Palo Alto Networks reported a strong quarter.
Revenue rose 31% from a year ago to roughly $3.0 billion, helped by the CyberArk and Chronosphere acquisitions. Earnings beat expectations. Annual recurring revenue topped $8 billion. Remaining performance obligations climbed above $18 billion. Management raised guidance again.
But investors were not focused on the beat.
They were focused on what happened after Anthropic launched Mythos.
That launch may end up being the most important cybersecurity event of the year.
Within weeks, Palo Alto received about 1,200 customer inquiries tied to Mythos and held roughly 800 customer meetings. Those may have been the most important numbers discussed on the earnings call.
They suggest something unusual is happening.
Customers are not responding to a new Palo Alto product cycle. They are responding to a new threat environment.
A Security Wake-Up Call
Anthropic introduced Mythos in April through Project Glasswing, a limited program for governments, critical infrastructure operators and major technology companies.
The company said the model could identify and exploit software vulnerabilities at a level that previously required elite security researchers. Glasswing participants have already identified more than 10,000 high- and critical-severity vulnerabilities.
Whether every claim around Mythos ultimately proves correct is almost beside the point.
The market reaction was immediate.
Treasury Secretary Scott Bessent and Federal Reserve Chair Jerome Powell quickly convened a meeting with major U.S. bank CEOs to discuss the implications. According to Reuters and CNBC, executives from Bank of America, Citigroup, Goldman Sachs, Morgan Stanley and Wells Fargo attended.
Software launches do not normally trigger meetings involving the Treasury Secretary and the Federal Reserve.
This one did.
That response helps explain what Palo Alto saw from customers during the quarter.
Many enterprises appear to be reassessing how prepared they are for a world where AI can dramatically speed up vulnerability discovery and exploitation.
The Platform Strategy Looks Different Today
For years, investors debated whether Palo Alto was building a platform or simply buying growth.
The company spent billions on acquisitions while arguing that customers would eventually consolidate security vendors.
That argument looks more credible today than it did a year ago.
Management said platformization remains strong. Customers continue moving from point products toward larger security platforms. Large enterprises are increasingly standardizing around fewer vendors.
The AI transition may be accelerating that trend.
As organizations deploy AI applications, autonomous agents and agentic workflows, security becomes harder to manage through disconnected tools. That favors vendors with broader platforms.
Palo Alto believes it is becoming one of those platforms.
The Architecture Is Finally in Place
The bigger story is how quickly Palo Alto assembled an AI-security stack.
Prisma AIRS provides runtime protection for AI applications and agents.
Chronosphere adds observability and monitoring.
CyberArk, now repositioned under the Idira brand, extends identity security into machine identities and AI agents.
Portkey, which closed just days before earnings, adds an AI gateway layer that monitors and governs AI traffic.
Together, those pieces form a complete architecture.
Runtime security. Identity security. Observability. AI gateway control.
Viewed individually, each acquisition looked incremental.
Viewed together, they look more deliberate.
Palo Alto is trying to build the control layer that sits between enterprises and increasingly powerful AI systems.
AI Security Is Starting to Generate Real Revenue
Until recently, AI security was mostly a future story.
This quarter suggested it is becoming a present-tense business.
Management said Prisma AIRS customers grew from roughly 30 to more than 300. The company also said AIRS could exceed $100 million in annual recurring revenue within two quarters.
Those figures matter because they show customers are moving beyond experimentation.
AI security is no longer a product category looking for demand.
Demand appears to be arriving first.
The products are following.
CyberArk Looks More Strategic Than It Did Last Year
When Palo Alto announced its $25 billion CyberArk acquisition, many investors viewed it as an expensive expansion into identity security.
The AI shift has changed that narrative.
Identity is becoming a central issue in agentic computing.
AI agents need credentials, permissions and access controls. They must be authenticated, monitored and governed.
Palo Alto cited research showing machine identities now outnumber human identities by more than 100 to one.
If that ratio continues to grow, identity security could become one of the most important layers in enterprise AI infrastructure.
That makes CyberArk look less like an adjacent acquisition and more like a foundational one.
Competition Is Intensifying
Palo Alto is not alone in pursuing this opportunity.
OpenAI recently launched Daybreak, its own cybersecurity initiative. Partners include Cloudflare, Cisco, CrowdStrike, Oracle and Zscaler.
Anthropic continues expanding Project Glasswing and plans broader access to Mythos-class capabilities.
The industry is moving quickly.
The question is no longer whether AI companies will influence cybersecurity.
They already do.
The question is who becomes the control point.
Palo Alto wants to be the platform enterprises trust to secure AI, regardless of which model provider wins.
What Investors Are Debating Now
The key debate is whether recent demand reflects a temporary shock or a lasting shift.
The bear case is straightforward.
Mythos created urgency. Customers rushed to evaluate their exposure. Spending eventually normalizes.
The bull case is more powerful.
AI permanently changes the economics of cybersecurity. Vulnerabilities are found faster. Threats evolve faster. Security spending moves higher and becomes more centralized.
This quarter provided evidence for that view.
Customer engagement surged. AIRS adoption accelerated. Platformization remained strong. Large enterprises continued consolidating vendors.
Even management's language became more confident.
Nikesh Arora argued that the "SaaSpocalypse for cyber is dead," suggesting customers increasingly want integrated platforms rather than growing collections of point products.
That is exactly the outcome Palo Alto has been positioning for.
The Bottom Line
Palo Alto delivered a strong quarter.
But the most important development was not revenue growth, margins or guidance.
It was the emergence of AI security as a board-level priority.
Mythos acted as the catalyst.
The customer response validated the demand.
Portkey and Idira completed key pieces of Palo Alto's architecture.
For years, investors debated whether Palo Alto could become the central platform for enterprise security.
The debate is changing.
Investors are now asking whether Palo Alto can become the operating system for securing AI itself.
That is a much bigger opportunity.