New York, Jan 4, 2026, 7:50 PM ET — Market closed
- Palo Alto Networks shares closed down 2.6% on Friday, underperforming the broader market.
- Guggenheim upgraded the cybersecurity firm to Neutral from Sell heading into Monday.
- Two executives filed SEC Form 144 notices tied to planned sales under 10b5-1 trading plans.
Palo Alto Networks, Inc. shares closed Friday down 2.6% at $179.37, and traders will be watching for follow-through on Monday after Guggenheim upgraded the cybersecurity company to Neutral from Sell.
The rating change lands as the stock tries to stabilize after a weak stretch and heightened focus on execution risk tied to Palo Alto’s dealmaking and product shift toward AI-enabled security tools. The next session will show whether buyers treat Friday’s dip as an entry point or a signal to keep trimming exposure.
There is also fresh tape risk. Two insiders filed notices that can foreshadow share sales, while investors weigh a busy week for U.S. data that can swing rate expectations and high-multiple software valuations.
Guggenheim analyst John DiFucci moved the stock to Neutral from Sell, with coverage notes cited by third-party market feeds. Investing.com said the call leaned on Palo Alto’s market underperformance and a recent improvement in operational trends, while pointing to the company’s large strategic acquisitions as a key part of the debate.
Separately, filings showed Palo Alto president William D. Jenkins Jr. and executive Joshua D. Paul submitted SEC Form 144 notices on Jan. 2. A Form 144 is a required notice when an insider plans to sell restricted or “control” stock under Rule 144; it is not, by itself, a completed sale. SEC
The filings indicated proposed sales of 904 shares by Jenkins and 3,600 shares by Paul, with aggregate market values listed at about $166,517 and $663,120, respectively, and both referenced 10b5-1 plans adopted in September 2025. A 10b5-1 plan is a pre-arranged trading plan designed to limit concerns about trading on material non-public information.
Palo Alto’s slide came with a broader pullback in cybersecurity names on Friday. CrowdStrike fell 3.2% and Fortinet dropped 1.9%, while the Global X Cybersecurity ETF lost 2.3%; the S&P 500 proxy SPY edged up 0.2% and the tech-heavy QQQ slipped 0.2%.
On fundamentals, Palo Alto last guided fiscal second-quarter revenue to $2.57 billion to $2.59 billion and non-GAAP EPS of $0.93 to $0.95. It also forecast fiscal 2026 revenue of $10.50 billion to $10.54 billion and adjusted EPS of $3.80 to $3.90, and pointed to Next-Generation Security ARR — annual recurring revenue — as a key subscription growth metric.
The strategic backdrop remains deal-heavy. Palo Alto agreed in November to buy cloud monitoring company Chronosphere for $3.35 billion and has a pending $25 billion CyberArk deal announced earlier, with Reuters reporting both are expected to close in the second half of fiscal 2026; a later expansion of its Google Cloud partnership was described by Reuters as approaching $10 billion in commitments over several years. “AI has spawned a tremendous amount of demand for security,” Google Cloud chief revenue officer Matt Renner told Reuters. Reuters
The risk for bulls is that enthusiasm fades quickly if investors stay wary of integration costs and regulatory timing for the large acquisitions, or if macro data revive pressure on long-duration software multiples. Traders also point to near-term chart levels after Friday’s $177.23 to $186.99 range, with the session low the first line many will watch.
Next up, investors will take cues from Monday’s U.S. ISM manufacturing survey at 10:00 ET and Friday’s nonfarm payrolls report on Jan. 9, while the Fed’s next policy meeting is scheduled for Jan. 27-28. Palo Alto’s next earnings date is listed as Feb. 24 on Investing.com’s calendar.
