TD Cowen reiterates Palo Alto Networks stock rating on strong results

Palo Alto Networks shares rallied 90% YoY after its fiscal Q4 2026 results: revenue rose 34% to $3.41B (vs. $3.35B Street), and non-GAAP EPS was $1.02 vs. $0.98 consensus. Next-generation security ARR jumped 63% YoY to $9.1B, with $970M in net new ARR (vs. $830M estimate) and platformized net revenue retention >120%. TD Cowen reiterated a Buy and $400 target while raising its FY27 revenue estimate by 2% to $14.14B, though it cut margin assumptions (gross margin -85bps to 74.6%) and flagged valuation risk (P/E ~314, “overvalued”).

Analysis

PANW is increasingly a consolidation winner, not just a security-growth story. The key mechanism is that once a vendor starts displacing multiple point solutions in the same account, budget becomes stickier and follow-on expansion gets easier; that tends to hurt smaller niche vendors and legacy firewall names more than it helps the overall category. The second-order effect is a slower sales cycle for peers because buyers wait to see whether one platform can absorb more spend before renewing fragmented tools.

The market’s near-term mistake is likely to over-focus on the revenue beat and under-focus on the cost to deliver that growth. Higher cloud-hosting expense means margin expansion can lag ARR momentum for several quarters, so the stock can still trade well on estimate revisions in the next 1-3 months while the 6-18 month debate centers on whether PANW can keep compounding at a premium while protecting gross margin. If growth normalizes faster than expected, a very rich multiple can compress even if the business remains best-in-class.

Contrarian view: the stronger the platformization narrative gets, the more the stock becomes a valuation call rather than a product-call. That favors relative longs over outright chasing — PANW can keep taking share, but the market may already be discounting a very optimistic 2030 path. The thesis is falsified if next-gen ARR growth decelerates materially, platformization stops outpacing expectations, or cloud cost inflation prevents operating leverage from showing up in the next two quarters.

Key Decisions for Investors

• Do not chase PANW after the post-earnings upgrade cycle; wait for a 3-5% pullback or implied-vol reset, then build exposure with a 6-12 month call spread rather than stock to cap valuation risk.
• Use PANW as a long against legacy firewall exposure: pair long PANW / short FTNT or CHKP on any strength, with the trade thesis invalidated if PANW guides margin below plan or competitor growth re-accelerates.
• If already long PANW, trim into strength and re-add only if the company reaffirms that next-gen ARR growth stays well above 50% while gross margin pressure stays contained; that is the cleanest sign the premium multiple can hold.
• Watch ZS as a relative-value hedge rather than an outright short: if PANW’s SASE displacement continues, ZS may face longer deal cycles in shared accounts, but the trade only works if ZS net new ARR disappoints versus consensus.