Killed By Claude Report
← HomeCurrent verdict
Assessment
Anthropic is becoming more relevant to Palo Alto Networks, especially in AI-assisted cyber defense, vulnerability discovery, software security review, and agentic work inside enterprise tools.
But let's be serious: Claude is not a substitute for Palo Alto's core business. It does not replace firewalls, SASE, endpoint agents, CNAPP, SOC workflows, compliance plumbing, channel muscle, or hardware deployments.
The real threat is narrower:
- Claude can eat into security copilot and AI-assist layers.
- It can strengthen competitors and internal enterprise teams.
- It can commoditize portions of detection triage, code security review, and vuln research.
That matters, but Palo Alto is still protected by deep enterprise distribution, embedded infrastructure, and ugly real-world deployment complexity.
Biggest historical hit
The sharpest overlap is Claude Opus 4.6 and the related security work around it.
Anthropic explicitly says the model has enhanced cybersecurity abilities and is being used to find and patch vulnerabilities in open-source software. That is a real overlap with Palo Alto's growing AI-driven security operations and threat prevention story.
Still, it hits a feature layer more than the whole company.
What still protects them
Palo Alto's protection is boring, expensive, and very real.
Also, Anthropic is showing signs of being a partner to cyber incumbents, not just a destroyer of them. One evidence item literally names Palo Alto Networks as a partner helping find and fix flaws.
So yes, Claude can pressure specific product surfaces.
No, Palo Alto is not getting vaporized unless it somehow lets the model layer capture all the customer value above its infrastructure. That would be incompetent, and they look too big and too integrated for that.
Signals
Why this is in the blast radius
Anthropic says Opus 4.6 has enhanced cybersecurity abilities and is already being used to help find and patch vulnerabilities. That overlaps with Palo Alto's AI-driven SecOps, threat detection, and cloud/code security messaging.
It does not replace Palo Alto's deployed security stack, but it absolutely pressures the AI-analysis layer that vendors love to market as differentiated.
Automated PR security review and vulnerability checking maps directly onto parts of application security and code security workflows that security platforms increasingly want to own.
For Palo Alto, this is a real overlap around developer-facing security assistance and shift-left security. Still, it is only one slice of a much larger platform.
Computer use means Claude can operate across live enterprise applications and multi-step workflows like a human analyst. That creates future pressure on repetitive SOC investigations, admin workflows, and security operations orchestration.
But Palo Alto sells the systems of record and control planes here; Anthropic is more likely to augment or sit above them than replace them outright.
This actually cuts against a pure disruption story. Anthropic says it partnered with Palo Alto Networks and other major tech/security firms to use Mythos Preview to help find and fix flaws.
If Anthropic is partnering with Palo Alto, then Palo Alto may capture value by embedding Claude-like capabilities rather than losing the account.
The partner network expands enterprise adoption of Claude for consulting and modernization work, which increases the model's reach into enterprise IT and security-adjacent workflows.
But for Palo Alto specifically, this is indirect. It threatens smaller services-heavy AI vendors much more than a giant cybersecurity platform vendor with its own distribution.