Palo Alto’s Profit Guidance Gap Leaves Cybersecurity Bargains Like CrowdStrike and Zscaler in Buy Territory

The selloff in Palo Alto Networks shares last week was a textbook case of "sell the news" on profit, not a top-line miss. The market punished a negative expectation gap on earnings power, completely overshadowing a solid revenue beat.

The numbers tell the story. For the second quarter, the company delivered an adjusted EPS of $0.96, exactly meeting the analyst consensus estimate. Revenue came in at approximately $2.63 billion, which was a beat against the prior quarter's guidance range. The operational growth was clear, with Next-Generation Security ARR hitting $5.9 billion. Yet the stock dropped 6.5% on the morning of February 18.

The catalyst was the Q3 profit guidance. Management's outlook for the current quarter came in 15% below consensus. This negative guidance reset created a massive expectation gap. Investors had priced in continued strong earnings momentum, but the forward view signaled a slowdown in profitability. The market's reaction was swift and decisive, trading the revenue beat for the profit miss.

The pressure is rooted in execution. Integration costs from recent acquisitions, including the $400 million acquisition of Koi for AI security, are weighing on margins. This is compounded by a 500-job cut announcement as part of ongoing integration efforts. The market is skeptical that near-term execution can keep pace with the company's aggressive M&A strategy, making the profit guidance miss a signal of deeper margin headwinds.

Why PANW is Getting Downgraded: The Drivers of a Negative Expectation Gap

The recent analyst downgrades are a direct response to a negative expectation gap on growth and profitability. The market had priced in a continuation of Palo Alto's high-growth trajectory, but the operational reality is now showing a more normalized path. The drivers are specific and separate from the broader AI hype cycle.

First, integration costs are a tangible headwind. The company's aggressive M&A strategy, including the $400 million acquisition of Koi for AI security, is pressuring margins in the near term. This is not a one-time cost; it's part of the ongoing integration that management is now signaling will continue to weigh on earnings. The 500-job cut announcement underscores this, framing cost control as a necessary step amid growth normalization. The market is skeptical that these integration expenses will be offset quickly enough to meet prior profit expectations.

Second, the core growth engine is decelerating faster than anticipated. The analyst downgrades highlight that the high-growth Next-Generation Security (NSG) segment is expected to slow more than forecasted. This is because it is lapping the benefits of traditional attached firewall subscriptions from prior years. The "best-of-suite" consolidation tailwinds that once fueled expansion are fading, and customer preference is shifting toward "best-of-breed" solutions. This structural shift means the company's growth story is maturing, and the market's prior lofty forecasts for continued double-digit expansion are no longer credible.

The bottom line is a reset in expectations. The downgrades from BTIG and Deutsche Bank reflect a consensus that the company is not poised to grow more than 15%, a significant cut from earlier forecasts. This guidance reset, combined with the clear margin pressure from integration, creates a negative expectation gap. The stock is being punished not for a single bad quarter, but for the convergence of execution costs and a slower-growth reality that was not fully priced in.

The Battered Cybersecurity Bargain Hunt: Contrasting PANW with Other Names

While Palo Alto's stock is grappling with a negative expectation gap, other cybersecurity names are seen as having expectations more aligned with reality. The market's recent selloff has created a divergence, where some stocks now appear to be priced for a more normalized outlook, while PANW's guidance reset suggests a deterioration in that outlook.

Take CrowdStrike. The stock is down about 13% year-to-date, a significant pullback that has opened a clear gap between price and perceived value. Wedbush analysts see this as a buying opportunity, rating the stock a "gold standard" and maintaining a $600 price target that implies nearly 50% upside from recent levels. This view suggests the market's pessimism is overdone, and the expectation gap here is positive-investors are being priced in for a recovery, not a further decline.

Zscaler presents an even more bullish case. Wedbush calls it a "premier name to own in the cyber space" and predicts its stock will roughly double to $350 within a year. This forecast implies a market that is not only pricing in stability but also significant growth acceleration. The expectation here is that Zscaler's strong product pipeline and AI strategy will drive a powerful re-rating, a path that contrasts sharply with PANW's current guidance reset.

Then there's Microsoft, which operates in a different league. The company is described as a "quiet cybersecurity behemoth" with a massive moat. It commands 1.6 million security customers and benefits from deep ecosystem lock-in across its cloud and productivity suites. For Microsoft, the expectation gap is less about growth acceleration and more about recognition. The market may not be fully valuing the embedded security revenue within its broader cloud business, creating a potential mispricing for long-term investors.

The bottom line is a stark contrast. PANW's situation is defined by a negative expectation gap, where forward-looking profit guidance has reset lower than consensus. In contrast, the other names are seen as having expectations that are either too low (CrowdStrike) or not yet fully priced in (Zscaler, Microsoft). For investors, this sets up a clear choice: avoid the gap at PANW, or look to these other stocks where the market's current view may already be too conservative.

The AI Disruption Narrative vs. Reality: Separating Headwinds from Opportunities

The recent sector-wide selloff triggered by Anthropic's release of Claude Code Security was a classic case of the market overreacting to a perceived disruption. The tool, which can scan codebases and flag vulnerabilities, sparked fears that AI would render traditional cybersecurity software obsolete. This created a negative expectation gap, where the initial reaction was an overreaction to a long-term threat that is not yet a near-term reality.

The catalyst was clear. Cybersecurity stocks dropped sharply on the new tool's release, based on the theory of "unload stocks first and sort out the disruption later." This knee-jerk sell-off treated generative AI as an immediate existential threat, ignoring the fact that these tools are still in their early adoption phase. The broader market's view was that AI would take away market share from established players, driving a 21% year-to-date decline in CrowdStrike shares.

Yet, a closer look reveals a more nuanced picture. Analysts are beginning to separate the headwind narrative from the actual opportunity. Piper Sandler's upgrade of CrowdStrike to overweight is a key signal. The firm argues that AI represents a major growth opportunity for the company, not a replacement threat. The analyst believes CrowdStrike's platform is well-positioned to secure the new attack surface created by AI, and that its recent strategic acquisitions have set it up to capture this emerging identity security market.

This sets up a clear expectation gap within the sector. For some names, the AI narrative is a headwind that has been overpriced in, creating a buying opportunity. For others, it is a catalyst for growth that is not yet reflected in the stock price. The market's initial reaction-selling the news of AI disruption-may have been an overreaction to a long-term trend, leaving some cybersecurity stocks significantly beaten down. The path forward will be for investors to identify which companies are positioned to not just survive, but thrive, in an AI-augmented security landscape.

The Arbitrage Play: Identifying Expectation Gaps in Other Cybersecurity Stocks

The core investment opportunity now lies in identifying where the market's current pessimism has created a positive expectation gap. While Palo Alto's guidance reset has priced in a deterioration, other cybersecurity names are being punished for fears that are either overdone or not yet reflected in their valuations. The arbitrage play is clear: buy where expectations are too low or not yet priced in.

Wedbush analysts have already mapped this terrain, naming CrowdStrike and Zscaler as the clear "winners" likely to rebound. Their view is that the recent sector-wide selloff, triggered by fears over AI disruption, has created a classic buying opportunity. The market's reaction to tools like Anthropic's Claude Code Security was a knee-jerk overreaction, treating a long-term threat as an immediate existential risk. This created a negative expectation gap for the entire sector, but for some stocks, it has left them significantly beaten down.

The numbers confirm the gap. For CrowdStrike, the stock is down about 13% year-to-date, with Piper Sandler's upgrade highlighting that the AI narrative has been well overdone. The firm's new price target of $520 implies 40% upside, while Wedbush's target of $600 suggests nearly 50% more. For Zscaler, the potential is even more pronounced, with Wedbush predicting the stock will roughly double to $350 in the next year. These targets remain well above current prices, signaling a wide gap between today's valuation and future expectations.

Viewed another way, the market is pricing in a permanent disruption from AI for these companies. The reality, as analysts see it, is that AI represents a major growth opportunity. Piper Sandler argues that AI will create the next multi-billion security opportunity as enterprises look to secure a new attack surface. CrowdStrike's platform and strategic acquisitions position it to capture this emerging identity security market. The expectation gap here is positive: the market is selling the news of AI disruption, but the company's fundamentals and strategic positioning suggest it is a catalyst for growth, not a threat.

The bottom line is a divergence in expectation resets. Palo Alto is being punished for a negative guidance reset on profit. CrowdStrike and Zscaler are being priced for a negative AI narrative that may be overdone. For investors, the arbitrage is to avoid the gap at PANW and instead look to these other names where the market's current view may already be too conservative. The setup is for a potential re-rating as the sector's true growth drivers-consolidation, new attack surfaces, and execution-come back into focus.