PANW Palo Alto Networks
Great security franchise with sticky customers, but dilution and a 25%-growth price leave no margin of safety.
The business
Palo Alto Networks sells cybersecurity to enterprises and governments: next-gen firewalls (hardware and virtual), plus subscription platforms for network security (Strata/SASE), cloud security (Prisma Cloud/Cortex Cloud), and security operations (Cortex XSIAM, Unit 42). Revenue is shifting toward recurring subscriptions and multi-year platform deals, and it collects cash upfront, so FCF runs far ahead of GAAP earnings.
Quality gate · 68/100
Moat & management
| Moat | narrow moat |
| Source | switching costs |
| Trajectory | stable |
| Management | adequate |
Firewalls and security stacks are deeply embedded in enterprise networks, and the platformization strategy bundles more modules to raise switching costs; CISOs rarely rip out a trusted vendor. But cybersecurity is fiercely competitive (CrowdStrike, Zscaler, Fortinet, Microsoft) and technology shifts fast, especially with AI, so the advantage needs constant reinvestment to hold.
Arora has executed well on growth and platform strategy, but heavy stock-based compensation (about 10% share-count CAGR in the data) dilutes owners while FCF is flattered by SBC and deferred revenue; large acquisitions (CyberArk-scale deals) add integration risk and look more like empire-building than disciplined allocation.
Owner-earnings inputs
| Owner earnings (TTM) | 722.00M |
| Owner-earnings yield | 0.2% |
| Free-cash-flow yield | 1.2% |
| Growth used (normalized) | 12.0% |
| Market-implied growth (reverse DCF) | 25.0% |
| Terminal growth | 3.0% |
| Discount rate (hurdle) | 9.4% |
Projected owner earnings
| Yr | Owner earnings | Growth | PV |
|---|---|---|---|
| 1 | 808.10M | 12.0% | 738.92M |
| 2 | 896.99M | 11.0% | 749.98M |
| 3 | 986.69M | 10.0% | 754.35M |
| 4 | 1.08B | 9.0% | 751.84M |
| 5 | 1.16B | 8.0% | 742.47M |
| 6 | 1.24B | 7.0% | 726.43M |
| 7 | 1.32B | 6.0% | 704.09M |
| 8 | 1.38B | 5.0% | 676.00M |
| 9 | 1.44B | 4.0% | 642.85M |
| 10 | 1.48B | 3.0% | 605.45M |
Key risks
- Stock-based compensation and acquisition-driven dilution mean reported FCF overstates true owner earnings
- Rapid technology shifts (AI-native security, cloud-delivered architectures) could erode the firewall franchise and favor rivals or Microsoft bundling
- Valuation implies about 25% annual owner-earnings growth for a decade, so it leaves no room for execution misses on large M&A integration
Catalysts
- Platformization driving larger multi-module deals and higher net retention
- GAAP margin expansion as SBC moderates and subscription mix rises
⚠ maintenance capex ≈ min(capex, D&A), capped at FCF · Net cash 0.0B credited to value (interest stripped from owner earnings to avoid double-counting). · Price pays for ~25%/yr owner-earnings growth over 10y (reverse DCF); model credits 12%. · Rich vs our conservative value, but a quality business is not a short — stance is WAIT for a better price, not sell.