Vendor lineage
Palo Alto Networks
Founded by a Check Point alumnus on the argument that port numbers had stopped meaning anything.
Nir Zuk founded Palo Alto Networks in 2005. He had been one of Check Point's first employees, then founded OneSecure, which NetScreen acquired in 2002 and Juniper acquired along with NetScreen in 2004. He left the year after and built the company that would overtake his first employer.
The founding observation was that traditional firewalls made decisions on ports and addresses, and applications had stopped respecting either. Everything tunnelled over 80 and 443, so a rule permitting web traffic permitted essentially anything, and the firewall's policy no longer described what was actually allowed.
The answer was App-ID: identify the application from the traffic itself rather than the port it arrived on, and write policy in those terms. That reframing is what the industry ended up calling the next-generation firewall, and every incumbent eventually shipped its own version - which is the clearest evidence the argument was correct.
It went public in 2012 and passed Check Point in firewall revenue around 2014, roughly nine years after being founded by someone who had helped build Check Point's first products.
Since then it has expanded by acquisition into endpoint, cloud security and security operations, and has been notably willing to buy categories rather than wait to build them - a pattern this timeline shows repeating in every generation of security vendor.
Founding stories
Palo Alto Networks
By Sequoia's own telling, Nir Zuk pulled into their parking lot in an old BMW wearing the license plate CHKPKLR - Check Point killer. He had earned the chip: software lead in the IDF's Unit 8200, then one of Check Point's earliest engineers on stateful inspection, co-founder of intrusion-prevention pioneer OneSecure, and CTO of NetScreen and then Juniper after the 2004 acquisition - the road told on this section's NetScreen page. Leaving in 2005, he spent nine months at a Sequoia desk honing one idea: the firewall should classify applications, users, and content, not ports. Jim Goetz and Greylock's Asheem Chandna brought in Rajiv Batra to run engineering, with Yuming Mao, Dave Stevens, and Fengmin Gong among the early builders, and in January 2006 Greylock and Sequoia funded the company with a $10 million Series A.
The timeline
- The Check Point killer incubates
March to December 2005: a desk at Sequoia, a custom license plate, and nine months narrowing the thesis - the last great gap in enterprise security is the firewall itself, still blind to what actually flows through it.
- PA-4000: the term gets coined
The first product ships: App-ID classifying traffic by application, user, and content in a single-pass parallel-processing architecture. The company itself coins the label 'next-generation firewall' - and the industry, then Gartner, adopts the category it named.
- The Gartner streak begins
Gartner lists Palo Alto Networks as a Leader in the enterprise firewall Magic Quadrant for the first time - the start of a leadership run that outlasts every incumbent it displaced.
- The fourth-largest tech IPO of the year
July 20, 2012: PANW debuts on the NYSE, raising $260 million - the 4th-largest technology IPO of 2012 (the listing moves to Nasdaq in October 2021).
- My chapterMy chapter
2013 to 2015: the focused engagement told above - next-generation firewalls carried through the Brazilian reseller and integrator channel and into the classroom, in the years between the Gartner debut and the platform era. A past engagement; not among the platforms taught today.
- Beyond the box
Cyvera becomes the Traps endpoint line; the Unit 42 threat research team gives the company a public intelligence voice; and Palo Alto co-founds the Cyber Threat Alliance with Fortinet, McAfee, and NortonLifeLock - rivals sharing threat intelligence 'for the greater good.'
- Arora and platformization
June 2018: former Google and SoftBank executive Nikesh Arora takes the CEO chair. The strategy becomes consolidation itself - Strata for network security, Prisma for cloud (Evident.io and RedLock seed Prisma Cloud), Cortex for the SOC - buying and building toward one platform.
- The largest standalone
Fiscal 2024 revenue reaches $8.03 billion, up 16 percent, serving more than 70,000 organizations in over 150 countries - including 85 of the Fortune 100 - as the largest standalone cybersecurity vendor by market capitalization. In August 2025, Nir Zuk retires as CTO, handing product and technology to Lee Klarich, on the team since 2006.
- CyberArk: the biggest deal in security history
Announced July 30, 2025 at a headline value near $25 billion and completed February 11, 2026 - $45 cash plus 2.2005 PANW shares per CyberArk share, approved by 99.8 percent of votes cast - the acquisition makes identity the platform's third pillar beside network security and the SOC. Palo Alto's own 10-Q records total purchase consideration of $21.1 billion: $2.3 billion in cash and 112 million shares.
PANW 10-Q FY2026 (accounting consideration); announcement terms per contemporary coverage.
Flagship products and solutions
- PAN-OS and App-IDThe operating system and the classification engine that started it: applications, users, and content as the policy primitives, inspected once in a single pass.
- Strata and Prisma SASEThe network security estate - hardware, virtual, and cloud-delivered NGFW, with Prisma Access and the CloudGenix SD-WAN lineage carrying the firewall into SASE.
- Prisma CloudThe cloud-native security platform assembled from Evident.io, RedLock, Twistlock and successors - code-to-runtime protection across the public clouds.
- CortexThe SOC platform: XDR detection, XSOAR automation from Demisto, and XSIAM - the AI-driven security operations bet of the platformization era.
- CyberArk identity securityThe 2026 third pillar: privileged access and identity for humans, machines, and AI agents - the largest capability Palo Alto has ever bought.
Key innovations
- The application-aware firewallApp-ID made the application, not the port, the unit of policy - the architectural break that defined the category and forced every rival to follow.
- Naming the category'Next-generation firewall' was the company's own coinage - rare proof that a startup can define the vocabulary its whole industry, and its analysts, end up using.
- PlatformizationUnder Arora, consolidation became the product: network, cloud, SOC - and now identity - sold as one platform, with the market rewarding the strategy at a scale no security pure-play had reached.
- The mafia's masterpieceThis company is the NetScreen diaspora's largest work: the same lineage that produced Fortinet and Northern Light produced, through Zuk, the security industry's biggest company - and its biggest acquisition.
Main markets
Palo Alto Networks closes this career section's security circle: the thread that starts at Check Point and runs through OneSecure, NetScreen, and Juniper on the previous pages ends here, in the largest standalone cybersecurity company in the world - one that, in 2026, absorbed CyberArk in the biggest deal the industry has seen.
My chapter was the channel years, 2013 to 2015: next-generation firewalls through Brazilian resellers and integrators, with classroom delivery alongside - a past engagement, recorded here as the final stop on the career road.
Analyst standing
- Gartner has listed Palo Alto Networks as a Leader in its firewall Magic Quadrant since 2011 - a streak spanning the entire platform era and both CEO generations.
- The scale, in primary figures: fiscal 2024 revenue of $8.03 billion; 85 of the Fortune 100 as customers; and a CyberArk purchase recorded at $21.1 billion in consideration against a ~$25 billion announced value - the largest transaction in cybersecurity history.