Palo Alto Networks Financial Model

• Total assets: Approximately $15 billion to $18 billion (pre-CyberArk acquisition).
• Key asset categories: Cash and short-term investments ($6 billion+), Goodwill and Intangible Assets ($5 billion+), and Deferred Commissions.
• Goodwill & intangibles as % of total assets: 30% to 40%, reflecting a history of aggressive bolt-on acquisitions (e.g., QRadar SaaS, Talon, Dig Security).
• Working capital profile:
• Days Sales Outstanding (DSO): 60 to 70 days
• Days Inventory Outstanding (DIO): 15 to 25 days (only applies to hardware)
• Days Payable Outstanding (DPO): 40 to 50 days
• Net working capital as % of revenue: Highly negative (approx -30% to -40%).
• Is working capital positive or negative? Negative. The company funds growth through its working capital because it collects cash upfront for multi-year subscriptions while recognising revenue over time.
• PP&E: Very light (approx 3% to 5% of assets), consisting mostly of corporate facilities and lab equipment.
• Right-of-use assets / operating leases: Material but manageable, representing global office leases.

• Capex as % of revenue: 2% to 3%
• Maintenance capex vs. growth capex: 50% maintenance (facilities, IT) and 50% growth (lab equipment, internal use software).
• Major capex programmes underway or planned: Investments in AI infrastructure and data centre footprint for proprietary threat intelligence.
• Capitalised software / development costs: Material. The company capitalises certain software development costs, which flatters operating cash flow.
• M&A pattern: Historically a serial bolt-on acquirer to build out the Prisma and Cortex platforms. Recently shifted to transformational M&A with the $25 billion CyberArk announcement.
• Typical acquisition multiple paid: 10x to 15x forward ARR for high-growth cloud security targets.

• Total debt: Approximately $2 billion to $3 billion (convertible senior notes and term loans), resulting in a net cash position historically.
• Debt/EBITDA ratio: Below 1.0x (highly conservative).
• Credit rating: Investment grade profile, though often unrated by major agencies due to reliance on convertible debt.
• Key debt instruments: Convertible senior notes with low cash interest rates.
• Maturity profile: Staggered, with near-term maturities often settled in cash for the principal and shares for the premium.
• Interest rate profile: Predominantly fixed via convertible notes.
• Covenants: Standard incurrence covenants; highly compliant.
• Share repurchase programme: Highly active. The company frequently authorises $1 billion+ programmes to offset SBC dilution.
• Dividend policy: No dividend. Capital is returned via buybacks or deployed into M&A.

• Operating cash flow conversion: 2.0x to 2.5x of GAAP Net Income.
• Free cash flow margin: 37% to 38% (Adjusted FCF / Revenue).
• Major non-cash items: Stock-based compensation ($1 billion+) and amortisation of intangibles.
• Working capital cash flow impact: Massive source of cash. The growth in deferred revenue provides a continuous float.
• Capex intensity: Very low, making the business highly cash generative.
• Cash tax rate vs. GAAP effective tax rate: Cash taxes are significantly lower than the statutory rate due to tax deductions from stock-based compensation and R&D tax credits.

1. Assumptions: Hardcoded inputs for macroeconomic drivers, segment growth rates, margin profiles, and working capital days.
2. Scenarios: Toggle for Base, Bull, and Bear cases driving the Assumptions sheet.
3. ARR & RPO Build: Tracks Next-Generation Security ARR (NGS ARR) and Remaining Performance Obligations (RPO). This is the critical revenue engine.
4. Revenue Schedule: Calculates Product Revenue and Subscription and Support Revenue based on the ARR build and hardware assumptions.
5. Income Statement: Standard P&L down to GAAP and Non-GAAP EPS. Must explicitly break out SBC and Amortisation of Intangibles.
6. Balance Sheet: Assets, Liabilities, and Equity. Must include explicit lines for Deferred Revenue (Current and Non-Current) and Deferred Commissions.
7. Cash Flow Statement: OCF, CFI, and CFF. Must start with GAAP Net Income and add back SBC and Deferred Revenue changes.
8. Working Capital Schedule: Calculates DSO, DIO, DPO, and the change in deferred revenue.
9. Depreciation, Amortisation & Capex: Waterfall schedules for PP&E and acquired intangibles.
10. Debt & Interest Schedule: Tracks convertible notes, interest expense, and cash interest paid.
11. Equity & SBC Schedule: Models share count dilution, share repurchases, and the SBC expense forecast.
12. DCF Valuation: Unlevered free cash flow build, WACC calculation, and terminal value using the perpetuity growth method.

1. Total Revenue = Product Revenue + Subscription and Support Revenue
2. Subscription and Support Revenue = Beginning Deferred Revenue + Subscription Billings - Ending Deferred Revenue
3. NGS ARR = Prior Period NGS ARR + Net New NGS ARR
4. Total RPO = Prior Period RPO + Total Billings - Total Revenue
5. Product Gross Profit = Product Revenue x Product Gross Margin (historically 70-72%)
6. Subscription Gross Profit = Subscription Revenue x Subscription Gross Margin (historically 77-79%)
7. Non-GAAP Operating Income = GAAP Operating Income + Stock-Based Compensation + Amortisation of Acquired Intangibles + Acquisition-Related Costs
8. Adjusted Free Cash Flow = Operating Cash Flow - Purchases of Property, Equipment, and Other Assets
9. Ending Deferred Revenue = Beginning Deferred Revenue + Total Billings - Total Recognised Revenue
10. Diluted Share Count = Basic Shares + Dilutive Impact of RSUs + Dilutive Impact of Convertible Notes - Shares Repurchased

The ARR & RPO Build is the foundation of the model. It feeds the Revenue Schedule, which in turn populates the top line of the Income Statement. The revenue figures drive the Working Capital Schedule (specifically Accounts Receivable and Deferred Revenue). The change in Deferred Revenue from the Working Capital Schedule is a critical input for the Cash Flow Statement (Operating Cash Flow). The Cash Flow Statement determines the ending cash balance, which flows to the Balance Sheet. The Equity & SBC Schedule feeds both the Income Statement (SBC expense) and the Cash Flow Statement (SBC add-back and share repurchases). Circularity risk exists in the Debt & Interest Schedule if interest income on cash balances is used to pay down debt, requiring an iterative calculation or a circuit breaker toggle.

• Revenues, assets, and equity balances are positive.
• Expenses and liability balances are positive in their respective schedules but subtracted in aggregation formulas (e.g., Gross Profit = Revenue - COGS).
• On the Cash Flow Statement, cash inflows are positive and cash outflows (including Capex, share repurchases, and debt repayments) are negative.
• Working capital changes: An increase in an asset is a negative cash flow; an increase in a liability is a positive cash flow.

• The company recently stopped guiding to "Billings" and shifted focus to NGS ARR and RPO. Modellers who try to build the revenue schedule solely on historical billings growth will misforecast future cash flows.
• Customers are shifting from multi-year upfront payments to annualised billing due to high interest rates. This reduces upfront cash collection and depresses operating cash flow growth relative to revenue growth.
• Stock-based compensation is massive (approx 14% of revenue). Excluding it from valuation metrics artificially inflates the company's true economic profitability.
• The model must account for deferred commissions. The company pays sales commissions upfront but amortises the expense over the life of the customer contract.
• Product revenue is cyclical and tied to hardware refresh cycles. Extrapolating historical hardware growth linearly will overstate revenue as the industry shifts to software firewalls.
• The $25 billion CyberArk acquisition will require massive pro-forma adjustments to Goodwill, Intangibles, Debt, and Share Count. The model must include a toggle for this transaction.
• Foreign currency translation can swing reported revenue, but the company bills predominantly in USD, mitigating some risk.
• The "Rule of 40" metric (Revenue Growth + Adjusted FCF Margin) is a key management target. The model should track this explicitly to ensure forecasts align with management incentives.

• Total Gross Margin should remain in the 75% to 77% range; flag if outside this band.
• Adjusted Free Cash Flow Margin should be between 37% and 39%.
• The Rule of 40 check (Revenue Growth % + Adjusted FCF Margin %) should exceed 50% based on historical performance.
• Stock-Based Compensation as a % of revenue should be between 12% and 15%.
• Balance sheet must balance: Total Assets = Total Liabilities + Equity in every period.
• NGS ARR growth should outpace Total Revenue growth, reflecting the platformisation strategy.
• Debt/EBITDA should remain below 2.0x, even after accounting for M&A financing.
• Effective tax rate should be modelled between 15% and 20%, reflecting R&D credits and SBC windfalls.

• Filings: SEC EDGAR for 10-K, 10-Q, and DEF 14A proxy statements. Palo Alto Networks Investor Relations page for supplemental financial information and earnings call transcripts.
• Key Peers: Fortinet (FTNT), CrowdStrike (CRWD), Zscaler (ZS), Check Point Software (CHKP).
• Industry Data: Gartner Magic Quadrant for Network Firewalls and Security Service Edge (SSE); IDC market share reports for cybersecurity.
• Consensus Estimates: Bloomberg or FactSet for forward revenue, EPS, and NGS ARR estimates.

• Palo Alto Networks Q2 FY25 Earnings Release and Guidance
• Palo Alto Networks FY24 10-K and Annual Report
• Palo Alto Networks DEF 14A Proxy Statement
• Briefing.com Earnings Analysis and Metric Shifts
• Substack Cybersecurity Industry Analysis
• Moomoo Financial News and CyberArk Acquisition Announcement
• 100Baggers.club Financial Ratios and SBC Benchmarks