Palo Alto Networks, Inc.

By FY2021 (ended July 2021), Palo Alto Networks generated $4.3B in revenue with $5.9B in remaining performance obligations (RPO) and $5.5B in billings. The company had expanded from next-generation firewalls into cloud security (Prisma Cloud) and security operations (Cortex) through over $3B in acquisitions between FY2018-FY2021. However, acquired products operated as separate SKUs with independent sales motions. CISOs faced tool sprawl — the average enterprise ran 60-80 separate security tools — and demanded vendor consolidation. Palo Alto's opportunity was to convert its broad but fragmented product portfolio into an integrated platform that customers would consolidate onto.

CEO Nikesh Arora launched a deliberate platformization strategy: (1) Introduced free 30-90 day trial offers for additional platform modules, letting firewall customers trial Prisma Cloud or Cortex at no cost before converting to paid subscriptions, reducing adoption friction. (2) Structured multi-module bundled platformization deals where customers committed to 3+ modules at a discount, typically on 3-5 year terms. (3) Launched Cortex XSIAM (October 2022), an AI-driven security operations platform to replace legacy SIEM, priced at $3-5M+ for large enterprises. XSIAM achieved approximately $500M in bookings in FY2024 alone, more than doubling FY2023 bookings, with over 30 customers exceeding $1M in XSIAM ARR. (4) Accepted near-term billings growth deceleration — FY2024 billings grew only 10-11% to approximately $10.1-10.2B versus 23% growth in FY2023 ($9.2B) — to prioritize long-term platform adoption through extended free trials and ramp-in deals. (5) Continued targeted acquisitions (Talon Security, Dig Security in 2023) to fill platform gaps in browser security and data security posture management.

Next-generation security (NGS) ARR reached $4.2B in FY2024, up 43% YoY. By the end of Q4 FY2024, well over 1,000 of Palo Alto's top 5,000 customers were platformization customers (up from approximately 500 in FY2022), with net retention among platformized customers at 120% and near-zero churn. The broader Cortex business passed $900M in ARR. RPO grew from $5.9B (FY2021) to $12.7B (FY2024), a 115% increase. Revenue grew from $4.3B to $8.0B (86% increase, 16% in FY2024). Non-GAAP operating margin reached 27.3% in FY2024. The deliberate billings deceleration to 10-11% (FY2024) caused a 25%+ share price decline in February 2024, but recovered as investors recognized the long-term RPO growth and platformization momentum. Timeframe: FY2021-FY2024 (3-year platform transition, ongoing).

CISO demand for vendor consolidation created genuine buyer pull — customers wanted fewer security vendors, giving Palo Alto a natural cross-sell motion. The existing firewall installed base of 80,000+ customers provided a captive cross-sell population for cloud and security operations products. The free trial model converted competitive evaluations into expand-within-vendor decisions. CEO Arora's willingness to accept short-term billings deceleration prevented the sales team from optimizing quarterly billings over long-term platform adoption — a structural advantage over competitors who managed to quarterly metrics.