Palo Alto Networks CEO Nikesh Arora has warned that artificial intelligence is forcing companies to fundamentally rethink cybersecurity, estimating that roughly $1 trillion worth of global security infrastructure simply isn't ready to defend against fast-moving, automated threats.
Why Older Cybersecurity Systems Are Falling Short
According to Arora, many cybersecurity products deployed seven or ten years ago were built for a very different threat environment, one that never anticipated attacks operating at machine speed. "Nothing that was deployed seven or ten years ago is prepared or ready to handle AI at machine speed," he said, pointing to the underlying architecture most companies still rely on. His broader point: businesses can't successfully deploy AI within their own operations without first getting their cybersecurity systems in proper order, security readiness needs to come before AI adoption, not after.
Why AI Is Reshaping the Cybersecurity Market
Arora expects demand for cybersecurity products to keep growing as AI lets attackers identify and exploit software vulnerabilities faster than ever before, pushing companies to modernise systems that were never designed with automated, AI-driven threats in mind.
Interestingly, this represents something of a shift in how investors have viewed AI's relationship to the cybersecurity industry. Previously, AI was often seen as a potential threat to traditional cybersecurity companies, the worry being that advanced models could disrupt or outpace existing security software entirely. That view has started changing as businesses increasingly recognise that attackers can use the exact same technology, meaning AI is increasingly being framed as a potential growth driver for cybersecurity companies rather than purely a competitive threat to them.
The Moment That Changed Arora's Own View
Arora pointed to the launch of Anthropic's Mythos model earlier this year as a major turning point, specifically because of its demonstrated ability to exploit software vulnerabilities relatively easily. Palo Alto Networks shares have risen 13% since April 7, according to the report, after trading in negative territory for much of 2026 before that point. Arora said he'd spent eight years warning customers they were unprepared for this shift, but noted that this particular event made the underlying risk unmistakably clear in a single moment, rather than requiring years of gradual persuasion.
How Palo Alto Networks Is Responding
The company has held discussions with at least 2,000 businesses about its Frontier AI Critical Defense Program, officially launched in August. The initiative uses advanced AI models to assess customers' existing security systems, identify vulnerabilities, and help them upgrade their cybersecurity infrastructure accordingly, essentially fighting AI-speed threats with AI-speed defensive tooling.
What the $1 Trillion Figure Actually Represents
Arora described this as roughly $1 trillion in global "cybersecurity debt" that needs modernising to defend against automated threats. "There's approximately $1 trillion of global cybersecurity debt that must be modernized to defend against automated threats because they operate instantaneously," he said during the company's earnings call. The figure is meant to capture the sheer scale of older security infrastructure Arora believes companies will need to upgrade as AI becomes increasingly central to both sides of the cybersecurity equation, attackers and defenders alike.
Is This Already Showing Up in Spending?
According to the company's latest results, it appears so. Palo Alto Networks reported stronger business activity as cybersecurity demand increased, exceeding analysts' estimates for its fiscal fourth quarter and issuing an upbeat outlook for the coming fiscal year. Adjusted earnings came in between $1.46 and $4.19 per share, against a Wall Street average estimate of $4.11 cited in the report. Revenue from next-generation security products, measured on an annual recurring basis, also outperformed expectations, a sign that businesses are already increasing spending in direct response to the risks posed by more advanced AI systems.
What Companies Should Actually Do Now
The core takeaway from Arora's warning is fairly direct: companies shouldn't wait for an actual AI-driven attack before upgrading their defences. Older cybersecurity systems should be reviewed now, existing vulnerabilities fixed, and monitoring strengthened so emerging threats can be detected quickly. As attackers increasingly use AI to move faster, businesses will similarly need modern security tools and regular testing just to keep pace, rather than treating cybersecurity as a periodic, one-time investment.
FAQs
Q1. Why does Palo Alto Networks' CEO say older cybersecurity systems aren't ready for AI?
Because most were built 7-10 years ago for a slower-moving threat environment and weren't designed to handle attacks operating at machine speed.
Q2. What is the $1 trillion figure Arora referenced?
An estimate of global "cybersecurity debt", older security infrastructure that needs modernising to defend against fast-moving, automated AI-driven threats.
Q3. What is Palo Alto Networks' Frontier AI Critical Defense Program?
An initiative launched in August that uses advanced AI models to assess a company's security systems, identify vulnerabilities, and help upgrade its cybersecurity infrastructure.
Q4. Is this AI-driven risk already affecting cybersecurity spending?