tkalAI Capital Flows
Earnings deep dive · Tier K Cyber

Palo Alto Networks Q3 FY26 — Buying Growth, Booking the Bill

NGS ARR hit $8.1B (+60%) and guidance went up across the board — but $1.6B of that ARR was acquired, GAAP swung to an operating loss on deal costs, the share count rose, and the stock fell anyway.
Published · Post-print analysis · PANW · For analysts covering cybersecurity, identity, and observability

The setup

Palo Alto Networks printed fiscal Q3 2026 (quarter ended ) after the close on — the first quarter that fully consolidates the CyberArk identity acquisition and the Chronosphere observability acquisition. On the headline metrics it was a beat-and-raise: revenue up 31%, NGS ARR up 60%, RPO up 36%, and full-year guidance lifted across the board. The stock fell roughly 6.5% anyway.

The reason is the same tension that runs through every platformization-by-acquisition story: how much of the growth is the business compounding, and how much is the balance sheet doing the work? This print is the cleanest test of that question PANW has given us, because the acquired contribution is now large enough to disclose line by line — and once you back it out, the picture is strong but more ordinary than the 60% headline suggests.

The numbers

Total revenue was $3,002M, +31% YoY (product $594M, subscription & support $2,408M), ahead of the ~$2.92B consensus. The company disclosed that $388M of revenue came from CyberArk and Chronosphere — so implied organic revenue is roughly $2,614M, about +14% organic. NGS ARR reached $8.1B (+60%), of which $1.6B is acquired; ex-acquisition, organic NGS ARR is ~$6.5B, still a healthy ~+28% organic. RPO was $18.4B (+36%), including $1.8B from the deals — organic RPO ~$16.6B, ~+30%.

Profitability split sharply between GAAP and non-GAAP. GAAP swung to a $(183)M operating loss (from +$219M a year ago) and a $(177)M net loss, $(0.22)/share — driven by acquisition accounting: $280M of acquired-intangible amortization (up from $43M), $198M of acquisition-related costs, and $517M of stock-based comp. On a non-GAAP basis the business looks as it always has: non-GAAP operating income $814M (27.1% margin) and non-GAAP EPS $0.85, up from $0.80 — a beat, but only +6% growth, because the CyberArk stock consideration pushed the diluted share count to ~807M (non-GAAP) from ~701M. Non-GAAP net income rose 22% while per-share growth was a third of that; the dilution is the gap.

Cash generation remains the genuine standout. Operating cash flow $871M and adjusted free cash flow $910M in the quarter, with a trailing-12-month adjusted FCF margin of 38.5% (+430bps YoY) — management reiterated the path to a 40% adjusted FCF margin by FY28. Whatever the GAAP optics, this is still a cash machine. One line to keep honest: GAAP gross margin compressed to ~67.5% from ~73.0% a year ago, as acquired cost of revenue and amortization entered the mix.

Paid subscribers

The rest of this dive is for paid subscribers.

The headline numbers are above. The 7 sections below carry the mechanism, the peer read, the valuation work, and the dated tests that decide it.

  • The integration bill on the balance sheet
  • The guide
  • How peers read this
  • Why a beat-and-raise sold off
  • What we'd watch from here
  • Listed-market read-through
  • Bottom line
Unlock the full dive →

Already a subscriber? Sign in.

Subscribe · free weekly

This is one print. The pipeline runs every week.

Every Monday, the single sharpest call from the pipeline — a dated, falsifiable read on credit, demand, and capex, then graded in public on the scorecard. Free.

One email to confirm. Unsubscribe any time.

Sources