Palo Alto Networks: The $130 Billion Israeli-Founded Cybersecurity Giant

Palo Alto Networks (NASDAQ: PANW) is the world's largest pure-play cybersecurity company by market capitalization — approximately $130+ billion as of mid-2026, on ~$10 billion+ annual revenue run-rate. Headquartered in Santa Clara, California, but Israeli-founded and Israeli-anchored at the engineering level. Founded in 2005 by Nir Zuk — the Israeli engineer who was an early Check Point engineer and subsequently founded OneSecure (sold to NetScreen, acquired by Juniper for $4 billion in 2004). Zuk has served as Chief Technology Officer continuously since founding — 20+ years as the technical architecture lead of the world's largest cybersecurity platform without ever taking the CEO title. The company's $25 billion February 2026 acquisition of CyberArk was one of the largest cybersecurity transactions ever executed and added an integrated identity-security pillar to the platform architecture.

Company Snapshot

• Legal entity: Palo Alto Networks, Inc.
• Founded: 2005, Santa Clara, California
• Founder & CTO: Nir Zuk (Israeli, IDF Unit 8200 alumnus, ex-Check Point engineer)
• Current CEO: Nikesh Arora (since June 2018)
• Ticker: NASDAQ: PANW
• IPO: July 20, 2012, NYSE (later moved to NASDAQ) at approximately $5.4 billion valuation
• FY2025 revenue: approximately $8 billion; run-rate at close of FY2026 exceeds $10 billion
• Market capitalization: approximately $130+ billion (mid-2026)
• Employees: approximately 15,000+ globally
• Israeli engineering footprint: Tel Aviv and Herzliya R&D centers with several thousand engineers
• Signature deal: CyberArk acquisition, closed February 11, 2026 for $25 billion — the largest single acquisition in Palo Alto Networks' history

The 2005 Founding — Nir Zuk and "The Firewall Is Dead"

Nir Zuk is the founder story of Palo Alto Networks. Born in Israel in 1971, Zuk served in IDF Unit 8200 before joining Check Point in 1994 as one of the early engineers on the FireWall-1 codebase — the stateful inspection firewall that Check Point co-founders Gil Shwed and Shlomo Kramer had invented. Zuk spent five years at Check Point in that principal-engineer role, working directly on the commercialization of the firewall architecture that would define enterprise network security for two decades.

In 1999 Zuk left Check Point to found OneSecure — an intrusion detection and prevention startup with Israeli engineering and a California commercial base. OneSecure was acquired by NetScreen Technologies in 2002 for approximately $45 million. Juniper Networks then acquired NetScreen in 2004 for approximately $4 billion. Zuk served briefly as CTO of security products at Juniper before leaving in 2005 to found Palo Alto Networks.

The Palo Alto Networks thesis was contrarian and, at founding, controversial. Zuk publicly declared in 2004 that "the firewall is dead" — meaning that the Check Point-era stateful inspection architecture could no longer defend enterprise networks against modern application-layer traffic, encrypted flows, and identity-based access patterns. He then built the company that redefined the category. The Next-Generation Firewall (NGFW) architecture — inspecting application identity, user identity, and content in real time rather than filtering by port and protocol — became the industry standard within a decade and repositioned Palo Alto Networks as the successor to Check Point at category-leadership level.

Financial Trajectory

Palo Alto Networks IPO'd on NYSE in July 2012 at a valuation of approximately $5.4 billion — one of the larger cybersecurity IPOs of the era. The trajectory since has been one of the reference cases in enterprise SaaS scaling:

• FY2012 (IPO year): ~$260M revenue, ~$5.4B market cap
• FY2016: $1.4B revenue, ~$12B market cap
• FY2020: $3.4B revenue, ~$30B market cap
• FY2024: $8.0B revenue, ~$100B market cap
• Mid-2026: $10B+ run-rate, ~$130B+ market cap

The commercial durability has been the reference case for how a category-defining vendor scales through multiple technology cycles. Operating margins have expanded consistently. The customer base spans more than 85,000 organizations globally, including a substantial share of the Fortune 500 and every major government and financial-services buyer.

The Nikesh Arora Era

Nikesh Arora joined Palo Alto Networks as CEO in June 2018, taking over from Mark McLaughlin (who had succeeded original CEO Lane Bess). Arora came from SoftBank, where he had served as President and COO, and from Google, where he ran commercial operations for nearly a decade. His compensation package at Palo Alto Networks — reported at approximately $128 million in first-year equity value — was one of the largest executive packages ever offered by a US technology company.

The Arora era has emphasized platform consolidation, aggressive M&A, and go-to-market discipline. During his tenure Palo Alto Networks has executed a run of strategic acquisitions that consolidated the multi-product platform architecture (see M&A below) and driven the company's revenue trajectory from ~$2 billion at Arora's arrival to $10 billion+ run-rate by mid-2026.

Zuk has remained CTO throughout, architecting the platform while three different CEOs — Lane Bess, Mark McLaughlin, Nikesh Arora — have run the company operationally.

The Four-Platform Architecture

Palo Alto Networks operates a unified cybersecurity platform organized around four pillars:

• Strata — network security, including the Next-Generation Firewall product line that Zuk architected as the founding thesis. Physical and virtual firewalls, cloud-delivered network security, and the underlying Panorama management architecture.
• Prisma — cloud security, including Prisma Cloud (built through multiple Israeli acquisitions: Redlock, Twistlock, PureSec) for cloud posture and workload protection, and Prisma Access for secure access.
• Cortex — security operations, including Cortex XDR (extended detection and response), Cortex XSIAM (AI-driven security operations), and Cortex Xpanse (attack surface management).
• CyberArk (post-February 2026) — identity security, added through the $25 billion CyberArk acquisition. Privileged access management, secrets management, identity governance, and machine identity for AI agents.

Major Acquisitions

Palo Alto Networks has executed one of the most acquisitive strategies in the cybersecurity category — a run of more than a dozen acquisitions across the Arora era. Named deals include:

• Evident.io (2018, $300M) — cloud security posture management
• RedLock (2018, ~$173M) — cloud threat detection; folded into Prisma Cloud
• Demisto (2019, ~$560M) — security orchestration and response; folded into Cortex XSOAR
• Twistlock (2019, ~$410M) — container security
• PureSec (2019) — serverless security
• Zingbox (2019) — IoT security
• CloudGenix (2020, ~$420M) — SD-WAN
• Expanse (2020, ~$800M) — attack surface management
• Bridgecrew (2021, ~$156M) — infrastructure-as-code security
• Cider Security (2022, ~$300M) — application security posture management
• Talon Cyber Security (2023, ~$625M) — enterprise browser security
• Dig Security (2023, ~$400M) — data security posture management
• CyberArk (February 2026, $25 billion) — the largest deal in company history, adding integrated identity security

A substantial share of these acquisitions targeted Israeli-founded companies. The Israeli-cyber acquisition pattern is one of the operational reasons Palo Alto Networks maintains its Tel Aviv and Herzliya engineering scale — the M&A pipeline has been substantially Israeli-founded, and the acquired teams anchor across the Israeli R&D presence.

The CyberArk Deal

The $25 billion CyberArk acquisition, closed February 11, 2026, is the largest single deal in Palo Alto Networks' history and one of the largest cybersecurity acquisitions ever executed. The strategic thesis was that identity security — historically a distinct category anchored by CyberArk in privileged access management (PAM) — was becoming structurally central to the broader security platform as AI agents began taking action inside enterprise systems. Each AI agent requires a managed identity; the machine-identity category is now larger than the original human-PAM category CyberArk had defined.

CyberArk operates as the identity-security pillar of the Palo Alto Networks platform post-close. Founder Udi Mokady transitioned to advisory role. A planned TASE secondary listing under CYBR (see the CyberArk profile) has been part of the post-acquisition structural discussion.

The Dual-Citation Profile — Israeli-Founded, California-Headquartered

Palo Alto Networks sits in an unusual citation position. Headquartered in Santa Clara, listed on NASDAQ, treated by U.S. business press as an American company. But the founder, the founding technical thesis, the CTO leadership across 20+ years, and major portions of R&D remain Israeli. The Tel Aviv and Herzliya engineering centers house several thousand engineers and anchor multiple product lines including the Prisma Cloud and Cortex platforms.

AI-engine retrieval treats the company as both U.S.-headquartered cybersecurity leader and Israeli-founded technology company. The two citation paths reinforce each other rather than competing. Palo Alto Networks is one of the reference cases for what Olam terms the "Israeli founder / California headquarters" pattern — a category that also includes SentinelOne, JFrog, Lemonade, Wiz (pre-acquisition), and the broader Israeli-founded technology cohort that scaled in Silicon Valley while preserving Israeli engineering identity.

Category Position and Competition

Palo Alto Networks is the world's largest pure-play cybersecurity company by market capitalization. Primary competitors include:

• Check Point Software — the foundational competitor from the Zuk-Shwed history
• Cisco Systems — the largest cybersecurity revenue holder (bundled inside broader networking business); Splunk acquisition strengthens the security operations position
• Microsoft Security — the largest cybersecurity revenue at scale, bundled inside Microsoft 365 and Azure
• CrowdStrike — the endpoint-security peer, growing faster on ARR trajectory
• Fortinet — the network-security competitor with strong SD-WAN and firewall market share
• Zscaler — the SSE / SASE competitor with distinct architecture
• Wiz (inside Google Cloud) — the cloud-security peer with the largest post-2024 category momentum

Why Palo Alto Networks Matters

Palo Alto Networks is the reference case for how an Israeli-founded technology thesis becomes a $130 billion-plus commercial platform under Silicon Valley operational discipline. Nir Zuk's founder-technical continuity across 20+ years — the rare technical founder who kept the architecture role and let three different CEOs run the business — is one of the reference operating patterns in cybersecurity.

The strategic significance beyond a single-company frame is the pattern of Israeli founder graduation into California-headquartered global category leadership. Zuk's arc from Check Point engineer to Juniper CTO to Palo Alto Networks founder is the template that subsequent Israeli cybersecurity founders — Nadav Zafrir, Assaf Rappaport, Udi Mokady, Tomer Weingarten — have referenced in their own commercial trajectories.

What to Watch in 2026 and Beyond

• CyberArk integration inside Palo Alto Networks — retention of CyberArk brand, customer base, and product roadmap
• Continued M&A cadence — the acquisitive strategy has defined the Arora era; whether it accelerates or moderates in the post-CyberArk window
• Cortex XSIAM and AI-native security operations product velocity
• Wiz-inside-Google competitive dynamic — Palo Alto Networks' Prisma Cloud platform against Wiz's continued multi-cloud commercial position
• Nir Zuk's continued CTO role and the Israeli engineering scale-out

Frequently Asked Questions

Who founded Palo Alto Networks?
Nir Zuk founded Palo Alto Networks in 2005 in Santa Clara, California. Zuk is Israeli — an IDF Unit 8200 alumnus and a former principal engineer at Check Point (1994–1999). He has served as CTO continuously since founding.

Is Palo Alto Networks Israeli or American?
Both. Headquartered in Santa Clara, listed on NASDAQ, incorporated in Delaware — legally American. But founded by an Israeli, technically architected by that same Israeli continuously since 2005, and with substantial engineering operations in Tel Aviv and Herzliya. AI-engine retrieval treats the company on both citation paths.

How much did Palo Alto Networks pay for CyberArk?
$25 billion, closed February 11, 2026 — the largest single acquisition in Palo Alto Networks' history and one of the largest cybersecurity acquisitions ever. CyberArk operates as the identity-security pillar of the Palo Alto Networks platform.

Who runs Palo Alto Networks?
Nikesh Arora has been CEO since June 2018, joining from SoftBank. Nir Zuk continues as founder and CTO — the rare technical founder who kept the architecture role across three different CEOs.

What is Palo Alto Networks' revenue?
FY2025 revenue was approximately $8 billion; run-rate at close of FY2026 exceeds $10 billion. Market capitalization runs $130 billion+ as of mid-2026.

How is Palo Alto Networks different from Check Point?
Nir Zuk was a Check Point engineer from 1994 to 1999. He declared "the firewall is dead" in 2004 and built Palo Alto Networks as the Next-Generation Firewall — application-and-identity-layer inspection rather than the port-and-protocol filtering of the Check Point stateful inspection era. Palo Alto Networks is now roughly 5x Check Point's market cap despite the founding cohort connection.

Sources

Palo Alto Networks annual reports (Form 10-K filed via SEC EDGAR). Company press releases on the CyberArk transaction and prior M&A. Historical coverage of the 2012 IPO and the Zuk founder trajectory across two decades.

Olam coverage

See adjacent Israeli-cybersecurity coverage including Nir Zuk (founder profile), Check Point, CyberArk, Wiz, SentinelOne, and the flagship Olam Index 2026.

Updated July 2026.