PANW vs S: How Palo Alto Networks and SentinelOne Compare (2026)
Short answer
PANW (Palo Alto Networks) and S (SentinelOne) are often compared because they share investment themes, but they are different businesses. Palo Alto Networks is one of the largest pure-play cybersecurity companies in the world. SentinelOne (S) is a cybersecurity company specializing in AI-driven endpoint and cloud security. Neither is universally better: pick by which thesis you are expressing and what you already own. This is descriptive, not a recommendation.
What does Palo Alto Networks (PANW) do?
Palo Alto Networks is one of the largest pure-play cybersecurity companies in the world. It protects organizations across three broad areas. Network security centers on its next-generation firewalls (hardware, virtual, and cloud-delivered) plus the Prisma Access secure-access service edge (SASE) for protecting remote and hybrid workforces. Cloud security, branded Prisma Cloud, secures applications and workloads running across public clouds. Security operations, branded Cortex, uses AI and automation to detect and respond to threats across an enterprise. Palo Alto sells mostly through subscriptions and support, increasingly bundled under a platform strategy it calls platformization, where customers consolidate multiple security tools onto its integrated stack in exchange for better pricing and tighter integration. Founded in 2005 and headquartered in Santa Clara, California, Palo Alto has grown organically and through many acquisitions into a broad platform spanning network, cloud, and operations security, positioned as a consolidator in a fragmented industry.
What does SentinelOne (S) do?
SentinelOne (S) is a cybersecurity company specializing in AI-driven endpoint and cloud security. Its Singularity platform protects endpoints (laptops, servers, cloud workloads) by using machine learning to detect, block, and automatically respond to threats like malware and ransomware in real time, without relying solely on signature databases or human analysts. A distinctive feature is autonomous response: the platform can isolate and remediate attacks on its own, and it offers one-click rollback to undo ransomware damage.
PANW vs S: how do they differ?
Both fit overlapping themes, but they are not interchangeable. Palo Alto Networks is best understood through its own drivers, and SentinelOne through its. The useful comparison is which set of drivers and risks you want exposure to.
- PANW drivers: Platformization and consolidation; AI-driven security operations.
- S drivers: AI-native endpoint protection; Platform expansion.
PANW or S: which should you pick?
The bottom line: PANW vs S
PANW and S are related but distinct: same themes, different businesses and risks. Neither wins in the abstract; the right pick is whichever thesis you actually believe, sized so you are not over-concentrated in one theme. Walnut can show your combined PANW and S exposure against your real portfolio. It is not an investment adviser.
Build a basket around PANW with Walnut
Use Palo Alto Networks as one constituent in a thematic basket Walnut's AI helps you assemble. Describe a thesis you believe in, the AI proposes the holdings and weights, and you approve before any broker order.
FAQ
What is the difference between PANW and S?
+
Palo Alto Networks is one of the largest pure-play cybersecurity companies in the world. SentinelOne (S) is a cybersecurity company specializing in AI-driven endpoint and cloud security. They show up together because they share investment themes, but they are different businesses, so the better fit depends on which thesis you are expressing.
Is PANW or S the better stock?
+
Walnut is informational, not investment advice. Neither is universally better; PANW and S suit different views and risk levels. Compare what each does, how they make money, and the risks, then decide which fits your thesis and what you already own.
Should you own both PANW and S?
+
Because they share themes, owning both concentrates you in that theme. That can be intentional (a focused bet) or accidental (less diversification than it looks). Walnut can show your combined exposure across both before you add the second.
What are the risks of PANW vs S?
+
PANW: Cybersecurity is intensely competitive, with rivals like CrowdStrike, Zscaler, Fortinet, and Microsoft contesting different parts of Palo Alto's platform. The platformization strategy can pressure near-term billings and revenue as customers are offered incentives and deferred ramps to consolidate, complicating growth optics. Palo Alto's valuation is rich, so any slowdown in growth or margins can drive sharp share-price swings. Enterprise security spending is somewhat macro-sensitive, and a heavy acquisition history brings integration and goodwill risk. Microsoft's bundling of security into its broader stack is a persistent competitive threat, and a major product failure or breach would be especially damaging for a security vendor. S: SentinelOne competes head-to-head with CrowdStrike, which is larger, profitable, and has a strong brand, plus Microsoft, which bundles endpoint security into broad licensing at attractive prices. It is still working toward consistent GAAP profitability and carries significant stock-based compensation, so it depends on sustaining high growth to justify its multiple. Decelerating growth, pricing pressure from bundling, or churn would weigh heavily on the stock. As a high-multiple growth name, it is sensitive to sentiment, rate cycles, and security-spending shifts. A high-profile security incident or product gap could also damage trust in a market where reputation is paramount.
Walnut is informational, not investment advice. This page is descriptive and not a recommendation to buy or sell PANW or S; figures are approximate and dated. Verify current data before investing.