Three Platforms, Three Growth RatesNarrow moat

Palo Alto Networks (PANW) — moat facet

About three-quarters of Palo Alto's revenue comes from its network platform, which management expects to grow in the low double digits.

On the fourth-quarter call Palo Alto sized its three platforms for the first time, and the numbers show a company whose growth sits in its smaller parts. Network & AI Security, which includes the firewalls and the secure access service, had revenue of $8.35 billion in fiscal 2026, up 17%1. Cortex, the security operations platform, had $1.92 billion, up 25%2. Idira, the identity business built on CyberArk, reached $1.26 billion on a pro forma full-year basis, up 21%3.

Revenue by platform, fiscal 2026 ($bn)Network and AI Security8.35 (+17%)Cortex1.92 (+25%)Idira, pro forma1.26 (+21%)Q4 FY2026 earnings call; Idira pro forma full year, so not additive
The big platform is the slow one.

The three figures do not add up to reported revenue, because the Idira figure includes months before Palo Alto owned CyberArk, and professional services sit in a separate category4. They are a map, not an income statement.

The guidance points the same way. For fiscal 2027 management expects "network and AI security revenue growth of low double digits", "Cortex revenue up approximately 30%", and Idira revenue of about $1.5 billion5. The largest platform, about three-quarters of the total, is expected to grow slowest.

That is the shape of the moat. The network business, built on the firewall, is the installed base that gives Palo Alto its access to customers. Cortex and Idira are where it hopes to sell more to those customers. The platform strategy only works if the smaller two grow fast enough to lift the whole company while the large one keeps its customers.

Even inside the network platform, growth is uneven. Management said "SASE bookings grew 40%"6 and software firewall ARR grew 29% in the fourth quarter7, while hardware costs rose. The network platform also absorbed about $85 million of certificate lifecycle revenue from CyberArk in fiscal 20268, which is counted there rather than in Idira.

Cortex is the part to judge. It is the fastest-growing of the three, and it combines products Palo Alto built with the QRadar customers bought from IBM9 and Chronosphere's observability business. Its full-year revenue, $1.92 billion in fiscal 202610, is guided to grow about 30%; growth below 20% would mean the security operations bet is maturing before it has become large.

Moat trajectory: Holding steady

Cortex guided about +30%, network low double digits.

The number that tests this moat
Reported
Cortex revenue, full year
$1.92bn, +25% (FY2026)

The fastest-growing platform; growth below 20% in FY2027 would mean the bet is maturing early.

Source: Palo Alto Networks Q4 FY2026 earnings call ↗
⚠ Threats to the moat
⚠ THREAT 01
The Biggest Platform Grows Slowest
Palo Alto's largest platform is guided to grow in the low double digits, putting the burden of growth on its smaller businesses.
References
  1. ReportedNetwork & AI Security, which includes the firewalls and the secure access service, had revenue of $8.35 billion in fiscal 2026, up 17%.
    Palo Alto Networks fourth-quarter fiscal 2026 earnings call transcript (Motley Fool) - platform revenue, platformized cohort retention, large deals and fiscal 2027 modelling points. — Q4 FY2026 · publ. 1 September 2026 · source ↗
  2. ReportedCortex, the security operations platform, had $1.92 billion, up 25%.
    Palo Alto Networks fourth-quarter fiscal 2026 earnings call transcript (Motley Fool) - platform revenue, platformized cohort retention, large deals and fiscal 2027 modelling points. — Q4 FY2026 · publ. 1 September 2026 · source ↗
  3. ReportedIdira, the identity business built on CyberArk, reached $1.26 billion on a pro forma full-year basis, up 21%.
    Palo Alto Networks fourth-quarter fiscal 2026 earnings call transcript (Motley Fool) - platform revenue, platformized cohort retention, large deals and fiscal 2027 modelling points. — Q4 FY2026 · publ. 1 September 2026 · source ↗
  4. ReportedThe three figures do not add up to reported revenue, because the Idira figure includes months before Palo Alto owned CyberArk, and professional services sit in a separate category.
    Palo Alto Networks fourth-quarter fiscal 2026 earnings call transcript (Motley Fool) - platform revenue, platformized cohort retention, large deals and fiscal 2027 modelling points. — Q4 FY2026 · publ. 1 September 2026 · source ↗
  5. ReportedFor fiscal 2027 management expects "network and AI security revenue growth of low double digits", "Cortex revenue up approximately 30%", and Idira revenue of about $1.5 billion.
    Palo Alto Networks fourth-quarter fiscal 2026 earnings call transcript (Motley Fool) - platform revenue, platformized cohort retention, large deals and fiscal 2027 modelling points. — Q4 FY2026 · publ. 1 September 2026 · source ↗
  6. ReportedManagement said "SASE bookings grew 40%" and software firewall ARR grew 29% in the fourth quarter, while hardware costs rose.
    Yahoo Finance summary of the Palo Alto Networks fourth-quarter fiscal 2026 call - XSIAM, Prisma AIRS and observability ARR, platformizations, Idira deals and hardware share of revenue. — Q4 FY2026 · publ. September 2026 · source ↗
  7. ReportedManagement said "SASE bookings grew 40%" and software firewall ARR grew 29% in the fourth quarter, while hardware costs rose.
    Palo Alto Networks fourth-quarter fiscal 2026 earnings call transcript (Motley Fool) - platform revenue, platformized cohort retention, large deals and fiscal 2027 modelling points. — Q4 FY2026 · publ. 1 September 2026 · source ↗
  8. ReportedThe network platform also absorbed about $85 million of certificate lifecycle revenue from CyberArk in fiscal 2026, which is counted there rather than in Idira.
    Palo Alto Networks fourth-quarter fiscal 2026 earnings call transcript (Motley Fool) - platform revenue, platformized cohort retention, large deals and fiscal 2027 modelling points. — Q4 FY2026 · publ. 1 September 2026 · source ↗
  9. ReportedIt is the fastest-growing of the three, and it combines products Palo Alto built with the QRadar customers bought from IBM and Chronosphere's observability business.
    Palo Alto Networks Form 10-K for fiscal 2024 - billings for fiscal 2022-2024, remaining performance obligations, free cash flow, distributor concentration and the Dig, Talon and IBM QRadar transactions. — FY2024 · publ. September 2024 · source ↗
  10. ReportedIts full-year revenue, $1.92 billion in fiscal 2026, is guided to grow about 30%; growth below 20% would mean the security operations bet is maturing before it has become large.
    Palo Alto Networks fourth-quarter fiscal 2026 earnings call transcript (Motley Fool) - platform revenue, platformized cohort retention, large deals and fiscal 2027 modelling points. — Q4 FY2026 · publ. 1 September 2026 · source ↗
Sources
Generated September 26, 2026