Palo Alto Networks Q2 2025 Earnings Analysis
Dive into $PANW Palo Alto’s Q2 2025 earnings with review of financial performance, key metrics, operating expenses, dilution, customer growth, future outlook
Financial Results:
↗️$2,536.3M rev (+15.8% YoY, +10.8% QoQ) beat est by 1.4%
↘️GM* (75.8%, -1.0 PPs YoY)🟡
↗️Operating Margin* (30.3%, +3.4 PPs YoY)🟢
↗️FCF Margin (36.8%, +15.6 PPs YoY)
↘️Net Margin (10.0%, -6.3 PPs YoY)🟡
↗️EPS* $0.95 beat est by 6.7%🟢
*non-GAAP
Revenue By Type
Product
➡️$573.9M rev (+19.4% YoY), 22.6% of Rev🟢
↘️GM* (76.8%, -2.0 PPs YoY)
Subscription and support
➡️$1,962.4M rev (+14.8% YoY), 77.4% of Rev🟡
↘️GM* (75.5%, -0.8 PPs YoY)
Key Metrics
↗️RPO $15.80B (+24.2% YoY)🟢
➡️Billings $3,169M (+6.5% YoY)🟡
↗️NGS ARR $5,580M (+32.2% YoY)
Operating expenses
↘️S&M*/Revenue 28.0% (-2.2 PPs YoY)
↘️R&D*/Revenue 14.1% (-1.9 PPs YoY)
↘️G&A*/Revenue 3.4% (-0.4 PPs YoY)
Quarterly Performance Highlights
↗️Net New ARR $490M (+10.8% YoY)
↘️CAC* Payback Period 5.5 Months (-0.1 YoY)🟢
↗️R&D* Index (RDI) 1.01 (+0.25 YoY)🟢
Dilution
↘️SBC/rev 15%, -0.8 PPs QoQ
↗️Basic shares up 3.2% YoY, +0.2 PPs QoQ
↗️Diluted shares up 0.2% YoY, +0.4 PPs QoQ🟢
Guidance
↗️Q3'25 $2,450.0 - $2,470.0M guide (+15.0% YoY) beat est by 1.0%
↗️$10,475.0 - $10,525.0M FY guide (+22.5% YoY) beat est by 0.8%
Key points from Palo Alto’s Second Quarter 2025 Earnings Call:
Financial Performance
Palo Alto Networks reported Q4 revenue of $2.54B, up 16% year over year and above guidance. Product revenue rose 19%, driven by software form factors, while services grew 15% with subscriptions up 17% and support up 11%. Remaining performance obligations reached $15.8B, up 24%, with current RPO at $7B.
Next-Generation Security ARR closed at $5.58B, up 32%, with $490M net new ARR in Q4. AI-specific ARR expanded 2.5x to $545M. Gross margin was 75.8% and operating margin surpassed 30% for the first time. Free cash flow totaled $3.5B at a 38% margin. EPS came in at $0.95, above the high end of guidance.
Dipak Golechha, Chief Financial Officer: “Our ability to scale profitably while investing aggressively in growth is what sets us apart in this industry. Delivering 38% free cash flow margin for the third year in a row reflects discipline and execution.”
Strata
Strata continues to account for over 75% of bookings, with more than 60% now coming from software firewalls and SASE. ARR for software firewalls grew nearly 20% year over year. A $60M deal with a US cloud provider highlighted momentum, while cumulative deals across hyperscalers reached nine figures.
The launch of PAN-OS 12.1 Orion added quantum readiness and multi-cloud capabilities. Hardware firewalls delivered mid-single-digit growth, but long-term success hinges on software adoption. Palo Alto holds nearly 50% share of the cloud firewall market.
Nikesh Arora, Chairman and Chief Executive Officer: “Customers are increasingly bypassing legacy appliances and moving directly into software-driven firewalls. This transition is not just about technology—it is about speed of deployment and total cost of ownership.”
Prisma SASE
Prisma SASE ARR expanded 35% year over year, serving over 6,300 customers, including one-third of the Fortune 500. Q4 included a $60M contract with a global professional services firm to secure nearly 200,000 seats, the largest SASE deal to date. The company displaced incumbents in over 70 accounts, representing $200M TCV.
Prisma Access Browser sold over 3M licenses in Q4, doubling installed base to 6M seats. Management positioned it as a strategic element in enterprise SASE stacks for the AI era.
Nikesh Arora, Chairman and Chief Executive Officer: “Winning the largest SASE deal in our history reinforces how enterprises are consolidating on platforms that are future-ready for AI adoption.”
Cortex and XSIAM
Cortex and XSIAM combined ARR rose nearly 25% year over year. XSIAM ended Q4 with about 400 customers, with average ARR per customer above $1M. Nearly a quarter are Global 2000 enterprises. Over 60% of deployments report mean-time-to-respond under 10 minutes, a sharp improvement over industry averages.
Cortex Cloud added Application Security Posture Management and achieved FedRAMP High authorization, opening public sector opportunities. XDR large deals grew 30% year over year. The opportunity in exposure management and email security is estimated at $18B by FY26.
Lee Klarich, Chief Product and Technology Officer: “By integrating ASPM into Cortex Cloud, we are connecting application development, runtime, and SOC operations into a single workflow. That’s a game-changer for security teams under constant pressure.”
Product Innovation
Q4 saw the launch of PAN-OS 12.1 Orion, designed for quantum readiness and multi-cloud protection. Cortex Cloud expanded into application security posture management, securing the developer lifecycle. Prisma AIRS was introduced as an end-to-end AI security platform, covering applications, models, and datasets.
Nikesh Arora, Chairman and Chief Executive Officer: “Every product launch in Q4 was designed with one principle in mind—help customers secure the AI-driven future without increasing complexity.”
Agentic AI
GenAI traffic grew 890% in 2024, with data security incidents more than doubling. Prisma AIRS anchors Palo Alto’s AI security strategy, supported by AI firewalls and the ProtectAI acquisition. Agentic AI is driving demand for real-time privileged access control as enterprises face accelerated attack timelines.
Nikesh Arora, Chairman and Chief Executive Officer: “The velocity of AI-driven attacks is forcing enterprises to rethink identity security. The shift from hours to minutes in detection and response will define leadership in this industry.”
CyberArk Acquisition
The planned acquisition of CyberArk extends Palo Alto into identity security, adding reach to 8M privileged users and presence in over 50% of the Fortune 500. Management expects the combined businesses to double value in five years, leveraging a 10x larger salesforce and 75,000 customers. Post-integration, free cash flow margin is targeted at 40%+ by FY28.
Nikesh Arora, Chairman and Chief Executive Officer: “Identity is the next enforcement point. By bringing CyberArk into our platform, we’re positioning ourselves to be the central nervous system of enterprise security.”
Platformization
Net retention among platform customers reached 120% with near-zero churn. Customers with $5–10M ARR rose ~50% year over year, while $20M+ ARR customers increased nearly 80%.
Key deals included a $100M contract with a global consulting firm, a $60M+ deal with a European bank, and a $33M deal with a US insurer. Customers achieved faster incident response and fewer false positives through consolidation.
Nikesh Arora, Chairman and Chief Executive Officer: “Platformization is no longer a selling point—it is the foundation of our customer relationships. Enterprises see us as long-term partners, not vendors.”
Leadership
Founder Nir Zuk announced retirement after more than two decades, having pioneered the next-generation firewall. Lee Klarich was appointed Chief Product & Technology Officer and added to the board to ensure continuity of product strategy.
Nikesh Arora, Chairman and Chief Executive Officer: “Nir built not just a product, but an industry movement. His legacy lives on as Lee continues to drive innovation with the same conviction.”
Customers
Platformization drove customer retention at 120% with minimal churn. A US insurance company signed a $33M deal across network, cloud, and operations, achieving 15-minute mean-time-to-contain. A European bank signed a $60M+ deal for XiAM and platform consolidation.
Nikesh Arora, Chairman and Chief Executive Officer: “What stands out is not the size of these deals, but the speed of outcomes. Cutting containment times to 15 minutes is a leap forward for the industry.”
Large Deals
Customers with $5–10M ARR commitments grew ~50%, while $20M+ ARR customers rose nearly 80%. The largest win was a global consulting firm signing a deal above $100M, fully platformizing across cloud and SASE, generating $50M ARR.
Nikesh Arora, Chairman and Chief Executive Officer: “We’re seeing a new era of cybersecurity procurement where commitments are not in millions but in tens of millions annually.”
International Growth
The company reported double-digit expansion across all regions, with the Americas growing 15%, EMEA up 19%, and JPAC advancing 13%. Public sector bookings showed notable improvement year over year.
Dipak Golechha, Chief Financial Officer: “International strength reflects both diversified demand and our ability to execute globally. EMEA’s 19% growth is particularly encouraging, given the competitive landscape.”
Challenges
Consolidation requires extensive sales execution to convince enterprises to migrate. Hardware remains low-growth, pressuring the transition to software. AI adoption expands attack surfaces, increasing the need for rapid innovation.
Nikesh Arora, Chairman and Chief Executive Officer: “The real test is not technology—it’s execution. Driving platform adoption is about building trust at scale, one customer at a time.”
Outlook
For FY26, revenue is projected at $10.48–$10.53B (+14% YoY), NGS ARR at $7–7.1B (+26–27%), and operating margin at 29.2–29.7%. EPS is expected at $3.75–$3.85, with free cash flow margin of 38–39%.
By FY30, management targets $15B NGS ARR standalone. With CyberArk integration, the company expects to build the most comprehensive security platform and sustain Rule of 50 performance.
Nikesh Arora, Chairman and Chief Executive Officer: “We are building not just for FY26 or FY30, but for the next decade. Our ambition is to define what security looks like in the AI-first world.”
Thoughts on Palo Alto Networks Earnings Report $PANW:
🟢 Positive
Revenue $2.54B (+15.8% YoY, +10.8% QoQ) beat estimates by 1.4%.
Product revenue $573.9M (+19.4% YoY), fastest-growing segment, now 22.6% of total.
NGS ARR $5.58B (+32.2% YoY) with $490M net new ARR; AI ARR up 2.5x to $545M.
Operating margin 30.3% (+3.4 PPs YoY), first time above 30%.
Free cash flow margin 36.8% (+15.6 PPs YoY), delivering $3.5B.
EPS $0.95 beat by 6.7%.
RPO $15.8B (+24.2% YoY) with strong visibility.
Prisma SASE ARR +35% YoY with record $60M deal, seat base doubled to 6M.
Cortex/XSIAM ARR +25% YoY, now 400 customers with avg ARR >$1M.
International growth double-digit: EMEA +19%, Americas +15%, JPAC +13%.
🟡 Neutral
Gross margin 75.8% (-1.0 PPs YoY), pressured by mix.
Subscription revenue $1.96B (+14.8% YoY), steady at 77.4% of total.
Billings $3.17B (+6.5% YoY), growth lagging revenue.
Stock-based comp 15% of revenue, down 0.8 PPs QoQ but remains high.
Basic shares +3.2% YoY, diluted shares +0.2% YoY.
Q3’25 guide $2.45B–$2.47B (+15% YoY) and FY’25 $10.48B–$10.53B (+22.5% YoY), both slightly above estimates.
🔴 Negative
Net margin 10% (-6.3 PPs YoY), pressured by tax and integration costs.
Product GM 76.8% (-2.0 PPs YoY) and services GM 75.5% (-0.8 PPs YoY), showing margin compression.
Hardware firewalls limited to mid-single-digit growth, structural headwind vs. software.
Execution risk in large-scale platformization and CyberArk integration adds complexity.
AI adoption expanding attack surface, forcing accelerated innovation cycles.
Thank you for reading!
Follow me for more frequent updates on X/Twitter and Threads, and on LinkedIn. For visual infographics, check out Instagram, and for portfolio changes, follow me on SavvyTrader.
Disclaimer: This earnings review is for informational purposes only and does not constitute financial, investment, or trading advice.