Brian Essex

George called the durability absolutely there, citing customers held back on AI deployment by security concerns, and Burt pointed to the record Q3 pipeline and the 1,150-basis-point full-year growth-rate raise as evidence.

George argued spend is incremental, tied to surging token budgets that did not exist two years ago, rather than reallocation of fixed budgets.

Kurtz acknowledged CCP drove initial identity adoption but cited threat landscape as durable driver. ITDR has compliance mandate, PAM well received, Falcon Shield protecting SaaS identities, and SGNL.ai acquisition adds zero standing privilege.

Kurtz confirmed all emerging products performed fantastically with strong CCP-to-renewal conversion. Podbere noted Onum and Pangea acquisitions were de minimis to Q3 results.

Kurtz emphasized Onum as complementary, enabling in-pipeline detection and faster data streaming. CrowdStrike's free internal data pricing makes legacy SIEM displacement compelling.

Kurtz confirmed sales force has moved past the outage with focus back on innovation and consolidation. Flex adoption burndown exceeding original expectations.

Kurtz acknowledged identity and cloud were popular CCP choices, framing deceleration as seeding the customer base with CCP discounts that will renew at full price.

George acknowledged minor churn in small MSP segment but emphasized larger customers remain committed, with corporate business having its best quarter ever.

Ken revealed sovereign SASE is roughly equal to or larger than cloud-based SASE. Service providers in Europe are ramping sovereign SASE services with Fortinet products.

Ken disclosed SASE is about 25% of billings and positioned Fortinet as a top-three and fastest-growing SASE player. Unified SASE grew 31%.

Christiane confirmed broad-based similar growth rates across firewalls, APs, and switches. Ken explained FortiLink technology linking switches and APs to FortiGate as a local SASE approach with hardware agents for internal segmentation, but noted FortiGate remains the key and largest component.

Ken confirmed memory represents 10-20% of BOM, similar to system servers. Fortinet manages manufacturing components directly with suppliers rather than through third parties. Noted memory daily price tracker showed recent price declines. Maintains 6-month inventory buffer adjusted based on growth projections.

Ken cited 15% large enterprise FortiSASE penetration from Slide 10 but noted significant additional adoption through service providers and channel partners that is harder to track. Growing displacement of competing SASE providers.

Christiane noted the billings-to-revenue conversion lag for services and prudent guidance approach. Ken highlighted product revenue acceleration as a leading indicator for future service revenue.

Christiane attributed the sequential decline to 2 fewer calendar days vs Q4 and slower-than-expected ramp of acquired entity revenue streams. Ken added FortiGate billings growing above average as a positive forward indicator.

Christiana shared 10% product revenue growth assumption and described a more moderate billings trajectory through the year, but did not break out specific upgrade vs organic contribution.

Nikesh emphasized both cost synergies (margins reverting to standalone within two quarters) and revenue upside, citing the new Modern PAM product and upsell of the traditional PAM base as expansion drivers.

Nikesh pointed to native firewalls in hyperscalers for AI traffic inspection, then deferred specific capability detail to Lee Klarich.

Lee cited harvest-now-decrypt-later urgency, uncertain quantum timelines, and multi-year migration effort as drivers. PANW started PQC work years ago, has cross-stack visibility advantage. Nikesh noted short-term cipher translation solution unlike Y2K.

Nikesh attributed growth to hardware at steady 5-8% plus software firewall inflection driven by AI requiring cloud-delivered security. Software driving hardware-to-software transformation.

Nikesh dismissed point solutions as extinct. Lee Klarich confirmed AI-connected platforms deliver better outcomes and improved win rates in cloud security.

Lee confirmed improving win rates. Nikesh added cloud security will shift toward runtime and agents, where PANW is better positioned than legacy CNAP players.

Nikesh outlined three cloud security layers (CNAP, CDR, network) and positioned Cortex CDR as the future growth driver. Lee Klarich detailed how Prisma Cloud posture data feeds CDR for real-time protection.

Jay said Red Canary was acquired for agentic SecOps technology and a decade of MDR expertise, now integrated into the Agentic SOC solution launching next week. Kevin said the company took a conservative approach to recognized ARR, was pleased to maintain the book despite elevated MDR-style churn in fiscal 2026, and expects no separate net new ARR contribution from Red Canary in fiscal 2027 as it folds into the integrated offering. He expects continued higher MDR churn on renewals, all contemplated in the guide.

Jay described unprecedented inbound demand driven by frontier AI models finding vulnerabilities. Not factoring meaningful impact in Q4 but expects impact in FY27. Specific short-term opportunities include ZPA upsells for zero trust access to all users and deception technology uptake.

Jay said CIOs feel urgency to implement AI security. Budget comes from security or as 4-6% of AI project budgets, viewed as nominal. Not seeing budgets as an issue for AI security projects. Requires C-level engagement where Zscaler has strong relationships.

Kevin confirmed organic growth consistent with Q4 and beat internal expectations but didn't give specific number. Jay described three acquisition layers: Avalor (data fabric), Red Canary (agentic AI for SecOps), SPLX (red teaming for AI security portfolio).

Jay described two buckets: SecOps (combining Avalor data fabric + Red Canary agentic AI for outcomes-based pricing vs data volume) and IT Ops (ZDX with agentic technology for user performance and machine-to-machine agent detection).

Jay explained they do inline classification at ZIA and scan data at rest in OneDrive/SharePoint. Data protection ACV grew 40% YoY. Single policy engine across channels.

Jay detailed Avalor-powered products: Risk 360, unified vulnerability management. Building breach prediction and threat hunting. 500B daily transactions provide data advantage.

Arvind said IT budgets grow 2-3pts above GDP. Run/maintain vs new project ratio shifting from 70/30 to 60/40, benefiting IBM's automation and hybrid portfolios.

Arvind said administration shifting from cost-cutting to modernization and AI deployment, citing the AI action plan. IBM engaged with agencies at highest levels on modernization.

Arvind expects strong z17 cycle through 2025 and H1 2026, with volatility potentially accelerating client purchases. IBM offers leasing through its financing business.

Hitesh said the cuts spanned all functions and locations, benchmarked against software peers, with sales and marketing reductions mostly from the sales force. Direct.

Stephen pointed to the IPD motion, rigorous qualification and fast value delivery, and named bookings as the leading indicator. Direct.