PaloCrwdHeader

CrowdStrike and Palo Alto earnings: the next AI stress test

Equities 5 minutes to read
Ruben Dalfovo
Ruben Dalfovo

Investment Strategist

Key takeaways

  • CrowdStrike and Palo Alto enter earnings with high expectations and strong recent share-price momentum.

  • Artificial intelligence is raising both cyber risks and demand for better digital defences.

  • Key areas to monitor include customer growth, contract demand, margins and how each company describes the role of artificial intelligence in cybersecurity.


Cybersecurity used to be a digital lock on the office door. Now the building has more doors, more windows, more delivery robots, and one intern using artificial intelligence (AI) to write code at midnight.

That is why this week matters. Palo Alto Networks reports fiscal third-quarter 2026 results after the US market close on 2 June 2026. CrowdStrike reports fiscal first-quarter 2027 results after the US market close on 3 June 2026.

Both companies sit at the centre of a simple but powerful investment question: does AI make cybersecurity software less valuable, or more important?

The market has recently leaned towards “more important”. Both CrowdStrike and Palo Alto Networks have seen strong investor interest ahead of results, helped by the view that AI could expand the need for better digital defences.

Two different ways to guard the same castle

CrowdStrike protects computers, cloud systems and employee identities through its Falcon platform. In plain English, it helps companies spot suspicious activity early and stop attacks before they spread. That matters in a world where one weak laptop, cloud account or password can become the front door for a much bigger problem.

For the quarter ending 30 April 2026, CrowdStrike guided for revenue of about 1.36 billion USD and annual recurring revenue of around 5.50 billion USD. Annual recurring revenue is the subscription income a company expects to repeat each year. For investors, it shows whether customers are staying, spending more and treating the product as essential digital plumbing.

The key question is whether CrowdStrike can keep turning its customer base into broader platform demand. It has largely rebuilt investor confidence after the 2024 software update incident that disrupted millions of Windows devices. Earnings will test whether customers keep expanding Falcon across more of their security budgets.

Palo Alto Networks is broader. It sells security across networks, cloud systems, security operations, identity and artificial intelligence. Its strategy is called “platformisation”, meaning customers buy more tools from one provider instead of stitching together many separate products.

Palo Alto guided for fiscal third-quarter revenue of about 2.95 billion USD, up around 29% from a year earlier, and remaining performance obligation of nearly 18 billion USD. That is contracted future revenue not yet booked. The strategic question is whether Palo Alto can become a trusted one-stop security platform without becoming too complex.

Project Glasswing changes the conversation

The bigger story is not just earnings. It is Project Glasswing.

On 8 April 2026, Anthropic announced Project Glasswing, an initiative involving major technology and cybersecurity companies, including CrowdStrike and Palo Alto Networks. The goal is to use advanced AI to find and fix weaknesses in critical software before attackers exploit them.

That matters because AI changes both sides of the cybersecurity equation. Attackers may use AI to scan code faster, find weaknesses and automate phishing messages that look more convincing. Defenders can use AI to detect strange behaviour, write safer code and respond faster.

This is why cybersecurity is different from some other software categories. In areas like traditional software as a service, AI may reduce the need for some human users and pressure seat-based pricing. In cybersecurity, AI may increase the workload. More digital activity means more places to defend. More automated code means more possible bugs. More AI agents inside companies means new security rules, new monitoring needs and new budget lines.

For investors, the question is not whether cyberattacks disappear. They will not. The question is which companies can turn a more complex threat environment into durable demand without letting costs run ahead of growth.

What the market wants to hear

The market reaction will likely depend on four signals.

First, investors will watch growth quality. Revenue growth is helpful, but subscription demand, customer retention and larger customer deals matter more for long-term confidence.

Second, margins matter. Cybersecurity companies must keep investing in AI, cloud infrastructure and sales teams. If growth stays strong but profitability weakens, investors may become less forgiving.

Third, guidance matters more than the quarter just reported. Markets care about the next hill, not only the one just climbed.

Fourth, management language around AI will be important. Investors want evidence that AI is not just a slide in a presentation, but something customers are buying, using and renewing.

Recent sector volatility adds pressure. Zscaler’s weaker outlook in late May 2026 hit sentiment across cybersecurity, even though analysts debated whether the issue was company-specific or sector-wide. That is the market’s usual subtlety: one company coughs, and the whole sector gets offered a blanket.

Risks to keep in view

The first risk is valuation. Both stocks already reflect high expectations. When shares run hard into results, even good numbers can disappoint if guidance is not strong enough.

The second risk is competition. Microsoft, cloud providers and start-ups are all pushing into security. Customers want fewer tools, but that does not guarantee the same winners forever.

The third risk is execution. CrowdStrike must keep proving reliability after the 2024 outage. Palo Alto must show that platformisation and acquisitions can improve the customer offer without creating complexity. Early warning signs include weaker customer growth, slower contract expansion, rising sales costs and softer renewal trends.

Investor playbook

  • Watch guidance first. A strong past quarter matters less than confidence in the next few quarters.
  • Track annual recurring revenue and remaining performance obligation as signals of future demand.
  • Compare growth with margins. Fast growth is better when it does not require ever-higher spending.
  • Keep position size in mind. Cybersecurity is structural, but high expectations can make stocks jumpy.

The lock is no longer enough

Cybersecurity remains one of the clearest long-term digital themes because companies cannot simply opt out of being protected. Banks, hospitals, factories, retailers and governments all run on software. That software now faces a smarter threat environment, partly because AI gives both attackers and defenders sharper tools.

CrowdStrike and Palo Alto Networks enter earnings week as two leading names in that fight, but also as stocks carrying high expectations. For investors, the lesson is balanced: cybersecurity demand looks structural, but price still matters. The door needs a lock, the windows need sensors, and the portfolio still needs discipline.

This material is marketing content and should not be regarded as investment advice. Trading financial instruments carries risks and historic performance is not a guarantee of future results.

The instrument(s) referenced in this content may be issued by a partner, from whom Saxo receives promotional fees, payment or retrocessions. While Saxo may receive compensation from these partnerships, all content is created with the aim of providing clients with valuable information and options.

The author does not hold any position in the financial instruments mentioned at the time of publication

Quarterly Outlook

01 /

  • Q1 Outlook for Traders: Five Big Questions and Three Grey Swans.

    Quarterly Outlook

    Q1 Outlook for Traders: Five Big Questions and Three Grey Swans.

    John J. Hardy

    Global Head of Macro Strategy

    Strap yourself in for key market questions that must be answered in 2026.
  • Q1 Outlook for Investors: “AI” party hangover needs discipline and diversification

    Quarterly Outlook

    Q1 Outlook for Investors: “AI” party hangover needs discipline and diversification

    Charu Chanana

    Chief Investment Strategist

    2026 is a high-valuation, high-dispersion year: the AI story matures, policy becomes less predictabl...
  • Q4 Outlook for Investors: Diversify like it’s 2025 – don’t fall for déjà vu

    Quarterly Outlook

    Q4 Outlook for Investors: Diversify like it’s 2025 – don’t fall for déjà vu

    Jacob Falkencrone

    Global Head of Investment Strategy

  • Q4 Outlook for Traders: The Fed is back in easing mode. Is this time different?

    Quarterly Outlook

    Q4 Outlook for Traders: The Fed is back in easing mode. Is this time different?

    John J. Hardy

    Global Head of Macro Strategy

    The Fed launched a new easing cycle in late Q3. Will this cycle now play out like 2000 or 2007?
  • Q3 Investor Outlook: Beyond American shores – why diversification is your strongest ally

    Quarterly Outlook

    Q3 Investor Outlook: Beyond American shores – why diversification is your strongest ally

    Jacob Falkencrone

    Global Head of Investment Strategy

  • Q3 Macro Outlook: Less chaos, and hopefully a bit more clarity

    Quarterly Outlook

    Q3 Macro Outlook: Less chaos, and hopefully a bit more clarity

    John J. Hardy

    Global Head of Macro Strategy

    After the chaos of Q2, the quarter ahead should get a bit more clarity on how Trump 2.0 is impacting...
  • Equity outlook: The high cost of global fragmentation for US portfolios

    Quarterly Outlook

    Equity outlook: The high cost of global fragmentation for US portfolios

    Charu Chanana

    Chief Investment Strategist

  • Commodity Outlook: Commodities rally despite global uncertainty

    Quarterly Outlook

    Commodity Outlook: Commodities rally despite global uncertainty

    Ole Hansen

    Head of Commodity Strategy

  • Upending the global order at blinding speed

    Quarterly Outlook

    Upending the global order at blinding speed

    John J. Hardy

    Global Head of Macro Strategy

    We are witnessing a once-in-a-lifetime shredding of the global order. As the new order takes shape, ...
  • Asset allocation outlook: From Magnificent 7 to Magnificent 2,645—diversification matters, now more than ever

    Quarterly Outlook

    Asset allocation outlook: From Magnificent 7 to Magnificent 2,645—diversification matters, now more than ever

    Jacob Falkencrone

    Global Head of Investment Strategy

Disclaimer

The Saxo Group entities each provide execution-only service and access to Analysis permitting a person to view and/or use content available on or via the website is not intended to and does not change or expand on this. Such access and use are at all times subject to (i) The Terms of Use; (ii) Full Disclaimer; (iii) The Risk Warning; (iv) the Rules of Engagement and (v) Notices applying to Saxo News & Research and/or its content in addition (where relevant) to the terms governing the use of hyperlinks on the website of a member of the Saxo Group by which access to Saxo News & Research is gained. Such content is therefore provided as no more than information. In particular no advice is intended to be provided or to be relied on as provided nor endorsed by any Saxo Group entity; nor is it to be construed as solicitation or an incentive provided to subscribe for or sell or purchase any financial instrument. All trading or investments you make must be pursuant to your own unprompted and informed self-directed decision. As such no Saxo Group entity will have or be liable for any losses that you may sustain as a result of any investment decision made in reliance on information which is available on Saxo News & Research or as a result of the use of the Saxo News & Research. Orders given and trades effected are deemed intended to be given or effected for the account of the customer with the Saxo Group entity operating in the jurisdiction in which the customer resides and/or with whom the customer opened and maintains his/her trading account. Saxo News & Research does not contain (and should not be construed as containing) financial, investment, tax or trading advice or advice of any sort offered, recommended or endorsed by Saxo Group and should not be construed as a record of our trading prices, or as an offer, incentive or solicitation for the subscription, sale or purchase in any financial instrument. To the extent that any content is construed as investment research, you must note and accept that the content was not intended to and has not been prepared in accordance with legal requirements designed to promote the independence of investment research and as such, would be considered as a marketing communication under relevant laws.

Please read our disclaimers:
- Notification on Non-Independent Investment Research (https://www.home.saxo/legal/niird/notification)
- Full disclaimer (https://www.home.saxo/en-hk/legal/disclaimer/saxo-disclaimer)

None of the information contained here constitutes an offer to purchase or sell a financial instrument, or to make any investments. Saxo does not take into account your personal investment objectives or financial situation and makes no representation and assumes no liability as to the accuracy or completeness of the information nor for any loss arising from any investment made in reliance of this presentation. Any opinions made are subject to change and may be personal to the author. These may not necessarily reflect the opinion of Saxo or its affiliates.


Hong Kong

Contact Saxo

Hong Kong S.A.R
Hong Kong S.A.R

Saxo Capital Markets HK Limited (“Saxo”) is a company authorised and regulated by the Securities and Futures Commission of Hong Kong. Saxo holds a Type 1 Regulated Activity (Dealing in Securities); Type 2 Regulated Activity (Dealing in Futures Contract); Type 3 Regulated Activity (Leveraged Foreign Exchange Trading); Type 4 Regulated Activity (Advising on Securities) and Type 9 Regulated Activity (Asset Management) licenses (CE No. AVD061). Registered address: 19th Floor, Shanghai Commercial Bank Tower, 12 Queen’s Road Central, Hong Kong.

Trading in financial instruments carries various risks, and is not suitable for all investors. Please seek expert advice, and always ensure that you fully understand these risks before trading. Trading in leveraged products may result in your losses exceeding your initial deposits. Saxo does not provide financial advice, any information available on this website is ‘general’ in nature and for informational purposes only. Saxo does not take into account an individual’s needs, objectives or financial situation. Please click here to view the relevant risk disclosure statements.

The Saxo trading platform has received numerous awards and recognition. For details of these awards and information on awards visit www.home.saxo/en-hk/about-us/awards.

The information or the products and services referred to on this site may be accessed worldwide, however is only intended for distribution to and use by recipients located in countries where such use does not constitute a violation of applicable legislation or regulations. Products and services offered on this website are not directed at, or intended for distribution to or use by, any person or entity residing in the United States and Japan. Please click here to view our full disclaimer.

Apple, iPad and iPhone are trademarks of Apple Inc., registered in the US and other countries. AppStore is a service mark of Apple Inc. Android is a trademark of Google Inc.