Key Highlights

  • Palo Alto Networks reported fiscal fourth-quarter 2026 Revenue up 34% to $3.41bn, with Next-Generation Security annual Recurring Revenue growing 63% to $9.10bn.
  • CrowdStrike reported second-quarter fiscal 2027 revenue up 26% to $1.47bn, with record net new annual recurring revenue of $333m as growth reaccelerates after the 2024 outage.
  • Fortinet reported second-quarter 2026 revenue up 26% to $2.05bn, with product revenue up 52% to $773m, evidence of a firewall-appliance refresh cycle.

Cybersecurity has earned a permanent place on the S&P 500 radar for a simple reason: it is one of the few technology budget lines that is close to non-discretionary. Boards cut travel and defer hardware refreshes before they cut security, and artificial intelligence has sharpened the case further by arming attackers and defenders alike. Palo Alto Networks Inc (NASDAQ:PANW), CrowdStrike Holdings Inc (NASDAQ:CRWD) and Fortinet Inc (NASDAQ:FTNT), all Cybersecurity companies in the information technology sector, offer three contrasting models of how that spending is captured: platform consolidation, cloud-delivered subscription, and network-hardware-led security. Their most recent results show robust Demand but very different growth dynamics.

Palo Alto Networks Inc (NASDAQ:PANW): Platformisation

Palo Alto Networks is pursuing platformisation, persuading customers to consolidate multiple security tools onto its integrated platforms. In fiscal fourth-quarter 2026 results on 1 September 2026, revenue rose 34% to $3.41bn and full-year revenue reached $11.48bn. Next-Generation Security annual recurring revenue, the metric management prioritises, grew 63% to $9.10bn, and remaining performance obligations reached $21.2bn, with nearly $1bn of net new NGS ARR added in the quarter. Chief executive Nikesh Arora argued AI is elevating cybersecurity to the top of the CIO priority list. Non-GAAP Earnings were $1.02 per share for the quarter and $3.84 for the full year, and the company bolstered its AI ambitions by acquiring Console, an AI-native platform for agentic workflows, to extend its Cortex product.

CrowdStrike Holdings Inc (NASDAQ:CRWD): Recovering Momentum

CrowdStrike, a cloud-native endpoint and security platform sold largely as software-as-a-service, delivered results that speak to a recovery in confidence. In second-quarter fiscal 2027 results on 26 August 2026, revenue rose 26% to $1.47bn and annual recurring revenue reached $5.84bn, up 25%. Notably, the company reported record net new ARR of $333m with growth reaccelerating, and its flexible Falcon Flex subscription ending ARR surpassed $2.29bn, up 101%. That reacceleration is significant given the reputational damage from the 2024 global outage; management raised full-year net-new-ARR guidance. Non-GAAP earnings rose to $0.31 per share, up from $0.23 a year earlier. The read-through is that customers are still consolidating onto the Falcon platform without any hardware to ship.

Fortinet Inc (NASDAQ:FTNT): The Hardware Cycle

Fortinet is the most hardware-exposed of the trio, which cuts both ways. In second-quarter 2026 results on 29 July 2026, revenue rose 26% to $2.05bn, but the standout was product revenue up 52% to $773m, evidence of a firewall-appliance refresh cycle, alongside service revenue of $1.27bn. Total billings grew 33% to $2.37bn, and management raised full-year guidance. Fortinet is pushing its unified SASE and an AI-driven security-operations platform to broaden beyond appliances. Non-GAAP earnings rose 41% to $0.90 per share, and management lifted full-year revenue guidance towards $8.1bn. The risk is that a hardware-led surge can pull demand forward, making the durability of that 52% product growth the central question for investors: much of it reflects the ageing of firewalls sold during an earlier upgrade wave, so the cycle could fade as sharply as it arrived unless SASE subscriptions take up the slack.

What Readers Should Monitor

The three illustrate that cybersecurity spending is resilient but not uniform. Watch whether Palo Alto's NGS ARR deceleration is orderly or steeper than guided; whether CrowdStrike can sustain its net-new-ARR reacceleration and fully move past the outage overhang; and whether Fortinet's firewall refresh proves a durable cycle rather than a pull-forward.

Margins, AI costs, elevated valuations and macroeconomic pressure on IT budgets are shared risks.