The argument that best-of-breed is dead has never been cheaper to make. Palo Alto Networks spent 2026 assembling a platform with identity bolted on. CrowdStrike just printed another record quarter on the Falcon stack. And yet Okta, the independent identity company, beat and raised — and the stock ripped.
That is not a contradiction. It is the shape of the market.
On June 2, Palo Alto reported fiscal third-quarter 2026 results: Next-Generation Security ARR of $8.1 billion, up 60% year over year, including $1.6 billion from CyberArk and Chronosphere. Total revenue was $3.0 billion, including $388 million from those two acquisitions. Headline growth is doing a lot of work. The CyberArk close on February 11 made identity a “core pillar” of Nikesh Arora’s platformization story. The next print is September 1. The metric to watch is not whether NGS ARR lands in the $8.90–$8.95 billion guide. It is whether CyberArk is a module customers already wanted, or a SKU the Palo Alto sales force is now obligated to attach.
CrowdStrike does not need to buy identity to look like a platform. On August 26 it reported fiscal second-quarter 2027 results: $1.47 billion of revenue, up 26%; ARR of $5.84 billion, up 25%; a record $332.8 million of net new ARR, up 51% year over year; and a raise of full-year net-new ARR growth by 630 basis points, to 34% at the midpoint. Falcon Flex ARR from accounts on that consumption motion exceeded $2.29 billion and doubled year over year. That is a module machine. Endpoint was the wedge. The rest of Falcon is the tax. Buyers who start in CrowdStrike tend to stay in CrowdStrike.
Okta is the counterexample, and Thursday’s tape is the evidence. Fiscal second-quarter 2027, ended July 31: $805 million of revenue, up 11%, against a $795 million estimate; adjusted EPS of $1.05 versus 97 cents expected; remaining performance obligations of $4.858 billion, up 17%. Full-year revenue guidance moved to $3.216–$3.226 billion. Shares surged about 20% in extended trading. New products accounted for 30% of bookings. Okta said it closed dozens of AI deals after making Okta for AI Agents generally available.
“Network is the biggest cyber category now, but if you look out five or 10 years, with millions of agents running around, it’s definitely going to be identity. Not trying to spread ourselves too thinly across all these other categories, I think it’s really going to pay off.” — Todd McKinnon, Okta CEO, to CNBC
He also said Okta will keep doing tuck-ins. The company closed Permiso Security, valued at roughly $200 million, and will not “buy some big legacy company just to have more revenue.” Read that as a shot at the platform playbook. Palo Alto bought CyberArk. Okta is arguing that identity — especially once agents multiply — is too important to live as a module on a network or endpoint vendor’s price list.
The honest read of 2026 is not platform versus best-of-breed as a religious war. It is platform where the control plane already sits, specialist where the identity graph is the product. CrowdStrike wins because Falcon is the daily driver, and Flex is how the attach rate shows up in ARR. Palo Alto wins because NGS ARR is how the Street scores the company, and CyberArk is now inside that number. Okta wins, today, because a lot of CISOs still do not want their identity plane owned by the same vendor that sold them the firewall.
That last point is not nostalgia. Microsoft still bundles identity. Palo Alto now owns privileged access. CrowdStrike will keep attaching. The independent identity thesis only holds if Okta can keep accelerating ACV in the core — workforce and customer identity — while AI agents remain early. On the call, finance was explicit that AI is not a material FY27 revenue driver. New products at 30% of bookings is the right direction. It is not yet a new company.
Platforms are winning the budget. They have not won identity. Until they do, the specialist still has a print, and a stock, that look like a business — not a feature. The September 1 Palo Alto number will tell you how fast the platform is trying to close that gap. Okta’s next few quarters will tell you whether staying independent was a strategy or a delay.