Compare moats
Up to three covered companies, band by band. Every call is a curated editorial judgment, never a disclosed figure — and every band carries its cited basis.
| Palo Alto Networks | Ciena | Penguin Solutions | |
|---|---|---|---|
| Moat rating | narrow Real but bounded. The FY2025 10-K's own Competition section calls the enterprise security industry "intensely competitive" and names four categories of rival — platform incumbents (Cisco, Microsoft, Alphabet), independent security vendors (Check Point, Fortinet, CrowdStrike, Zscaler, Wiz), point-product startups, and the public cloud vendors — while conceding that "some of our competitors may have substantially greater financial, technical, and other resources, greater name recognition, larger sales and marketing budgets, broader distribution, more diversified product lines, and larger and more mature intellectual property portfolios." That record supports a defensible position, not an unassailable one: narrow, not wide. | narrow Ciena's FY2025 10-K describes a technology position that has held but does not lock customers in. On the durable side, the strategy is to "build on and expand our global leadership in optical networking", resting on "our proprietary WaveLogic™ coherent modem technology" and approximately 2,400 issued patents with 800 more pending as of December 2, 2025. On the limiting side, the same filing says competition "remains intense" and features "aggressive selling efforts, including using significant pricing pressure to displace incumbent vendors", that "our customer contracts generally do not include minimum or guaranteed purchases", and that "there is no assurance that we will maintain our incumbency". Concentration cuts the same way: the five largest customers contributed approximately 50% of fiscal 2025 revenue, one cloud provider approximately 18%. Its income statement reports gross profit of $1,878.9M on $4,386.5M of revenue in FY2023, $1,719.6M on $4,015.0M in FY2024 and $2,004.9M on $4,769.5M in FY2025. Self-described leadership in its segments, with customers that are re-won deal by deal, is a narrow moat. | none The FY2025 10-K (fiscal year ended August 29, 2025) documents design-in niches but no durable excess return. In favour: the Competition section says some large rivals 'tend to have limited customization and service capabilities and are generally focused on higher-volume memory, storage, or compute products that are manufactured to industry-standard specifications'. It says the company's 'close collaboration with customers, customer-specific designs, long-lifecycle solutions, superior products and proprietary supply chain services create significant customer loyalty that may provide an advantage when competing against large international companies'. Against: the same filing says many competitors have 'substantially greater financial, technical, marketing, distribution and other resources' and 'lower cost structures'. Sales are made 'primarily pursuant to customer purchase orders and are not based on long-term supply agreements', and 'customers are not obligated to purchase our products even if we achieve a design win'. Large customers 'have exerted' pressure for price concessions, and the ten largest were 66% of fiscal 2025 net sales. GAAP operating income was 0.6%, 1.6% and 4.2% of net sales in fiscal 2023, 2024 and 2025, and fiscal 2024 had a net loss from continuing operations of $41.8 million. The 10-Q for the quarter ended May 29, 2026 (filed 2026-07-07, https://www.sec.gov/Archives/edgar/data/1616533/000161653326000043/peng-20260529.htm) adds that Advanced Computing nine-month sales fell 20.6%, reflecting 'both the ongoing Penguin Edge wind down and hyperscale hardware sales in 2025 that did not recur in 2026'. The filing's own advantage claim is hedged ('may provide an advantage'): design-in niches exist, but the 10-K shows no durable excess return. |
| Moat type | switching costs The 10-K describes an installed estate standardised on one operating system — "All of our hardware and software firewalls incorporate the PAN-OS operating system and include the same rich set of features, ensuring consistent operation across our entire product line" — across hardware, containerised CN-Series and virtual VM-Series form factors, centrally administered through Panorama and Strata Cloud Manager. That estate is monetised as recurring contract: subscription and support was 80.5% of total revenue in fiscal 2025 (80.0% in fiscal 2024, 77.1% in fiscal 2023), on terms "typically one to five years." The company's own risk factors describe the friction from the other side — customers "may face real or perceived switching costs when switching to our solutions from legacy security vendors" and "have often invested substantial personnel and financial resources to design and operate their networks... [and] may prefer to purchase from their existing suppliers rather than add or switch to a new supplier." As the incumbent in most of those estates, that friction now runs in Palo Alto's favour. | intangibles ip The FY2025 10-K locates the advantage in owned technology rather than in customer lock-in: "The success of our business and technology leadership depends significantly on our proprietary and internally developed technology." That technology is centred on WaveLogic, which Ciena's fiscal Q3 2026 earnings presentation (the source of the first two product rows below) defines as "Ciena's proprietary family of coherent optical chips — the core technology inside most of our networking products", and it reaches beyond Ciena's own systems: the 10-K's coherent pluggable transceivers use WaveLogic "for use within our systems and third-party equipment". Switching costs are the weaker candidate, because the same filing describes operators disaggregating line systems from modems and competitors using price to displace incumbents. | none The strongest candidate moat source in the 10-K is design-in and qualification, a switching-cost argument, and the filing limits it too far to count. The risk factors say 'Our products are often incorporated into customers' systems at the design stage', and many specialty products 'are specifically designed for our OEM customers' systems or products'. But qualification is 'both product-specific and platform-specific', so a design win covers one platform. The filing notes that customers 'sometimes require us to re-qualify our products' for new platforms, which 'can be time-consuming and cause reductions in our net sales', so each new platform reopens the socket. It also says 'customers are not obligated to purchase our products even if we achieve a design win', and warns that OEMs designing in 'standardized or commodity components' could reduce demand for its 'higher priced specialized or customized solutions'. Scale is ruled out because the filing says many competitors have lower cost structures. Patents are ruled out as a durable source. The company holds about 1,650 of them and calls intellectual property 'an important aspect of our business', but it says its patents 'do not cover all of our technologies' and that competitors 'may design around our patented technologies'. It also says some products are 'built around mature industry standards and have less patent protection', so 'we cannot prevent our competitors from reverse-engineering and duplicating those products'. |
| Leadership | co leader The 10-K claims parity-plus, not primacy: "We believe we generally compete favorably with our competitors on the basis of these factors as a result of the features and performance of our portfolio, the ease of integration of our security solutions with technological infrastructures, and the relatively low total cost of ownership of our products," and reports that its "products and services have been recognized as leading in 25 categories by third-party industry analysts firms." It qualifies that immediately by conceding that some competitors carry greater resources, name recognition and distribution. Independent analyst placements match a co-leader read rather than a sole-leader one — a Leader in the inaugural 2025 Gartner Magic Quadrant for Hybrid Mesh Firewalls, a Leader for the third consecutive time in the 2025 Magic Quadrant for SASE Platforms, and a Leader in the 2026 Magic Quadrant for Endpoint Protection Platforms for the fourth consecutive year — in categories that name other Leaders too. | co leader Slide 6 of Ciena's fiscal Q3 2026 earnings presentation of 2026-09-03 (https://s25.q4cdn.com/550667411/files/content_files/Ex-99-2-2026-Q3-Earnings-Presentation_FINAL-1.pdf) lists "#1 in Data Center Interconnect Globally" (Dell'Oro Group), "#1 in Total Optical Networking in N. America" (Cignal AI, Dell'Oro Group, Omdia) and "#1 in Submarine Networks Globally" (Omdia), with market share measured as of Q2 2026 excluding China, and a caveat that Ciena "has not independently verified" the analyst data. On the company's own presentation of that data, that is the front rank in its core segments, but the presentation does not claim the global lead in total optical networking, and the FY2025 10-K says competition is "dominated by a small number of very large, multi-national companies" - Nokia, Huawei, Cisco, Hewlett Packard Enterprise and ZTE - many of which have "substantially greater financial, operational and marketing resources, and broader product offerings". A shared front rank, led by Ciena where the company-reported rankings measure it, rather than an uncontested one. | at parity The 10-K claims no share figure or rank in any segment. It says 'Our businesses compete with numerous global and local companies'. Its HPC and AI business 'competes primarily with global manufacturers of HPC and AI products and services'. For fault-tolerant solutions it says 'we primarily compete with manufacturers of enterprise servers and industrial computers'. Its memory business competes 'against memory module providers and, to a lesser extent, large semiconductor manufacturers'. The risk factors warn that larger competitors 'may be able to respond better to new or emerging technologies, such as generative AI'. Against that, the company's stated edge is customization and service, where it says some large rivals 'tend to have limited customization and service capabilities'. Its leadership language is self-description without share figures: Cree LED 'has been a leader in LED lighting technology', Stratus Technologies is 'a global leader in simplified, protected and autonomous computing platforms and services', and the memory business is 'a primary supplier of longer-lifecycle solutions to OEM customers'. A specialist that claims no rank and faces many larger, lower-cost rivals, while neither leading nor clearly trailing in its niches, is parity. |
| Pricing power | moderate Moderate, with the evidence pointing both ways in the same filing. Gross margin computed from the three years of income statements inside this FY2025 10-K runs 72.3% (fiscal 2023), 74.3% (fiscal 2024) and 73.4% in fiscal 2025 on revenue of $9.22 billion — against 68.8% in fiscal 2022 as reported in the prior-year 10-K (accession 0001327567-24-000029, filed September 6, 2024). Over the same span subscription and support rose from 77.1% to 80.5% of revenue: a mix shift toward software that has been margin-accretive, not margin-destructive, which is the direct answer to whether platformisation is simply discounting. Against that, the 10-K's risk factors state plainly that sales prices "may decline for a variety of reasons, including competitive pricing pressures, discounts, a change in our mix... or promotional programs," that the company "anticipate[s] that the sales prices and gross profits for our products could decrease over product life cycles," and that it "has also experienced demands for customer financing and deferred payments." Pricing is defended by bundle economics rather than commanded outright. | moderate Moderate, and improving. The FY2025 10-K's income statement reports gross profit of $1,878.9M on $4,386.5M, $1,719.6M on $4,015.0M and $2,004.9M on $4,769.5M of revenue for FY2023-FY2025, in a market where, the filing says, rivals use "significant pricing pressure to displace incumbent vendors" and "price and total cost of ownership" heads the list of competitive factors. Since then the AI build-out has lifted gross margin: Ciena's fiscal Q3 2026 earnings presentation (https://s25.q4cdn.com/550667411/files/content_files/Ex-99-2-2026-Q3-Earnings-Presentation_FINAL-1.pdf) reports GAAP gross margin of 45.4% against 41.3% a year earlier, on revenue up 37% year over year, and guides fiscal 2027 adjusted gross margin to 45% to 46%. The presentation does not say how much of that is price rather than mix or volume, and the 10-K warns that AI-related demand has led to "a constrained supply environment" that can raise component costs. | weak The FY2025 10-K describes price as set by customers and the market. It says its large customers 'are able to exert, have exerted and we expect will continue to exert, pressure on us to make concessions on price and on terms and conditions'. It says 'The markets for our Integrated Memory products have historically been characterized by declines in average selling prices', and that 'Competitive pressure has led in the past and may continue to lead to intensified price competition resulting in lower net sales and lower profit margins'. Gross margin held in a narrow band: 28.8% in fiscal 2023, 29.1% in fiscal 2024 and 28.8% in fiscal 2025. The filing attributes each move to mix, for example higher-margin Advanced Computing service revenue in 2024, not to pricing. The 10-Q for the quarter ended May 29, 2026 (filed 2026-07-07, https://www.sec.gov/Archives/edgar/data/1616533/000161653326000043/peng-20260529.htm) reports gross margin of 27.8% versus 29.3% a year earlier (27.7% versus 28.9% for nine months), which it attributes to the Penguin Edge wind-down and sales mix. Third-quarter Integrated Memory sales rose 111.4% (75.6% for nine months) as 'accelerating AI-driven demand drove favorable pricing and increased volume', and the 10-Q says that business has 'gross margins which are lower than the Company average'. |
| Summary | A deployed firewall estate is the anchor. Every Palo Alto firewall — appliance, VM-Series, CN-Series, Cloud NGFW — runs the same PAN-OS with the same feature set and is managed from one console, so the security policy, the operator skills and the integration work are all specific to the vendor, and 80.5% of fiscal 2025 revenue is the recurring subscription and support contract sitting on top of it (10-K, Business and Risk Factors). Platformisation is the attempt to convert that anchor into wallet share: the 10-K states the strategy as helping customers "simplify their security architectures through consolidating disparate point products" by packaging offerings "into a tightly integrated architecture," and the acquisitions are consistent with it — IBM's QRadar assets in August 2024 "to help accelerate the growth of our Cortex business," Protect AI in July 2025, and the CyberArk agreement signed in July 2025. The evidence that consolidation is real rather than a discount: remaining performance obligation grew 36% year over year to $18.4 billion against 31% revenue growth in the quarter ended April 30, 2026 (Palo Alto Networks FQ3 2026 results release, June 2, 2026) — contracted future obligation compounding faster than recognised revenue, which is the opposite of what buying revenue with price would produce. The counterweight is disclosed in the same filings: the 10-K warns sales prices "may decline for a variety of reasons, including competitive pricing pressures, discounts," anticipates that "sales prices and gross profits for our products could decrease over product life cycles," and reports "demands for customer financing and deferred payments." Against CrowdStrike in security operations and Zscaler in SASE, Palo Alto is competing across the whole surface rather than defending a monopoly on any one of them — hence a narrow moat, not a wide one. | Ciena is the optical-transport specialist among networking vendors - its fiscal Q3 2026 earnings presentation calls it "the only pure-play optical systems provider operating at scale today" - and its FY2025 10-K builds the business on one proprietary technology, the WaveLogic coherent modem, carried into the 6500 Packet-Optical Platform, Waveserver data center interconnect systems, the 6500 RLS photonic line system and coherent pluggable transceivers sold for Ciena's own systems and third-party equipment. Analyst rankings the company cites in that presentation, which it says it "has not independently verified", put Ciena first in data center interconnect globally, in total optical networking in North America and in submarine networks globally (Q2 2026, excluding China). The AI build-out has turned it into more of a cloud supplier than a telecom one: cloud providers were 53% of fiscal Q3 2026 revenue, revenue rose 37% year over year, and GAAP gross margin reached 45.4%. The 10-K is equally clear about why the position is narrow rather than wide. Competition is "dominated by a small number of very large, multi-national companies", many with greater resources; rivals use pricing to displace incumbents; contracts carry no minimum or guaranteed purchases; the five largest customers were about half of fiscal 2025 revenue; and disaggregation lets an operator buy the line system from one vendor and the modem from another, while the push into data-center interconnects brings Ciena up against Marvell, Credo and Broadcom. | Penguin Solutions (formerly SMART Global Holdings) has three reportable segments per the FY2025 10-K. Advanced Computing ($648.4 million of fiscal 2025 net sales) designs, builds, deploys and manages AI and HPC clusters under OriginAI with the ICE ClusterWare software, and sells Stratus fault-tolerant servers. Integrated Memory ($464.2 million) sells SMART Modular specialty DRAM, flash and CXL memory and supply-chain services. Optimized LED ($256.1 million) sells Cree LED chips and components. Its advantage is customization rather than size. The filing says its memory business collaborates with OEMs 'throughout their design process across multiple projects' and is 'a primary supplier of longer-lifecycle solutions to OEM customers' in industrial, government, networking and enterprise markets. Its products must pass product- and platform-specific qualification, and some large rivals focus on higher-volume, industry-standard products. The limits are just as clear. Many competitors are larger and have lower cost structures. Customers buy on purchase orders, the ten largest were 66% of fiscal 2025 sales, and they 'have exerted' pressure for price concessions. Integrated Memory has historically seen declining average selling prices. AI hardware revenue is project-driven: Advanced Computing sales fell 26.0% in fiscal 2024 on 'the unpredictable nature of large project engagements'. The 10-Q for the quarter ended May 29, 2026 (filed 2026-07-07, https://www.sec.gov/Archives/edgar/data/1616533/000161653326000043/peng-20260529.htm) says the AI infrastructure business is 'transitioning from a hyperscaler concentration toward a more diversified non-hyperscaler customer base across enterprise, neocloud, and sovereign AI', which 'may negatively impact our net sales during the transition'. The result is a set of design-in niches rather than a franchise, with an AI business that must keep re-winning large deployments. |
| Chain position | A security-software consumer of the AI stack rather than a supplier to it — it buys compute to run Precision AI and now sells protection for the stack itself through Prisma AIRS (AI model scanning, posture management, red teaming, runtime and AI-agent security). Distribution is two-tier and concentrated: 44.2% of fiscal 2025 revenue came through three distributors and more than 8,500 channel partners, while no single end-customer exceeded 10% of revenue in fiscal 2025, 2024 or 2023. | Ciena sits between optical-component suppliers and the operators building AI-era networks. Upstream, its FY2025 10-K says its products include "optical and electronic components for which reliable, high-volume supply is often available only from sole or limited sources", built by contract manufacturers with facilities in Canada, Mexico, Thailand, Vietnam and the United States; at November 1, 2025 it carried $826.2 million of inventory and $2.1 billion of purchase commitments. Downstream, the fiscal Q3 2026 earnings presentation puts direct cloud providers at 53% of the quarter's revenue against 37% for service providers, and describes its products as the links between data centers (data center interconnect) and between distributed AI training clusters ("scale-across"). | Downstream integrator. Per the 10-K it buys memory from Samsung, Micron, SK hynix and Kioxia and processors from Intel and AMD, and turns them into specialty memory modules and managed AI/HPC clusters for OEM, enterprise, government and cloud customers. |
| Products (share / barrier) |
|
|
|
| Long-horizon vote | +0.13 at weight 0.20 · swarm neutral Editorial prior, not backtested. | +0.13 at weight 0.20 · swarm neutral Editorial prior, not backtested. | -0.06 at weight 0.20 · swarm neutral Editorial prior, not backtested. |