✦ Idira: Identity for Humans, Machines and AgentsNarrow moat

Palo Alto Networks (PANW) — the future bets

Palo Alto paid $21 billion for CyberArk on the bet that AI agents will each need an identity, and it guides the business to about $1.5 billion of revenue.

Idira is Palo Alto's bet that identity will be the centre of security once AI agents act on behalf of people. The company describes it as "our next-generation identity security platform", designed to "secure human, agentic, and machine identities"1. It says machine identities already "outnumber human identities by more than 80 to 1"2.

Idira revenue ($bn)1.26FY2026 pro forma~1.5FY2027 guidanceQ4 FY2026 earnings call, Motley Fool transcript
About 19% growth guided.

The business is CyberArk, bought for $21,061 million3. When the deal was announced Palo Alto put the identity security opportunity at $29 billion4. On a pro forma full-year basis Idira had revenue of $1.26 billion in fiscal 2026, up 21%5.

Management guides to "IDERA revenue of approximately $1.5 billion, representing pro form a growth of high teens to 20%"6, about 19% on the pro forma base7. The early cross-selling numbers are strong, with more than 200 new logos in the combined company's first months8.

The bet is that as AI agents multiply, each needs credentials, permissions and oversight, and that the company already securing a customer's network and security operations is best placed to secure its identities too. The 10-K also notes the risk: AI agents as a new class of identity present "both opportunities and risks"9.

The identity business also sits in the network platform. About $85 million of certificate lifecycle revenue from CyberArk, known as NGTS, was counted in Network & AI Security in fiscal 202610, not in Idira. The boundaries between the platforms are management's choices and may shift.

Idira is the largest single bet Palo Alto has made. Its fiscal 2027 revenue, guided at about $1.5 billion11, is the number that will show whether the price was right; a figure below $1.45 billion would mean identity is growing more slowly inside Palo Alto than it did alone.

Moat trajectory: Widening

Guided to about $1.5bn, high-teens to 20% pro forma growth.

The number that tests this moat
Reported
Idira revenue guidance, next fiscal year
About $1.5bn (FY2027)

Whether the CyberArk price was right; below $1.45bn would mean identity grows slower inside Palo Alto.

Source: Palo Alto Networks Q4 FY2026 earnings call ↗
References
  1. ReportedThe company describes it as "our next-generation identity security platform", designed to "secure human, agentic, and machine identities".
    Palo Alto Networks Form 10-K for fiscal 2026 (year ended 31 July 2026) - Item 1 business and Item 7 MD&A: platforms, customers, channels, employees, revenue by type and geography. — FY2026 · publ. 10 September 2026 · source ↗
  2. ReportedIt says machine identities already "outnumber human identities by more than 80 to 1".
    Palo Alto Networks press release on completing the acquisition of CyberArk, Form 8-K exhibit 99.1 - the Israeli R&D centre, the planned CYBR listing on the TASE and machine identities outnumbering human identities. — February 2026 · publ. 11 February 2026 · source ↗
  3. ReportedThe business is CyberArk, bought for $21,061 million.
    Palo Alto Networks Form 10-K for fiscal 2026 (year ended 31 July 2026) - acquisition notes: CyberArk, Chronosphere and other purchase accounting, and pro forma results. — FY2026 · publ. 10 September 2026 · source ↗
  4. ReportedWhen the deal was announced Palo Alto put the identity security opportunity at $29 billion.
    Palo Alto Networks presentation on the proposed acquisition of CyberArk, filed with the SEC - the $29 billion identity security opportunity. — July 2025 · publ. 30 July 2025 · source ↗
  5. ReportedOn a pro forma full-year basis Idira had revenue of $1.26 billion in fiscal 2026, up 21%.
    Palo Alto Networks fourth-quarter fiscal 2026 earnings call transcript (Motley Fool) - platform revenue, platformized cohort retention, large deals and fiscal 2027 modelling points. — Q4 FY2026 · publ. 1 September 2026 · source ↗
  6. ReportedManagement guides to "IDERA revenue of approximately $1.5 billion, representing pro form a growth of high teens to 20%", about 19% on the pro forma base.
    Palo Alto Networks fourth-quarter fiscal 2026 earnings call transcript (Motley Fool) - platform revenue, platformized cohort retention, large deals and fiscal 2027 modelling points. — Q4 FY2026 · publ. 1 September 2026 · source ↗
  7. Moat Explorer calcManagement guides to "IDERA revenue of approximately $1.5 billion, representing pro form a growth of high teens to 20%", about 19% on the pro forma base.
    Moat Explorer calculation from Palo Alto Networks' reported figures ($ millions unless stated; fiscal years end 31 July). Growth: revenue FY2026 11,480 / 9,221.5 - 1 = 24.5%; FY2025 9,221.5 / 8,027.5 - 1 = 14.9%; FY2024 8,027.5 / 6,892.7 - 1 = 16.5%; FY2023 25.3%; FY2022 29.3%; FY2021 24.9%; FY2020 17.5%; FY2024 to FY2026 11,480 / 8,027.5 - 1 = 43%; compound FY2015-FY2026 (11,480 / 928.1)^(1/11) - 1 = 25.7%, about 26%. By type FY2026: product 2,280 / 1,801.9 - 1 = 26.5%; subscription 6,239 / 4,974.4 - 1 = 25.4%; support 2,961 / 2,445.2 - 1 = 21.1%. Product FY2025 12.4%, FY2024 1,603.3 / 1,578.4 - 1 = 1.6%, FY2020 1,064.2 / 1,096.2 - 1 = -2.9%. Subscription FY2017 53.7%, FY2019 36.2%, FY2021 35.1%, FY2023 31.4%, FY2024 25.6%, FY2025 18.8%. Support FY2022 29.3%, FY2023 23.7%, FY2024 13.0%, FY2025 9.4%. Compound FY2015-FY2026: subscription (6,239 / 212.7)^(1/11) - 1 = 36.0%; support (2,961 / 222.7)^(1/11) - 1 = 26.5%; product (2,280 / 492.7)^(1/11) - 1 = 14.9%. Product outgrew subscription in FY2026 (26.5% against 25.4%), which it did not in any year FY2016-FY2025. Organic: FY2026 (11,480 - 930) / 9,221 - 1 = 14.4%; Q4 acquisition revenue 930 - 388 = 542; Q4 (3,410 - 542) / 2,536 - 1 = 13.1%, about 13%; pro forma 12,312 / 10,486 - 1 = 17.4%; FY2027 guidance 14.15 / 12.312 - 1 = 14.9%, about 15%. Margins: gross margin FY2026 8,077 / 11,480 = 70.4% (FY2025 6,769.9 / 9,221.5 = 73.4%; FY2024 5,968.3 / 8,027.5 = 74.3%); Q4 GAAP 2,304 / 3,410 = 67.6%. Product gross margin (2,280 - 568) / 2,280 = 75.1% (FY2025 (1,801.9 - 413) / 1,801.9 = 77.1%); subscription and support (9,200 - 2,835) / 9,200 = 69.2% (FY2025 (7,419.6 - 2,038) / 7,419.6 = 72.5%). Operating margin 695 / 11,480 = 6.1% (FY2025 1,242.9 / 9,221.5 = 13.5%); non-GAAP 3,356 / 11,480 = 29.2% (FY2025 2,652 / 9,221.5 = 28.8%); Q4 non-GAAP 1,011 / 3,410 = 29.6%; gap 3,356 - 695 = 2,661. R&D 2,552 / 11,480 = 22.2%; sales and marketing 3,931 / 11,480 = 34.2%; capital expenditure 440 / 11,480 = 3.8%. Tax 229 / (307 + 229 = 536) = 42.7%. Mix: product share 492.7 / 928.1 = 53.1% (FY2015), 2,280 / 11,480 = 19.9% (FY2026); subscription 212.7 / 928.1 = 22.9%, 6,239 / 11,480 = 54.3%; support 222.7 / 928.1 = 24.0%, 2,961 / 11,480 = 25.8%; one point of share 1% x 11,480 = 115. Recurring share 435.4 / 928.1 = 46.9% (FY2015), 1,393.8 / 2,273.6 = 61.3% (FY2018), 3,135.8 / 4,256.1 = 73.7% (FY2021), 6,424.2 / 8,027.5 = 80.0% (FY2024). Subscription and support per dollar of product 435.4 / 492.7 = 0.88 (FY2015), 1,393.8 / 879.8 = 1.58 (FY2018), 3,135.8 / 1,120.3 = 2.80 (FY2021), 6,424.2 / 1,603.3 = 4.01 (FY2024), 9,200 / 2,280 = 4.04 (FY2026). Hardware about 10% x 11,480 = about 1,150, about 50% of product. NGS ARR 9.10 / 11.48 = 79% of revenue. United States 7,108 / 11,480 = 61.9% (FY2016 901.8 / 1,378.5 = 65.4%). Q4 share of year 3,410 / 11,480 = 29.7%, about 30%. Prisma AIRS ARR 100 / 11,480 = under 1%. ARR and RPO: Q3 acquired ARR 1.6 / 8.1 = 20%, about a fifth; Q3 organic 8.1 - 1.6 = 6.5; Q3 acquired RPO 1.8 / 18.4 = 10%; FY2023 NGS ARR 4.2 / 1.43 = about 2.9; FY2025 growth 5.6 / 4.2 - 1 = 33%; Q1 FY2027 net new 9.54 - 9.10 = 0.44 to 9.56 - 9.10 = 0.46 billion; FY2030 target (20 / 9.1)^(1/4) - 1 = 21.8% a year; RPO / revenue 21.2 / 11.48 = 1.85; RPO due in 12 months 1.7 / 3.1 = 55% (FY2019), 2.2 / 4.3 = 51% (FY2020), 3.1 / 5.9 = 53% (FY2021), 4.1 / 8.2 = 50% (FY2022), 5.1 / 10.6 = 48% (FY2023), 5.9 / 12.7 = 46% (FY2024), 7.0 / 15.8 = 44% (FY2025), 9.3 / 21.2 = 44% (FY2026); RPO beyond 12 months 21.2 - 9.3 = 11.9 billion; Idira guidance 1.5 / 1.26 - 1 = 19%; Network and AI Security FY2025 8.35 / 1.17 = about 7.14 billion. Revenue from prior deferred 6.2 / 5.5 - 1 = 13%. Cash, deferred revenue and stock pay: free cash flow margin 4,113 / 11,480 = 35.8%; share-based compensation (cash flow) 1,774 / 11,480 = 15.5%; 1,774 / 1,295 - 1 = 37%; 1,774 / 4,113 = 43%; free cash flow after stock pay 4,113 - 1,774 = 2,339, 2,339 / 11,480 = 20.4%, 2,339 / 306,540 = 0.76%; free cash flow 4,113 / 306,540 = 1.3% and 4,113 / 27,492 = 15%. Stock pay share of revenue FY2016 392.8 / 1,378.5 = 28.5%, FY2020 658.4 / 3,408.4 = 19.3%, FY2024 1,076 / 8,027.5 = 13.4%, FY2025 1,295 / 9,221.5 = 14.0%. 10-K share-based compensation 1,815 / 1,079 - 1 = 68%. Equity plan (26.1 + 24.3) / 818 = 6%. Net cash 2,514 + 557 + 4,835 - 1,774 = 6,132; cash and investments 2,514 + 557 + 4,835 = 7,906, about 7.9 billion. Deferred revenue 1,582.1 + 1,306.6 = 2,888.7 (FY2019); 2,741.9 + 2,282.1 = 5,024.0 (FY2021); 4,674.6 + 4,621.8 = 9,296.4 (FY2023); 6,302.2 + 6,449.7 = 12,751.9 (FY2025); 7,747 + 7,009 = 14,756 (FY2026); 14,756 / 11,480 = 1.29 times; 2,888.7 / 2,899.6 = about one year (FY2019); growth 14,756 / 12,751.9 - 1 = 15.7%; excluding CyberArk (14,756 - 776) / 12,751.9 - 1 = 9.6%. Billings FY2025 9,221.5 + (12,751.9 - 11,480.5) = 10,493, 10,493 / 10,208.1 - 1 = 2.8%; FY2026 11,480 + (14,756 - 12,752) - 776 = about 12,708, 12,708 / 10,493 - 1 = 21%; February 2024 guidance cut 10.7 - 10.1 = 0.6 billion. Acquisitions: fiscal 2019 378.1 + 474.2 + 158.2 + 292.9 + 82.7 + 36.8 + 103.1 = 1,526; fiscal 2020 144.1 + 66.4 = 210.5; fiscal 2021 797.2 + 227.7 + 156.9 + 27.0 = 1,209; fiscal 2024 255.4 + 458.6 = 714; fiscal 2025 1,143 + 635 = 1,778; fiscal 2026 2,951 + 21,061 + 231 + 117 = 24,360, about 24.4 billion; all twenty-two FY2019-FY2026 including Cider 198.3 = 29,996, about 30.0 billion; FY2026 against FY2019-FY2025 24,360 / 5,636 = 4.3 times; after year end 325 + 500 = 825; AI security 635 + 231 + 117 = 983. CyberArk shares 18,488 / 112 = about 165 a share; 25,000 - 21,061 = about 3.9 billion; 112 x 374.74 = about 42.0 billion; 112 / 818 = 14%. Chronosphere 2,951 / 160 = about 18 times ARR. Goodwill and intangibles (22,010 + 7,017) / 48,460 = 60%; other assets 48,460 - 29,027 = 19,433. Headcount 21,921 - 4,223 = 17,698, 17,698 / 16,068 - 1 = 10%. Revenue per employee 928.1 / 2,637 = 0.35; 9,221.5 / 16,068 = 0.57; 11,480 / 21,921 = 0.52. Convertible loss Q1-Q3 562 - 524 = 38. Distributors: FY2019 31.8 + 22.1 + 10.7 + 10.0 = 74.6%; FY2021 33.2 + 12.2 + 10.6 = 56.0%; FY2023 25.0 + 12.8 + 11.9 = 49.7%; FY2024 21.2 + 13.2 + 13.2 + 11.4 = 59.0%; FY2025 18.8 + 14.4 + 11.0 = 44.2%; FY2026 15 + 15 = 30%; largest 34.4% (FY2020) to 15% (FY2026); receivables FY2019 29.9 + 18.9 + 14.2 = 63.0%. Valuation: market value over fiscal revenue at calendar year-end 15.13 / 0.928 = 16.3 (2015), 11.47 / 1.3785 = 8.3 (2016), 42.19 / 5.5015 = 7.7 (2022), 92.98 / 6.8927 = 13.5 (2023), 119.40 / 8.0275 = 14.9 (2024), 128.39 / 9.2215 = 13.9 (2025); 306.54 / 11.48 = 26.7; 306.54 / 0.307 = 998; 374.74 / 3.84 = 97.6; market value against Fortinet 306.54 / 130.12 = 2.4, against CrowdStrike 306.54 / 267.43 = 1.15; analyst target 395.70 / 374.74 - 1 = 6% - growth rates and margins. — FY2015-FY2027 · publ. September 2026 · source ↗
    Method: Arithmetic on figures reported in Palo Alto Networks' Forms 10-K and results releases, the Q4 FY2026 earnings call and market data; operands shown in the source line.
  8. ReportedThe early cross-selling numbers are strong, with more than 200 new logos in the combined company's first months.
    Yahoo Finance summary of the Palo Alto Networks fourth-quarter fiscal 2026 call - XSIAM, Prisma AIRS and observability ARR, platformizations, Idira deals and hardware share of revenue. — Q4 FY2026 · publ. September 2026 · source ↗
  9. ReportedThe 10-K also notes the risk: AI agents as a new class of identity present "both opportunities and risks".
    Palo Alto Networks Form 10-K for fiscal 2026 (year ended 31 July 2026) - Item 1A risk factors, Israel, supply and legal proceedings. — FY2026 · publ. 10 September 2026 · source ↗
  10. ReportedAbout $85 million of certificate lifecycle revenue from CyberArk, known as NGTS, was counted in Network & AI Security in fiscal 2026, not in Idira.
    Palo Alto Networks fourth-quarter fiscal 2026 earnings call transcript (Motley Fool) - platform revenue, platformized cohort retention, large deals and fiscal 2027 modelling points. — Q4 FY2026 · publ. 1 September 2026 · source ↗
  11. ReportedIts fiscal 2027 revenue, guided at about $1.5 billion, is the number that will show whether the price was right; a figure below $1.45 billion would mean identity is growing more slowly inside Palo Alto than it did alone.
    Palo Alto Networks fourth-quarter fiscal 2026 earnings call transcript (Motley Fool) - platform revenue, platformized cohort retention, large deals and fiscal 2027 modelling points. — Q4 FY2026 · publ. 1 September 2026 · source ↗
Sources
Generated September 26, 2026