandemic-era purchases fail to meet current security needs. — This signals a potential share shift towards PANW's platform approach from point-product SASE vendors like Zscaler.
Evidence
“Many early adopters of SASE who made choices four or five years ago during the pandemic are now finding that those early solutions are not comprehensive enough for today's threats and complexity.”
Chronosphere is displacing an incumbent observability vendor at a leading AI provider due to its scalability and cost-effectiveness. — Suggests significant pricing pressure and competitive displacement in the observability market, potentially impacting Datadog and Dynatrace.
Evidence
“So that scalability allows them to deliver those capabilities at approximately half the price, if not more than or less than some of the other players out there. So they are displacing another vendor in that space.”
Supply-chain alpha · 2returns since call
PANW is seeing a shift from first-generation SASE point products to comprehensive platforms as pandemic-era purchases fail to meet current security needs.
Chronosphere is displacing an incumbent observability vendor at a leading AI provider due to its scalability and cost-effectiveness.
Methodology & coverage
Management-only analysis. All 5 validated company mentions are shown. Reported actuals and forward guidance are kept separate. Public evidence is limited to eight short attributed quotes. AI-generated analysis can be incomplete or wrong; verify important claims against the original source.