Security

The stock Palo Alto Networks paid CyberArk with nearly doubled, $165 at closing to $326 now

The annual report shows the real accounting price was $21.1 billion, paid in shares valued at $165.07 that now trade at $326.36. That lifts former CyberArk holders and dilutes Palo Alto shareholders straight into a Nov. 18 print that must justify $14.8 billion of goodwill.

Richard TangRichard Tangtwo-minute read
Share
Nikesh Arora, chairman and chief executive of Palo Alto Networks, on TBPN in October 2026
1 / 6Slide 1 of 6
Nikesh Arora, Palo Alto Networks' chairman and chief executive, on TBPN in October 2026. His company's CyberArk deal now sits on a Nov. 18 earnings print.

Palo Alto Networks'+2.31% — Palo Alto Networks, up 2.31 percent today CyberArk deal closed at $21.1 billion, not the $25 billion announced, and the stock it paid with has since nearly doubled, making former CyberArk holders the biggest winners of the deal 1. Identity security is the business of managing digital identities and permissions, and that is the platform Palo Alto paid for. The real price sits in Palo Alto's own annual report, and only Israel's CTech has written the numbers up 1. They matter this week because Palo Alto reports its first full CyberArk quarter on Nov. 18 2.

The mechanics are simple. Each CyberArk shareholder got $45 in cash plus 2.2005 Palo Alto shares 1. Palo Alto issued about 112 million shares, which its accounts valued at $165.07 each when the deal closed on Feb 1. 11, 2026 1.

At Tuesday's close of $326.36, the same block is worth about $36.6 billion, and the stock portion alone is worth about $718 per former CyberArk share, against roughly $408 at closing 1. Holders who sold in February left most of that on the table; holders who kept it doubled it in nine months. That is the payoff of being paid in shares near the buyer's own valuation low.

The stock CyberArk holders took has nearly doubled the deal's value

$0B$10B$20B$30B$40BAnnouncedClosing (Feb 11, 2026)Nov 10, 2026$36.6B
Data
Deal value
Announced$25B
Closing (Feb 11, 2026)$21.1B
Nov 10, 2026$36.6B
Value of the CyberArk acquisition: the $25 billion announced price, the $21.1 billion accounting consideration at the Feb 11, 2026 closing, and the same consideration at the Nov 10, 2026 close of $326.36. Source: Palo Alto Networks annual report, via CTech.1

The cost lands on Palo Alto shareholders

The acquisitions lifted the share count by about 19%, and most of the recent revenue acceleration is the acquired revenue, not the base business growing faster 3. CyberArk and Chronosphere, an observability company Palo Alto acquired in January, together brought in $930 million of revenue and a $797 million operating loss in their first partial period, while adding $14.8 billion of goodwill 1. The assumed CyberArk convertible notes alone produced a $620 million accounting loss last fiscal year 1.

Nov. 18 is the test

The Next-Generation Security ARR guide of $9.54 to $9.56 billion is where the identity platform either earns its goodwill or starts costing it 2. Palo Alto reports Nov. 18, and Zscaler−0.99% — Zscaler, down 0.99 percent today, a rival in cloud security, reports Dec 2. 2 as a second read on the same spending line 2. The stock is down about 22% in a month, so each week of drift moves this paper value by billions 1. Watch the ARR line, not the headline beat: it is the only number that prices what Palo Alto actually bought.

What you can do with this: when a deal is paid in stock, read the buyer's annual report, not the announcement. The announced price is a marketing figure; the filed consideration, the share count and the goodwill are the real ones, and they are what the next quarter has to justify.

Get Security by email, free

The breaches, flaws and security vendors AI is putting to the test. In our daily email, every weekday.

Loading PANW

Reader comments

0 comments

    More in Security

    All in this topic →

    Security

    Thai Airways says 60,529 passenger records exposed via Amadeus; Finnair 116,000; Amadeus gives no total

    Airlines are reissuing booking references and answering regulators while Madrid-listed Amadeus, the data controller, has put no number on the exposure. Its third-quarter revenue of €1.74 billion landed on November 6 with the incident unquantified.

    Security

    Gen Digital's antivirus core grew 5% while the 12% headline rode debt-funded MoneyLion

    The beat and the raise sit on MoneyLion, the debt-funded fintech that grows twice as fast as the Norton and LifeLock core at half its margin; with $8.19 billion of debt, the stock's story is the balance sheet, not the bookings.

    Security

    Harvey, told of a second, more serious Fireworks hack, has yet to say whether law firm data was exposed

    Fireworks' Monday bulletin put customer datasets and unfinished model weights in the exposed set, and The Information reported Harvey was among the customers told. Harvey's $15.5 billion private mark now rests on custody it has not publicly accounted for.

    Security

    Seven F5 officers sold $7.2 million of stock, four sales at $324.06, below F5's $422 buyback price

    Seven F5 officers sold 21,848 shares for about $7.2 million on November 3 and 4, every sale under a Rule 10b5-1 plan adopted before the October 27 report that broke the stock. Four prints cleared at an identical $324.06, below every anchor from the 50-day average to F5's own $422 buyback price.

    Security

    OpenAI's $1,279 kernel exploit model ships, and Palo Alto Networks resells it by subscription

    GPT-6 Cyber, rated Critical under OpenAI's own Preparedness Framework, turned $1.2 million of API credits into 948 working Linux kernel exploits. Palo Alto Networks and SpecterOps resell the same capability by subscription, and the biggest cybersecurity stocks fell 7.5 to 9.7 percent today in a broader AI selloff.

    Security

    AI agents wrote working exploits in under 4 hours and compromised 395 organizations in 48 countries

    One operator's AI agents needed under four hours to reach a first real victim and compromised 395 organizations across 48 countries. A 23-year dataset from Andreessen Horowitz shows attack time has gone negative while fix times lengthen, and the bill is landing on corporate IT budgets.

    Get the newsletter

    The day's AI and market news, in your inbox every weekday.