Skip to content
M2
← Portfolio

Equity Research · Realized Position

Palo Alto Networks

PANW · Cybersecurity

A quiet consolidation of the entire security stack onto one vendor — harvested up 25% to fund rotation.

Quan Pham · M’Squared Capital Research · August 2026

01

What the market is missing

The market read Palo Alto's platformization through the optics of deferred revenue and a financing-mix shift. Underneath the optics, bundling was collapsing multi-vendor security spend onto a single platform and reaccelerating net-new ARR — the metric that actually mattered — while free-cash margins compounded.

02

Why I owned it

I owned it as the lower-beta compounder that anchors a book. Platform bundles drove higher attach, larger contracts and best-in-class retention; AI expanded the attack surface, which is demand, while the security-operations automation was differentiated supply. High-30s free-cash margins on durable mid-teens growth is a machine, not a moment.

03

What has to happen

It needed net-new ARR to keep reaccelerating, next-gen-security ARR milestones to land, and operating margins to keep expanding.

04

What would prove me wrong

The deferred-revenue optics could have kept spooking the market longer than the fundamentals deserved, and competition from the other platform players plus a tightening of IT budgets were the real risks to the consolidation story.

05

Valuation & exit

I closed the position up roughly 25%, ahead of target, to redeploy capital into higher-torque ideas in the August rotation. Nothing broke in the thesis — I simply had better uses for the dollars.

Position

Long

Realized return

+25%

Sector

Cybersecurity

Status

Closed

Last updated

August 2026

This note is the opinion of M’Squared Capital and is provided for informational purposes only. It is not investment advice, nor an offer or solicitation to buy or sell any security. Price targets and entry and exit levels reflect the firm’s proprietary views and realized transactions; they are not forecasts of future results. The firm may hold, add to, reduce, or close any position at any time without notice. Past performance is not indicative of future results.