PALO ALTO NETWORKS, INC (PANW): what the price assumes

boothcheck covers PALO ALTO NETWORKS, INC (PANW) but does not put one priced-in number on it: here the defensible answer is the evidence rather than a point estimate. boothcheck publishes no house fair value, target price, or buy/sell rating. Narrative composed 2026-07-18.

Generated: 2026-08-30 · Source: https://boothcheck.com/report/PANW

Headline

What The Price Assumes (Inversion)

The assumption today's price embeds, recovered by inverting the valuation.

How unusual the bet is: n/a

Valuation X-Ray

Every valuation family lands below the price. The price therefore sits beyond what those standard frames encode.

How the valuation models price the stock relative to the market price. Price/FV above 1.0 means the market pays more than that lens defends (expensive); at or below 1.0 the lens can defend the price.

Families that call it expensive: Asset, Earnings, Relative, Growth

The models below discount at their own flat-beta convention rates (cost of equity 9.3%, WACC 9.2%); the inversion above states its own rate.

Per-Model Detail (n=9)

Economic-Unit Decomposition (Sum Of The Parts)

Only one reportable economic unit is present in the current topology source. Consolidated operating lenses remain available, but there is no multi-unit decomposition.

No total common-equity value is stated. One or more material units lack a supported unit value. The displayed values are an indicative subtotal; consolidated debt and cash cannot be applied to a fraction of the company.

Solvency

Interest expense is not separately reported in the latest filings, so interest coverage cannot be computed.

Bullet Takeaways

• Palo Alto Networks sells its security as a subscription, not a box: of $9.22 billion in fiscal 2025 revenue, $7.42 billion (80.5%) came from subscription and support, and that recurring base carried a 73.4% gross margin "Total gross profit 6,769.9 73.4 %".
• The price is the risk. Today's quote pays roughly 316 times company-wide operating income, a level that requires growth to hold near its self-funding ceiling for more than two decades, and no standard valuation method reaches it.
• The next read on the thesis is whether platform consolidation keeps pulling annual recurring revenue forward, with the integration of the CyberArk and Chronosphere acquisitions and the segment's annual recurring revenue trajectory the figures to watch into fiscal 2026.

Bull Case

Palo Alto Networks is past the stage where the question is whether it can make money and into the stage where the question is how durable the money is. That changes how the numbers should be read. The company is profitable, generating cash, and growing a recurring revenue base rather than chasing a first product cycle. Revenue reached $9.22 billion in fiscal 2025, up from $8.03 billion the year before, growth the company puts at 14.9% in fiscal 2025 and 16.5% in fiscal 2024 "revenue growth rates of 14.9% and 16.5% in fiscal 2025 and fiscal 2024, respectively". For a business this size, that is the trajectory of a maturing platform, not a startup.

The shape of the revenue is the bull case. Subscription and support was $7.42 billion of the $9.22 billion total, 80.5% of revenue, with product hardware down to 19.5% "Subscription and support 7,419.6 80.5 %". A security vendor that has moved four-fifths of its sales onto recurring contracts has changed what it is: less a maker of firewalls, more a platform customers renew because ripping it out is harder than keeping it. The 73.4% gross margin on that mix is the economic signature of software, not appliances, and it is the engine under the cash generation. The strategy management has been pushing, consolidating multiple security tools onto one platform, shows up in the recurring line carrying the weight.

The balance sheet gives the platform room to keep buying its way into adjacent markets. The company holds net cash, with liquid assets of roughly $3.1 billion against gross debt near $1.4 billion, so net debt runs negative. That is what funded the recent acquisitions of CyberArk and Chronosphere, and it is why the company can absorb integration costs without straining its footing. The 10-K is candid that growth is not guaranteed and that the company must keep raising capital to expand "Our failure to raise additional capital or generate the significant capital necessary to expand our operations and invest in new products and subscriptions could reduce our ability to compete", but a net-cash position is the answer to that risk rather than the source of it. The bull case is that a maturing, cash-generative platform with high renewal economics keeps compounding the recurring base, and that the consolidation strategy widens the moat one acquisition at a time.

Bear Case

The most leveraged variable on this thesis is not a single regulation or rate, it is the durability of demand for security spending against a price that assumes that demand never wavers. At today's quote the market is paying roughly 316 times company-wide operating income, which works out to operating growth held near its self-funding ceiling for about 24 years. Of the companies that have grown that fast, only about 15% sustained it even a decade. The bet embedded in the price is that Palo Alto Networks is in the rare minority, and any macro shock that lengthens enterprise sales cycles, the 10-K names unfavorable economic conditions and the geopolitical environment directly "Our operating results may be adversely affected by unfavorable economic and market conditions and the uncertain geopolitical environment", compresses the growth the price requires, and a multiple this stretched does not absorb a slowdown gently.

The competitive ground is shifting under the platform. The company itself flags that AI and machine learning are increasing the field of rivals "new and enhanced technologies, including AI and machine learning, continue to increase our competition" and that specialists can ship a single-threat product faster than a platform can "Other competitors specialize in providing protection from a single type of security threat, which may allow them to deliver these specialized security products to the market more quickly than we can". The consolidation strategy that is the bull case is also the bear case: it works only as long as customers prefer one vendor's suite to a stack of best-of-breed point tools, and that preference is a choice customers can reverse.

Then there is the gap between reported profit and the cost of producing it. Diluted earnings were $1.60 a share in fiscal 2025, down from $3.64 the year before, and the prior-year figure was lifted by a tax valuation-allowance release rather than operations "Net income per share, diluted $ 1.60 $ 3.64 $ 0.64". Stock-based compensation is a recurring, real cost here: one cash-flow method that adds back share comp lands far below the simpler free-cash-flow read, which is the model's way of saying the cash the business throws off is partly paid for in dilution, and the share count has been rising. The balance sheet is not the worry, net cash and no cash burn give a genuine floor under the downside. The worry is that the price has already priced two decades of uninterrupted execution, and the bear does not need the company to fail, only to grow at a normal pace.

Valuation

Start with what the price is paying for. Inverting today's quote, the market is valuing Palo Alto Networks at roughly 316 times company-wide operating income, a multiple that only makes sense if operating growth holds near the company's self-funding ceiling for about 24 years. That is the assumption, stated plainly: not a forecast the report endorses, but the bet the buyer is underwriting. The reference points around it are sobering. Only about 15% of comparable fast-growers sustained that pace for even ten years, so the price asks for persistence at better than double that horizon.

The methods agree on the direction, which is the unusual part. Every family of valuation approach lands below the price. The peer-multiple lens, anchored on reported earnings, reaches only a fraction of the quote, weighed down by a trailing P/E in the hundreds against a software-sector multiple in the high twenties. The earnings-power methods, which capitalize current cash flow without growth, sit well under the price. Even the forward-growth methods, the discounted cash-flow and future-market-cap models that get the benefit of the doubt on growth, fall short, and they only close part of the gap by granting that today's already-elevated multiple never compresses at any point in the projection. When the static methods all say expensive and even the generous forward methods cannot reach the price, the read is the same: the price is a bet beyond what any standard frame supports.

The forward re-pricing and the trailing-multiple lens are different systems on different bases, and they tell the same story for different reasons. The trailing peer lens reads the price as far above what current earnings defend; the forward methods, which credit next-period growth, still land below it. Solvency is the one place the bear has nothing to point at. The company carries net cash, with about $3.1 billion of liquid assets against $1.4 billion of gross debt, and it is not burning cash. That balance sheet bounds the downside. What it does not do is justify the multiple. The reported earnings base is also thin relative to the price: diluted EPS was $1.60 in fiscal 2025, and the simpler free-cash-flow read flatters the picture relative to the version that charges for stock-based compensation. The downside has a floor; the upside has already been spent.

Catalysts

The fiscal third quarter, reported June 2, 2026 for the period ended April 30, 2026, was the first to show the acquisition machine in the numbers. Revenue was $3.0 billion, up 31% year over year, with $388 million of that contributed by the recently closed CyberArk and Chronosphere deals. Next-generation security annual recurring revenue reached $8.18 billion, up 60%, and remaining performance obligation rose 36% to $18.4 billion, $1.8 billion of it added by acquisitions. Stripping out the deals, the company put organic annual-recurring-revenue growth at 28%, which is the figure that matters for the durability question the price is asking.

The CyberArk acquisition is the large item in the story. PANW agreed on July 30, 2025 to acquire CyberArk for $45.00 in cash plus 2.2005 PANW shares per CyberArk ordinary share, and the deal closed during fiscal third quarter 2026. The cash-and-stock structure is why the share count and the integration costs both bear watching: the platform consolidation thesis now has to prove out across a much larger combined identity-and-security footprint.

Forward guidance frames the near-term setup. Management guided fiscal fourth-quarter revenue to $3.35 billion to $3.36 billion and full-year revenue to $11.42 billion to $11.43 billion. Analyst sentiment skews heavily positive, with the great majority of covering firms rating the stock a buy and recent price-target moves into the $300 range, though at least one firm holds a neutral stance near current levels. The next test is whether the fourth-quarter recurring-revenue and remaining-performance-obligation prints keep pace with the trajectory the multiple already assumes.

Peer Cohorts (Per Segment, With Filing Citations)

Cybersecurity (single operating segment) (reported)

• CRWD (CrowdStrike Holdings Inc)
• FY2025 10-K: , ITSecOps and Risk, Threat Intelligence, and SaaS Security Posture Management from a single platform. • Reducing Agent Bloat : Our single intelligent lightweight agent enables frictionless deployment of our platform at scale, enabling customers to rapidly adopt our technology across any type of workload running on a…
• FY2025 10-K: -native Falcon platform integrates seamlessly with our single lightweight agent to deliver robust functionality across key areas of cybersecurity and IT operations. The Falcon platform delivers 29 cloud modules, enabling customers to address their most critical areas of risk with speed, confidence, and visibility…
• FTNT (Fortinet Inc)
• FY2025 10-K: …security and networking products. Our competitive differentiation lies in our core technologies, which together provide performance, security, flexibility and integration across diverse environments. • FortiOS -Our unified operating system enables the convergence of networking and AI-powered security to enforce…
• FY2025 10-K: …Our ability to converge networking and security also enables the ethernet to become an extension of our customers' security infrastructure through FortiSwitch and FortiLink. FortiExtender secures 5G/LTE and remote ethernet extenders to connect and secure any branch environment. Our Secure Connectivity solution…
• ZS (Zscaler Inc)
• FY2025 10-K: …network by deploying decoys. These decoys disrupt adversaries by detecting their presence in the network and initiating mitigation using automatic orchestration via the Zscaler platform and other third-party solutions. Customers can quickly deploy these capabilities by leveraging a diverse library of built-in decoys…
• FY2025 10-K: …the way users access internal applications: • connect users to applications without bringing users on the network, preventing lateral movement; • never expose applications to the internet; • segment access to applications without relying on the traditional approach of network segmentation; and • provide remote access…
• S (SentinelOne Inc)
• FY2025 10-K: …visibility across an organization's digital assets through one console, making it easier and faster for analysts to search through petabytes of data to investigate incidents and hunt threats. Singularity offers multi-tenancy and can be deployed on a diverse range of environments that our customers choose, including…
• FY2025 10-K: …alliance partners, MSPs, MSSPs, MDRs, OEMs, and IR firms. We provide our partners with our differentiated technology and platform to enable them to provide the best security service to their own customers. Our Singularity Platform offers our partners complete multi-tenancy and a superior level of management…
• OKTA (Okta Inc)
• FY2025 10-K: …we remain committed to protecting our systems, internal networks and our customers' systems, and the information that we and they store and process. We have an established cybersecurity risk management program intended to protect the confidentiality, integrity, and availability of Okta, Inc.'s critical systems,…
• FY2025 10-K: …threats or incidents. There can be no assurance that Okta, Inc.'s cybersecurity risk management program and processes will be fully implemented. Even if implemented, they may not be complied with or may not effectively protect our systems and information or those of our customers. Cybersecurity Risk Management and…
• QLYS (QUALYS, INC.)
• FY2025 10-K: …its own data security and privacy legal framework with which we or our customers must comply. 28 Table of Contents These privacy, data protection, and cybersecurity laws and regulations may result in ever-increasing regulatory and public scrutiny and escalating levels of enforcement and sanctions. Additionally, new…
• FY2025 10-K: …(FIM): FIM logs and centrally tracks file change events on common enterprise operating systems in organizations of all sizes. FIM provides customers with a simple way to achieve centralized cloud-based visibility of activity resulting from normal patching and administrative tasks, change control exceptions or…

Methodology Note

• Priced-in inversion: the valuation is inverted on the current price to recover the operating-income growth, duration, and steady-state margin the price embeds (ROE for financials, FFO growth for REITs).
• Valuation x-ray: the valuation models, grouped into four families (asset, earnings, relative, growth). Each model is expressed as a price/FV ratio (distance from price), not a point fair-value estimate. The spread across families is the disagreement.
• Economic-unit decomposition (SOTP): each disclosed business unit is assigned its native valuation basis before any multiple is applied. Operating units are valued on enterprise value; funded financial units are valued on their own common equity, because their borrowings fund earning assets rather than levering the parent. A company total is stated only once every material unit carries a supported value and the parent capital bridge reconciles.
• Solvency: net cash/debt, net-debt-to-NOPAT, interest coverage, and share-count CAGR from EDGAR financials (net debt / FFO and fixed-charge coverage for REITs; regulatory-capital framing for financials).
• Peer cohorts: per-segment comparables with deep-linkable SEC filing citations.

Fundamentals sourced from SEC EDGAR filings. Current price from Databento. The priced-in inversion and valuation x-ray are computed by the boothcheck engine; narrative composed by AI from the structured data.