Palo Alto Networks added close to a billion dollars of net new recurring security revenue in three months. In the same three months it lost $282 million.
Neither number is an accident and neither is a warning sign on its own. Together they describe how Nikesh Arora has decided to run the company.
What the quarter said
For the fourth quarter of its 2026 fiscal year, ended 31 July, Palo Alto Networks reported total revenue of $3.41 billion, up 34% on the same quarter a year earlier. Next-generation security annual recurring revenue reached $9.10 billion, up 63%. Remaining performance obligations, which is contracted work not yet recognised, stood at $21.2 billion, up 34%. Full-year revenue was $11.48 billion against $9.22 billion.
Arora put his own framing on it: “We delivered a strong Q4 to close out the year, adding nearly $1 billion of Net New NGS ARR in a single quarter. The latest advancements in AI are elevating cybersecurity to the top of the CIO priority list, and will serve as durable tailwinds as we progress towards our $20 billion FY30 NGS ARR target.”
The line further down the release
GAAP net loss for the quarter was $282 million, or 35 cents a share. A year earlier the same quarter produced GAAP net income of $254 million, or 36 cents. GAAP operating income fell to $172 million from $497 million.
The company is clear about the cause. Acquisition-related costs were $68 million in the quarter and $295 million across the fiscal year, and include integration costs from the CyberArk acquisition. Non-GAAP net income, which strips those out along with share-based compensation, was $853 million.
Alongside the results Palo Alto announced it had acquired Console, an AI-native platform for running agentic workflows across enterprise operations, which is being folded into its Cortex platform.
The argument
Arora is buying his way to a number he has already published. The $20 billion FY30 target is not a forecast a chief executive can quietly drop, because he keeps repeating it in results releases, and the fastest route to recurring revenue at this scale is to acquire companies that already have some.
That is a legitimate strategy and it is working on the line Arora has chosen to be judged on. It also means the GAAP profit line is now a poor guide to the business, and that a reader who wants to know whether this is working has to track ARR and remaining performance obligations instead. Investors have been asked to accept a swap: give up the clean profit number, take the growth rate.
The risk in that swap is not the loss. It is that acquired revenue and built revenue are being reported in the same figure, so the moment the acquisitions slow, the growth rate has to come from somewhere else and nobody outside the company can see in advance whether it can.
Guidance for fiscal 2027 is $14.10 billion to $14.20 billion of revenue, 23% to 24% growth, with next-generation security ARR of $11.075 billion to $11.175 billion. Those are the numbers to hold him to. He has given them a date.
Sources
- Palo Alto Networks, Reports Fiscal Fourth Quarter and Fiscal Year 2026 Financial Results, 1 September 2026, for all revenue, ARR, RPO, GAAP and non-GAAP figures, the acquisition-related costs, the Arora quote and the fiscal 2027 guidance
- Palo Alto Networks, Palo Alto Networks acquires Console to agentify security, for the Console acquisition and its role in the Cortex platform
