Enterprise cybersecurity platform with next-generation firewall and cloud security solutions
Palo Alto Networks is a cybersecurity company providing network security, cloud security, and endpoint protection solutions.
AI Panel Score
6 AI reviews
Reviewed
Facts checked against paloaltonetworks.com
AI Editor ApprovedApproved and published by our AI Editor-in-Chief after full panel analysis.Palo Alto Networks is an enterprise cybersecurity company providing network security, cloud security, and endpoint protection through a platform spanning next-generation firewalls, Cortex XDR, Prisma Access for SASE, and Prisma Cloud for cloud-native application protection. It is aimed at enterprise security teams and CISOs who want one vendor across network, endpoint, and cloud. Pricing is largely quote-based: Cortex XDR Pro is listed at $6.75 per month, while firewall, Prisma Access, and Prisma Cloud pricing requires a sales call; a free trial is available. Key capabilities include Secure AI Workspace, evasive threat protection, AI and agent controls, and a secure browser built on the 2023 Talon acquisition, with Cortex XDR correlating endpoint, network, and cloud signals into a single investigation view. TopReviewed's six-seat AI review panel scored it 8.2/10, praising reduced dashboard sprawl from platform consolidation while noting nearly everything beyond Cortex XDR Pro is contact-sales only.
Palo Alto Networks is a cybersecurity company that provides a platform of network security, cloud security, and endpoint protection solutions. The company's core offering includes next-generation firewalls that use application-level inspection and threat prevention capabilities to secure network traffic.
The platform targets enterprise customers, government agencies, and service providers who need comprehensive security solutions for their IT infrastructure. Key capabilities include network segmentation, threat detection and response, cloud workload protection, and security orchestration and automated response (SOAR) tools.
Palo Alto Networks operates in the enterprise cybersecurity market, competing with companies like Fortinet, Check Point, and Cisco in the network security space. The company offers both hardware appliances and cloud-based security services, allowing organizations to implement security controls across on-premises, cloud, and hybrid environments.
The platform includes Panorama for centralized management, Cortex for AI-driven security operations and cloud security (Cortex Cloud), Prisma for SASE and AI security (Prisma AIRS), and Idira for identity security, launched in May 2026 after the February 2026 acquisition of CyberArk. These solutions work together to provide visibility and control across an organization's entire digital infrastructure, from traditional networks to modern cloud applications.
The next generation of Cortex XSOAR: builds, deploys and governs AI agents that plan and run SOC workflows, with 1,100+ prebuilt integrations and native MCP support.
An autonomous SOC platform that centralizes security data and automates incident response.
AI security platform that discovers, assesses and protects AI agents, apps, models and data, with AI Gateway, Agent Security, AI Red Teaming, AI Runtime Security, AI Model Security and AI Posture Management.
AI-powered management and operations console for network security.
Delivers security orchestration, automation, and response for SOC workflows.
ML-powered physical and virtual firewalls for network security.
The operating system that powers the company's next-generation firewalls.
Provides centralized management for firewalls.
An IPS solution that blocks zero-day threats inline.
A cloud-based malware prevention engine that analyzes and blocks threats.
Part of Cortex Cloud: stops active cloud attacks in real time, alongside AI-driven guardrails that prevent risks before production.
Provides extended detection and response across endpoints, network, and cloud.
Performs active attack surface management and exposure discovery, including unmanaged cloud assets, third-party/supply chain risk, and remote worker exposure.
Uses AI-powered endpoint security to stop advanced attacks.
Identity security platform that discovers, controls and governs human, machine and agentic identities, launched in May 2026 after the CyberArk acquisition.
Secures all connected devices from IT to IoT and OT environments.
Offers 24/7 expert-led threat hunting services to uncover hidden threats.
Palo Alto Networks sells its Next-Generation Firewalls (hardware and VM-series), Prisma Cloud, Cortex XDR/XSIAM, and other cybersecurity products through a sales-led, quote-based model. Pricing varies significantly based on appliance model/throughput, number of users or workloads, subscription bundles (Threat Prevention, WildFire, URL Filtering, GlobalProtect, SD-WAN, DNS Security), contract length, and deployment type (on-prem, virtual, or cloud-delivered). Apart from Cloud NGFW for AWS, whose pay-as-you-go rates are published in the vendor's docs, no list pricing is published; prospective buyers must request a quote from Palo Alto Networks or an authorized reseller/partner.
Managed cloud firewall billed through AWS Marketplace: $1.50 an hour per NGFW resource plus $0.50 an hour for each additional availability zone, and $0.065 per GB for the first 15 TB of traffic a month ($0.045 to 30 TB, $0.030 above). Security add-ons such as Advanced Threat Prevention and Advanced WildFire add their own hourly and per-GB charges.
A public security platform doing $11.5 billion in revenue, where the only real risk is lock-in.
“Twenty years in market and an $11.5 billion public company removes the vendor question a board usually stalls on. The catch is that platform consolidation here is sticky by design.”
Twenty years in market and a public company doing $11.5 billion in FY2026 revenue, up 24%. The vendor-viability question is closed before it opens — no board stalls on whether Palo Alto Networks survives three years.
The real call is whether platform consolidation advances you or just rebadges tools you already run. Cortex XDR pulls threat intelligence from Unit 42, while WildFire handles zero-day analysis across the stack. CrowdStrike pushes hard on endpoint, but Palo Alto bundles network, cloud, and SOC under Panorama and Prisma.
The catch is lock-in by design. The $25B CyberArk acquisition that closed in early 2026 makes the platform stickier, and quote-only pricing on everything except Cloud NGFW for AWS means you cannot model most spend before sales engages. Run a 90-day pilot on one platform pillar, confirm the consolidation savings, then commit.
Peers run Palo Alto widely, and the CyberArk acquisition extends its lead into identity security for AI agents.
Standardizing on Palo Alto Networks is a defensible board-level choice that peers will not second-guess.
Mostly quote-only pricing and platform breadth mean payback is real but slower to demonstrate than a single-product tool.
Strong fit for enterprises consolidating onto one platform, less so for buyers with point tools already covering the basics.
A public company with $11.5 billion in FY2026 revenue and 20 years in market is as durable as security vendors get.
Enterprises who want to consolidate security vendors onto one platform.
Small teams who need transparent per-seat pricing before talking to sales.
Palo Alto Networks sells a consolidation thesis, and Cortex XSIAM is the wedge that decides your three-year stack.
“Palo Alto Networks is a category-leading security platform built around vendor consolidation. The craft is best-in-class, but adopting it means accepting deep platform gravity across your SOC.”
A CISO scoping a security stack through 2029 should weigh one word before any feature: platformization. Palo Alto Networks, founded in 2005 by Nir Zuk, no longer sells point products. It sells a consolidation thesis, and Cortex XSIAM is the wedge.
The craft ceiling is real. App-ID turns the next-generation firewall into application-aware enforcement rather than port filtering, Prisma Cloud carries CSPM and CWPP under one CNAPP, and the Prisma AIRS platform governs AI agents directly. Unit 42 threat intelligence feeds all of it, which is depth Fortinet struggles to match end to end.
But the catch is gravity. Once XSIAM owns your SOC and the $25B CyberArk deal, closed in February 2026, pulls in identity, swapping any layer means unwinding the platform. CrowdStrike covers endpoint alone for less ceremony.
A clear category leader against Fortinet, Check Point, and Cisco with FY2026 revenue of $11.5B.
The platform shape matches how enterprise CISOs run network, cloud, and SOC operations together.
Panorama centralizes management and Cortex integrates NGFW, cloud, and endpoint telemetry cleanly.
Platformization across XSIAM and the $25B CyberArk deal creates real lock-in over three years.
App-ID, Prisma Cloud CNAPP, and Unit 42 intelligence represent best-in-class enterprise security craft.
Enterprise CISOs who want to consolidate network, cloud, and SOC tooling under one vendor.
Lean security teams who prefer best-of-breed point tools over a single platform.
At $1.50 an hour, Cloud NGFW for AWS gives a mostly quoted security budget one hard anchor.
“Cloud NGFW for AWS publishes $1.50 an hour per firewall, per-GB traffic rates and a public estimator. Cortex XDR, the PA-Series and Prisma route to demos and quotes, while Idira's terms show where identity adds license cost.”
This stack gives my cost model one hard input. Cloud NGFW for AWS bills $1.50 an hour per firewall, plus $0.065 per GB up to 15 TB a month. One firewall for a year: $13,140. Add 10,000 GB a month: $7,800. Advanced WildFire stacks $0.45 an hour and $0.0195 per GB: $6,282 more. Year one: $27,222. A public estimator checks the math.
I couldn't find list prices for Cortex XDR, XSIAM, the PA-Series or Prisma. Idira maps identity cost instead. Modern PAM gets Zero Standing Privilege at no additional cost. Traditional PAM buys licenses for it. Agentic and Machine protections cost extra on both. Know your tier first.
The catch is scale. One firewall's rate card won't price a SOC. Remaining performance obligations hit $21.2B against $11.48B of FY2026 revenue. Expect a multi-year ask. Bring a Check Point quote.
Cloud NGFW charges land on the AWS Marketplace invoice, and Idira states which CyberArk upgrades need new licenses.
Cloud NGFW runs pay-as-you-go or on one-, two- or three-year Software NGFW Credits, with overages billed at pay-as-you-go rates.
Cloud NGFW for AWS publishes hourly and per-GB rates plus an estimator, but Cortex XDR, the PA-Series and Prisma route to a quote.
Cortex XDR publishes outcome figures, like an 80% MTTR cut at Glacier Bancorp, to benchmark a pilot against.
One Cloud NGFW firewall with 10,000 GB a month and Advanced WildFire models to $27,222 a year; the quoted lines stay open.
AWS-heavy security teams who want one firewall line priced before sales engages.
Buyers who need list prices for endpoint and SOC tools up front.
Palo Alto Networks runs a deep security stack, but living in it means living with sales-led pricing.
“Cortex XDR and Panorama give a SOC analyst real cross-domain visibility from one console. But Cortex XDR and the PA-Series firewalls are contact-sales, so scoping a pilot needs a quote first.”
A SOC analyst judges a platform by the Tuesday alert queue, not the keynote. Cortex XDR Pro pulls endpoint, network, and cloud signals into one investigation timeline, so a flagged process and the firewall log behind it sit on the same screen. Behavioral threat protection cuts the false-positive noise that drowns a small team. WildFire detonates suspicious files in a sandbox instead of leaving you to guess.
Workflow fit is the real win. Panorama centralizes policy across PA-Series boxes and VM-Series instances, so you push one rule rather than touching twenty devices. App-ID classifies traffic by application, not just port. Unit 42 threat intel feeds detections without a separate subscription console.
The catch is pricing opacity. Cortex XDR, the PA-Series firewalls and Prisma are all quote-driven, with no published price; only Cloud NGFW for AWS lists pay-as-you-go rates. The breadth also means real onboarding time.
Cortex XDR's unified investigation timeline holds up once the demo glow fades and real alerts pile up.
Docs and TechDocs are engineer-oriented, though the sheer surface area can bury specifics.
Behavioral protection trims false positives, but the platform's breadth adds configuration overhead.
App-ID, custom detections, and Unit 42 intel scale from baseline rules to advanced SOC work.
Panorama and App-ID fit how security teams already manage policy and classify traffic.
Security engineers who run network and endpoint defense from one platform.
Small teams who need transparent pricing before committing.
Palo Alto Networks is a deep, capable platform that you do not casually try on a Tuesday
“Palo Alto Networks bundles firewalls, endpoint, and cloud security into one sprawling stack. It is genuinely powerful, but nearly every door is a sales call.”
Most security vendors sell you one thing. Palo Alto Networks sells you the whole building. Next-generation firewalls, Cortex XDR for endpoints, Prisma Cloud for workloads, all stitched together so a SOC analyst sees one picture instead of six dashboards. The newer Prisma Browser, built on the Talon acquisition from 2023, even tries to make the browser itself the safe place to work. For a stretched security team, that consolidation is the real selling point.
The daily feel rewards depth. Three months in, the unified telemetry pays off and the tab-switching stops. CrowdStrike is the sharper name on endpoint alone, but it does not cover this much ground.
The catch is the front door. Cortex XDR and most of the stack are contact-sales with no published price, so day one is a demo, not a trial. Cloud NGFW for AWS is the rare exception, with a free trial and published pay-as-you-go rates. This is not a tool you sit with before procurement shows up.
Unified telemetry across Cortex, Prisma, and NGFW means analysts work from one picture, not six dashboards.
Breadth across firewall, endpoint, and cloud is steep at first but the unified view pays off by month three.
Mobile is not the use case for enterprise security infrastructure, so this scores neutral.
Cortex XDR starts with a demo request, not a trial; only a few products, like Cloud NGFW for AWS, offer a free trial.
A public company since 2012 with enterprise and government deployments signals a solid, durable platform.
Enterprise security teams who want one vendor across network, endpoint, and cloud
Small teams who want to try a tool before talking to sales
A public security giant with a real moat, but the lock-in is the price of admission.
“Palo Alto Networks is a 2005-founded, publicly traded vendor that reported $11.5 billion in FY2026 revenue. The catch is a sprawling, sales-led platform that gets expensive and sticky fast.”
No funding question here. This company went public in 2012 and reported $11.5 billion in FY2026 revenue. The graveyard worry is not survival.
The worry is sprawl and price. WildFire sandboxing and App-ID traffic control are genuinely strong, but outside Cloud NGFW for AWS, which lists an hourly Advanced WildFire add-on, none of it has a public price. Cortex XDR and the NGFW appliances are both quote-only, so the true cost surfaces only in a sales call. The $25 billion CyberArk acquisition, announced July 2025, signals an appetite to keep absorbing the category. Against Fortinet, the differentiation is breadth, not value.
Exit portability is the yellow flag. Lean on Panorama and Prisma Cloud and you have wired security policy into one vendor's console. Migrating off Fortinet or Cisco is painful; migrating off this is worse.
Platform breadth across NGFW, Cortex, and Prisma is a real gap versus point vendors, though not a price advantage.
Panorama and Prisma Cloud wire policy into one console, making migration off harder than off Fortinet.
Public listing, $11.5 billion FY2026 revenue, and the $25 billion CyberArk acquisition signal a durable three-year bet.
The "leader in cybersecurity" framing is aspirational but backed by real public revenue and product depth.
A 2005-founded public company that reported $11.5 billion in FY2026 revenue fits the survivor pattern, not the graveyard.
Large enterprises who want one consolidated security vendor.
Small teams who need predictable, transparent pricing.
Common questions answered by our AI research team
Its platforms cover AI-powered network security (next-generation firewalls, Prisma SASE and Prisma AIRS), AI-driven security operations (Cortex XSIAM and XDR), real-time cloud security (Cortex Cloud) and identity security (Idira), backed by Unit 42 threat intelligence.
Yes. Its Secure AI Coding solution, built on Prisma AIRS, finds coding agents, models, plugins and MCP servers on developer endpoints, scans AI files and tools for malicious code, and enforces policies on AI access, usage and spend.
Yes, governing AI agents is a core capability of its Secure AI Coding offering, alongside protecting data and controlling AI costs.
Yes, controlling AI costs is one of the stated capabilities of Palo Alto Networks' Secure AI Coding solution.
Palo Alto Networks' cybersecurity platform serves enterprises and organizations seeking to protect their networks, applications, and data from cyber threats.
Who Palo Alto Networks competes with, and how each one differs
Cloud-native application protection platform (CNAPP) built for multi-cloud environments, competing directly with Palo Alto's Prisma Cloud/AI security offerings but with an agentless-first scanning approach and cloud-only focus versus Palo Alto's broader network-plus-cloud portfolio.
Endpoint and cloud workload protection vendor built on a lightweight agent and cloud-native Falcon platform, overlapping with Palo Alto's Cortex XDR and AI security products but historically weaker in network firewall hardware.
AI-driven endpoint detection and response (EDR/XDR) vendor targeting mid-market and enterprise customers, competing with Palo Alto's Cortex XDR with a more autonomous, agent-based remediation model and simpler licensing tiers.
UK-based AI security vendor using unsupervised machine learning for anomaly detection across network and cloud traffic, overlapping with Palo Alto's threat intelligence and AI security products but positioned as a self-learning 'immune system' rather than signature/policy-based network security.
Network detection and response (NDR) specialist using AI to detect attacker behavior in hybrid cloud and on-prem networks, a narrower but direct overlap with Palo Alto's network security and threat detection capabilities.
Network security vendor selling integrated firewall appliances and SD-WAN under the FortiGate/Security Fabric architecture, competing head-to-head with Palo Alto's core next-gen firewall business at a generally lower price point.
Company
Palo Alto NetworksFounded
2005Pricing
Usage-basedFree Trial
Available
Palo Alto Networks is a Santa Clara-based cybersecurity company offering network security, cloud security, and threat intelligence products.
