September 1 was a two-print day for Palo Alto Networks. First the quarter. Then the agent.
For the fiscal fourth quarter ended July 31, 2026, Palo Alto reported total revenue of $3.41 billion, up 34% year over year. Next-Generation Security ARR reached $9.10 billion, up 63%. Remaining performance obligations rose 34% to $21.2 billion. The company said it added nearly $1 billion of net-new NGS ARR in a single quarter. Non-GAAP diluted earnings were $1.02 per share. GAAP showed a net loss of $282 million, or ($0.35) per diluted share — with the reconciliations calling out CyberArk-related acquisition costs, amortization of acquired intangibles, and fair-value moves on convertible notes and capped calls. Adjusted free cash flow for the quarter was $1.3 billion; fiscal 2026 adjusted free cash flow margin was 38.4%. Those are company figures from the PR Newswire release, not street gossip.
Guidance matched the platform tone. For fiscal 2027, Palo Alto guided revenue of $14.10 billion to $14.20 billion (23% to 24% growth), NGS ARR of $11.075 billion to $11.175 billion, and non-GAAP diluted EPS of $4.16 to $4.19. Q1 FY27 revenue was guided to $3.300 billion–$3.310 billion. CEO Nikesh Arora again pointed at a longer $20 billion FY30 NGS ARR target. CFO Dipak Golechha reiterated confidence toward a 40% adjusted free cash flow margin in FY28. Treat both as management targets, not consensus.
The same release announced the acquisition of Console, an AI-native platform for agentic workflows and natural-language operational tasks. Palo Alto said Console will deepen agentic capabilities inside Cortex — investigate signals, prioritize work, take action. SecurityWeek and the company both say financial terms were not disclosed. So the honest label is “bought,” not “bought for $X.” CyberMerge will not invent a price.
Read the two prints together. The operating company is still compounding NGS ARR at platform scale after folding CyberArk. The product company is now buying the workflow layer that turns natural language into agentic action on top of that ARR machine. CrowdStrike, on the same calendar day at Fal.Con, launched Falcon Guardian as AI Detection and Response rooted at the endpoint. Different architecture bet. Same category fight: who owns runtime control of agents inside the security platform customers already pay for.
The tape into the release was ugly for high-multiple software — CrowdStrike and Palo Alto both sold off hard on the session as yields pressed higher — but that is a multiple story, not a miss on these numbers. The Q4 print cleared the board on revenue, NGS ARR, and RPO. The Console deal clears a different board: agentic SOC capability without waiting for a greenfield build.
What to watch next is integration, not slogans. Console has to show up as Cortex workflows customers can invoke, with the same role and permission boundaries Palo Alto already sells. If it ships as a demo reel, the undisclosed price was the tell. If it ships as attach on NGS ARR, September 1 was the day the agent layer stopped being a startup category and became a platform SKU fight.