Palo Alto Networks, Inc. incorporated as a Delaware C-corp by Nir Zuk, who previously contributed core code to the world's first stateful inspection firewall at Check Point Software Technologies. PANW would invent and commercialize the Next-Generation Firewall (NGFW) concept.
PALO ALTO NETWORKS (UK) LIMITED (Companies House 06851390) incorporated, SIC 26200 (manufacture of computers and peripheral equipment). Registered office now at 22 Bishopsgate Level 55, London EC2N 4BQ. Active, full accounts.
Kindervag, J. (2010). 'Build security into your network's DNA: The zero trust network architecture.' Forrester Research. 520+ citations. This paper defines the principle 'never trust, always verify' — later adopted as PANW's primary strategic differentiator. PANW would eventually hire Kindervag as Field CTO.
Nikesh Arora — Indian-American billionaire executive, former Chief Business Officer at Google, then President and COO at SoftBank Group (2014–2016, named heir apparent to Masayoshi Son) — assumes Chairman and CEO of Palo Alto Networks. Net worth estimated at $1.5B (Bloomberg Billionaires Index, early 2024).
PANW (UK Holding 1) Limited (12289825) and (UK Holding 2) Limited (12289823) both incorporated 2019-10-30, jurisdiction England-Wales, SIC 64209 (activities of other holding companies). Registered at 22 Bishopsgate Level 55, London. The dual-holding structure typically supports cross-border tax and operating arrangements.
PANW completes acquisition of Protect AI, an AI/ML model security scanning startup. Integration target: Prisma AIRS (AI Runtime Security). Extends Prisma Cloud CNAPP into the MLsec / AI supply chain market segment.
Palo Alto Networks announces agreement to acquire CyberArk for approximately $25 billion ($45 cash + 2.2005 PANW shares per CyberArk share). Stated rationale: establish Identity as a core platform pillar for the AI era.
CyberArk shareholders approve PANW acquisition under previously announced deal terms, clearing the path to close. Closing dependent on remaining regulatory approvals.
PANW completes $25B CyberArk acquisition. Holders receive $45 cash + 2.2005 PANW shares per CyberArk share. Per CRN reporting, the close made PANW the most valuable company on the Tel Aviv Stock Exchange. Provides PAM and identity security capabilities that PANW would consolidate into Idira three months later.
Two-track launch: (1) Idira goes live as PANW's AI-driven PAM/identity platform, extending Zero Standing Privilege to all human, machine, and agentic identities; (2) PANW announces acquisition of Portkey, integrating its AI Gateway into Prisma AIRS as a unified control plane for AI agents at scale.
Rapid7 confirms the first in-the-wild attack wave abusing forged GlobalProtect authentication cookies against multiple enterprise customers. Two waves total. Disclosure-to-exploitation gap of four days. The public PoC tushargurav28/CVE-2026-0257 would not be published until 2026-06-03, indicating zero-day or coordinated-disclosure exploitation pressure.
NATO formally announces a strategic non-commercial cybersecurity partnership with Microsoft, Palo Alto Networks, and ESET to enhance alliance resilience and promote a free, open, peaceful, and secure cyberspace.
PANW finalizes acquisition of Portkey, an AI gateway startup. Legal counsel: Lowenstein Sandler LLP. Portkey's unified control plane for AI agents is integrated into Prisma AIRS, expanding the AI security platform's coverage.
PANW reports record Q3 FY2026 results: revenue $3.0B (+31% YoY), non-GAAP EPS $0.85 vs $0.79 consensus, ARR approximately $6B. Full-year guidance raised. 40% non-GAAP operating margin target by 2028 restated. Stock hit a 52-week high above $301 on 2026-06-01, dipped 3–4% post-earnings on profit-taking, and recovered +3.44% by 2026-06-11.
First public PoC for CVE-2026-0257 — tushargurav28/CVE-2026-0257 (Python, 2 stars) — appears on GitHub. The gap between first in-the-wild exploitation (2026-05-17, two waves) and PoC publication is the principal signal that exploitation was driven by adversary capability rather than researcher disclosure.
Unit 42 (ent_024) publishes analysis of Operation FlutterBridge — a macOS malvertising campaign spreading the FlutterShell backdoor via malicious Google and YouTube advertisements. Part of Unit 42's May–June 2026 active research cadence.
PANW and Deutsche Telekom announce Sovereign Cortex with T Security in Amsterdam: AI-driven security platform with advanced data-sovereignty controls for European regulated industries (DORA, NIS2, GDPR compliance context). Deutsche Telekom DTE shares declined approximately 17% despite Q1 revenue beat amid MagentaTV subscriber slowdown, signaling some market skepticism about near-term JV economics for the partner.
Official PANW repo PaloAltoNetworks/ai-redteam-network-client-docker published 2026-06-10 — a Docker Compose wrapper for the AI Red Teaming network channel client. A formal product artifact (not research code), signaling PANW is operationalizing AI red-teaming as part of the Prisma AIRS product surface.