Palo Alto Networks waits out its rivals' paperwork. It sells hardware and software firewalls plus subscription security services to large enterprises, service providers and governments, and it wins those accounts by granting free use of its platforms until the contracts the customer already signed elsewhere expire. The economics move into deferred revenue, which means the reported revenue line of a company selling platform consolidation cannot show the thing being sold.

Ten listed security vendors rose double digits over the thirty days to 9 October, an advance read as the market finally paying for that consolidation: one supplier taking over several incumbents' jobs across a customer's estate. The contracted order books support the business half of the reading at all three of the large names that disclose them. The price half has run well past it. Each dollar of Palo Alto's trailing gross profit cost 20.2x on 3 May 2026 and 42.3x now, while the distance between its trailing and forward multiples implies gross-profit growth only in the teens.

The quarter it wins hardest is the quarter revenue looks slowest

"We believe we can build customer confidence in our platforms by approaching them well before their point product contracts expire. After we gain their contractual commitment, we have offered an extended roll out period where we can demonstrate our ability to deliver these platform benefits," chairman and chief executive Nikesh Arora said when he introduced the no-cost bridge; the company said at the time that revenue growth would run lower than expected for 12 to 18 months as a result.

It is now measurable in both directions. In fiscal 2026 Palo Alto displaced legacy vendors in nearly 100 accounts representing more than $400m of total contract value, nearly double the prior year, and annual billings rose to roughly 30% of bookings from 27%. Revenue grew 24.5% to $11.48bn. Next-generation security annual recurring revenue grew 63% to $9.10bn, remaining performance obligation grew 34% to $21.2bn, and the current portion of it also rose 34%, to $9.3bn. Hardware is down to 19.9% of revenue. "Platformization is the only viable strategy for real time defense," Arora told investors on 1 September.

Two caveats ride with those meters. Palo Alto closed its $21.1bn purchase of the identity vendor CyberArk on 11 February 2026, lifting revenue and the recurring-revenue figure at once, which is why fiscal 2027 guidance puts that meter up 22% to 23% against the 63% just reported. Gross margin fell just over three percentage points to 70.4%, and reported profit is no help at all: full-year GAAP net income fell 72.9% to $307m on acquisition amortization. Cash reads cleaner, with adjusted free cash flow up 35% to $4.41bn.

A stock split made the best twelve months look like a loss

The same machine runs a step further along at CrowdStrike, which sells endpoint, cloud, identity and log-management modules on its Falcon platform. In the quarter to 31 July it reported record net new annual recurring revenue of $333m, up 51%, against revenue growth of 26% — the fifth consecutive quarter of revenue acceleration — with ending contracted revenue of $5.84bn. The pool of pre-committed dollars customers draw down across modules, sold as Falcon Flex, more than doubled to $2.29bn, and gross retention held at 97%. Full-year net-new guidance was raised 6.3 percentage points, to about 34% growth.

"We are in an arms race. AI is driving more cyber attacks. AI is driving more cyber spending," founder and chief executive George Kurtz told investors on 26 August.

The price record disguises all of this. The board approved a four-for-one stock split on 3 June 2026, and unadjusted closes show a 46% twelve-month fall — a mechanical discontinuity, not a market move. Split-adjusted, the same twelve months are up 116%, the strongest of the four names here. The re-rating is not disguised: a dollar of trailing gross profit cost 32.1x on 3 May and 69.0x now, 62.0x on forward estimates, for a company holding roughly a fifth of the endpoint market against Microsoft Defender for Endpoint's 15% to 20%, with the standing risk that Microsoft bundles more of it.

Cloudflare bills requests, so its revenue keeps up

Cloudflare is the useful stress case. Its edge network charges by the request and by contract, and second-quarter revenue grew 36% while current remaining performance obligation grew 35% — a one-point gap, against the 2.6-times gap at Palo Alto. Customers spending over $100,000 a year reached 4,698, up 27% and 73% of revenue, with dollar-based net retention at 120%. "For the first time in human history, in Q2, more than 50% of the traffic flowing across Cloudflare's network was not human," co-founder and chief executive Matthew Prince said on 6 August. Gross margin fell to 71.8% from 74.9% as inference compute displaced software mix; no AI revenue line is broken out. On trailing gross profit it is the dearest of the three at 70.3x, 61.5x forward, against 45.4x in early May.

One print set four prices

The thirty-day move traces to a single report. On 27 August, the session after CrowdStrike's results, CrowdStrike rose 21.3%, Palo Alto 12.8%, Zscaler 11.0% and Cloudflare 8.7%; Palo Alto's own print three days later cost it 13% over two sessions before it recovered. Software stocks have reached their highest level since November 2025 as the sector's expected 2026 earnings growth climbed to 20.6% from 13.8% at the end of March, per LSEG data. Zscaler shows how little the meters mattered: the strongest thirty-day gainer of the ten at 41.5%, carrying a price-to-gross-profit of 10.1x in late July — roughly a fifth of CrowdStrike's on the same date — while guiding the slowest growth of the group at 16.6% to 17.4% contracted-revenue growth.

So the order books explain the direction and almost none of the magnitude. Palo Alto's deferral is real, documented and self-inflicted, and its wins land in the obligation line first; CrowdStrike's commitment pool converts at twice the pace revenue shows; Cloudflare's dollar arrives as it is consumed, which is why its gap is one point and its margin is falling. What none of the three supplies is five months of gross-profit growth equal to a doubled multiple. Consensus sits between 10% and 19% above trailing gross profit at each name, derived from the trailing and forward multiples themselves, and the re-rating was several times that.

The free period is the whole strategy and the whole exposure. A customer who commits today may not be billed until a competitor's contract lapses, so the prices set in August rest on revenue nobody will recognize for a year or more. One soft quarter of net new contracted revenue would not disprove the mechanism — it would simply be the only evidence anyone gets to see.