Palo Alto Networks sells cybersecurity to businesses and governments around the world. It makes most of its money through subscriptions, meaning customers pay a recurring fee to keep using tools that protect their networks, cloud systems, and computer endpoints from hackers. The three main product families are called Prisma (for network and cloud security), Cortex (for detecting and responding to threats using artificial intelligence), and Unit 42 (a team of security experts who help clients when an attack happens). Customers typically sign contracts lasting one to five years, which means money keeps flowing in long after the initial sale. In fiscal year 2025, subscriptions and support made up 80.5% of the company's $9.2 billion in total revenue. The diagram below traces where the money goes.
How Palo Alto Networks Makes Money
flowchart TD
A["Enterprise Customers
Across Industries"] -->|"44.2% via
Distributors"| B["Channel Partners
8,500+ resellers"]
A -->|"Direct Sales
Large Accounts"| C["Sales Organization"]
B --> D["Product & Service Sales"]
C --> D
D --> E["Revenue Streams
$9.2B total"]
E -->|"Subscription $5.0B
Support $2.4B"| F["Recurring Revenue
and Margins"]
F -->|"Gross Margin 73.4%"| G["R&D Investment
Platform Development"]
G --> H["New Products
Prisma, Cortex, AIRS"]
H --> D
F -->|"Operating Margin 13.5%
Free Cash Flow $3.5B"| I["Strategic Acquisitions
Accelerate Capabilities"]
I --> G
H --> A
F --> J["Global Customer Success
Support & Services"]
J --> A
Five years of financial data tell a consistent story: this business has grown steadily and generates a lot of real cash. Revenue has more than doubled, rising from $4.3 billion in fiscal 2021 to $9.2 billion in fiscal 2025. Gross margin, which is the share of each dollar of revenue left after paying the direct costs of delivering the product, has held comfortably above 70% every single year. That kind of stability matters because it means the company keeps a large portion of what it earns before paying for research, sales teams, and administration.
Annual Revenue, Fiscal 2021 to 2025
Total revenue in billions of US dollars. Source: XBRL filings.
Free cash flow (the cash actually left over after paying for equipment and property) has grown every year too, from $1.4 billion in fiscal 2021 to $3.5 billion in fiscal 2025. The balance sheet shows more cash and investments than debt in every year on record. As of July 31, 2025, the company held $8.5 billion in total cash, cash equivalents, and investments. Operating income jumped from $387 million in fiscal 2023 to $1.24 billion in fiscal 2025, showing that the business is becoming more profitable as it scales. One metric worth watching closely is Next-Generation Security Annualized Recurring Revenue, which the company calls NGS ARR. This measures the value of all active recurring contracts at a point in time and signals future revenue before it is officially recorded.
What is Annualized Recurring Revenue?
Annualized Recurring Revenue (ARR) is a way to estimate how much subscription income a company would collect over a full year if every active contract stayed in place. It is not the same as actual reported revenue. Companies use it to show the momentum of their subscription business before that income shows up in official financial results.
$5.6B
Next-Generation Security ARR as of July 31, 2025, up from $4.2B one year earlier
That jump from $4.2 billion to $5.6 billion in NGS ARR in a single year gives a forward-looking read on where subscription revenue is heading. It also reflects the company's strategy of getting customers to consolidate multiple security tools onto one of its platforms rather than buying from many different vendors. The idea is that a customer who goes all-in on Prisma or Cortex is harder to replace and likely to spend more over time. The company calls this its platformization strategy.
What does platformization mean here?
Platformization means convincing a customer to replace many separate security tools with one integrated system from a single vendor. For the vendor, this is valuable because it creates deeper dependency and higher switching costs. For the customer, the pitch is simpler management and lower total cost.
The risks facing this business are specific and worth naming clearly. The most immediate is the planned acquisition of CyberArk, an identity security company. The deal requires approval from regulators, shareholders, and stock exchange authorities. If it falls apart, the company could owe a $1 billion termination fee and its management team would have spent considerable time and attention on a deal that produced nothing. A second concentration risk sits in the distribution channel: three distributors account for 44.2% of total revenue. Losing even one of them would be a serious problem, and replacing a major distributor takes months. Third, hardware products depend on outside manufacturers and components from a limited number of suppliers, some located outside the United States. Trade restrictions, tariffs, or supply shortages can delay shipments and raise costs. Fourth, artificial intelligence is now woven into most of the company's products, and AI systems can fail, carry bias, trigger new regulations, or create legal liability with uncertain costs.
2025
milestone
CyberArk Deal and Protect AI Acquisition
In July 2025, Palo Alto Networks agreed to acquire CyberArk, an identity security company, in a deal expected to close in the second half of fiscal 2026. In the same month, it completed the purchase of Protect AI to strengthen its AI security platform. Together these moves signal that the company is betting that identity and AI security will become central pillars of enterprise cybersecurity spending.
The government customer segment adds a fifth layer of risk. Agencies require specific certifications before a vendor can sell to them. If certification rules change, or if a competitor gets certified first, Palo Alto Networks could find itself locked out of government contracts until it catches up. None of these risks are hypothetical. They are each documented in the company's own filings.
$1.4B
Fiscal 2021 Free Cash Flow
$3.5B
Fiscal 2025 Free Cash Flow
Free cash flow more than doubled over five years, showing that the subscription model converts revenue growth into real cash at scale.
The company's gross margin has stayed above 70% in every year from 2021 through 2025, even as revenue more than doubled and the product mix shifted toward more cloud-delivered services, which carry higher hosting costs.
The Bet
Palo Alto Networks is built on the assumption that large enterprises will keep consolidating their security tools onto fewer, larger platforms rather than buying best-of-breed point products from many vendors. If customers do consolidate this way, the company captures more spending per customer, retention stays high, and NGS ARR continues to grow predictably. If customers instead resist consolidation, keep mixing vendors, or shift spending toward competitors like CrowdStrike, Microsoft, or Fortinet who are also pitching platform approaches, then the pricing power and switching costs that underpin the model weaken. The CyberArk acquisition layers a second unproven assumption on top: that adding identity security will deepen the platform enough to justify the deal's cost and execution risk.
Open question
Palo Alto Networks has demonstrated consistent revenue growth, durable gross margins above 70%, and free cash flow that has grown from $1.4 billion to $3.5 billion over five years. The subscription model is working, and the NGS ARR figure suggests future revenue is already largely contracted. But the company is now asking customers to trust a single vendor with more and more of their security infrastructure, while simultaneously attempting a large and complex acquisition that could cost $1 billion if it fails. Can one company convince enough of the world's largest enterprises to hand over their entire security architecture to a single platform, and can it absorb CyberArk without losing focus on the customers it already has?
[1]
Palo Alto Networks Form 10-K, filed 2025-08-29, Item 1 Business Description
[2]
Palo Alto Networks Form 10-K, filed 2025-08-29, Item 7 MD&A Results of Operations
[3]
Palo Alto Networks Form 10-K, filed 2025-08-29, Item 7 MD&A Liquidity and Capital Resources
[4]
Palo Alto Networks Form 10-K, filed 2025-08-29, Item 1A Risk Factors
[5]
XBRL financial data, fiscal years 2021 through 2025
Compiled · 10-K · FY2025
CyberArk Acquisition Execution Risk
The company is trying to buy CyberArk but must get approval from regulators, shareholders, and stock exchange listing authorities. If the deal fails or gets delayed significantly, the company could lose $1 billion termination fee, face stock price decline, and waste management attention that could hurt current business.
Channel Partner Concentration
Three distributors sell 44.2% of all company products and represent 44.8% of money owed to the company. If these distributors stop selling the company's products or fail to perform, the company loses nearly half its revenue and has no quick way to replace them since new partners take months to become productive.
Hardware Supply Chain Vulnerability
The company depends on outside manufacturers to build and ship hardware products using components from limited suppliers, some outside the United States. Supply shortages, delays, price increases, or trade regulation changes can prevent the company from delivering products to customers on time or at acceptable costs.
Government Certification and Compliance Requirements
Government agencies require specific certifications and technical standards for products the company sells to them. If certification rules change or competitors meet requirements first, the company could be blocked from selling to government customers until it catches up.
AI Development and Deployment Risks
The company is adding artificial intelligence to its products and business operations. AI systems can have flaws, use biased data, cause unexpected problems, trigger new regulations, or create legal liability, while requiring expensive ongoing investment with no guaranteed return.
10-K Item 1A · Risk Factors
