PANW NEWS
UrgentXSIAMCISA adds PHP2Shell (CVE-2026-109618, CVE-2026-109619) to KEV; federal agencies must patch by Thursday, Oct 29UrgentXSIAMPHP2Shell (CVE-2026-109618, CVE-2026-109619) now confirmed exploited in the wildAgentiXCortex Cloud SaaS Security launches, with Cortex AgentiX handling responsePrisma"Securing the AI Systems of Tomorrow": Palo Alto's blueprint for securing Claude across the enterprisePrisma2026 SecureIQLab benchmarks name Palo Alto the sole Leader in NGFW (93.0%) and SSE (94.5%)PartnersNikesh Arora's FY2026 pay fell 19.5% to $80.3M; FY2027 PSU payout cap cut to 3xCompeteWiz: PHP2Shell (CVE-2026-109618, CVE-2026-109619) exploitation attempts and remediation trendsCompeteGoogle SecOps "What's New" (Oct 19-25): case reopen control, GTI Alerts Connector, outer joins in rulesCompeteDatadog dd-trace-py ReDoS denial-of-service bug, CVE-2026-116588 (CVSS 4.0 8.7)CompeteSplunk: Agent Observability alerts now flow into Enterprise Security for AI-driven containmentXSIAMNikesh Arora calls for "hybrid patching" and a SOC rebuilt around SOAR, then agentsPrismaPrisma Browser for Microsoft Intune is available on the Apple App Store and Google PlayPrismaPalo Alto (Idira) named a Leader in the 2026 Gartner Magic Quadrant for Privileged Access Management, for the eighth timePAN-OSCVE-2026-111497 (Brotli out-of-bounds write) affects PAN-OS 11.2 and 12.x with Brotli inspection and decryption on (9.2 CRITICAL)CompeteSentinelOne and Moro Hub bring sovereign AI security to the UAECompeteWiz: "The Pwn Request Reckoning" maps the GitHub Actions attacks that still work after GitHub's 2026 hardeningCompeteDatadog Security Labs: "Code security for new coders" guide for AI coding-agent usersCompeteSplunk SVD-2026-1013 (PHP2Shell, CVE-2026-109618 and CVE-2026-109619): Smartlook now listed as RemediedXSIAMCortex blog: mitigating PHP2Shell (CVE-2026-109618, CVE-2026-109619) with the Cortex platformXSIAMCorrection: Unit 42 retracts European government PHP2Shell (CVE-2026-109618, CVE-2026-109619) casePartnersCortex XDR One launches in IndiaCompeteWiz: 'Broccoli2Shell' Brotli decoder RCE (CVE-2026-111497) hits Node.js, Bun, Envoy, IstioCompeteWiz: 'Gheist' campaign abuses stolen GitHub tokens to dump CI secretsCompeteMicrosoft: Unified Security Operations in Defender (ISOC) runs SOC without a Sentinel workspace (preview)
This week
PAN Portfolio
HomeWhat's HotAI Conversation
Search What's Hot This Week Selling Palo Alto Networks into AI Data Centers

Resources

Partner Architects
Your Palo Experts at Optiv

Our Partner Architect team specializes in Palo Alto Networks solutions. They help your sales teams scope, architect, and position PAN solutions for your customers.

The Team

Coverage Matrix

Each PA specializes in specific pillars. Find the right expert for your opportunity.

PA Strata SASE XSIAM / SecOps Cortex Cloud AIRS Identity Observability
F
Ford
All SASE + Prisma Browser
C
Chad
C
Charles
All Cortex except Cloud
?
TBD
CyberArk

Meet the Team

Partner Architect Profiles

F

Ford

Partner Architect

Ford is the SASE specialist — covering Prisma Access, Prisma SD-WAN, Prisma Browser 2.0, App Acceleration, and all things SASE. Also covers Strata (NGFW, Strata Cloud Manager, all networking) and Chronosphere observability.

Strata SASE Observability AIRS
C

Chad

Partner Architect

Chad specializes in Cortex Cloud (CNAPP, CDR, cloud security posture). Also covers Strata (NGFW, Strata Cloud Manager, all networking) and Chronosphere observability. Your go-to for cloud-first customers and multi-cloud architectures.

Strata Cortex Cloud Observability AIRS
C

Charles

Partner Architect

Charles covers all Cortex except Cloud — XSIAM, XDR, XSOAR/AgentiX, Xpanse, and all SecOps capabilities. Also covers Strata (NGFW, Strata Cloud Manager, all networking) and Chronosphere observability. Your go-to for SOC modernization and XSIAM opportunities.

Strata XSIAM / SecOps Observability AIRS
?

TBD

Partner Architect — Identity

Dedicated Identity/CyberArk Partner Architect role to be filled. Will cover privileged access management, identity governance, and the full CyberArk integration portfolio.

Identity (CyberArk) Hiring

Engagement Model

How to Engage a Partner Architect

Get the right PA involved early for faster, bigger deals.

What to Bring

Customer name and account details

Opportunity details — what products, expected deal size

Current environment — what they're running today (competitors, existing PAN)

Timeline — when does the customer want to buy / deploy?

What PAs Can Do

Scope — size the opportunity and define requirements

Architect — design the solution and deployment plan

Position — differentiate PAN vs. competitors

White-board — technical deep dives and solution demos

Join customer calls — present alongside your team

What PAs Don't Replace: Partner Architects complement but do not replace PAN SEs (Sales Engineers) or PAN Account Managers. PAs focus on Optiv-side enablement — scoping, positioning, and supporting your sales motions.

Request a Scoping Session

Reach out to the appropriate PA based on the coverage matrix above. Include the customer name, opportunity details, current environment, and timeline. PAs also hold regular office hours for quick questions and deal support.

Office Hours Available 1:1 Scoping Sessions

Early PA Engagement = Faster, Bigger Deals

Deals that involve a Partner Architect from the scoping stage close faster and land larger. Don't wait until the proposal phase — bring in a PA when you first identify the opportunity.

Faster
Close Velocity
Bigger
Deal Size
Better
Win Rate

Partner Program

Next-Generation NextWave

Announced February 5, 2026. The NextWave name is unchanged, but margins, deal velocity, funding, and the route-to-market paths all changed — know this before you scope with a PA.

What Changed

Enhanced margins across the program

Deal velocity — CPQ plus automatic deal registration

Partner Development Fund — new funding vehicle

Tiers: Registered, Innovator, Platinum, Diamond — advancement driven by specializations

Stackable incentives up to 9%

The Paths

MSSP path — tiered predictable pricing, expanded tiers, MSSP-specific training, and higher enablement discounts

Distributor / DMP path

ASC & APS services paths — enhanced training, certifications, and deployment support

GSI "Global Path" — expected later in 2026

Cortex XMDR Specialization: This is the partner-delivered MDR route. Where the customer wants a partner rather than Unit 42 operating the SOC, XMDR is how the platform still lands. Bring a PA in to check specialization status before you position managed services — see Unit 42 Services.