Palo Alto Networks sells cybersecurity software and hardware to large companies, governments, and service providers around the world. It makes money in two main ways: selling physical firewall devices and software licenses, and charging customers a recurring fee for subscriptions that keep their networks, cloud systems, and devices protected. The subscription fees are the bigger engine, making up 80.5% of total revenue in fiscal 2025. Customers sign contracts that typically run one to five years, which means revenue flows in steadily and predictably. The diagram below traces where the money goes.

Five years of financial data tell a consistent story. Revenue has grown every single year, from $4.3 billion in fiscal 2021 to $9.2 billion in fiscal 2025. That is more than double in four years. Gross margin, which measures how much money is left after the direct cost of delivering products and services, has stayed healthy across the whole period, ranging from about 69% to 74%. Free cash flow, the actual cash the business generates after spending on equipment and infrastructure, has also grown every year, reaching $3.5 billion in fiscal 2025. The business is not just growing on paper. It is generating real cash.

Operating income, meaning profit from running the core business before interest and taxes, has improved sharply. It went from $387.3 million in fiscal 2023 to $683.9 million in fiscal 2024, then jumped to $1.24 billion in fiscal 2025. That jump reflects two things working at once: revenue growing faster than costs, and a big drop in legal expenses that had weighed on the prior year. The balance sheet has also strengthened. Net debt, which is what the company owes minus its cash, flipped from positive (meaning more debt than cash) in 2022 to a net cash position of $2.3 billion by fiscal 2025.

One forward-looking signal worth watching is Next-Generation Security ARR. This measures the annualized value of active contracts tied to Palo Alto Networks' newer cloud and AI-powered products, excluding older hardware-attached services. It grew from $4.2 billion as of July 31, 2024, to $5.6 billion as of July 31, 2025. That tells you the newer parts of the business are growing fast, and that customers are not just renewing old contracts but signing up for newer, more expensive ones.

Not everything is without friction. Gross margin slipped slightly in fiscal 2025 compared to fiscal 2024, moving from 74.3% to 73.4%. The main reason is that cloud hosting costs, which support the subscription services, rose significantly. Cloud services cost $189.5 million more in fiscal 2025 than the year before. As the company shifts more customers to cloud-delivered products, those hosting costs are a recurring expense that grows with the business. If cloud costs rise faster than subscription pricing, margins could compress further.

The risks facing the business are specific and documented. The most immediate is the proposed acquisition of CyberArk, an identity security company. This deal still requires shareholder votes, government antitrust review, and stock exchange approval. If it falls apart, Palo Alto Networks could owe $1 billion in termination fees. There is also a concentration risk in how the company sells its products. Three distributors alone account for 44.2% of total revenue. If any of those relationships weakened, nearly half the revenue pipeline would be in trouble, and finding replacements takes months. Hardware products face a separate vulnerability: components come from a limited number of suppliers outside the United States, and tariff changes or shipping disruptions can delay deliveries and raise costs directly. Finally, because 80.5% of revenue is recognized over time rather than upfront, cancellations or non-renewals do not hurt the current quarter much. They hurt the next several quarters, meaning problems can be hard to spot early.

The platformization strategy is the central commercial bet. If it works, customers that consolidate onto Prisma, Cortex, or the firewall platform will keep spending more each year, making them very sticky and expensive to replace. The remaining performance obligations figure of $15.8 billion, representing revenue already under contract but not yet delivered, suggests that a large number of customers have already committed to multi-year relationships. But the strategy only pays off if customers actually do consolidate, rather than just adding one product while keeping all their other vendors.