Palo Alto Networks (PANW) Q4 2026 earnings review
Top-Line Metrics Explode on M&A, but GAAP Profits Reverse
Palo Alto Networks delivered a massive Q4, with revenue growth accelerating to 34% YoY ($3.41B) and Next-Generation Security ARR skyrocketing 63% YoY ($9.10B). However, this top-line explosion is heavily fueled by the recent mega-acquisitions of CyberArk and Chronosphere, which mask the underlying organic run rate. Furthermore, this inorganic expansion came at a steep cost to the bottom line: GAAP net income reversed to a $282M loss, crushed by $524M in convertible note charges, $487M in stock-based compensation, and heavy amortization. Despite the GAAP noise, cash generation remains a fortress with a 38.4% FY26 Adjusted FCF margin, proving the underlying cash engine is intact.
🐂 Bull Case
The company added nearly $1 billion of Net New NGS ARR in a single quarter. Despite digesting massive acquisitions, adjusted free cash flow margins held strong at 37.8% in Q4, validating the platform's highly cash-generative model.
PANW is successfully positioning itself as the critical infrastructure for the AI era. RPO grew 34% to $21.2B, indicating customers are signing large, multi-year platform commitments across Network, Cortex, and Idira.
🐻 Bear Case
The acquisitions have triggered massive non-cash expenses. GAAP net income swung from a $254M profit in 25Q4 to a $282M loss this quarter, driven by soaring SBC (up 31% YoY) and amortization (up 659% YoY).
With NGS ARR printing at 63% due to CyberArk and Chronosphere, visibility into the true organic growth rate of legacy pillars like SASE and software firewalls is severely clouded.
⚖️ Verdict: ⚪
Neutral. The sheer scale of ARR and free cash flow is undeniable, keeping the long-term thesis intact. However, the severe GAAP losses and the heavy reliance on M&A to generate 60%+ ARR growth optics warrant caution regarding organic execution and dilution.
Key Themes
M&A-Fueled Platformization (CyberArk & Chronosphere)
The 63% surge in NGS ARR to $9.10B validates management's aggressive TAM expansion strategy. Palo Alto is aggressively leveraging its CyberArk (Identity) and Chronosphere (Observability) acquisitions to capture adjacent markets, pulling these new pillars into its unified platform ecosystem to drive massive RPO expansion.
GAAP Profitability Reversing Under M&A Weight
While non-GAAP metrics look stellar, the GAAP picture is alarming. Q4 GAAP net income reversed to a $282M loss. The culprits: $487M in stock-based compensation, $281M in amortization, and a massive $524M non-cash charge related to changes in the fair value of convertible senior notes inherited from M&A. This breaks a multi-quarter streak of GAAP profitability.
Expansion into Agentic AI with 'Console' Acquisition
PANW announced the acquisition of Console, an AI-native platform for enterprise agentic workflows, aiming to expand the Cortex platform. This aligns perfectly with the company's prior warnings about 'cyber capable systems' and AI-driven attacks operating in minutes, pushing the company deeper into autonomous, agentic defense mechanisms.
Organic vs Inorganic Obfuscation
With Q4 NGS ARR up 63% and Q1 FY27 guided to 63%, the true organic growth rate of the core business is obscured. In Q3, management noted organic NGS ARR was 28%. Investors must rely heavily on management's qualitative assurance that the underlying SASE and software firewall businesses are holding up, as consolidated headline numbers mask organic deceleration.
Structural Shift to AI-Driven Defense (Macro)
The broader narrative of an AI-driven security renaissance remains the company's primary structural tailwind. As adversaries use AI to compress attack timelines, PANW's real-time inspection (Network Security) and automated response (XSIAM) become mandatory, moving cybersecurity from a compliance exercise to an existential infrastructure layer for AI data centers.
Other KPIs
Grew 34% YoY, an acceleration from 24% YoY growth in 25Q4. This forward-looking metric demonstrates that despite the macro environment, PANW is locking in massive, multi-year platform commitments, heavily aided by the newly acquired CyberArk and Chronosphere pipelines.
Stable. The Q4 Adjusted FCF margin landed at 37.8%, driving the full-year margin to 38.4%. Despite absorbing massive acquisitions, integration costs, and taking a GAAP loss, the cash engine remains highly efficient, fortifying their path toward a 40% FCF margin by FY28.
Guidance
Stable. The midpoint implies ~33.5% YoY growth, maintaining the M&A-driven high-30s momentum seen in the current quarter (34%).
Stable. Represents 63% YoY growth, exactly matching the 63% growth printed in 26Q4, fully incorporating the CyberArk and Chronosphere ARR bases.
Decelerating. The ~23.5% YoY growth for the full year implies a sharp drop-off in H2 FY27. This is a base effect: PANW will lap the CyberArk/Chronosphere acquisitions in Q3, meaning H2 will reflect true organic growth rates returning closer to historical norms.
Stable. Remaining roughly flat versus FY26's 38.4%, absorbing final integration costs before the projected step-up to the 40% target in FY28.
Key Questions
Organic NGS ARR Growth
With reported NGS ARR hitting 63% year-over-year, what was the exact organic growth rate in Q4 stripping out the CyberArk and Chronosphere contributions?
Console vs. Koi Security Overlap
With the acquisition of 'Console' for agentic workflows, how does this integrate or overlap with the recently acquired Koi Security for agentic endpoints?
GAAP Profitability Timeline
Given the massive $524M convertible notes charge and a 31% YoY jump in SBC, when does management expect the company to return to sustainable GAAP profitability?