Topic starter
04/06/2026 2:58 pm
TL;DR: 31% revenue growth to $3.0 billion and 60% growth in Next-Generation Security ARR to $8.1 billion mark Palo Alto Networks’ fiscal Q3 2026 results, with identity security now part of a broader platformization and acquisition strategy, according to Palo Alto Networks. The governance question is no longer whether identity belongs in the security stack, but how practitioners preserve control clarity as capabilities expand across NHI, secrets, and agentic use cases.
Editorial analysis by NHI Mgmt Group, based on content published by Palo Alto Networks: “Palo Alto Networks Reports Fiscal Third Quarter 2026 Financial Results”.
By the numbers:
- Total revenue for the fiscal third quarter 2026 grew 31% year over year to $3.0 billion.
- Next-Generation Security ARR for the fiscal third quarter 2026 grew 60% year over year to $8.1 billion.
- Remaining performance obligation grew 36% year over year to $18.4 billion.
Key questions
Q: What breaks when identity security tools are folded into a larger platform?
A: What breaks first is usually governance visibility.
Q: Why does consolidation make IAM governance harder, not easier?
A: Consolidation often reduces product count but increases control inheritance.
Q: How should teams separate NHI, PAM, and agentic access governance?
A: By policy intent and lifecycle, not by where the controls sit in the stack.
Practitioner guidance
- Define separate control boundaries for each identity type Document which processes govern human IAM, NHI lifecycle, privileged access, and agentic access so that one platform does not collapse distinct responsibilities into a single workflow.
- Re-map ownership after every acquisition or platform integration Record where inventory, approval, review, and revocation authority now lives for each identity domain, then reconcile overlaps before migration work begins.
- Separate secrets governance from access governance Treat secret issuance, credential rotation, and entitlement policy as related but different controls, especially where the same platform now covers secrets and privileged access.
Bottom line: Identity security consolidation changes the governance question from product selection to control ownership.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
04/06/2026 3:09 pm
Identity security consolidation is a governance problem before it is a tooling problem. When identity controls are packaged inside a larger platform strategy, the hardest issue is preserving clear ownership of issuance, review, revocation, and monitoring. The organisation may buy simplification, but it also inherits a more complex accountability model across product lines and control domains. Practitioners should treat consolidation as a control-boundary exercise, not a procurement convenience.
A question worth separating out:
Q: What should security leaders prioritise before selecting an identity platform?
A: They should prioritise programme clarity, executive alignment, and a documented baseline of what identity controls already exist. That gives the team a rational way to compare options and prevents procurement from becoming the first governance decision.
👉 Read our full editorial: Identity security consolidation is reshaping enterprise governance