Cybersecurity Industry Explained: The U.S. View
Cybersecurity is a subscription software business that grows with the number of things companies must protect: laptops and servers, networks, cloud workloads, identities and, increasingly, AI systems. Two trends dominate. Companies are consolidating dozens of separate tools onto a few platforms, and AI is both a new attack tool and a new thing to secure. The largest vendors' results in mid-2026 were strong. CrowdStrike's annual recurring revenue (ARR) reached $5.84 billion in the quarter to July 31, 2026, up 25%, with a record $333 million of net new ARR; its chief executive said securing AI is the largest market opportunity in the company's history. Palo Alto Networks' next-generation security ARR rose 63% to $9.10 billion and its quarterly revenue 34% to $3.41 billion; its chief executive said AI is elevating cybersecurity to the top of the CIO priority list, and it guided fiscal 2027 revenue growth of 23–24%. Platform deals show up in how customers buy: 51% of CrowdStrike's subscription customers use six or more of its modules.
- CrowdStrike
- ARR $5.84B, up 25%, record net new ARR $333M (quarter to July 31, 2026)
- Palo Alto
- Next-generation security ARR $9.10B, up 63%; revenue up 34%
- Platforms
- 51% of CrowdStrike subscription customers use six or more modules
How the chain works
Two large U.S. security platforms, quarter to July 31, 2026
| CrowdStrike | Palo Alto Networks | |
|---|---|---|
| Recurring revenue | Ending ARR $5.84B, up 25% | Next-generation security ARR $9.10B, up 63% |
| Revenue | $1.47B, up 26% | $3.41B, up 34% |
| Platform signal | Falcon Flex ARR above $2.29B, up 101% | Nearly $1B of net new security ARR in one quarter |
| Outlook | Full-year ARR $6.60–6.61B | Fiscal 2027 revenue $14.10–14.20B, up 23–24% |
Why security spending keeps growing
Every new device, cloud workload and user account is something attackers can target, and breaches can halt operations. Vendors sell subscriptions, so the key measure is annual recurring revenue (ARR), the yearly value of active contracts.
AI adds a new layer. Companies deploying AI models and agents need to protect the data they use and control what they can do. CrowdStrike's chief executive George Kurtz said in August 2026 that every enterprise will run on AI and that securing it is the largest market opportunity in the company's history. Palo Alto Networks' Nikesh Arora said AI is elevating cybersecurity to the top of the CIO priority list.
Platforms replace point tools
Large companies have often used dozens of separate security products. Vendors now sell broad platforms with many modules under one contract. CrowdStrike reported that 51% of its subscription customers use six or more modules, 35% seven or more and 26% eight or more, and that ARR from Falcon Flex, its flexible platform licensing, rose 101% to more than $2.29 billion.
Palo Alto Networks reported next-generation security ARR of $9.10 billion, up 63%, adding nearly $1 billion in a single quarter, and remaining performance obligations, its contracted backlog, of $21.2 billion, up 34%.
The numbers
CrowdStrike's revenue for its fiscal second quarter ended July 31, 2026 was $1.47 billion, up 26%, and subscription revenue $1.40 billion, up 27%. Ending ARR was $5.84 billion, up 25%, with record net new ARR of $333 million. It raised its full-year outlook for net new ARR growth to 34% at the midpoint.
Palo Alto Networks' fiscal fourth-quarter revenue was $3.41 billion, up 34%, and fiscal 2026 revenue $11.48 billion. For fiscal 2027 it guided revenue of $14.10–14.20 billion, up 23–24%, and next-generation security ARR of $11.08–11.18 billion, up 22–23%.
How the U.S. view differs from the China view
The Chinese version of this page looks at a market shaped by government and state-owned customers, domestic vendors favored by policy, and budgets tied to compliance requirements.
In the U.S., large enterprises and the federal government buy from a competitive group of American platform vendors, and growth comes from consolidation onto platforms and from securing cloud and AI systems.
2026: AI lifts security demand
As companies rolled out AI in 2026, security vendors reported faster growth in new business.
CrowdStrike posted record net new ARR of $333 million in the quarter to July 31, and Palo Alto Networks added nearly $1 billion of next-generation security ARR in its quarter.
Both tied the gains to customers consolidating tools and securing AI deployments. Security grew alongside AI rather than being squeezed by it.
- Security spending rises with the amount of technology to protect.
- Platform consolidation favors the largest vendors.
- AI creates new security needs as well as new threats.
Common misreadings
MythAI will make security software obsolete.
RealityCrowdStrike calls securing AI its largest market opportunity; its ARR grew 25%.
MythSecurity is a mature, slow-growth market.
RealityPalo Alto's next-generation security ARR rose 63% to $9.10B.
MythCompanies prefer many specialist tools.
Reality51% of CrowdStrike subscription customers use six or more of its modules.
MythRevenue is the best measure of a security vendor.
RealityAnnual recurring revenue shows the value of active subscriptions.
Threats, AI and budgets: scenarios
| Scenario | Main effect | How it passes through |
|---|---|---|
| Major AI-enabled attacks | Security budgets | More spending, faster adoption |
| IT budgets tighten | New deals | Slower growth, but renewals hold |
| Platform consolidation accelerates | Large vendors | Bigger contracts, share gains |
| A vendor suffers a major outage or breach | Trust | Customers diversify suppliers |
| New AI security categories emerge | Market size | New modules and products |
| Price competition among platforms | Margins | Discounts to win consolidation deals |
Supply and demand by segment
| Segment | Supply rigidity | Concentration | New demand | Policy role | What to watch |
|---|---|---|---|---|---|
| Endpoint security | Low (software) | High | Yes | Medium | ARR growth |
| Network and cloud security | Low | High | Yes | Medium | Next-generation ARR |
| Identity security | Low | Medium | Yes | Medium | Adoption |
| AI security | Low | Low (new) | Yes | Medium (AI rules) | New products |
Supply rigidity: how long new capacity takes and whether money can speed it up. Concentration: whether output sits in a few countries or companies. The more rigid and concentrated, the more prone to shortages.
How to track it
| Indicator | What it tells you | Where to find it |
|---|---|---|
| Annual recurring revenue and net new ARR | Demand for subscriptions | CrowdStrike, Palo Alto Networks quarterly results, free |
| Remaining performance obligations | Contracted future revenue | Company filings, free |
| Module adoption | Platform consolidation | Vendor disclosures, free |
| AI applications | New things to secure | U.S. view: AI applications |
Sources
- IT Brief: CrowdStrike lifts outlook after record ARR quarter (2026-08-26)
- Palo Alto Networks: fiscal fourth quarter and fiscal year 2026 results (2026-09-01)
Last updated 2026-10-18.