Palo Alto's Dazzling Security Growth Is Bought With Free Deals and Acquisitions

Begin with the genuine strength, because Palo Alto is a dominant, well-run company in one of the best markets in technology, and the critique here is about the quality and price of the growth, not the company's fundamental worth. Cybersecurity is a secular growth market with a powerful tailwind: the threats never stop, security spending is among the last things a company cuts, and enterprises are under constant pressure to defend themselves. Palo Alto is the largest and most diversified player in it, and in its fiscal third quarter of 2026 it reported revenue of $3.0 billion, up 31%; next-generation security ARR of $8.1 billion, up 60%; remaining performance obligation — contracted future revenue — of $18.4 billion, up 36%; and strong adjusted free cash flow of $910 million in the quarter, up 57% year over year. Its chief executive, Nikesh Arora, is widely respected, and his "platformization" strategy — consolidating the dozens of point security products an enterprise typically juggles into a single integrated Palo Alto platform — addresses a real and large customer pain point, because chief information security officers genuinely do want fewer vendors, fewer dashboards, and far less integration complexity to manage.

So this essay does not argue that Palo Alto is a weak company. It is a strong one. It argues that the headline growth metrics — the 60% ARR growth above all — are flattered in two specific ways that the premium valuation ignores: a large part of the growth is acquired rather than organic, and much of the organic part is being bought with margin-destroying incentives. The result is growth that looks cleaner and more durable than it is, priced as though it were the highest-quality compounding in the sector.

Half the headline growth was purchased outright

Start with the acquisitions, because they account for a striking share of the celebrated ARR growth. Palo Alto's 60% next-generation security ARR growth is the number the bulls cite as evidence of explosive momentum. But the company's own disclosures show that a large portion of that growth came from acquisitions — CyberArk, a major company in identity and privileged access management, and Chronosphere, a firm in cloud observability — which together contributed roughly $1.6 billion to the next-generation security ARR figure in the period. Strip the acquisitions out, and organic next-generation security ARR grew about 28% — less than half the 60% headline.

This distinction matters enormously, because acquired growth and organic growth are not worth the same. Organic growth reflects the company winning business on the merits of its own products and execution; it is repeatable, high-quality, and the basis for a premium multiple. Acquired growth reflects the company buying revenue with shareholders' money — paying billions of dollars to add another company's ARR to its own — which is not free, not necessarily repeatable, and carries integration risk. A company growing ARR 28% organically and topping it up to 60% with large, debt-or-stock-funded acquisitions is a fundamentally different, and materially lower-quality, growth story than a company growing a clean 60% on its own products, and the market has been quoting the 60% as though it were the latter. When you pay billions to acquire revenue, the revenue shows up in ARR, but the cost shows up on the balance sheet and in the dilution or debt used to fund it — and a clean 60%-growth multiple does not account for the price paid to manufacture half of that 60%.

The integration risk of doing two at once

The acquisitions introduce a second problem the valuation underweights: Palo Alto is integrating two large, complex companies simultaneously, which is a notoriously difficult thing to do well. CyberArk and Chronosphere operate in different security and observability domains, with their own technologies, salesforces, cultures, and customers, and merging them into Palo Alto's platform while continuing to grow the core business is a demanding balancing act. The history of enterprise-software acquisitions is littered with deals that diluted focus, lost key talent, alienated customers during the transition, and failed to deliver the promised synergies — and doing two large integrations at the same moment multiplies the risk. Management, for its part, says the integrations are progressing ahead of plan — which may well be true, and is the bull's reassurance — but "ahead of plan" early in two simultaneous large integrations is what every acquirer says, and the real test comes later, when the salesforces, technologies, and customer bases have to actually merge under one platform.

The platformization strategy actually depends on this integration succeeding, because the entire pitch is that the customer gets a single, seamless platform rather than a collection of separately-acquired tools bolted together. If the integration is messy — if CyberArk's identity products and Chronosphere's observability tools don't knit cleanly into the Palo Alto platform — then "platformization" becomes "a pile of acquisitions with a shared logo," which is precisely the fragmented complexity customers were trying to escape. The market is pricing flawless integration of two big deals at once, on top of everything else, and integration is exactly where richly valued acquirers most often stumble.

The free-deal engine and the falling margin

Now the most revealing tell, the one that ties the quality-of-growth question to a hard number: the gross margin has been falling, and falling gross margin is the smoking gun of growth that is being bought rather than earned. A software company's gross margin should be high and, ideally, stable or rising as it scales — software has near-zero marginal cost, so each additional dollar of revenue should be highly profitable. Palo Alto's gross margin, by contrast, has been declining over the past two years, which for a software-led company is a genuine red flag that something in the growth model is costing more than it should.

Part of the explanation is the platformization strategy itself. To convince a customer to rip out a dozen competing point products and consolidate everything onto Palo Alto, the company offers aggressive incentives — discounts, bundled pricing, and, by various accounts, periods where products are effectively given away free to displace a competitor and win the platform commitment. This is a clever land-grab tactic: you sacrifice near-term revenue and margin to lock the customer into a large, multi-year platform deal, which then shows up as a big jump in ARR and RPO. But the free-and-discounted deals are precisely why the headline ARR and RPO numbers look so explosive while the gross margin and the actual recognized revenue grow more modestly — you are booking the future contract value while giving away the present economics. The 60% ARR growth and the 24% revenue growth tell the story between them: ARR, inflated by acquisitions and long platform commitments, races ahead, while revenue, which reflects what is actually being recognized after the giveaways, grows at less than half that rate. The falling gross margin is the receipt for the free deals, and a premium multiple that assumes expanding margins is contradicted by a margin that is going the other way.

ARR and RPO are the metrics most easily flattered

It is worth being precise about why Palo Alto directs attention to ARR and RPO, because they are the metrics most susceptible to exactly the tactics described above. Remaining performance obligation is the total value of contracted future revenue, and ARR is the annualized run-rate of recurring revenue — both forward-looking measures that capture the value of long-term deals signed today. When a company signs a large, multi-year platform commitment, even one front-loaded with free periods and discounts, the full contracted value flows into RPO and ARR immediately, making those numbers leap. Revenue, by contrast, is recognized over time as the service is actually delivered, and reflects the discounts and giveaways — which is why it grows more slowly and more honestly.

So a company pursuing a discount-and-free-deal land grab will naturally show spectacular ARR and RPO growth and more modest revenue growth, and will, naturally, encourage investors to focus on the spectacular forward metrics rather than the modest recognized one. None of this is improper — RPO and ARR are legitimate, disclosed metrics, and platform commitments are real. But the discipline is to weight the grounded revenue number, which grows 24%, at least as heavily as the inflatable ARR number, which grows 60% — and to recognize that the gap between them is substantially the cost of buying the growth, paid in margin and in deferred economics. The market has chosen to celebrate the 60% and discount the 24%, which is precisely backwards from how a skeptical analyst would weight them.

What the bulls genuinely get right

In fairness, the bull case is strong and Palo Alto's quality is real — the debate is the quality and price of the growth, not the company's dominance. Several points genuinely favor it. Cybersecurity is a secular, non- discretionary growth market with a durable tailwind, and Palo Alto is its largest and most complete player. Platformization, whatever its near-term margin cost, is a genuinely sound long-term strategy: enterprises really do want to consolidate vendors, and a customer locked onto Palo Alto's full platform is extraordinarily sticky and expensive to leave, which builds a powerful moat over time — the free deals of today may produce the locked-in, expanding customers of tomorrow. The free cash flow is real and strong, with adjusted FCF margins near 38%, which is genuine cash generation, not just adjusted-earnings engineering. The RPO of $18 billion does provide real visibility into future revenue, giving the business durability that few companies can match. And Nikesh Arora is a genuinely capable operator with a track record of execution. The land-grab logic — sacrifice near-term margin to win durable platform commitments — is a defensible strategy that has worked for other software leaders, and if it works here, today's margin pressure is an investment that pays off in tomorrow's locked-in economics.

The honest synthesis is that Palo Alto is a dominant company executing an aggressive, defensible, but margin-costly land-grab, and the market has priced the strategy as if it has already succeeded cleanly — ignoring that half the headline growth is acquired, the organic growth is being bought with margin, and two large integrations could still go wrong. The bull is right that the platformization moat, if it holds, is powerful and the cash flow is real. The skeptic notes that paying 50 times earnings for growth that is half-purchased and costing margin, with two big integrations in flight, leaves no room for the strategy to stumble — and aggressive land grabs, in security as everywhere, do sometimes stumble.

The multiple assumes the cleanest version of the story

It is worth being concrete about the valuation, because the price is what turns a quality-of-growth quibble into an investment risk. Palo Alto trades at roughly 50 times forward earnings — somewhere in the high-40s to mid-50s depending on the measure — with a price-to-earnings-to-growth ratio around 4, a level that signals investors are paying richly even relative to the company's expected earnings growth. On a price-to-sales basis it commands a premium to most of its security peers. The stock is, in short, priced as a high-quality compounder growing durably and profitably.

The problem is that this premium is being applied to earnings growth that is forecast in the low-double-digits even as the ARR headline screams 60% — because the recognized economics, after the giveaways and the integration costs, grow far more slowly than the contracted-value metrics. A ~50-times multiple on low-teens earnings growth is only defensible if you believe the ARR will convert cleanly into accelerating future earnings — that the free deals of today become the high-margin locked-in revenue of tomorrow, that the acquisitions integrate without friction, and that the gross margin reverses its two-year decline. Each of those is possible; all of them together, priced as near-certainties, is the demanding bet the multiple embeds. The market is paying a compounder's price for a land-grabber's economics, on the faith that the land grab converts into the compounder. When it works, that faith is vindicated handsomely; when the conversion disappoints — when the margin keeps falling or an integration sours — a 50-times multiple on a business whose recognized growth is in the low double digits has a great deal of room to compress.

There is also a quieter irony in the peer comparison the bulls use to justify the price. Palo Alto is often called "reasonable" because it trades at a discount to the fastest-growing cloud-native rivals like CrowdStrike. But that framing anchors on the most expensive comparison available — being cheaper than the priciest stock in your sector is not the same as being cheap, and a sector where every name trades at a rich multiple is a sector where the whole group is exposed to a re-rating, not a place where relative cheapness offers real protection. Palo Alto's "discount to CrowdStrike" is cold comfort if the entire premium-security cohort de-rates, which a stretch of disappointing margins or a single high-profile breach could trigger across all of them at once.

The competition that the platform has to beat

One final pressure deserves naming: Palo Alto is not consolidating an empty field. Its platformization land grab is occurring against well-funded, fast-growing rivals — CrowdStrike in endpoint and cloud security, Zscaler in network security, Fortinet, Okta in identity, and a long tail of specialized challengers — many of whom are pursuing their own platform strategies and many of whom trade at their own rich multiples. The "consolidate everything onto one platform" pitch is compelling, but every major security vendor is making some version of it, and the customer's willingness to bet their entire security posture on a single vendor has limits, both for practical resilience reasons (concentration risk in your own defenses) and for negotiating leverage (a customer fully locked into one platform has surrendered its ability to play vendors against each other). The free deals that win the land grab are partly a response to this competitive intensity — you give product away because the rival is also bidding for the same consolidation — which means the margin pressure is not a temporary tactic Palo Alto can switch off at will, but a structural feature of competing for platform commitments against equally determined rivals. The moat the bulls envision is real if Palo Alto wins the consolidation; the cost of fighting for it is the margin erosion the valuation prefers not to see.

The kicker

Palo Alto Networks is a great company telling a great story — the security platform that consolidates the chaos, growing ARR 60%, backed by $18 billion of contracted future revenue and a respected leader. But great stories in software are precisely where investors most need to separate the growth that is earned from the growth that is bought, and Palo Alto's is substantially the latter: half the headline ARR growth acquired with shareholders' money, much of the rest won with free deals and discounts that are quietly eroding the gross margin, all of it presented through the forward-looking metrics most easily inflated and least grounded in recognized revenue. None of this makes the strategy wrong or the company weak — the platformization land grab may well build a durable moat, and the cash flow is genuinely strong. It means the price, around 50 times earnings, has credited the cleanest possible version of a growth story that, on inspection, is more purchased, more margin-costly, and more integration-dependent than the headline 60% admits. You are paying a premium for earned growth and receiving, in significant part, bought growth — and the gross margin, falling quietly for two years, is the number keeping the honest score.

The ARR grew sixty percent and the revenue grew twenty-four, and the distance between those two numbers is the price of all the free product and all the acquired companies it took to make the first one so impressive. Somewhere a gross margin slips another fraction of a point, keeping the only score that cannot be front-loaded, discounted, or acquired — the score of what the growth actually costs. The platform may yet become the fortress the bulls imagine, with every customer locked in and every margin restored. But that is the destination, and the price already assumes the company has arrived, when the falling margin says it is still, expensively, fighting and buying and discounting its way there — one free deal and one acquisition at a time.