Palo Alto Networks Fiscal 2025: 15% Revenue Growth to $9.2B, Operating Margin Expands to 13.5%, CyberArk Acquisition Announced

What happened

Palo Alto Networks delivered $9.2 billion in total revenue for fiscal 2025, representing 14.9% year-over-year growth. The revenue mix continued shifting toward subscriptions, with subscription and support revenue of $7.4 billion (80.5% of total) growing 15.5%, while product revenue of $1.8 billion (19.5% of total) grew 12.4%. Product revenue acceleration was driven by enhanced software license pricing and capabilities introduced in Q2 fiscal 2025, plus increased demand for new generation hardware, partially offset by decreased demand for prior generation products. Gross margin compressed 90 basis points to 73.4%, primarily due to unfavorable hardware product mix and increased inventory obsolescence charges on the product side, and higher cloud hosting costs supporting subscription growth on the services side. Operating income reached $1.2 billion with operating margin of 13.5%, a substantial 500 basis point improvement from 8.5% in fiscal 2024. This margin expansion was driven by improved operating expense leverage and a $135.3 million gain from revaluation of contingent consideration liability related to the IBM QRadar acquisition. Net income was $1.1 billion, compared to $2.6 billion in fiscal 2024—the prior year benefited from a one-time $1.6 billion deferred tax asset valuation allowance release. Cash flow from operations was $3.7 billion, up from $3.3 billion, with free cash flow of $3.5 billion. Next-Generation Security ARR grew to $5.6 billion from $4.2 billion, while remaining performance obligations increased to $15.8 billion from $12.7 billion, both indicating strong forward revenue visibility. The company ended the fiscal year with $8.5 billion in cash, cash equivalents, and investments, and 16,068 employees (up from 15,289).

Why it matters for investors

The results demonstrate Palo Alto Networks' continued execution on its platformization strategy—consolidating disparate security point products into integrated platforms. The subscription mix reaching 80.5% of revenue provides increasingly predictable, high-margin recurring revenue streams, though the 90 basis point gross margin decline reflects the infrastructure investments required to support cloud-based offerings and hardware product mix challenges. The 500 basis point operating margin expansion to 13.5% indicates the business model is scaling effectively despite significant growth investments. The $5.6 billion NGS ARR metric (up 33% year-over-year) and $15.8 billion in remaining performance obligations (up 24%) signal strong future revenue conversion potential. However, the announced $25 billion CyberArk acquisition represents a transformative bet that will substantially expand scope, add identity security capabilities, and introduce integration execution risk. The company's ability to maintain $3.7 billion in operating cash flow while investing in R&D ($2.0 billion) and sales and marketing ($3.1 billion) demonstrates financial flexibility to fund both organic innovation and large-scale M&A. The $8.5 billion cash position provides adequate liquidity for the CyberArk cash consideration. Geography mix shows international growth (EMEA up 19.7%, APAC up 16.6%) outpacing Americas (up 13.2%), suggesting increasing global enterprise adoption. The November 2024 PAN-OS authentication bypass vulnerability and ongoing Centripetal Networks litigation ($113.6 million judgment on appeal) represent operational and financial risks that require monitoring.

Key highlights

Palo Alto Networks operates three primary platforms: Network Security (SASE solutions via Prisma Access, ML-Powered Next-Generation Firewalls, cloud-delivered security services, and AI security via Prisma AIRS), Security Operations (AI-powered Cortex platform including XSIAM for security operations, XDR for endpoint security, XSOAR for automation, and Xpanse for attack surface management), and Cloud Security (Cortex Cloud for CNAPP and cloud detection/response). The company serves customers in over 180 countries including almost all Fortune 100 companies and a majority of Global 2000 companies, primarily through a two-tiered indirect fulfillment model via distributors and resellers. Three distributors represented 44.2% of fiscal 2025 revenue and 44.8% of accounts receivable as of July 31, 2025, creating concentration risk. Recent product introductions include Prisma Access Browser, enhanced OT Security, Cortex Cloud, Prisma AIRS, and Cortex XSIAM 3.0. The company completed acquisitions of certain IBM QRadar assets in August 2024 and Protect AI in July 2025. The 0.375% Convertible Senior Notes due 2025 matured in June 2025, with the company repaying $965.6 million in cash and issuing 14.0 million shares for excess conversion value, fully offset by note hedge exercises. A $400 million unsecured revolving credit facility remains undrawn. The company has $1.0 billion remaining under its share repurchase program expiring December 31, 2025, though no repurchases occurred in fiscal 2025. Headcount increased to 16,068 from 15,289, supporting continued growth investments. The company faces risks from intense competition (Cisco, Microsoft, Fortinet, CrowdStrike, Zscaler), supply chain dependencies (single manufacturing partner Flex), component sourcing from Asia, international trade tensions, and cybersecurity threats targeting the company itself as a high-profile security vendor.

Management commentary

Management stated that their mission is to be the cybersecurity partner of choice for enterprises, organizations, service providers, and government entities to protect the digital way of life. A key element of strategy is helping customers simplify security architectures through consolidating disparate point products, executed via a platformization strategy that combines various products and services into tightly integrated architecture for more secure, faster, and cost-effective outcomes. Management noted that they believe their portfolio will enable the company to benefit from recurring revenues and new revenues as they continue to grow their end-customer base. Management disclosed that they believe the growth of the business and short-term and long-term success are dependent upon extending technology leadership, growing the customer base, expanding deployment of the portfolio within existing customers, focusing on customer satisfaction, and addressing product vulnerabilities. Management cautioned that revenue growth rate in recent periods may not be indicative of future performance, and the company may not be able to maintain profitability, which could cause business, financial condition, and operating results to suffer. Regarding the pending CyberArk acquisition, management stated they believe there are significant benefits and synergies that may be realized, including through leveraging products, scale, and combined enterprise customer bases, though efforts to realize anticipated benefits will be complex and may disrupt both companies' existing operations if not implemented timely and efficiently. Management also noted that they are actively monitoring geopolitical developments including hostilities in Israel and surrounding region, Russia-Ukraine war, tensions between China and Taiwan, and U.S.-China relations, as well as macroeconomic conditions including inflation and interest rates.

What to watch next

Investors should monitor:

• Progress toward closing the CyberArk acquisition in second half of fiscal 2026, including obtaining regulatory approvals under antitrust and foreign investment laws, CyberArk shareholder approval, and ability to realize anticipated $25 billion in synergies while managing integration risks

• Trajectory of gross margin given the 90 basis point decline in fiscal 2025, particularly as cloud hosting costs scale with subscription growth and hardware product mix evolves—whether margin compression continues or stabilizes will be critical to long-term profitability

• Next-Generation Security ARR growth rate sustainability, as this $5.6 billion metric represents the company's core recurring revenue engine and ability to maintain 30%+ growth will determine whether the platformization strategy continues gaining traction

• Operating margin progression from 13.5%, as management has historically indicated long-term operating margin expansion as the business scales—whether margin can reach 20%+ levels of mature software companies while maintaining growth investments

This summary is based solely on excerpts from the company's Form 10-K filing.