Convequity Profile picture
May 14 17 tweets 3 min read
1/15. $PANW: There are lots of #cloudsecurity startups competing w/ PANW, & also several next-gen platform startups (e.g., Orca, Lacework, Wiz).

We think PANW will still prevail as the undisputed cloud security giant. Here are some thoughts why.
2/15. At a high-level we surmise $PANW’s previous and future successes in the cloud are due to their:

a) longstanding expertise in DPI & application-centric awareness/security.
b) container management knowhow that has been largely influenced by $GOOGL recruits.
c) smart M&A.
3/15. One major advantage that firewall vendors like $PANW have is Deep Packet Inspection (DPI) & doing this at real-time speed. This entails inspecting the header & payload of each packet - from Layer 2 thru 7 of the OSI model.
4/15. Expertise in DPI is at the core of, or enables, so many other security solutions, such as:
5/15.

DDoS protection
IDS/IPS
Traffìc prioritization
DLP
Baseline + anomaly behaviours,
SWG
Granular app access controls
Antivirus
ML-powered NGFWs
6/15. So $PANW has this elite 1st principles understanding of security which has enabled them to expand into so many diff areas.

We surmise this is why their M&A is v. successful. They can buy startups in other areas but infuse this 1st principle mindset to make it synergistic.
7/15. In essence security is about inspecting every bit & byte. And $PANW does this across the OSI layers and are the best at it. Hence this skillset is very transferable to other sec areas.
8/15. What gives $PANW an edge over other NGFW vendors, however, is their application-centric awareness & security. They’ve always had the lead on this & this root has been fruitful for them in the cloud, especially w/ microsegmentation.
9/15. At the core of cloud security are the containers, & PANW has hands-down the best technology and talent in regards to this, substantially thanks to their roots back to GOOGL - a company that probably has the best sources of container management tech & talent pools available.
10/15. This container expertise is well demonstrated by PANW releasing the industry’s first containerized NGFW in 2020 – something that hasn’t been emulated by rivals 2 years later and counting.
11/15. So, we believe PANW’s deep 1st principles understanding of security coupled with container knowhow is a great comp advantage for them to become the number 1 winner in cloud security.
12/15. Then the icing on the cake is the slick M&A strategy that entails buying the best startups, empowering the founders to push forth their own visions, & then massively leveraging the skillset of $PANW’s excellent S&M teams.
13/15. In 2.5 years, $PANW spent $2.5bn in 9 acquisitions for #PrismaCloud & Cortex platforms, & based on current growth we surmise the incremental revenue will likely have covered this by next year, w/ FCF recouping the entire investment in another 3-7 years. Not bad $PANW team.
14/15. It’s a great strategy & totally against conventional notion of too much M&A is bad. It’s impossible to build in-house for every security need that is popping up in the highly dynamic cloud.
15/15. So, in this case the best way to provide value to the market & shareholders is to acquire, integrate, synergize, & improve > thus lowering TCO, increasing ROI, & giving CISOs & SOCs less headaches, & and making stronger security postures.
To sum up, as an investor the last 3 yrs should give confidence that $PANW is agile enough to make more key acquisitions to fill emerging gaps & ensure it can generate substantial value for shareholders.
For more on $PANW check out our Substack convequity.substack.com

• • •

Missing some Tweet in this thread? You can try to force a refresh
 

Keep Current with Convequity

Convequity Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @convequity

May 1
$FTNT's founder & CEO Ken Xie has demonstrated one of the most incredible long-term visions in cybersecurity history.

20+ yrs ago he envisioned standard CPUs would eventually be inefficient for processing security inspections coz of data volume & encryption.
Furthermore he envisioned networking & security would need to converged for optimal efficiency.
So, completely against the rest of the industry, $FTNT set on a long journey to develop their own processor specialized for security & networking.

They are now a leader in SD-WAN (aka WAN Edge Infrastructure) - the only security firm with home-grown SD-WAN.
Read 5 tweets
Apr 30
1/14. In past 10 years the productivity space has been ripe with innovation.

We’ve seen Comm players (Teams, Slack, $ZM) & Collaboration players ($SMAR, $DBX, $TEAM).

The 3rd C of productivity space is Coordination ($ASAN, $MNDY, AirTable).

Here's a thread about the latter.
2/14. In the 20th century, Scientific Management was the main mode of management.

It entailed simplifying jobs & optimizing them into a predefined series of steps.

Micromanagement ensued & this necessitated rigid org hierarchies.
3/14. Due to the heavy focus on manual work through the 1900s, Scientific Management worked very well & has greatly contributed to standards of living we enjoy today.
Read 14 tweets
Apr 23
In 2017 CS & other IBs were bearish on $PANW. And then in 2018 Arora became CEO & totally turned things round, transforming the firm from a dead-end firewall to a cloud security, ZTNA, & XDR leader, with very aggressive M&A strategy.

Here are some thoughts as to why it worked.
Usually such aggressive M&A (10 acq. in 2.5 yrs & spending nearly $3bn) destroys LT shareholder value.
Though $PANW's expertise is in Deep Packet Inspection (DPI) & doing this at real-time speed. This entails inspecting the header & payload of each packet - from Layer 2 thru 7 of the OSI model.
Read 11 tweets
Apr 20
1/11. Assessing who is the better at endpoint security - $S or $CRWD – is kind of academic coz both will sustain high growth for many years to come.
2/11. Though, if you agree that better AI/ML models will develop better security defenses, it’s interesting to consider what each vendor is doing to improve their AI.
3/11. Both have invested heavily to acquire more performant back-end infrastructure for faster & more cost-effective data processing.

In early 2021 CRWD acquired Humio and S acquired Scalyr.

These are important moves coz more performant data processing will enable better AI
Read 11 tweets
Mar 5
No doubt the war & rising geopolitical tensions will lead to more ransomware & other cybercrime.

Here is a thread highlighting the key security areas & the associated strongest vendors to prosper.

$PANW, $FTNT, $S, $ZS, $CRWD, $OKTA, Illumio, Netskope
War will escalate state-backed attacks >>> more funding going to skilled bad actors.

This funding will pay for increased automation to scan for openings across the web > therefore enterprises w/ global IT sprawl are most vulnerable.

$PANW has the best solution to fight this.
If/when bad actors do enter a network, they'll need to laterally move (east-west) searching for systems & data.

Best way to prevent this is with segmentation.

Illumio & $PANW are BoB for microsegmentation for cloud.

$FTNT is best option for industrial environments (OT).
Read 11 tweets
Mar 4
1/ $OKTA thesis. Not advice.

a) An opportunity to exploit coz of investor short-sightedness

b) Core biz is strengthening & could become the most valuable aspect of Zero Trust

c) The cloud-native approach will eventually smother out incumbents in newly entered markets

cont.
2/

d) Relative attractiveness compared to $NET and $ZS

e) Current price looks to be the lower bound of intrinsic range

f) High SBC but we calculate a 5% dilution charge going forward – not excessive if you believe in the long-term thesis
3/ Yesterday $OKTA dropped 8% following its Q4 ER.

Expanding operating losses continue to put off investors.

However, the increase in losses is entirely attributable to the temporary Auth0 integration expenses.
Read 22 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Don't want to be a Premium member but still want to support us?

Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal

Or Donate anonymously using crypto!

Ethereum

0xfe58350B80634f60Fa6Dc149a72b4DFbc17D341E copy

Bitcoin

3ATGMxNzCUFzxpMCHL5sWSt4DVtS8UqXpi copy

Thank you for your support!

Follow Us on Twitter!

:(