# Palo Alto Networks

[6 tracked vendors](https://thirdpartyindex.com/vendors/palo-alto-networks#used-by) name Palo Alto Networks as a subprocessor, including [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud), [Glean](https://thirdpartyindex.com/vendors/glean) and [Rubrik](https://thirdpartyindex.com/vendors/rubrik). We have not found a subprocessor list published by Palo Alto Networks. We monitor 6 of its documents, which we last checked on 2026-11-11.

Palo Alto Networks (paloaltonetworks.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/palo-alto-networks
- Documents last verified: 2026-11-11
- Transparency rating: 44/100 (how much it publishes, not how secure it is): Subprocessor list 0/30 (not found); Processing locations 0/8 (no list); Purposes 0/7 (no list); Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 0 tracked vendors directly, 0 within two hops, 0 within three; 6 tracked vendors rely on it directly, 1921 within two hops, 2797 within three
- Cite as: Palo Alto Networks, Third Party Index, https://thirdpartyindex.com/vendors/palo-alto-networks (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://www.paloaltonetworks.com/legal-notices/trust-center | 2026-11-11 | 2026-11-05 |
| Data processing addendum | https://www.paloaltonetworks.com/content/dam/pan/en\_US/assets/pdf/legal/palo\_alto\_networks\_customer\_data\_processing\_addendum.pdf | 2026-11-11 | 2026-11-05 |
| Privacy policy | https://www.paloaltonetworks.com/legal-notices/privacy | 2026-11-11 | 2026-11-05 |
| Terms | https://www.paloaltonetworks.com/legal-notices/terms-of-use | 2026-11-11 | 2026-11-05 |
| Security page | https://www.paloaltonetworks.com/legal-notices/trust-center/security | 2026-11-11 | 2026-11-05 |
| Status page | https://status.paloaltonetworks.com/ | 2026-11-11 | 2026-11-11 |

## Subprocessors (0)

No subprocessor list has been found or read for this vendor.

## Security program

What Palo Alto Networks Inc's Form 10-K for fiscal 2026, filed Sep 10, 2026 (Item 1C) says, in its words (https://www.sec.gov/Archives/edgar/data/1327567/000132756726000023/0001327567-26-000023-index.htm).

- Led by: Chief Information Security Officer
- Leader's experience: 25+ years
- Board oversight: Security Committee
- Frameworks named: NIST
- Practices named: Incident response plan, Tabletop exercises, Penetration testing, Phishing simulations
- Engages outside assessors or consultants
- Reviews its suppliers' security
- Says no cybersecurity incident has materially affected it

## Web Technologies

Palo Alto Networks's homepage made 293 requests to 47 domains, 23 services controlled by another company, and 2 domains not identified. Loaded on 2026-11-06 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

23 third parties by category: Advertising 10 (Google Cloud, Microsoft, X Corp., Podscribe, Reddit, Inc.; reviewed: Eyeota, Index Exchange Inc.; usually detected as Advertising: Magnite, Inc., PubMatic, The Trade Desk, Inc.); Analytics 6 (LinkedIn, Demandbase, Meta, Bombora, Quora; usually detected as Analytics: G2.com); Marketing automation 1 (Adobe); Cookie compliance 1 (OneTrust); Customer data platform 1 (reviewed: LiveRamp); Documentation 1 (TechTarget, Inc.); RUM 1 (Akamai); Search engines 1 (Coveo); Video players 1 (reviewed: Brightcove). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (23)

- Google Cloud: 57 requests to google.com, doubleclick.net, googleadservices.com, googletagmanager.com, google-analytics.com; DoubleClick Floodlight, Google Analytics, Google Tag Manager
- Adobe: 33 requests to adobedtm.com, demdex.net, marketo.net, mktoresp.com, omtrdc.net; Marketo
- Brightcove: 13 requests to brightcove.com, boltdns.net, brightcovecdn.com
- OneTrust: 12 requests to cookielaw.org, onetrust.com; OneTrust
- LinkedIn: 9 requests to linkedin.com, licdn.com; Linkedin Insight Tag
- Microsoft: 8 requests to clarity.ms, bing.com; Microsoft Advertising
- X Corp.: 7 requests to t.co, twitter.com, ads-twitter.com; Twitter Ads
- Demandbase: 6 requests to company-target.com, demandbase.com; Demandbase 11.9.0
- Meta: 4 requests to facebook.com, facebook.net; Facebook Pixel 2.9.437
- Akamai: 3 requests to go-mpulse.net, akstat.io; Akamai mPulse
- Podscribe: 3 requests to podscribe.com, d34r8q7sht0t9k.cloudfront.net; Podscribe
- Reddit, Inc.: 3 requests to reddit.com, redditstatic.com; Reddit Ads
- Bombora: 2 requests to ml314.com; Bombora
- Coveo: 2 requests to coveo.com; Coveo
- Magnite, Inc.: 2 requests to rubiconproject.com, tremorhub.com
- Quora: 2 requests to quora.com; Quora Pixel
- TechTarget, Inc.: 2 requests to techtarget.com; TechTarget
- Eyeota: 1 request to eyeota.net
- G2.com: 1 request to g2.com
- Index Exchange Inc.: 1 request to casalemedia.com
- LiveRamp: 1 request to rlcdn.com
- PubMatic: 1 request to pubmatic.com
- The Trade Desk, Inc.: 1 request to adsrvr.org

### Unknown (2)

Domains not identified yet: takingbackjuly.com, securedvisit.com

### First party (1)

- Palo Alto Networks: 110 requests to paloaltonetworks.com; Adobe Analytics, Adobe Audience Manager, Adobe Experience Manager, Adobe Experience Platform Identity Service, Adobe Experience Platform Launch, Adobe Target 2.11.7, Akamai, Apache HTTP Server, Boomerang, HSTS, Java, Lozad.js, Microsoft Clarity, Open Graph, PWA, Popper, Priority Hints, VideoJS 7.20.3, core-js 3.32.2, jQuery 3.6.1

14 tracked companies loaded by the homepage are not in Palo Alto Networks's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (6)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [AppViewX](https://thirdpartyindex.com/vendors/appviewx.md): Cloud security platform
- [Glean](https://thirdpartyindex.com/vendors/glean.md): AI security provider (Prisma AI Runtime Security)
- [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud.md): Technical Support
- [NCC Group](https://thirdpartyindex.com/vendors/ncc-group.md): Managed Firewall service
- [Netdata Cybersecurity](https://thirdpartyindex.com/vendors/netdata-cybersecurity.md): Cloud solutions.; Core product.; Identity management
- [Rubrik](https://thirdpartyindex.com/vendors/rubrik.md)

## Service status

Incidents it reported on its own status page.

- Last 90 days: 65 reported incidents (3 major or critical, 16 minor, 46 with no impact stated)
- Typical time to resolve: 1 h 35 min
- Status page last read: 2026-11-12
- Its status page says now: Partially Degraded Service (affected: Prisma Cloud: degraded performance, Cloud NGFW for AWS: degraded performance)
- Under way: Prisma Cloud: Alert Manual and Automated Remediation is unavailable (minor), since 2026-11-09 11:45 UTC
- 2026-11-12: WildFire Australia Cloud Service Scheduled Maintenance (no impact stated)
- 2026-11-12: WildFire South Korea Cloud Service Scheduled Maintenance (no impact stated)
- 2026-11-12: WildFire India Cloud Service Scheduled Maintenance (no impact stated)
- 2026-11-12: WildFire Saudi Arabia Cloud Service Scheduled Maintenance (no impact stated)
- 2026-11-12: WildFire UK Cloud Service Scheduled Maintenance (no impact stated)
- 2026-11-12: WildFire Singapore Cloud Service Scheduled Maintenance (no impact stated)
- 2026-11-12: WildFire Delhi Cloud Service Scheduled Maintenance (no impact stated)
- 2026-11-11: WildFire Taiwan Cloud Service Scheduled Maintenance (no impact stated)

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api