Palo Alto CEO Nikesh Arora: AI threats push vendor consolidation

Arora's remarks at a company news event center on a shift he says he is already seeing in customer conversations. After the emergence of the model he referred to as "Mythos," Palo Alto Networks tested its own environment and found about 1,200 potential vulnerabilities, then spent three to four months sorting out which findings were valid and fixing them. He said that work would previously have taken weeks or months, or been skipped entirely, and that about 2,000 companies have now been drawn into discussions involving CEOs, CIOs and chief security officers.

The internal testing also produced a claim about how models compare. Arora said about 60% of vulnerabilities identified came through Mythos, about 30% through OpenAI models, and the remainder through other models — results he said argue for using multiple models, because different ones surface different flaws. He framed those assessments as a gateway to broader talks about consolidating security products, improving response times and deploying SIEM capabilities.

What the outcome hinges on, by Arora's account, is timing and architecture. He described security operations center transformations as shorter-term projects, potentially six-month engagements, while network-security consolidation plays out as existing vendor contracts come up for renewal. He also said AI agents could help address threats "in flight," but that this becomes harder when agents from multiple suppliers must communicate — a dynamic he said favors incumbents with integrated platforms and may lead customers to reduce vendor counts over time.