Palo Alto Networks posts record beat on AI threat surge, NGS ARR up 60%

Palo Alto Networks delivered a record quarterly beat in fiscal Q3, with next-generation security annual recurring revenue reaching $8.13 billion（約1.3兆円）, up 60% year over year. The company also reported total revenue of $3 billion（約4800億円）, up 31%, and raised full-year fiscal 2026 revenue guidance to $11.415–$11.425 billion（約1.8兆円）, representing 24% growth, while also raising every other guided metric.

The surge is rooted in a specific shift in the threat landscape. During the Q3 earnings call, Chairman and CEO Nikesh Arora told investors that frontier AI models capable of running full attack campaigns without human input have arrived. "We have entered the era of truly cyber capable systems where models like Mythos possess the autonomous capability to execute comprehensive attack campaigns from start to finish. This represents a fundamental paradigm shift for the cybersecurity industry," Arora said. To illustrate the scale of this shift, Unit 42, Palo Alto's threat research arm, simulated a full ransomware campaign—from entry to data exfiltration—in 25 minutes, compared to the industry norm of days just to detect a breach. This compression of the detection window is what is pulling customer budgets forward.

The most dramatic evidence of this demand pull is Prisma AIRS, Palo Alto's AI security product. The product did not exist a year ago, yet it tripled its customer count from Q2 to over 300 customers in a single quarter, with management projecting $100 million（約160億円） in annual recurring revenue within a couple of quarters. Arora characterized the shift in stark terms: six months ago, investors worried that AI would gut cybersecurity spend. Instead, NGS ARR growth is accelerating, not slowing, and the guidance raise across every metric represents the market's first hard evidence that AI threats are expanding the total addressable spend rather than shrinking it.

Despite the record beat, the stock still trades 7% below its recent high. The stock suffered a 36% maximum drawdown on February 24, 2026—well before the Mythos threat narrative took hold—and has clawed back most of that decline. Wall Street's positioning reflects confidence in the recovery: analysts rate the stock 34 buys, 11 outperforms, 9 holds, and just 1 sell. The mean price target sits at $333.50, or 99.5% of the current price of $335.28, meaning Street analysts have largely caught up to where the stock already trades rather than signaling fresh upside. Capital One issued a July 16 upgrade to $421, the latest in a run of target hikes that has pushed some banks above Palo Alto's own average target. TIKR's mid-case model values the stock at $399, implying 19% total return and a 4% annualized rate through 2030, anchored to the same shift driving Q3: sustained 60% NGS ARR growth and Prisma AIRS scaling past 300 customers in a single quarter. The 4% annualized pace assumes significant deceleration from the stock's trailing year return of 67% and trailing five-year return of 404%.

Palo Alto Networks' record quarter reflects a fundamental reversal in the AI threat narrative for cybersecurity spending. Six months prior, the dominant concern in investor discussions was that artificial intelligence would erode the need for traditional security tools, potentially cannibalizing budgets. Instead, the arrival of frontier AI models capable of autonomous attack execution has created the opposite dynamic: the compressed detection windows and sophistication of threats are pulling forward customer spending, not reducing it. The 60% year-over-year NGS ARR growth—the company's largest beat on record—is the first hard market evidence that AI expansion is enlarging the total addressable spend rather than shrinking it.

The Prisma AIRS product exemplifies this shift. Launched less than a year ago, it tripled its customer base to over 300 in a single quarter and is tracking toward $100 million（約160億円） in annual recurring revenue within a couple of quarters. This velocity suggests that enterprises are treating AI-driven security as an urgent, separate budget category rather than a marginal add-on. CEO Arora's framing of the threat—models like Mythos executing ransomware campaigns end-to-end in 25 minutes versus the industry norm of days to detect—made the gap between traditional defenses and the new threat surface explicit and measurable, translating directly into budgetary pull-forward.

The stock's recovery trajectory underscores the timing gap between the sell-off and the security demand story. The 36% drawdown that bottomed on February 24, 2026, preceded the Mythos narrative and Q3 results by several months. The stock has clawed back most of that decline and now trades just 7% below its recent high, with Wall Street's mean target at $333.50—nearly flat to current levels—suggesting the Street has largely repriced the opportunity already. TIKR's $399 mid-case valuation implies further upside, anchored to the assumption that NGS ARR growth sustains at 60% and Prisma AIRS continues its sharp customer adoption curve.

No comments yet. Be the first to share your thoughts!