TipRanks Smart Value #39: Opportunity Edge
1
Dear Investors,
Dear Investors,
Welcome to the 39th edition of our recently launched TipRanks Smart Value Newsletter!
1
This Week’s Top Value Pick: Palo Alto Networks (PANW)
Palo Alto Networks (PANW) is a global cybersecurity company serving enterprises, governments, and service providers worldwide. The company is recognized for its broad portfolio of security solutions, including threat intelligence, secure access technologies, and next-generation protection capabilities. With strong emphasis on innovation and strategic growth, PANW has established itself as a key player in the cybersecurity industry thanks to its reliability, scale, and market influence.
1
Cloud Shield
Palo Alto Networks’ corporate history traces a steady transformation from a next-generation firewall pioneer into one of the world’s most expansive and integrated cybersecurity platforms, a shift that has anchored its long-term earnings growth. Founded in 2005, the company initially disrupted the market with firewall technology capable of inspecting applications, users, and content in real time. This differentiated approach fueled rapid market-share gains through the late 2000s and early 2010s, with PANW’s offerings gaining traction at a fast rate, laying the groundwork for its later dominant market position. Its 2012 IPO provided the capital to scale globally and broaden its product footprint.
As cyber threats grew more complex, Palo Alto Networks recognized that customers needed unified protection across networks, cloud workloads, applications, and endpoints. The company responded with an aggressive, multi-year acquisition strategy that reshaped its portfolio. Early moves into endpoint and behavioral analytics paved the way for expansion into automation, cloud-native security, and AI-driven defense. Key deals included Demisto in 2019, adding security orchestration and automation capabilities; Twistlock in the same year, extending security to containers and serverless environments; CloudGenix in 2020, bringing Software-Defined Wide Area Network (SD-WAN) into the platform; and Expanse, also in 2020, strengthening attack-surface management.
The company continued expanding into data security, enterprise browser protection, and AI-enabled detection with acquisitions such as Dig Security and Talon Cyber Security in 2023, IBM’s QRadar SaaS assets in 2024, and Protect AI earlier this year. These acquisitions formed the foundation for the Prisma Cloud and Cortex platforms, enabling unified security across hybrid and multi-cloud environments while supporting subscription adoption and contributing to margin expansion. Taken together, these moves deepened the company’s footprint across high-growth categories with recurring revenue profiles.
Palo Alto Networks is now accelerating its platform strategy through two major acquisitions that expand its reach into both identity security and observability (i.e.; tools and platforms that provide deep visibility into IT systems). In 2025, the company announced a landmark $25 billion deal to acquire CyberArk, one of the leading providers of identity-security and privileged‑access management solutions, capabilities that become more critical as AI agents gain broader access within enterprise systems. CyberArk recently reported record ARR growth, signaling strong market demand and reinforcing the strategic logic of the deal.
The $3.35 billion acquisition of Chronosphere, expected to close in the second half of fiscal 2026, adds a fast-growing observability platform with more than $160 million in ARR and strong adoption among AI-native and cloud-first companies. Chronosphere – a Gartner Leader in observability – operates at a fraction of the cost of traditional tools and enhances XSIAM’s data processing while powering autonomous remediation within AgentiX. Together, these acquisitions position PANW to lead in identity, observability, and AI-driven security.
Today, after more than a decade of targeted M&A, platform building, and AI-driven innovation, Palo Alto Networks stands as one of cybersecurity’s most scaled, diversified, and strategically positioned leaders, with broad capabilities supporting durable revenue expansion and earnings growth.
1
Defense Grid
Palo Alto Networks operates a platform-driven cybersecurity model built to secure enterprise networks, cloud environments, endpoints, and increasingly, AI systems. The company generates revenue through a mix of hardware sales and a large, fast-growing base of recurring subscription and support contracts, which now anchor the stability and visibility of its business. In the most recent quarter, subscriptions and support contributed more than 80% of total revenue, reflecting the company’s long-term strategic shift toward software, cloud security, and AI-enabled services.
The foundation of PANW’s model is its Next-Generation Security (NGS) integrated platform architecture, which consolidates point solutions across network security, cloud security, and security operations. On the network side, products such as Prisma Access-powered Next-Generation Firewalls, secure access service edge (SASE), and cloud-delivered security services provide a unified approach to securing distributed workforces and hybrid infrastructure. These products generate both upfront revenue from hardware or license sales and long-tail subscription revenue tied to threat prevention, URL filtering,1 DNS security,2 and data protection services.
The company’s Cortex security operations platform further strengthens recurring revenue by combining Security Information and Event Management (SIEM) tools, endpoint security, detection and response, attack surface management, and automation into a single AI-driven suite. Customers typically engage with Cortex through subscription-based offerings, often expanding their use of the platform over time as workloads and security needs grow. Meanwhile, PANW’s cloud security business, delivered through its cloud-native application protection platform, its Prisma Cloud, addresses the migration to multi-cloud architectures, making cloud security one of the company’s most durable growth drivers.
Recurring revenue visibility is reinforced by PANW’s large and expanding remaining performance obligations (RPO).3 The company also benefits from high renewal rates, continuous upselling of new modules, and customer expansion across its platform ecosystem.
PANW’s product roadmap, centered on AI-native security, platform integration, and strategic acquisitions, supports ongoing earnings growth and robust cash generation. These capabilities not only enhance operating leverage but also position the company to capture rising demand for comprehensive, automated cybersecurity solutions.
—
1- URL filtering in Palo Alto Networks is a security service that analyzes and controls web access by categorizing URLs and either allowing, blocking, or restricting user access based on set policies.
2- DNS security in Palo Alto Networks is a distinct but complementary service that focuses on protecting the network at the domain name system (DNS) level.
3- RPO is the total contracted revenue that a company has not yet recognized but is obligated to deliver in the future.
1
Growth Vector
Palo Alto Networks views its long-term market opportunity as far larger than its current scale, estimating it has penetrated less than 5% of a roughly $300 billion addressable market projected for fiscal 2028. Much of this landscape remains fragmented across point tools, legacy vendors, and emerging categories. PANW views this fragmentation as a tailwind for integrated platforms like Strata and Cortex, targeting $20 billion NGS (next-generation security) ARR by fiscal 2030.
Network security remains Palo Alto’s most established business, while adoption of SASE continues to accelerate, supported by a growing base of large enterprises, including about one-third of the Fortune 500. Demand is rising as organizations transition to hybrid work and require secure access from any location. At the same time, secure browsers and software firewalls have become important revenue contributors, reflecting a broader push toward unified protection across users, applications, and workloads. Software firewalls alone now account for nearly half of the company’s $434 million in product revenue, and management believes this category could eventually exceed $1 billion annually.
AI-driven security is emerging as a second major pillar. As companies deploy AI agents and large language model tools internally, new risks are emerging, including prompt-injection attacks, where systems can be manipulated into revealing sensitive information or performing harmful actions. To address these threats, Palo Alto Networks launched Prisma AIRS 2.0, incorporating technology from the Protect AI acquisition to secure AI agents, model pipelines, and training environments. Deal activity for AI defenses doubled quarter over quarter, and partnerships with NVIDIA, IBM, and ServiceNow – along with several smaller industry players – are helping integrate these protections directly into widely used platforms.
The company is also preparing customers for the next inflection point: the arrival of quantum computing, which could potentially break today’s most sophisticated encryption. Because attackers can already steal encrypted data and decrypt it later, a tactic known as “harvest now, decrypt later,“ PANW is urging early preparation. Its PAN-OS 12.1 “Orion” provides a full inventory of cryptographic assets, while a new generation of quantum-ready firewalls supports stronger algorithms with minimal performance loss. A partnership with IBM offers end-to-end guidance for post-quantum migration, addressing long upgrade cycles ahead of expected commercialization closer to 2029.
In security operations, adoption of XSIAM continues to grow, with the platform processing massive volumes of telemetry and helping customers cut response times to minutes. In fiscal Q1, PANW saw platformizations (including XSIAM) more than double year-over-year. Building on this momentum, the company introduced AgentiX, an autonomous AI system that integrates with more than a thousand tools to automate investigations and reduce both alert fatigue and cybersecurity staffing pressures. This move deepens the company’s presence in high-value, software-driven security operations and supports a long runway for growth and margin expansion.
1
Margin Momentum
Palo Alto Networks has delivered strong financial performance over the past five years, with revenue rising at a compound annual rate of roughly 22% and diluted EPS growing by about 25%. This expansion reflects the company’s shift toward an integrated, AI-driven platform that unifies network, cloud, and security operations through offerings such as SASE and XSIAM. A growing mix of high-margin subscriptions and multi-product deals has further strengthened profitability, supported by operating leverage and disciplined cost management.
The momentum continued into fiscal Q1 FY26. Revenue reached $2.5 billion, up 16% year over year and slightly ahead of expectations, driven by solid demand across products, subscriptions, and support. Adjusted net income rose to $662 million, or $0.93 per share, up about 19% from the prior year as the Next-Generation Security (NGS) portfolio continued to scale. The company’s free cash flows grew by around 15% year over year to approximately $1.7 billion, while adjusted operating margin held just above 30%, underscoring ongoing progress toward long-term cash-flow goals.
Recurring revenue metrics also remained robust. NGS ARR grew 29% to $5.9 billion, while remaining performance obligations increased 24% to $15.5 billion, reinforcing the company’s revenue visibility and future cash-flow potential. The balance sheet remains strong as well, with over $3 billion in cash, sizable, short- and long-term investments, and a low debt-to-EBITDA ratio near 0.2x.
Guidance for Q2 FY26 points to continued steady growth. Management expects NGS ARR of $6.13 billion at the midpoint, RPO of about $15.8 billion, and revenue of $2.58 billion, representing mid-teens expansion. Adjusted EPS is projected at $0.94, while product revenue growth is expected to remain healthy. For FY26, the company forecasts NGS ARR of $7.05 billion, revenue of $10.52 billion, adjusted operating margins near 30%, and adjusted EPS of $3.85 at the midpoint, up by around 16% year over year. The company also reaffirmed its target of surpassing a 40% adjusted free-cash-flow margin by FY28, supported by growing platform adoption and contributions from its acquisitions.
1
Value Signal
Palo Alto Networks does not pay dividends but complements its growth investments with selective share repurchases. The company’s board first authorized a $1 billion share repurchase program in February 2019, funded through available working capital. Since then, the board has approved several increases, expanding the total authorization to $4.1 billion. As of October 31, 2025, the program’s expiration date had been extended from December 31, 2025, to December 31, 2026. The company did not repurchase any shares during fiscal Q1, so that at quarter-end, $1 billion remained available under authorization for future repurchases.
PANW has pulled back modestly over the past year as revenue growth slowed to the mid-teens, margins came under pressure from rising costs, and the CyberArk acquisition prompted questions about integration risks and the price paid. This cooling sentiment has pushed PANW’s valuation below its historical averages across several key metrics. The stock now trades at more than a 15% discount to its historical non-GAAP trailing and forward P/E ratios and at a steep 70% discount to its trailing EV/EBITDA multiple. Even on forward EV/EBITDA and price-to-book ratios, the shares sit modestly to around 60% long-term averages. For investors, these discounts suggest that expectations have reset, creating a potential entry point if the company can reaccelerate growth, restore margin momentum, and successfully execute on its expansion strategy.
The company’s valuation sits at an interesting midpoint within the cybersecurity sector, reflecting both the company’s strong growth profile and its position as a mature platform provider. On a non-GAAP trailing P/E basis, the stock trades in the moderate valuation range when compared with high-growth peers such as CrowdStrike, Fortinet, and Zscaler. This suggests that the market views PANW’s recent earnings performance as broadly aligned with other leading security companies that continue to deliver rapid top-line expansion and rising profitability.
However, the picture shifts when looking at forward earnings expectations. Relative to legacy vendors like Cisco, Fortinet, and Check Point, Palo Alto Networks trades at the higher end of the forward P/E spectrum. This reflects the market’s expectation that PANW will generate faster profit growth than these more mature competitors, driven by its scale in network security, rising contribution from cloud security, and expansion of its AI-enabled platform.
At the same time, the company’s non-GAAP forward P/E and forward EV/EBITDA multiples fall are moderate when compared with high-growth peers such as CrowdStrike, Fortinet, and Zscaler. This positioning indicates that investors view PANW as a balanced growth story – one that is more diversified and established than newer cloud-native players, yet still capable of sustaining double-digit earnings and free-cash-flow expansion.
For investors evaluating PANW, these valuation dynamics signal that the stock is priced for continued execution. It is neither a deep-value opportunity nor an extreme growth premium; instead, its valuation reflects confidence in the durability of its platform strategy and the long-term earnings trajectory it has built.
Analysts remain bullish on Palo Alto Networks, pointing to its planned acquisition of Chronosphere as a meaningful step into a rapidly expanding observability market, estimated at over $50 billion, that can significantly widen the company’s product roadmap. Their confidence is reinforced by the firm’s latest quarterly results, where overall revenue continued to rise at a healthy pace and product revenue surpassed expectations. This strength was underpinned by particularly strong software performance, supported by the company’s leadership position in software firewalls. Together, these developments suggest that the company is deepening its capabilities in key growth areas while maintaining solid operational momentum.
Wall Street consensus estimates point to roughly 22% upside from current levels, with some analysts projecting gains of around 34%. A discounted cash flow analysis reinforces this view, indicating that PANW’s shares may be trading at about a 17% discount to intrinsic value.
1
Investing Takeaway
For value-minded investors, Palo Alto Networks presents an intriguing opportunity. The company’s recent pullback has reset market expectations, placing its shares below historical valuation norms while reflecting confidence in the durability of its platform strategy and long-term earnings trajectory. Despite cooling sentiment, PANW’s diversified portfolio, high-margin recurring revenue, and strategic acquisitions position it for sustained growth, while selective share repurchases provide a mechanism to return capital to shareholders. Relative to both high-growth peers and legacy competitors, the stock now trades at a balanced midpoint, offering exposure to an established, scalable cybersecurity leader without commanding an extreme premium. For investors willing to look beyond short-term fluctuations, this combination of solid fundamentals, recurring revenue visibility, and market leadership creates a potential entry point to participate in the company’s continued expansion and margin momentum.
