Palo Alto Networks: What the 44% Run Is Actually Telling You

On March 27, Nikesh Arora bought 68,085 shares of his own company at $146.87 — roughly $10 million out of pocket, his first open-market purchase in years. That’s the part worth paying attention to.

The context matters here. A Fortune report in mid-March had flagged Anthropic’s “Mythos” AI model as a potential threat to traditional security vendors, and PANW dropped roughly 6% on the fear. Arora didn’t issue a statement. He bought stock. That distinction tells you something about where management thinks the business is heading.

Since that purchase, shares have run nearly 44% to an all-time high of $261.41 on May 22.

Analyst Price Targets

• Wells Fargo – Overweight | PT: $285
• Oppenheimer – Outperform | PT: $275 (raised from $245)
• Truist Securities – Buy | PT: $275 (raised from $200)
• Stifel Nicolaus – Buy | PT: $275 (raised from $185)
• Rosenblatt Securities – Buy | PT: $275 (raised from $225)
• BMO Capital Markets – Outperform | PT: $270
• Morgan Stanley – Overweight | PT: $265 (raised from $223)
• Jefferies – Buy | PT: $265 (raised from $215)
• RBC Capital – Outperform | PT: $255 (raised from $220)
• Barclays – Overweight | PT: $220 (raised from $200)

The Q2 numbers were solid. Revenue came in at $2.59B against a $2.58B estimate, up 15% year over year. Non-GAAP EPS hit $1.03 vs. $0.94 expected. GAAP net income jumped 62% to $432M. NGS ARR — the number that actually tracks platform adoption — grew 33% to $6.33B. Remaining performance obligations hit $16.0B, up 23%. Adjusted free cash flow over the trailing twelve months: $3.75B. The full-year revenue guide was raised to $11.28B–$11.31B.

The one number that caused the initial 7% drop after hours on February 17 was Q3 EPS guidance: $0.78–$0.80 against a $0.92 consensus estimate. Worth understanding why that gap exists. The CyberArk and Chronosphere acquisitions increased share count significantly — the EPS miss is largely a dilution artifact, not an operating deterioration. Q3 revenue is guided at $2.941B–$2.945B, which is 28–29% growth. That’s the actual business signal.

The $25 billion CyberArk acquisition closed February 11. It added identity as a fourth core domain alongside Strata, Prisma, and Cortex. Then on May 12, PANW launched Idira — a next-generation identity platform designed to manage human, machine, and agentic identities under one architecture. Machine and AI identities now outnumber human identities 109 to 1 inside the enterprise. That’s not a niche problem. That’s the attack surface of the next decade, and PANW just staked a position at the center of it.

Slight tangent, but it matters: Palo Alto’s Unit 42 threat intelligence team has been warning enterprises about a narrow three-to-five month window to shore up defenses before AI-powered exploits accelerate meaningfully. Whether that timeline proves accurate or not, that kind of warning from a credible source tends to move security budgets. PANW is the company most positioned to absorb that spending.

What to watch on June 2: organic NGS ARR growth ex-acquisitions (the guided $7.94B–$7.96B includes $1.47B from M&A), any early Idira cross-sell data from existing CyberArk customers, and how management frames the path to the 40% free cash flow margin target by FY2028. The EPS bar is low. Clearing it isn’t the question.

The question is whether the organic growth rate — stripped of acquisition math — is holding. That’s what justifies the valuation at all-time highs. Everything else is already in the stock.

For informational purposes only.