Palo Alto Networks Advances Unified Security Platform in Fiscal Q2

Palo Alto Networks (NASDAQ:PANW) reported fiscal second quarter 2026 revenue of $2.59 billion, up 15% year over year. Next-Generation Security (NGS) ARR grew 33% to $6.33 billion, including a $200 million contribution from Chronosphere, while organic NGS ARR increased 28%.

The company delivered its third consecutive quarter with operating margins above 30%. SASE surpassed $1.5 billion in ARR, XSIAM exceeded $500 million in ARR, and Prisma AIRS more than tripled its customer count quarter over quarter to reach more than 100 customers.

Management discussed the impact of artificial intelligence on enterprise security architecture. Chairman and CEO Nikesh Arora said that as AI becomes embedded in enterprise workflows, security must operate “in real time at the critical control points where decisions are made across network, endpoint, cloud, browser, and identity.”

Palo Alto also discussed its acquisitions of CyberArk and Chronosphere and announced its intent to acquire Koi, extending its identity security and agentic endpoint protection platforms.

Why It Matters: Enterprises are evaluating how AI adoption affects security architecture and operating models. Arora noted that “end-to-end attacks are now four times faster than a year ago,” with nearly a quarter of cases involving data extraction in under an hour. He added that 90% of those breaches were preventable and tied to gaps in visibility and controls, indicating that identity governance and automated remediation are necessary as AI agents and machine-to-machine activity increase.

• Platformization Expands Customer Adoption: Palo Alto Networks added approximately 110 net new platformizations in the quarter, bringing the total to about 1,550, up 35% year over year. Platformized customers show a 119% net retention rate with low single-digit churn. Arora stated, “A platformized approach built on a real-time, data-driven model that gets smarter with scale is the only way to secure the modern enterprise.” The company continues to promote integration across network security and security operations under a unified architecture.

• XSIAM and AgentiX Advance AI-Driven SOC Operations: The company’s XSIAM platform surpassed $500 million in ARR and added nearly 150 new customers in Q2, with average ARR near $1 million per customer. More than 60% of deployed customers now report mean time to remediation under 10 minutes. Cortex AgentiX introduces AI agents that can detect issues and “auto-remediate it directly in a cloud console, an identity provider, or a firewall at machine speed.”

• Prisma AIRS Gains Early Traction in AI Security: Prisma AIRS has scaled to more than 100 customers within a few quarters of launch. Bookings doubled quarter over quarter, and management cited a nine-figure pipeline. The platform secures AI models and AI-powered applications across their lifecycle, including model scanning and runtime defense. Arora described Precision AI as technology “trained on a proprietary data set and embedded directly at those critical control points,” supported by 30 billion attacks blocked daily and enormous volumes of security data processed in its AI SOC.

• CyberArk Increases Identity Security for Humans and Machines: CyberArk’s acquisition brings identity security capabilities focused on privileged access and certificate lifecycle management. Arora said, “We bought CyberArk because when AI agents start logging in at machine speed, logging in becomes a primary attack vector.” The company plans to integrate identity controls with its existing network and endpoint capabilities, including support for machine identity across its firewall customer base.

• Chronosphere Adds High-Volume Observability Capabilities: Chronosphere contributes approximately $200 million in ARR and recently signed a multi-year, nine-figure expansion with a leading AI model provider. The observability platform is designed for large cloud-native and AI environments, with over 80% of new logos adopting multiple products such as metrics, logs, and traces. Palo Alto Networks plans to integrate Chronosphere with AgentiX to support automated remediation based on telemetry insights.

Go Deeper -> Palo Alto Networks Earnings Report – MarketBeat

---

Our Latest CIO Field Notes

---