Palo Alto Networks is evolving its NextWave partner program to support the shift from point products to integrated security platforms, reflecting a broader market trend as AI accelerates both innovation and threat sophistication [1]. A modern security platform is essential as customers consolidate vendor relationships to cut complexity and improve resilience, raising the stakes for security providers. According to Futurum Group's 2H 2025 Cybersecurity Decision Maker Survey (n=1,008), 62.1% agree AI-powered defensive tools are now a necessity, and 43.0% plan to expand their security vendor count.
What is Covered in this Article
- Palo Alto Networks' NextWave program evolution and partner strategy
- The rise of platformization and vendor consolidation in cybersecurity
- AI's dual impact: accelerating both defense innovation and adversary tactics
- Execution risks and market implications for security vendors and buyers
The News
Palo Alto Networks is retooling its NextWave partner program to align with the new realities of cybersecurity, where a comprehensive security platform is both a catalyst for innovation and a weapon for defense against adversaries [1]. The company is betting on platformization, moving away from fragmented point solutions and toward integrated security platforms that unify network, cloud, and security operations. This shift responds to customer demand for fewer vendors, simpler management, and stronger resilience against increasingly sophisticated threats. The evolution of NextWave aims to equip partners to deliver these integrated security platform solutions, while also building customer trust in a market where the stakes for security breaches have never been higher [1].
According to Futurum Group's 2H 2025 Cybersecurity Decision Maker Survey (n=1,008), 73.2% of organizations expect their cybersecurity budget to increase in the next 12 months, and 62.0% have seen a significant rise in AI-driven social engineering attacks.
Analyst Take
The pivot toward platformization in cybersecurity is a direct response to the complexity and risk introduced by AI-driven threats. Vendors that can deliver integrated, AI-powered security platforms will have the upper hand, but execution risks remain high as buyers demand both innovation and trust.
Vendor Consolidation and the Security Platform Paradox
While customers are consolidating vendors to reduce management overhead, this strategy introduces new risks. Over-reliance on a single platform can create systemic vulnerabilities if that provider fails to innovate or suffers a breach. According to Futurum Group's 2H 2025 Cybersecurity Decision Maker Survey (n=1,008), 43.0% of organizations plan to expand their security vendor count, not consolidate, reflecting ongoing skepticism about single-vendor approaches. Buyers must weigh simplicity against potential lock-in and resilience trade-offs.
AI Arms Race Is Raising the Bar for Security Platform Capabilities
AI is now table stakes for both attackers and defenders. According to Futurum Group's 2H 2025 Cybersecurity Decision Maker Survey (n=1,008), 62.1% of security leaders agree that relying solely on human analysts is no longer viable. Vendors such as Palo Alto Networks, CrowdStrike, and Microsoft are racing to embed AI across detection, response, and automation. The winners will be those who can prove their AI models are effective, explainable, and secure—especially as adversaries use the same techniques to probe for weaknesses.
Execution Risk: Can Partners Deliver on the Security Platform Promise?
Palo Alto Networks' NextWave evolution hinges on partner enablement to deliver effective security platforms. Yet, many channel partners are still transitioning from selling point products to delivering integrated, AI-powered security platform solutions. According to Futurum Group's Channel Ecosystems Decision Maker Survey (n=400, 1H 2026), 71.0% of channel partners now sell AI software, but only 36.0% are deploying AI agents with clients. The gap between security platform vision and partner execution could slow adoption, especially for midmarket customers with limited resources.
What to Watch
- Platform Trust Test: Will buyers accept deeper platform lock-in for simplicity, or demand open integration by 2027?
- AI Model Transparency: Can security vendors provide explainable AI defenses that satisfy both CISOs and regulators?
- Partner Enablement Gap: Will channel partners upskill fast enough to deliver on the integrated platform promise?
- Adversary Innovation Curve: How quickly will attackers adapt to AI-powered defenses, and can platforms keep pace?
Sources
1. How NextWave’s Evolution Drives Shared Success
Declaration of generative AI and AI-assisted technologies in the writing process: This content has been generated with the support of artificial intelligence technologies. Due to the fast pace of content creation and the continuous evolution of data and information, The Futurum Group and its analysts strive to ensure the accuracy and factual integrity of the information presented. However, the opinions and interpretations expressed in this content reflect those of the individual author/analyst. The Futurum Group makes no guarantees regarding the completeness, accuracy, or reliability of any information contained herein. Readers are encouraged to verify facts independently and consult relevant sources for further clarification.
Disclosure: Futurum is a research and advisory firm that engages or has engaged in research, analysis, and advisory services with many technology companies, including those mentioned in this article. The author does not hold any equity positions with any company mentioned in this article.
Analysis and opinions expressed herein are specific to the analyst individually and data and other information that might have been provided for validation, not those of Futurum as a whole.
Read the full Futurum Group Disclosure.
Author Information
Fernando Montenegro serves as the Vice President & Practice Lead for Cybersecurity & Resilience at The Futurum Group. In this role, he leads the development and execution of the Cybersecurity research agenda, working closely with the team to drive the practice's growth. His research focuses on addressing critical topics in modern cybersecurity. These include the multifaceted role of AI in cybersecurity, strategies for managing an ever-expanding attack surface, and the evolution of cybersecurity architectures toward more platform-oriented solutions.
Before joining The Futurum Group, Fernando held senior industry analyst roles at Omdia, S&P Global, and 451 Research. His career also includes diverse roles in customer support, security, IT operations, professional services, and sales engineering. He has worked with pioneering Internet Service Providers, established security vendors, and startups across North and South America.
Fernando holds a Bachelor’s degree in Computer Science from Universidade Federal do Rio Grande do Sul in Brazil and various industry certifications. Although he is originally from Brazil, he has been based in Toronto, Canada, for many years.
