Palo Alto Networks 10-Q 2023-04-30

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

FORM 10-Q

(Mark One)

☒ QUARTERLY REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

For the quarterly period ended April 30, 2023

or

☐ TRANSITION REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

For the transition period from to

Commission File Number 001-35594

PALO ALTO NETWORKS, INC.

(Exact name of registrant as specified in its charter)

3000 Tannery Way

Santa Clara, California 95054

(Address of principal executive office, including zip code)

(408) 753-4000

(Registrant’s telephone number, including area code)

NA

(Former name, former address and former fiscal year, if changed since last report)

Securities registered pursuant to Section 12(b) of the Act:

Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes ☒ No ☐

Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit such files). Yes ☒ No ☐

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, a smaller reporting company, or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company,” and “emerging growth company” in Rule 12b-2 of the Exchange Act.

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Exchange Act). Yes ☐ No ☒

The number of shares outstanding of the registrant’s common stock as of May 12, 2023 was 305,854,824.

TABLE OF CONTENTS

- 2 -

PART I

PALO ALTO NETWORKS, INC.

CONDENSED CONSOLIDATED BALANCE SHEETS

(in millions, except per share data)

See notes to condensed consolidated financial statements.

- 3 -

Table of Contents

PALO ALTO NETWORKS, INC.

CONDENSED CONSOLIDATED STATEMENTS OF OPERATIONS

(Unaudited, in millions, except per share data)

See notes to condensed consolidated financial statements.

- 4 -

Table of Contents

PALO ALTO NETWORKS, INC.

CONDENSED CONSOLIDATED STATEMENTS OF COMPREHENSIVE INCOME (LOSS)

(Unaudited, in millions)

Showing the first 8K of 99K characters. Open the full section

The following discussion and analysis of our financial condition and results of operations should be read in conjunction with our condensed consolidated financial statements and related notes appearing elsewhere in this Quarterly Report on Form 10-Q. The following discussion and analysis contains forward-looking statements within the meaning of the Private Securities Litigation Reform Act of 1995. These statements include, among other things: our expectation of achieving and maintaining profitability under U.S. GAAP; the effects of supply chain challenges and other factors affecting the manufacture, delivery and cost of certain of our products; expectations regarding drivers of and factors affecting growth in our business; the performance advantages of our products and subscription and support offerings and the potential benefits to our customers; statements regarding trends in billings, our mix of product and subscription and support revenue, cost of revenue, gross margin, cash flows, operating expenses, including future share-based compensation expense, income taxes, investment plans and liquidity; expectations regarding our revenues, including the seasonality and cyclicality from quarter to quarter; expectations and intentions with respect to the products, technologies and businesses that we acquire and introduce; our strategy of acquiring complementary businesses and our ability to successfully acquire and integrate businesses and technologies; expected recurring revenues resulting from expected growth in our installed base and increased adoption of our products and cloud-based subscription services; the sufficiency of our existing cash, investments and available financing instruments to meet our cash needs for the foreseeable future; our intentions to sell any of our available-for-sale debt instruments; capital expenditures and share repurchases; expectations to increase customer financing activities in the future; expectations regarding the potential impacts of the coronavirus disease discovered in 2019 (“COVID-19”) and related public health measures on our business, the business of our customers, suppliers and channel partners, and the economy; and other statements regarding our future operations, financial condition and prospects, and business strategies. Forward-looking statements generally can be identified by words such as “anticipates,” “believes,” “could,” “estimates,” “expects,” “intends,” “may,” “plans,” “predicts,” “projects,” “would,” “will be,” “will continue,” “will likely result,” and similar expressions. These forward-looking statements are based on current expectations and assumptions that are subject to risks and uncertainties, which could cause our actual results to differ materially from those anticipated or implied by any forward-looking statements. Factors that could cause or contribute to such differences include, but are not limited to, those discussed in this Quarterly Report on Form 10-Q and, in particular, the risks discussed under the caption “Risk Factors” in Part II, Item 1A of this report and those discussed in other documents we file with the Securities and Exchange Commission (“SEC”). We undertake no obligation to revise or publicly release the results of any revision to these forward-looking statements, except as required by law. Given these risks and uncertainties, readers are cautioned not to place undue reliance on such forward-looking statements.

Our Management’s Discussion and Analysis of Financial Condition and Results of Operations (“MD&A”) is organized as follows:

• Overview.** A discussion of our business and overall analysis of financial and other highlights in order to provide context for the remainder of MD&A.

• Key Financial Metrics.** A summary of our GAAP and non-GAAP key financial metrics, which management monitors to evaluate our performance.

• Results of Operations.** A discussion of the nature and trends in our financial results and an analysis of our financial results comparing the three and nine months ended April 30, 2023 to the three and nine months ended April 30, 2022.

• Liquidity and Capital Resources.** An analysis of changes in our balance sheets and cash flows, and a discussion of our financial condition and our ability to meet cash needs.

• Critical Accounting Estimates. A discussion of our accounting policies that require critical estimates, assumptions, and judgments.

• Recent Accounting Pronouncements. A discussion of expected impacts of impending accounting changes on financial information to be reported in the future.

Overview

We empower enterprises, organizations, service providers, and government entities to protect themselves against today’s most sophisticated cyber threats. Our cybersecurity platforms and services help secure enterprise users, networks, clouds, and endpoints by delivering comprehensive cybersecurity backed by industry-leading artificial intelligence and automation. We are a leading provider of zero trust solutions that start with the next-generation of zero trust network access to secure remote workforces and extend into securing all users, applications and infrastructure with zero trust principles. Our security solutions are designed to increase security while reducing our customers’ total cost of ownership by improving operational efficiency and eliminating the need for siloed point products. Our company focuses on delivering value in five fundamental areas:

- 23 -

Table of Contents

Network Security:

• Our network security platform, which includes our ML-Powered Next-Generation Firewalls, available in a number of form factors, including physical, virtual, and containerized appliances, as well as a cloud-delivered service, has been a leader in the industry for eleven consecutive years. Our network security platform also includes our Cloud-Delivered Security Services, such as Advanced Threat Prevention, Advanced WildFire®, Advanced URL Filtering, DNS Security, IoT Security, GlobalProtect™, Enterprise Data Loss Prevention (“Enterprise DLP”), AIOps, and SaaS Security. Through these add-on security services, our customers are able to secure their applications, users, devices, and content across our network security platform as well as the Prisma® and Cortex® product lines. Panorama™, our network security management solution, available as hardware or virtual machine, can centrally manage our network security platform irrespective of form factor, location, or scale. Our software-defined wide-area network (“SD-WAN”) is integrated with PAN-OS, so that our end-customers can get the security features of our ML-Powered Next-Generation Firewall together with SD-WAN functionality.

Secure Access Service Edge:

• Prisma Access is our next-generation cloud-delivered security platform that provides secure network access for employees across all locations with continuous threat inspection and unified policy management for information technology. We recently introduced Zero Trust Network Access (“ZTNA”) 2.0, which addresses major shortcomings in the first-generation ZTNA products in the industry (which we refer to as ZTNA 1.0). Prisma Access delivers granular least-privileged access to all applications and data across the enterprise, while continuously verifying trust and inspecting traffic for security. Prisma Access is also combined with Prisma SD-WAN to provide a comprehensive single-vendor Secure Access Service Edge (“SASE”) offering that we call Prisma SASE, that is used to secure hybrid workforces and enable the cloud-delivered branch.

Cloud Security:

• As a comprehensive Cloud Native Application Protection Platform (“CNAPP”), Prisma Cloud removes friction and guesswork out of securing hybrid and multi-cloud environments with continuous visibility and threat prevention. With code to cloud security coverage that encompasses code, infrastructure, workloads,

Showing the first 8K of 80K characters. Open the full section

Except for the item below, our assessment of our exposures to market risk has not changed materially from the disclosure set forth in Part II, Item 7A of our Annual Report on Form 10-K for the fiscal year ended July 31, 2022.

Interest Rate Risk

The primary objectives of our investment activities are to preserve principal, provide liquidity, and maximize income without significantly increasing risk. Most of the securities we invest in are subject to interest rate risk. To minimize this risk, we maintain our portfolio of cash, cash equivalents, and investments in a variety of securities, including commercial paper, money market funds, certificates of deposit, U.S. government and agency securities, corporate debt securities, and asset-backed securities. To assess the interest rate risk, we performed a sensitivity analysis to determine the impact a change in interest rates would have on the value of the investment portfolio. Based on investment positions as of April 30, 2023, a hypothetical 100 basis point increase in interest rates across all maturities would result in a $42.3 million decline in the fair market value of the portfolio. Such losses would only be realized if we sold the investments prior to maturity. Conversely, a hypothetical 100 basis point decrease in interest rates would lead to a $42.3 million increase in the fair market value of the portfolio.

Evaluation of Disclosure Controls and Procedures

Our management, with the participation of our chief executive officer and chief financial officer, evaluated the effectiveness of our disclosure controls and procedures pursuant to Rule 13a-15 under the Securities Exchange Act of 1934, as amended (the “Exchange Act”), as of the end of the period covered by this report. Based on our evaluation, our chief executive officer and chief financial officer concluded that, as of April 30, 2023, our disclosure controls and procedures are designed at a reasonable assurance level and are effective to provide reasonable assurance that information we are required to disclose in reports that we file or submit under the Exchange Act is recorded, processed, summarized, and reported within the time periods specified in SEC rules and forms, and that such information is accumulated and communicated to our management, including our chief executive officer and chief financial officer, as appropriate, to allow timely decisions regarding required disclosure.

Changes in Internal Control over Financial Reporting

There were no changes in our internal control over financial reporting identified in connection with the evaluation required by Rule 13a-15(d) and 15d-15(d) of the Exchange Act that occurred during the fiscal quarter ended April 30, 2023 that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.

Limitations on Controls

In designing and evaluating the disclosure controls and procedures, management recognizes that any controls and procedures, no matter how well designed and operated, can provide only reasonable assurance of achieving the desired control objectives. In addition, the design of disclosure controls and procedures must reflect the fact that there are resource constraints and that management is required to apply its judgment in evaluating the benefits of possible controls and procedures relative to their costs. Further, no evaluation of controls can provide absolute assurance that misstatements due to error or fraud will not occur or that all control issues and instances of fraud, if any, within the Company have been detected.

- 36 -

Table of Contents

PART II

ITEM 1. LEGAL PROCEEDINGS

The information set forth under the “Litigation” subheading in Note 10. Commitments and Contingencies in Part I, Item 1 of this Quarterly Report on Form 10-Q is incorporated herein by reference.

- 37 -

Table of Contents

Our operations and financial results are subject to various risks and uncertainties including those described below. The risks and uncertainties described below are not the only ones we face. Additional risks and uncertainties that we are unaware of, or that we currently believe are not material, also may become important factors that affect us. If any of the following risks or others not specified below materialize, our business, financial condition, and operating results could be materially adversely affected, and the market price of our common stock could decline. In addition, the impacts of COVID-19 and any worsening of the economic environment may exacerbate the risks described below, any of which could have a material impact on us. This situation is changing rapidly, and additional impacts may arise that we are not currently aware of.

RISK FACTOR SUMMARY

Our business is subject to numerous risks and uncertainties. These risks include, but are not limited to, the following:

*•*Our business and operations have experienced growth in recent periods, and if we do not effectively manage any future growth or are unable to improve our systems, processes, and controls, our operating results could be adversely affected.

*•*Our operating results may vary significantly from period to period and be unpredictable, which could cause the market price of our common stock to decline.

*•*Our operating results may be adversely affected by unfavorable economic and market conditions and the uncertain geopolitical environment.

*•*The ongoing global COVID-19 pandemic could harm our business and results of operations.

• Our revenue growth rate in recent periods may not be indicative of our future performance.

• We have a history of losses, anticipate increasing our operating expenses in the future, and may not be able to achieve or maintain profitability or maintain or increase cash flow on a consistent basis, which could cause our business, financial condition, and operating results to suffer.

• If we are unable to sell new and additional product, subscription, and support offerings to our end-customers, our future revenue and operating results will be harmed.

• We face intense competition in our market and we may lack sufficient financial or other resources to maintain or improve our competitive position.

• A network or data security incident may allow unauthorized access to our network or data, harm our reputation, create additional liability and adversely impact our financial results.

• Reliance on shipments at the end of the quarter could cause our revenue for the applicable period to fall below expected levels.

• Seasonality may cause fluctuations in our revenue.

• If we are unable to hire, integrate, train, retain, and motivate qualified personnel and senior management, our business could suffer.

• If we are not successful in executing our strategy to increase sales of our products, subscriptions and support offerings to new and existing enterprise end-customers, our operating results may suffer.

• We rely on revenue from subscription and support offerings, and because we recognize revenue from subscription and support over the term of the relevant service period, downturns or upturns in sales of these subscription and support offerings are not immediately reflected in full in our operating results.

• Defects, errors, or vulnerabilities in our products, subscriptions, or support offerings, the failure of our products or subscriptions to block a virus or prevent a security breach or incident, misuse of our products, or risks of product liability claims could harm our reputation and adversely impact our operating results.

• False detection of applications, viruses, spyware, vulnerability exploits, data patterns, or URL categories could adversely affect our business.

• We rely on our channel partners to sell substantially all of our products, including subscriptions and support, and if these channel partners fail to perform, our ability to sell and distribute our products and subscriptions will be limited, and our operating results will be harmed.

• If we do not accurately predict, prepare for, and respond promptly to rapidly evolving technological and market developments and successfully manage product and subscription introductions and transitions to meet changing end-customer needs in the enterprise security industry, our competitive position and prospects will be harmed.

- 38 -

Table of Contents

• Our current research and development efforts may not produce successful products, subscriptions, or features that result in significant revenue, cost savings or other benefits in the near future, if at all.

• We may acquire other businesses, which could subject us to adverse claims or liabilities, require significant management attention, disrupt our business, adversely affect our operating results, may not result in the expected benefits of such acquisitions and may dilute stockholder value.

• Because we depend on manufacturing partners to build and ship our products, we are susceptible to manufacturing and logistics delays and pricing fluctuations that could prevent us from shipping customer orders on time, if at all, or on a cost-effective basis, which may result in the loss of sales and end-customers.

• Managing the supply of our products and product components is complex. Insufficient supply and inventory would result in lost sales opportunities or delayed revenue, while excess inventory would harm our gross margins.

• Because some of the key components in our products come from limited sources of supply, we are susceptible to supply shortages or supply changes, which has disrupted or delayed our scheduled product deliveries to our end-customers, increased our costs and may result in the loss of sales and end-customers.

*•*The sales prices of our products, subscriptions and support offerings may decrease, which may reduce our gross profits and adversely impact our financial results.

• We generate a significant amount of revenue from sales to distributors, resellers, and end-customers outside of the United States, and we are therefore subject to a number of risks associated with international sales and operations.

• We are exposed to fluctuations in foreign currency exchange rates, which could negatively affect our financial condition and operating results.

*•*We are exposed to the credit and liquidity risk of some of our channel partners and end-customers, and to credit exposure in weakened markets, which could result in material losses.

• A portion of our revenue is generated by sales to government entities, which are subject to a number of challenges and risks.

• Our ability to sell our products and subscriptions is dependent on the quality of our technical support services and those of our channel partners, and the failure to offer high-quality technical support services could have a material adverse effect on our end-customers’ satisfaction with our products and subscriptions, our sales, and our operating results.

• Claims by others that we infringe their intellectual property rights could harm our business.

• Our proprietary rights may be difficult to enforce or protect, which could enable others to copy or use aspects of our products or subscriptions without compensating us.

• Our use of open source software in our products and subscriptions could negatively affect our ability to sell our products and subscriptions and subject us to possible litigation.

• We license technology from third parties, and our inability to maintain those licenses could harm our business.

- 39 -

Table of Contents

Risks Related to Our Business and Our Industry

**Our business and operations have experie

Showing the first 8K of 151K characters. Open the full section

† The certifications attached as Exhibit 32.1 and 32.2 that accompany this Quarterly Report on Form 10-Q are not deemed filed with the Securities and Exchange Commission and are not to be incorporated by reference into any filing of Palo Alto Networks, Inc. under the Securities Act of 1933, as amended, or the Securities Exchange Act of 1934, as amended, whether made before or after the date of this Quarterly Report on Form 10-Q, irrespective of any general incorporation language contained in such filing.

- 64 -

Table of Contents

SIGNATURES

Pursuant to the requirements of the Securities Exchange Act of 1934, the Registrant has duly caused this report to be signed on its behalf by the undersigned, thereunto duly authorized.

Date: May 23, 2023

Date: May 23, 2023

- 65 -