Speaker · Updated
Nikesh Arora: latest market views
Palo Alto Networks
Summary
Chairman and CEO of Palo Alto Networks, the cybersecurity company he has led since 2018, previously a senior executive at Google and president/COO of SoftBank.
Chorus has 21 views from Nikesh Arora across 2 episodes on All-In Podcast since October 21, 2026. Their latest calls: bullish on NVIDIA.
Where they stand
Their latest bullish or bearish call on each company.
- NVIDIABullish ·
What they talk about most
The latest views
Newest first. Every quote is checked against the episode's transcript.
Enterprises will prefer open-weight models for explainability and auditability that regulators demand.
Arora says Palo Alto Networks preferences open-source, open-weight models because they let it modify and train the weights and interrogate the chain of thought. Over time all enterprises will need explainability, verifiability and auditability. He says that in financial services and healthcare, regulators will not accept 'the IT guys put an AI model in there and it did it.' Only open-weight models provide that visibility, which is a major reason enterprises are moving away from the closed race.
“And we can only get that with open source, open weight models. We can interrogate chain of thought. That's kind of one reason we're gravitating towards them as opposed to getting caught into the closed race.”at 9:50
All-In Podcast: AI Cyber Panic, Ken Griffin's Bubble Warning, The Fall of France? ·
AI infrastructure & data centers
Compute is scarce and demand insatiable, so enterprises must accept hyperscaler terms rather than build their own.
Arora says Palo Alto shut its own data centers six to eight years ago because hyperscalers offered better scale, speed and reliability. Now compute is highly dear and hard to find. He calls Palo Alto a taker of terms, not a dictator, because Nvidia cannot deliver chips until 2028, and land and power for data center shells are hard to get. He sees the likely outcome as a hybrid: bare metal from a hyperscaler or a neocloud, or compute stitched together from around the world. He expects the profit pool to shift toward whoever has compute, and says demand is insatiable with not enough compute in the world to satisfy everyone.
“compute is highly dear. It's very hard to find compute in the world, period.”at 11:16
All-In Podcast: AI Cyber Panic, Ken Griffin's Bubble Warning, The Fall of France? ·
AI models now find long-known vulnerabilities cheaply, so attacks will accelerate and patching becomes cat-and-mouse.
Arora says OpenAI, Anthropic and most likely Google now have models that can find vulnerabilities, and even chain them into attack paths, given enough compute and persistence. He says the PHP exploit was identified years ago but seen as too hard to solve, and was cracked by throwing persistent compute at it. Once published, the fix was reverse engineered and every hacker knows how to exploit it. He expects threats to come faster than every ten days. He notes that many enterprises are using frontier models to probe their own defenses, and that the next model will find more. He expects a cat-and-mouse game of constant patching, and much of the accumulated technical debt, such as old website versions, must now be paid.
“Actually, the PHP problem was solved by persistent compute. This problem was identified a few years ago, but nobody thought it could be solved because it required too much of coordination.”at 18:49
All-In Podcast: AI Cyber Panic, Ken Griffin's Bubble Warning, The Fall of France? ·
Banks will likely block consumer AI agents from logging in, because liability and dispute costs are too high.
Arora says agents act with a user's credentials from inside the browser, so banks cannot tell agent traffic from the user's. CAPTCHA can now be solved with AI. The bigger problem is liability: agents accumulate many credentials, and it is unclear who owns the liability. Banks already absorb small disputed charges because support calls cost more than the disputes. He expects banks to respond by declaring they will not allow interaction with agents at all, and says the cost of tons of agent-driven explainability calls will be huge.
“The biggest problem we're gonna have is who owns the liability and who has accountability, whether it's enterprise agents or consumer agents. So I think you see banks saying, do not... I do not allow you to interact with me with your agent, period.”at 23:11
All-In Podcast: AI Cyber Panic, Ken Griffin's Bubble Warning, The Fall of France? ·
Defenders cannot yet out-compute attackers; they must aggregate signals to spot and eject intruders quickly.
Arora says defenders cannot yet launch coordinated defensive swarms because their infrastructure is disparate. A company with 5,000 websites has IT staff cataloguing each one, because nobody has aggregated and understood the estate. He says the base level of preparedness requires fixing technical debt first. He advises assuming a breach. The focus should shift to aggregating signals and data so anomalous behavior can be spotted using defensive compute, and to how quickly intruders can be found and ejected.
“Not true today because the underlying systems are not architected or orchestrated in such a way that we can launch these, let's call it defensive swarms because everything is sort of in disparate situations.”at 25:02
All-In Podcast: AI Cyber Panic, Ken Griffin's Bubble Warning, The Fall of France? ·
Frontier labs aren't causing the cyber problem; they're compute-constrained and rate-limiting while grappling with power.
Arora rejects the theory that frontier labs gatekeeping their most powerful cyber-defense tools is causing the chaos. He says most lab leaders are researchers who are surprised by how powerful the models are and are asking partners what to do with them. The labs are compute-constrained and rate-limit even enterprise customers who have access to the newest models. He sees them trying to figure out how to release and monetize the models, rather than causing the problem.
“So I think they're not causing the problem. They're just trying to grapple with the fact that these things are extremely powerful.”at 28:23
All-In Podcast: AI Cyber Panic, Ken Griffin's Bubble Warning, The Fall of France? ·
Users who grant agents agency bear liability, but rogue agents create product liability for builders.
Arora argues that agency is the key concept. Whoever gives the agent agency to act on their behalf has the liability, so the user is responsible, just as with a credit card lent to a friend. The exception is a rogue agent, which is a product liability issue. If the product does not behave as intended or as advertised, the company that built it is responsible, as with any product that does not work as advertised.
“There's a word in agent. It's called agency. Somebody has to give the agent agency... And if you're the one who's giving agency, you have the liability.”at 31:31
All-In Podcast: AI Cyber Panic, Ken Griffin's Bubble Warning, The Fall of France? ·
Unconstrained AI models hand powerful capability to anyone who can afford it, undermining global treaties.
Arora calls unguarded models the dark side of AI. Global governance and treaties are only as strong as the weakest link. If a company gives raw AI power with no built-in or enforceable guardrails, it is effectively handing a nuclear-style capability to anyone who can afford it. He compares it to handing out a do-it-yourself kit. He sees a contradiction: policymakers talk about treaties to pace AI development, while such firms make the most powerful tools available without controls.
“you're basically handing a nuclear sort of bomb to the hands of anybody who wants it because you can afford it. That's the problem.”at 33:58
All-In Podcast: AI Cyber Panic, Ken Griffin's Bubble Warning, The Fall of France? ·
Major cyber breaches are coming, and the fallout will be brutal over the next year.
He says there will be a bunch of nine-eleven-style cyber events, and CISO phones ring every day with companies trying to get out of the problem. Once systems come back online after being hacked, the next year or so will be brutal and a big transition period. He expects heightened demand for security leaders as a result.
“people really appreciate the CISO and those groups when these things... And the systems come back online and the system's been hacked, it's gonna be brutal the next year or so.”at 38:27
All-In Podcast: AI Cyber Panic, Ken Griffin's Bubble Warning, The Fall of France? ·
Enterprise cyber spend runs 4-10% of IT budgets and will need to rise.
Typically cyber costs are 4-10% of IT budget. Financial services and the federal government sit near 10% because they need things secure and robust. Cloud-first firms can land at 4-5% because hyperscalers handle infrastructure security, leaving only application and software security to the customer. He expects the spend to go up, with the range moving to about 8-10% for many firms. He runs Palo Alto Networks, which is why this is his own sector view, but he is describing the market rather than a company result.
“the cost is somewhere in the four to 10% range for cyber. Okay? And 10% is typically where you'll find financial services, the federal government, because they want to make sure things are secure and robust.”at 39:29
All-In Podcast: AI Cyber Panic, Ken Griffin's Bubble Warning, The Fall of France? ·
AI agent security harnesses have not been built yet, and that work has barely started.
Enterprises are rushing to deploy AI and agents, but they cannot even find all the agents running in their systems. Security tooling has not caught up. He cites a researcher finding that a conversation could be used to extract private information, forcing patches. He compares the moment to the Wright brothers, when no one yet had built the TSA, arguing that security gets built only after the bad things happen.
“We need to build all the security harnesses for AI, and that's not even started yet.”at 40:46
All-In Podcast: AI Cyber Panic, Ken Griffin's Bubble Warning, The Fall of France? ·
Enterprises must start replacing IT stacks with quantum-safe infrastructure now, not in 2029 or 2030.
Nikesh argues that nearly every enterprise runs on cryptographic keys, and every vendor has keys at each end, so anything that is not quantum-proof will be breakable first. Companies cannot wait for a single cutover date, because replacing trillions of dollars of IT infrastructure cannot be done in one step. He says that the timeline is already late, since the threat is about three years away. He estimates that about half of enterprise IT spend is on infrastructure that is not quantum-safe, and that a few hundred million dollars per firm is already earmarked this year. As a stopgap, companies can wrap traffic in post-quantum-ready keys now, and the replacement should begin immediately.
“you can't wait for 2029 or 2030... So you should be replacing your IT stack today with quantum safe or quantum proof infrastructure right now.”at 5:47
All-In Podcast: Arvind Krishna & Nikesh Arora: Quantum Threat, Open vs Frontier AI, AI Cyber Warfare & SaaS Collapse ·
Most enterprise AI use cases will end up on trained open-source models, with frontier models reserved for high-value cases.
Nikesh argues that enterprises should match each task to the level of intelligence and cost it needs, rather than using a Ferrari for everything. Customers will not pay for frontier-level capability on routine tasks. Frontier models will be used only where the value at risk is large, such as a live breach or drug discovery. For most enterprise use cases, companies will train an open-source model on proprietary data and manage its weights. He gives auditability and explainability as the reasons, and says his own defender model would likely follow this path.
“I think for most practical use cases in enterprises, we're gonna end up training some version of an open source model.”at 12:19
All-In Podcast: Arvind Krishna & Nikesh Arora: Quantum Threat, Open vs Frontier AI, AI Cyber Warfare & SaaS Collapse ·
AI finds many real flaws but hallucinates often; attackers need one bug, so defenders should pool vulnerability fixes.
Nikesh says frontier models trained on code can tell good code from bad, and they find vulnerabilities. The results are noisy, though: he cites hallucination rates near 30%, and a show of hands among peers suggested roughly 60 to 80% of findings were real. Every flagged issue therefore has to be tested before it can be trusted. The asymmetry favours attackers, who need only one vulnerability, while defenders must find and patch every one. He proposes that trusted parties pool vulnerabilities and distribute patches across companies, rather than each firm testing and patching alone. Even AI-written code is not error-free, so it still needs human verification.
“the reason it's perfect for attackers is they just need one vulnerability. They don't need 10 vulnerabilities. If you're a defender, you need find every vulnerability and patch it.”at 17:07
All-In Podcast: Arvind Krishna & Nikesh Arora: Quantum Threat, Open vs Frontier AI, AI Cyber Warfare & SaaS Collapse ·
Nobody is slowing AI; builders are accountable for what they ship, and the debate is over-focused on dangers.
Nikesh says nobody is slowing AI development, and that everyone is working frenetically to build better and faster models. He argues that the public conversation has over-rotated to the dark side and perils of AI, with too little on its benefits, which he calls a narrative problem. He also holds that companies are accountable for what they release, and that they cannot say the software wrote itself. A company that takes economic value from selling software accepts responsibility for it. In his view, existing regulation is already enough, and perhaps too much, to hold firms to account.
“if you build something, you're accountable for it. If you build something and unleash it, you can't unleash and say, oops, I don't know how to control it. That argument doesn't work.”at 23:29
All-In Podcast: Arvind Krishna & Nikesh Arora: Quantum Threat, Open vs Frontier AI, AI Cyber Warfare & SaaS Collapse ·
AI infrastructure & data centers
Compute access will be uneven: companies far from the US and China will lack supply, regardless of their budgets.
Nikesh fears that fast compute advances will concentrate in two large countries, and that the benefits will not be spread evenly across the rest of the world. Compute is scarce right now, and it is hard to get enough to run anything at scale. The further a company is from the centre of gravity, the less likely it is to get capacity. The constraint is supply rather than price. A European company with good intentions could find it gets less access than US or Chinese companies.
“I fear that we will see fast advances in compute development in two large countries in the world... compute is very dear right now... It's purely because of supply constraints.”at 27:58
All-In Podcast: Arvind Krishna & Nikesh Arora: Quantum Threat, Open vs Frontier AI, AI Cyber Warfare & SaaS Collapse ·
NVIDIABullish
Nvidia's Jensen Huang is building a vertically integrated AI stack and funding the ecosystem to keep it there.
Nikesh describes Nvidia as the modern version of the vertically integrated stack, reaching down to the silicon and up to applications. He says Huang understands that a balance will emerge between frontier models and other models. Nvidia is funding others across the ecosystem so that they do not stray from the stack he is building. Nikesh argues that with control of the full stack, a company can choose which layer to commoditise and move profit between layers. He adds that attacks on one layer can be absorbed by shifting profit to another, which gives the company powerful market leverage.
“If you look at what Jensen is doing, he's a modern day version of the vertically integrated stack... He's trying to fund everybody in the ecosystem to ensure that they don't stray from the vertical integrated stack that he's producing.”at 32:03
All-In Podcast: Arvind Krishna & Nikesh Arora: Quantum Threat, Open vs Frontier AI, AI Cyber Warfare & SaaS Collapse ·
Enterprise AI adoption & AI software
Memory and context will lock users into AI agent stacks, so model routing services will struggle.
Nikesh argues that context and memory are now inseparable from reasoning as models grow. Routing services such as OpenRouter would therefore only move reasoning tokens, and running a model-agnostic router will become impossible. Over time the economics will favour end-to-end stacks priced per action. Personal agents illustrate the point: once an agent is trained on a user's context, APIs and connectivity, switching it to another stack means losing that memory. Friction will be high, so application-layer vendors will build vertical stacks too.
“memory will require or make it easier and there'll be too high of friction for you to move your task from one stack to the other stack because it has all your context and memory.”at 33:42
All-In Podcast: Arvind Krishna & Nikesh Arora: Quantum Threat, Open vs Frontier AI, AI Cyber Warfare & SaaS Collapse ·
AI agents will force apps to go headless, making consumer control the largest AI battle.
Arora argues that frontier labs will push a full-court press to make AI assistants the interface for consumers. He says this has been tried six to nine months ago without success, but Facebook's approach now shows how it can work, so he thinks nearly everyone will pursue it. Apps will expose APIs and have to become headless, which he calls the largest battle of consumer control.
“Now with Facebook showing us how it can work, I think pretty much everybody has it. There'll be APIs. It'll be the largest battle of consumer control.”at 34:37
All-In Podcast: Arvind Krishna & Nikesh Arora: Quantum Threat, Open vs Frontier AI, AI Cyber Warfare & SaaS Collapse ·
Cyber valuations are inflated by the AI shock and will rationalize, since buyers will spend heavily on cyber.
Arora notes cyber stocks are enjoying much better valuations lately because of the AI shock. He calls this fine but expects it to rationalize over time. His reason is that all these companies will spend unlimited amounts of money on cyber, which supports the sector's demand but does not justify the current valuation premium.
“For some reason, you know, cyber is enjoying much better valuations lately because of the AI mid horse event, which is fine, which will rationalize over time because all these guys are going go spend unlimited amounts of money on cyber.”at 36:23
All-In Podcast: Arvind Krishna & Nikesh Arora: Quantum Threat, Open vs Frontier AI, AI Cyber Warfare & SaaS Collapse ·
Huge SaaS disruption coming as AI makes it unclear which software survives the next five to eight years.
Arora says it is hard to value the terminal value of software because it is unclear what will survive the next five to eight years given where AI is. He argues product-market fit is being disrupted for many software companies. His test: he knows exactly how half the packaged software he buys should work if AI were applied well, so someone will build it. That leads him to expect huge disruption in SaaS over the next few years.
“It's not clear what software is going to survive the next five to eight years with where we are from an AI perspective... So I think there's gonna be huge disruption in the SaaS space over the next few years.”at 37:06
All-In Podcast: Arvind Krishna & Nikesh Arora: Quantum Threat, Open vs Frontier AI, AI Cyber Warfare & SaaS Collapse ·
Shows
- All-In Podcast · 2 episodes
Ask your AI what Nikesh Arora thinks
Chorus gives Claude, ChatGPT and other assistants every view Nikesh Arora has shared on the shows it covers, next to everyone else's. Ask where they stand, what changed, and who disagrees.
Chorus reports what speakers said. It isn't investment advice.