Six Cybersecurity Giants Are Buying Their Way Into the AI Security Boom
Palo Alto, Microsoft, Cisco, Google, Fortinet, and CrowdStrike are acquiring, building, and posting revenue numbers that suggest the AI security cycle is real and accelerating.
Key points
- Fortinet acquired Virtue AI, a specialist in protecting autonomous AI systems, as part of a push to sell security tools built specifically for AI agents.
- Palo Alto Networks reported $3.4 billion in quarterly revenue, up 34%, driven partly by its Prisma AIRS AI security platform hitting $100 million in annual recurring revenue.
- CrowdStrike posted revenue up 26% to $1.47 billion in its latest quarter.
- Microsoft's security platforms process 100 trillion threat signals every day, according to the company.
- Cisco's security revenue rose 14% to $2.2 billion after three acquisitions targeting AI and identity security in three consecutive months.
The pitch from every major cybersecurity vendor right now is some version of the same sentence: artificial intelligence is both the biggest threat and the biggest opportunity in the industry's history. What is less obvious is how much of that claim is backed by actual revenue.
Pretty much all of it, as it turns out.
Who is winning, and by how much?
The six biggest players are all growing fast, and not by accident. Each has made at least one acquisition in the past year aimed squarely at AI security.
| Company | Latest quarterly revenue | Growth year-over-year |
|---|---|---|
| Palo Alto Networks | $3.4 billion | 34% |
| Cisco (security segment) | $2.2 billion | 14% |
| Fortinet | $2.05 billion | 26% |
| CrowdStrike | $1.47 billion | 26% |
| Microsoft | Not broken out separately | Not disclosed |
| Not broken out separately | Not disclosed |
Fortinet's acquisition of Virtue AI, a company focused on protecting autonomous AI systems from being manipulated or hijacked, is the clearest sign of where this market is heading. We first covered Virtue AI on 18 August 2026. Fortinet is also developing a hybrid mesh firewall, a security layer that spans office networks, cloud infrastructure, and edge locations simultaneously, designed to handle the traffic patterns that AI tools generate.
Palo Alto went bigger. Its $25 billion purchase of CyberArk, a company that controls which software and people are allowed to access sensitive systems, was the headline deal. The faster-growing story is Prisma AIRS, its platform for securing AI applications at runtime, meaning while those applications are actually running and making decisions. A hundred million dollars in annual recurring revenue in its first year makes it the fastest-growing product in Palo Alto's history, according to the company.
Should ordinary people care about any of this?
Yes. AI agents, meaning software programs that act autonomously to complete tasks inside company systems, are already handling sensitive work at financial institutions and hospitals. If those agents get manipulated, the damage lands on customers and patients, not just IT departments. Our report on Microsoft's Azure wipeout by the JadePuffer ransomware crew showed how fast that damage can move: more than 100 storage accounts destroyed in seven minutes.
CrowdStrike CEO George Kurtz said on his company's latest earnings call that every enterprise will run on AI and that securing it is the largest market opportunity in the company's history. That's self-interested, obviously. Cisco's CEO Chuck Robbins made a similar case, calling agentic AI a "unique opportunity" and "a supercycle" for security vendors.
Google, which owns threat-intelligence firm Mandiant and cloud-security company Wiz, reported a 45% quarter-over-quarter increase in AI workloads scanned and protected. Microsoft launched Project Perception, a system that uses teams of AI agents to simulate attacks and then drive remediation.
The honest read: the incumbents had every structural reason to be slow here, and they weren't. Any startup hoping to crack this market needs a sharper edge than "we also do AI security." The window for that pitch is closing.
