Skip to content
Agentic 10-K

Palo Alto Networks IncPANW

AI agent disclosures in SEC filings, deployment confirmed

As of 2026-09-10, Palo Alto Networks Inc (PANW) disclosed AI-agent language in 10 SEC filings since 2025-07-30, including 10 excerpts describing its own deployment of AI agents (source: Agentic 10-K, from SEC EDGAR).

Stage
Scaling
Market cap
$279.6BYahoo Finance, 2026-10-21
First seen
2025-07-30
Latest filing
2026-09-10

Matching filings by quarter

0123Q1 '25Q22Q32Q43Q1 '261Q22Q3Q4*
Filings* Quarter in progress

What the filings cover

Functions named

Finance & accounting, IT & security ops, Legal & compliance, Operations & supply chain, Sales & marketing, Software development

Vendors and products named

Chronosphere, Console, CyberArk, Koi, Koi Security, Palo Alto Networks, Portkey, Prisma AIRS

Source

10 filings since 2025-01-01. All EDGAR filings (opens in a new tab)

Stage and function are keyword-rule labels, not the company’s words.

In its own words

Sentences copied from the filings, whitespace normalised.

“These include Cortex XSIAM ® , for AI-powered security operations replacing traditional SIEM tools; Cortex XDR ® , for the prevention, detection, and response to complex cybersecurity attacks; Cortex XSOAR ® , for security orchestration, automation, and response (“SOAR”); Cortex Xpanse ® , for ASM; and Koi Agentic Endpoint Security.”

10-KFiled 2026-09-10Confirmed deploymentSource on sec.gov (opens in a new tab)Filing index (opens in a new tab)

“Palo Alto Networks has acquired Console, an AI-native platform that enables agentic workflows across enterprise operations.”

8-KFiled 2026-09-01Confirmed deploymentSource on sec.gov (opens in a new tab)Filing index (opens in a new tab)

“Prisma AIRS™ is our comprehensive AI security platform designed to help organizations discover, assess, and protect AI agents, applications, models and data across the AI lifecycle.”

10-KFiled 2026-09-10Confirmed deploymentSource on sec.gov (opens in a new tab)Filing index (opens in a new tab)

All matching filings

10-K filed 2026-09-10 Filing index (opens in a new tab)

10-KFiled 2026-09-10

Palo Alto Networks offers Prisma AIRS platform to discover, assess and protect AI agents and applications.

“• Prisma AIRS. Prisma AIRS™ is our comprehensive AI security platform designed to help organizations discover, assess, and protect AI agents, applications, models and data across the AI lifecycle. It supports key enterprise use cases, including securing AI-assisted software development, protecting custom AI applications from development through runtime, and governing autonomous AI agents. Prisma AIRS™ brings together AI Gateway, Agent Security, AI Red Teaming, AI Runtime Security™, AI Model Security, and AI Posture Management in a unified platform. These capabilities provide visibility into AI assets and activity, assess risks before deployment, and enforce security controls during live AI interactions and agent actions.”

10-KFiled 2026-09-10

Palo Alto Networks offers Cortex XSIAM for AI-powered security operations and Koi Agentic Endpoint Security.

“• Security Operations. We deliver the next generation of security operations capabilities that unifies standalone Security Information and Event Management (“SIEM”) tools, endpoint security, security automation, cloud detection and response (“CDR”), as well as attack surface management (“ASM”) capabilities on our Cortex platform. These include Cortex XSIAM ® , for AI-powered security operations replacing traditional SIEM tools; Cortex XDR ® , for the prevention, detection, and response to complex cybersecurity attacks; Cortex XSOAR ® , for security orchestration, automation, and response (“SOAR”); Cortex Xpanse ® , for ASM; and Koi Agentic Endpoint Security. Additionally, Cortex XSIAM integrates with the Chronosphere Telemetry Pipeline to ingest and optimize massive data volumes, promoting cost-effective scaling of autonomous operations.”

10-KFiled 2026-09-10

Idira identity security platform is designed to secure human, agentic, and machine identities.

“Idira™, our next-generation identity security platform, is designed to secure human, agentic, and machine identities across the enterprise with intelligent privilege controls and continuous threat prevention. By unifying identity access management, privilege access management, and identity governance and administration, organizations can continuously discover and protect against identity risk throughout the end-to-end identity lifecycle. The platform includes:”

10-KFiled 2026-09-10

AI Agents Security discovers AI agents, assigns attributes, restricts access, and monitors activity.

“• AI Agents Security. Our solution discovers AI agents, assigns identity attributes, and restricts their access to task-specific resources. It helps monitor and record agent activity for audit purposes, allows organizations to suspend or revoke access if behavior deviates from expected norms, and governs the lifecycle of the agent and the actions taken to support compliance.”

10-KFiled 2026-09-10

Prisma AIRS is a platform to discover, assess, and protect AI agents, applications, models, and data.

“AI Security: Prisma AIRS. Prisma AIRS™ is our comprehensive AI security platform designed to help organizations discover, assess, and protect AI agents, applications, models, and data across the AI lifecycle. It supports key enterprise use cases, including securing AI-assisted software development, protecting custom AI applications from development through runtime, and governing autonomous AI agents as they access enterprise data, tools, and systems. Prisma AIRS brings together AI Gateway, Agent Security, AI Red Teaming, AI Runtime Security, AI Model Security, and AI Posture Management in a unified platform. Together, these capabilities provide visibility into AI assets and activity, identify risks before deployment, and apply security controls to live AI interactions and agent actions.”

10-KFiled 2026-09-10

AI Gateway serves as centralized control plane for enterprise AI traffic including agent interactions.

“• AI Gateway. Serves as the centralized AI security control plane through which all enterprise AI traffic flows—including LLM calls, tool invocations, agent interactions, and prompt data. AI Gateway enables organizations to govern AI agents, secure AI coding tools, and safely enable enterprise AI apps from a single control plane. The gateway provides real-time visibility into usage, tracks token consumption and cost, and inspects every interaction to prevent data leakage, prompt injection, and unsafe outputs. Before agents or coding tools access enterprise data or systems, the gateway enforces identity-aware controls and authorizes actions against defined permissions.”

8-K filed 2026-09-01 Filing index (opens in a new tab)

8-K, EX-99.1Filed 2026-09-01

Palo Alto Networks acquired Console to expand Cortex for enterprise agentic workflows.

“Palo Alto Networks has acquired Console, an AI-native platform that enables agentic workflows across enterprise operations. Console will expand the role of our Cortex platform across the broader enterprise agentic transformation.”

8-K, EX-99.1Filed 2026-09-01

Palo Alto Networks lists risks related to development, deployment or use of AI including AI agents.

“market developments; the need to maintain a broad ecosystem of third-party technology integrations; risks related to the development, deployment, or use of AI, including AI agents as a new class of identity; the impact of network or data security incidents; defects, errors, or vulnerabilities in our products and subscriptions; reliance on customers to configure and use our products securely; the quality of our technical support services; our ability to meet service-level commitments; our reliance on data center facilities operated by third-party cloud service providers; intellectual property claims and our ability to protect proprietary rights; risks associated with open source software; our reliance on third-party technology licenses; dependence on manufacturing partners and limited sources of supply; our ability to attract, retain, and motivate key personnel; risks associated with international sales and operations, including export and import controls; fluctuations in foreign currency exchange rates; risks associated with operations and employees located in Israel; costs and risks related to compliance with privacy and data protection laws; potential tax liabilities; risks related to estimates, judgments, and critical accounting policies; our ability to maintain proper and effective internal control over financial reporting; risks related to corporate responsibility matters; dilution from issuance of additional common stock; risks related to our convertible senior notes, i”

10-Q filed 2026-06-03 Filing index (opens in a new tab)

10-QFiled 2026-06-03

Palo Alto Networks acquired Koi Security to add agentic endpoint security capabilities to its platform.

“On April 14, 2026, we completed our acquisition of Koi Security Ltd. (“Koi”), a privately-held endpoint posture management company. We expect the acquisition to add agentic endpoint security capabilities to our security operations platform and enhance Prisma ® AIRS™. The total purchase consideration for the acquisition of Koi was $ 231 million, substantially all of which is comprised of cash.”

10-QFiled 2026-06-03

Palo Alto Networks offers Prisma AIRS platform providing AI Agent Security among other AI protections.

“• Prisma AIRS. Prisma AIRS™ is a comprehensive AI security platform designed to protect customers’ entire AI ecosystem by providing AI Model Security, AI Posture Management, AI Red Teaming, AI Runtime Security, and AI Agent Security.”

10-QFiled 2026-06-03

Palo Alto Networks offers Cortex platform including agentic endpoint security from its Koi acquisition.

“• Security Operations. We deliver the next generation of security operations capabilities that unifies standalone Security Information and Event Management (“SIEM”) tools, endpoint security, security automation, cloud detection and response (“CDR”), as well as attack surface management (“ASM”) capabilities on our Cortex ® platform. These include Cortex XSIAM ® , for AI-powered security operations replacing traditional SIEM tools; Cortex XDR ® , for the prevention, detection, and response to complex cybersecurity attacks; Cortex XSOAR ® , for security orchestration, automation, and response (“SOAR”); Cortex Xpanse ® , for ASM; and our recent acquisition of Koi Security Ltd. (“Koi”) for agentic endpoint security. Additionally, Cortex XSIAM integrates with the Chronosphere Telemetry Pipeline to ingest and optimize massive data volumes, promoting cost-effective scaling of autonomous operations.”

10-QFiled 2026-06-03

Idira identity security platform is designed to secure human, agentic and machine identities.

“Idira™, our next-generation identity security platform, is designed to secure human, agentic and machine identities across the enterprise with intelligent privilege controls and continuous threat prevention. By unifying identity access management, privilege access management and identity governance and administration, organizations can continuously discover and protect against identity risk throughout the end-to-end identity lifecycle. The platform includes:”

10-QFiled 2026-06-03

AI Agents Security solution discovers AI agents, assigns attributes, restricts access and monitors activity.

“• AI Agents Security. Our solution discovers AI agents, assigns identity attributes, and restricts their access to task-specific resources. It helps monitor and record agent activity for audit purposes, allows organizations to suspend or revoke access if behavior deviates from expected norms, and governs the lifecycle of the agent and the actions taken to support compliance.”

10-QFiled 2026-06-03

Launched Prisma AIRS 3.0 that discovers, assesses and protects agentic AI; acquired CyberArk, Koi and Portkey to enhance it.

“We continue to invest in innovation as we evolve and further extend the capabilities of our portfolio, as we believe that innovation and timely development of and investment in new features and products are essential to meeting the needs of our end-customers and improving our competitive position. For example, we launched Next-Generation Trust Security that unifies certificate lifecycle management and Prisma AIRS 3.0 that discovers, assesses, and protects agentic AI. On February 11, 2026, we completed the acquisition of CyberArk, forming our next-generation identity security platform. Additionally, on April 14, 2026, we completed the acquisition of Koi, to add agentic endpoint security capabilities to our security operations platform and enhance Prisma AIRS. On May 29, 2026, we completed the acquisition of Portkey, Inc., a privately-held AI Gateway company, to enhance our Prisma AIRS capabilities.”

10-Q filed 2026-02-18 Filing index (opens in a new tab)

10-QFiled 2026-02-18

Prisma AIRS is an AI security platform offering model security, posture management, red teaming, runtime security and agent security.

“• Prisma AIRS. Prisma AIRS™ is a comprehensive AI security platform that has been designed to protect customers’ entire AI ecosystem by providing AI Model Security, AI Posture Management, AI Red Teaming, AI Runtime Security, and AI Agent Security.”

8-K filed 2026-02-11 Filing index (opens in a new tab)

8-K, EX-99.1Filed 2026-02-11

Acquisition of CyberArk establishes identity security for human, machine and agentic identities.

“SANTA CLARA, Calif., February 11, 2026 —Palo Alto Networks ® (NASDAQ: PANW), the global cybersecurity leader, today announced the completion of its acquisition of CyberArk, establishing Identity Security as a core pillar of its platformization strategy. The addition of the CyberArk Identity Security Platform enables Palo Alto Networks to secure every identity across the enterprise - human, machine, and agentic.”

8-K, EX-99.1Filed 2026-02-11

Acquisition of CyberArk enables securing agentic identities and ends identity silos.

““The emerging wave of AI agents will require us to secure every identity—human, machine, and agent. This is why we moved decisively by announcing our intent to acquire CyberArk last July and am excited to have product integration begin. For our customers, this means the end of ‘identity silos.’ They can now manage privileged access across their entire hybrid cloud environment from the same company they trust for Network Security and Security Operations—to ensure they are secure in the AI era.””

8-K filed 2026-01-29 Filing index (opens in a new tab)

8-K, EX-99.1Filed 2026-01-29

Palo Alto Networks plans integration of Cortex AgentiX with Chronosphere for AI agents that find and fix issues.

“The planned integration of Palo Alto Networks Cortex ® AgentiX ™ with Chronosphere’s cloud-native observability platform will allow customers to apply AI agents that can now find and fix security and IT issues automatically — before they impact the customer or the bottom line. AI security without deep observability is blind; this acquisition delivers the essential context across models, prompts, users, and performance to move from manual guessing to autonomous remediation.”

10-Q filed 2025-11-20 Filing index (opens in a new tab)

10-QFiled 2025-11-20

Palo Alto Networks offers Prisma AIRS platform including AI Agent Security.

“• Prisma AIRS. Prisma AIRS™ is a comprehensive AI security platform that has been designed to protect customers’ entire AI ecosystem by providing AI Model Security, AI Posture Management, AI Red Teaming, AI Runtime Security, and AI Agent Security.”

8-K filed 2025-11-19 Filing index (opens in a new tab)

8-K, EX-99.2Filed 2025-11-19

Palo Alto Networks and Chronosphere plan to combine Cortex AgentiX with observability for agentic remediation.

“Combination of Chronosphere and Palo Alto Networks’ Cortex AgentiX platform will deliver real-time, agentic remediation for the world’s leading AI-native companies”

8-K, EX-99.2Filed 2025-11-19

Palo Alto Networks plans to integrate AgentiX with Chronosphere for real-time agentic remediation.

“" The foundational requirement for every modern AI data center is constant uptime and resilience, which demands real-time, always-on observability delivered at the right cost. Chronosphere was built to scale for the data demands of the AI era from day one, which is why it is chosen by leading AI-native and born-in-the-cloud organizations. And once we leverage AgentiX with Chronosphere, we will take observability from simple dashboards to real-time, agentic remediation. We are excited to not just enter this space, but to disrupt it. "”

8-K, EX-99.2Filed 2025-11-19

Palo Alto Networks and Chronosphere will combine platforms to create autonomous AI agent remediation solution.

“Combining Chronosphere’s purpose-built, optimized architecture that can handle some of the largest and most complex digital environments with Palo Alto Networks' AgentiX™ will transform the value proposition of observability from passive monitoring, to offering a ground-breaking autonomous remediation platform. The new solution will deploy AI agents on the massive amounts of data monitored by Chronosphere's platform to not only detect performance issues, but also to autonomously investigate the root cause, and close the loop with agentic remediation. Customers will be able to achieve deeper visibility across both security and observability data at petabyte scale, while simultaneously realizing significant cost efficiencies due to Chronosphere’s optimized data ingestion architecture.”

10-K filed 2025-08-29 Filing index (opens in a new tab)

10-KFiled 2025-08-29

Palo Alto Networks offers Prisma AIRS platform with AI agent security for customers.

“• Prisma AIRS. Prisma AIRS is a comprehensive AI security platform that has been designed to protect customers’ entire AI ecosystem by providing AI model scanning, posture management, red teaming, run-time security, and AI agent security.”

10-KFiled 2025-08-29

Palo Alto Networks offers Prisma AIRS platform with AI agent security for customers.

“Prisma AIRS. Prisma AIRS is a comprehensive AI security platform engineered to protect customers' entire AI ecosystem across its lifecycle. It addresses unique AI security challenges such as prompt injection, data poisoning, and sensitive data leakage, by providing deep visibility and control across AI models, data, and applications. The platform offers AI Model Scanning for vulnerabilities, Posture Management for secure configurations, and AI Red Teaming for proactive testing. Critically, Runtime Security prevents threats during live AI model execution, while AI Agent Security extends protection to autonomous AI agents.”

8-K filed 2025-07-30 Filing index (opens in a new tab)

8-K, EX-99.1Filed 2025-07-30

Palo Alto Networks acquisition of CyberArk adds identity security TAM with upside from securing AI agents.

“Strong Strategic Rationale Accelerates Platformization by adding a net new platform in Identity Security Covering all major Security TAMs by adding $29 billion1 Identity Security opportunity, with further upside from securing AI agents Accretive to Revenue Growth and Gross Margin immediately post-close. Accretive to Free Cash Flow per share in FY’28 Significant revenue synergy potential, including cross-sell into Palo Alto Networks’ 70K+ customer base 1 Source: IDC Semiannual Security Products Tracker - Forecast for Identity and Access Management, May 2025.”

8-K, EX-99.1Filed 2025-07-30

Palo Alto Networks cites rise of machine identities and AI agents as reason for identity security acquisition.

“Why Now? Multiple Major Inflections Happening in Identity Security I - The Convergence of Identity and Security II - The Need for Platformization in Identity Security III - The Rise of Machine Identities and AI Agents”

8-K, EX-99.1Filed 2025-07-30

Palo Alto Networks and CyberArk plan to create platform securing AI agents and machine identities.

“III - The Rise of Machine Identities and AI Agents Machine identities vastly outnumber human identities, expected to increase further with rise of AI agents AI agents require strict and purpose-built permission management Palo Alto Networks + CyberArk will create the leading platform to secure AI agents end-to-end, from managing access to agentic identities, to enforcing policy in runtime 80:1 Machine to Human Identity Ratio1 1Source: CyberArk, Machine Identities Machine Identities Outnumber Humans by More Than 80 to 1, Apr-25. Agents behave in non-deterministic ways, driving the need to continuously manage AI agent permissioning Billions of Machine Identities & AI Agents to be Secured”

8-K, EX-99.1Filed 2025-07-30

Palo Alto Networks projects additional TAM upside from securing machine identities and AI agents.

“Upside TAM potential from securing machine identities and AI agents 1Source: 2018, 2025, and 2028 TAM using the sources shared in the Palo Alto Networks Q4’23 Earnings Call and Medium Term Update Investor Presentation. 2Source: IDC Semiannual Security Products Tracker - Forecast for Identity and Access Management, May 2025. We Will Cover All of the Major Cybersecurity TAMs 2018 Palo Alto Networks TAM1 2025 Palo Alto Networks TAM1 2025 Identity TAM2 2028 Palo Alto Networks1 + Identity TAM2 $19B (Firewall) In last 7 years, expanded our TAM by investing in inflecting sectors. Identity had not seen such inflection. $59B (Firewall + SASE) $93B (SOC + Cloud) $29B (Identity) $130B (SOC + Cloud) $47B (Identity) $80B (Firewall + SASE) $181B $19B $257B Until 2018, our TAM was primarily related to firewalls Growth in existing categories, plus incremental TAM opportunity in Identity”

8-K, EX-99.2Filed 2025-07-30

Palo Alto Networks will deliver identity security for agentic AI agents.

“Will deliver Identity Security for agentic AI to secure the new wave of autonomous AI agents by providing foundational controls for this emerging class of privileged identities.”

8-K, EX-99.2Filed 2025-07-30

Palo Alto Networks acquires CyberArk to extend identity protection to AI agents.

“This strategic combination will mark Palo Alto Networks’ formal entry into Identity Security, establishing it as a core pillar of the company’s multi-platform strategy. Combining CyberArk’s long-standing leadership in Identity Security and Privileged Access Management (PAM) with Palo Alto Networks’ comprehensive AI-powered security platforms will extend privileged identity protection to all identity types including human, machine, and the new wave of autonomous AI agents. CyberArk is already establishing itself as an Identity Security platform, and Palo Alto Networks will help accelerate this journey towards platformization to drive better combined security outcomes for customers.”

8-K, EX-99.2Filed 2025-07-30

Palo Alto Networks and CyberArk will secure privileged credentials including for AI agents.

“Identity and security are converging, highlighting the need for a true Identity Security platform. Securing privileged credentials for both human and machine identities—including AI agents and workloads—is the most critical challenge for the modern enterprise. The integration of CyberArk’s Identity Security Platform with Palo Alto Networks will provide many critical benefits:”

8-K, EX-99.2Filed 2025-07-30

Palo Alto Networks states identity security will secure autonomous agentic AI as privileged users.

“Secures Agentic AI: As organizations adopt autonomous Agentic AI, they are deploying the ultimate privileged users. Identity Security is positioned to become the essential framework for securing this new paradigm of the enterprise workforce. Enforcing just-in-time access and least privilege principles ensures that AI agents are granted only the permissions they need, for the exact moment they need them, providing the critical oversight necessary to secure AI-driven automation at scale.”