Palo Alto Networks faces investor scrutiny after earnings
The cybersecurity group is betting that AI will accelerate demand for automated defenses as its valuation and ambitions continue to expand.
Palo Alto Networks shares fell 9.3% on Wednesday following the cybersecurity company’s latest earnings report, erasing some of the gains that have made it one of the biggest technology winners of 2026. The decline leaves the company with a market capitalization of roughly $267 billion, although its shares remain up 83% since the beginning of the year.
The sharp move comes despite a quarter in which Palo Alto reported revenue of $3.41 billion and forecast fiscal 2027 revenue of $14.1 billion to $14.2 billion. The reaction highlights the increasingly demanding expectations surrounding the company after a year in which its stock has dramatically outpaced the broader market.
CEO Nikesh Arora, nevertheless, remains focused on the longer-term opportunity that remains tied to a fundamental change in cybersecurity. He argues that the growing speed and autonomy of artificial intelligence will eventually make the traditional model of human-led security operations increasingly difficult to sustain.
“Cybersecurity has to become less manual and more agentic and more done by us than the customers themselves,” Arora said during the earnings call.
Palo Alto is positioning itself around that shift. Arora said the company has seen the AI market move through three major phases in just seven months, from conventional large language models to autonomous agents and, most recently, open-weight and open-source models.
Each development creates a different security problem.
Autonomous AI agents can operate for extended periods without direct human supervision, interacting with databases, software and other agents. That creates a new layer of machine identities and permissions that companies must secure.
At the same time, increasingly capable AI models are allowing attackers to discover vulnerabilities much faster than security teams have traditionally been able to address them.
That is changing what customers want from Palo Alto, Arora said. Rather than simply identifying more vulnerabilities, companies increasingly want their security systems to determine which problems matter and what should be done about them.
“Customers are quickly disenchanted from this notion of finding more vulnerabilities,” Arora said. “They want to know what do I do about them. The last thing they want is more security problems.”
Palo Alto says it can identify certain vulnerabilities in open-source and operational-technology systems and deploy protections to its firewalls in less than four hours. Arora contrasted that with an industry standard of roughly 55 days for patching such vulnerabilities.
The gap reflects a broader problem that Palo Alto estimates at roughly $1 trillion in cybersecurity technical debt across enterprises. Companies that have accumulated outdated infrastructure and vulnerabilities over years could face greater pressure as AI allows attackers to exploit weaknesses at much higher speed.
“If this capability becomes commonplace, we have a short window by when to get all the cybersecurity technical debt which hasn’t been paid over the many years back up to the mark,” Arora said.
He added that he expects “some major breaches over the coming years” because some customers will not have completed the transformation quickly enough.
