Compare moats
Up to three covered companies, band by band. Every call is a curated editorial judgment, never a disclosed figure — and every band carries its cited basis.
| ASML | Palo Alto Networks | CrowdStrike | |
|---|---|---|---|
| Moat rating | wide ASML's FY2025 20-F states it "is currently the world's only manufacturer of EUV lithography systems" — an effective monopoly on the extreme-ultraviolet tools required to pattern leading-edge logic and memory chips. | narrow Real but bounded. The FY2025 10-K's own Competition section calls the enterprise security industry "intensely competitive" and names four categories of rival — platform incumbents (Cisco, Microsoft, Alphabet), independent security vendors (Check Point, Fortinet, CrowdStrike, Zscaler, Wiz), point-product startups, and the public cloud vendors — while conceding that "some of our competitors may have substantially greater financial, technical, and other resources, greater name recognition, larger sales and marketing budgets, broader distribution, more diversified product lines, and larger and more mature intellectual property portfolios." That record supports a defensible position, not an unassailable one: narrow, not wide. | narrow Narrow rather than wide because the FY2026 10-K argues both ways and its own risk factors are the harder side: it describes a self-reinforcing data advantage and says "we do not believe any of our competitors currently have a true platform offering equivalent to the Falcon platform", but the same filing calls the market for security and IT operations solutions "intensely competitive, fragmented", warns that "Competitive pricing pressure may reduce our gross profits", and still carries the July 19 Incident as having "had, and is expected to continue to have, an adverse effect on our business, sales, customer and partner relations, reputation" more than two years after it occurred. |
| Moat type | intangibles ip The durable advantage rests on decades of proprietary technology and IP — the 20-F describes ASML's April 2025 1,000-watt EUV light source as "built on 25 years of engineering advancements" — reinforced by an exclusive arrangement with Carl Zeiss SMT as its "sole supplier" of the critical optics no rival can source. | switching costs The 10-K describes an installed estate standardised on one operating system — "All of our hardware and software firewalls incorporate the PAN-OS operating system and include the same rich set of features, ensuring consistent operation across our entire product line" — across hardware, containerised CN-Series and virtual VM-Series form factors, centrally administered through Panorama and Strata Cloud Manager. That estate is monetised as recurring contract: subscription and support was 80.5% of total revenue in fiscal 2025 (80.0% in fiscal 2024, 77.1% in fiscal 2023), on terms "typically one to five years." The company's own risk factors describe the friction from the other side — customers "may face real or perceived switching costs when switching to our solutions from legacy security vendors" and "have often invested substantial personnel and financial resources to design and operate their networks... [and] may prefer to purchase from their existing suppliers rather than add or switch to a new supplier." As the incumbent in most of those estates, that friction now runs in Palo Alto's favour. | network effects The 10-K states the mechanism directly: "The more data that is fed into our Falcon platform, the more intelligent the AI Security Cloud becomes, the stronger our ability to anticipate and counter evolving adversary tradecraft, and the more our customers benefit, creating a powerful network effect that increases the overall value we provide." |
| Leadership | clear leader Effectively 100% of the EUV market as the world's only EUV system maker; in the older DUV segment it "compete[s] primarily with Canon and Nikon" yet remains the leading supplier. | co leader The 10-K claims parity-plus, not primacy: "We believe we generally compete favorably with our competitors on the basis of these factors as a result of the features and performance of our portfolio, the ease of integration of our security solutions with technological infrastructures, and the relatively low total cost of ownership of our products," and reports that its "products and services have been recognized as leading in 25 categories by third-party industry analysts firms." It qualifies that immediately by conceding that some competitors carry greater resources, name recognition and distribution. Independent analyst placements match a co-leader read rather than a sole-leader one — a Leader in the inaugural 2025 Gartner Magic Quadrant for Hybrid Mesh Firewalls, a Leader for the third consecutive time in the 2025 Magic Quadrant for SASE Platforms, and a Leader in the 2026 Magic Quadrant for Endpoint Protection Platforms for the fourth consecutive year — in categories that name other Leaders too. | co leader Co-leader rather than clear leader because the only claim of platform primacy available is the company's own ("we do not believe any of our competitors currently have a true platform offering equivalent"), while the same 10-K describes a fragmented market and lists seven distinct categories of competitor, from legacy antivirus to network security, cloud security, identity and legacy SIEM vendors. |
| Pricing power | strong FY2025 gross margin of 52.8%, up 1.5 percentage points year over year, with management guiding toward 56-60% by 2030 — consistent with monopoly pricing power on EUV tools. | moderate Moderate, with the evidence pointing both ways in the same filing. Gross margin computed from the three years of income statements inside this FY2025 10-K runs 72.3% (fiscal 2023), 74.3% (fiscal 2024) and 73.4% in fiscal 2025 on revenue of $9.22 billion — against 68.8% in fiscal 2022 as reported in the prior-year 10-K (accession 0001327567-24-000029, filed September 6, 2024). Over the same span subscription and support rose from 77.1% to 80.5% of revenue: a mix shift toward software that has been margin-accretive, not margin-destructive, which is the direct answer to whether platformisation is simply discounting. Against that, the 10-K's risk factors state plainly that sales prices "may decline for a variety of reasons, including competitive pricing pressures, discounts, a change in our mix... or promotional programs," that the company "anticipate[s] that the sales prices and gross profits for our products could decrease over product life cycles," and that it "has also experienced demands for customer financing and deferred payments." Pricing is defended by bundle economics rather than commanded outright. | moderate The 10-K's risk factors state that "Competitive pricing pressure may reduce our gross profits" and that competing successfully may require "aggressive pricing", which is the company's own case against strong pricing power; the offsetting factor it cites is module consolidation on one sensor. |
| Summary | ASML is the sole producer of EUV lithography systems, the only tools able to pattern the most advanced logic and memory nodes, with a roadmap "intended to drive affordable scaling to 2030 and beyond" and a High-NA EUV (TWINSCAN EXE) platform on which customers "had run more than 400,000 wafers" by end-2025. That dominance is protected by 25 years of accumulated engineering IP and an exclusive lock on Carl Zeiss SMT optics that competitors cannot replicate. | A deployed firewall estate is the anchor. Every Palo Alto firewall — appliance, VM-Series, CN-Series, Cloud NGFW — runs the same PAN-OS with the same feature set and is managed from one console, so the security policy, the operator skills and the integration work are all specific to the vendor, and 80.5% of fiscal 2025 revenue is the recurring subscription and support contract sitting on top of it (10-K, Business and Risk Factors). Platformisation is the attempt to convert that anchor into wallet share: the 10-K states the strategy as helping customers "simplify their security architectures through consolidating disparate point products" by packaging offerings "into a tightly integrated architecture," and the acquisitions are consistent with it — IBM's QRadar assets in August 2024 "to help accelerate the growth of our Cortex business," Protect AI in July 2025, and the CyberArk agreement signed in July 2025. The evidence that consolidation is real rather than a discount: remaining performance obligation grew 36% year over year to $18.4 billion against 31% revenue growth in the quarter ended April 30, 2026 (Palo Alto Networks FQ3 2026 results release, June 2, 2026) — contracted future obligation compounding faster than recognised revenue, which is the opposite of what buying revenue with price would produce. The counterweight is disclosed in the same filings: the 10-K warns sales prices "may decline for a variety of reasons, including competitive pricing pressures, discounts," anticipates that "sales prices and gross profits for our products could decrease over product life cycles," and reports "demands for customer financing and deferred payments." Against CrowdStrike in security operations and Zscaler in SASE, Palo Alto is competing across the whole surface rather than defending a monopoly on any one of them — hence a narrow moat, not a wide one. | A single lightweight sensor collects enterprise data once and reuses it across 33 cloud modules, and the pooled telemetry trains the models every customer is then defended by — the 10-K calls this crowdsourced, high-fidelity data "cloud-scale AI" and treats it as the fundamental differentiator from competitors. |
| Chain position | Upstream chokepoint of the AI chip supply chain: every leading-edge logic/DRAM wafer for AI accelerators is patterned on ASML EUV tools, making it the single indispensable equipment supplier to TSMC, Samsung and Intel. | A security-software consumer of the AI stack rather than a supplier to it — it buys compute to run Precision AI and now sells protection for the stack itself through Prisma AIRS (AI model scanning, posture management, red teaming, runtime and AI-agent security). Distribution is two-tier and concentrated: 44.2% of fiscal 2025 revenue came through three distributors and more than 8,500 channel partners, while no single end-customer exceeded 10% of revenue in fiscal 2025, 2024 or 2023. | AI-native security platform — an adopter and reseller of AI rather than a supplier of AI infrastructure. |
| Products (share / barrier) |
|
|
|
| Long-horizon vote | +0.42 at weight 0.20 · swarm bullish Editorial prior, not backtested. | +0.13 at weight 0.20 · swarm neutral Editorial prior, not backtested. | +0.13 at weight 0.20 · swarm neutral Editorial prior, not backtested. |