Palo Alto Networks reported its fiscal fourth quarter on September 1 with the best growth number in its recent history — next-generation security annual recurring revenue up 63% to $9.10bn, nearly $1bn of it added in the quarter, on revenue of $3.41bn and remaining performance obligations of $21.2bn. The guidance published alongside it says most of that lift does not repeat. The company set fiscal 2027 next-generation security recurring revenue at $11.075bn to $11.175bn, growth of 22% to 23%.

The gap between the two figures is the CyberArk and Chronosphere acquisitions rolling into the year-ago base. That matters beyond one guidance line, because both of the largest platform security vendors are selling the same idea to the same budgets — consolidate a dozen point products into one subscription — and the question a buyer of either stock is answering is whether the vendor consolidates by acquiring the products or by selling more of its own.

What the acquired route costs

Palo Alto, the $311bn Santa Clara maker of hardware and software firewalls and the subscription services layered on them, run by Nikesh Arora with 21,491 employees, shows the price of the first route in two places. In the April quarter, revenue grew 31.1%, but roughly 14% of that was organic once CyberArk and Chronosphere are stripped out. And gross margin fell to 67.6% from 74.2% two quarters earlier, as purchase-accounting amortization from the deals landed in cost of revenue.

What the organic route produced

CrowdStrike, the Austin cloud security vendor whose Falcon platform sells endpoint, identity, cloud-workload and log-management modules on subscription, reported its July quarter on August 26: revenue up 25.8% to $1.471bn, a fourth consecutive quarter of acceleration, with none of it bought. Gross margin widened to 74.6% from 73.5%. Recurring revenue reached $5.84bn, up 25%, and net new recurring revenue was a record $332.8m, up 51%.

The number that answers the standing bear case — that Falcon Flex, the pooled multi-year commitment customers reallocate across modules at will, books commitments faster than it collects cash — is the cash line. Free cash flow was $377m, up 33% and 26% of revenue, growing faster than the recurring revenue it supposedly outruns. Both gross and net dollar retention rose sequentially, and 51% of subscription customers now run six or more modules, 35% seven or more.

"We are in an arms race. AI is driving more cyber attacks. AI is driving more cyber spending," co-founder and chief executive George Kurtz told investors on the August 26 call. The company raised its full-year net new recurring revenue growth outlook by 630 basis points to 34% and lifted revenue guidance to $5.99bn-$6.01bn.

The premium

CrowdStrike shares, split four-for-one effective July 2, are up roughly 110% over twelve months on a comparable basis, rose 20.5% the day after results to a record close, and have since eased about 5% from that high. The stock trades at 172.7x forward earnings and 54.3x trailing gross profit, against roughly 32x gross profit in early May. Palo Alto trades at 93.3x forward earnings and 40.8x trailing gross profit.

So the market pays CrowdStrike an 85% premium on forward earnings for growth that is slower on the headline and cleaner underneath. That premium is earned on the composition — organic, accelerating, cash-converting — and nothing in the results explains its near-doubling in four months. Palo Alto's problem is the mirror image: its guidance concedes the underlying rate, and a 22% grower carrying purchase-accounting drag is a different security company from the one the 63% print described.

Palo Alto's next quarterly report is the first in which CyberArk appears on both sides of the year-over-year line. That is when the acquired growth stops flattering the comparison and starts having to be sold.