Summary

Arora says Mythos-level code analysis is real, compressing years of cybersecurity work into weeks. A six-week Palo Alto Networks test found vulnerabilities that normally would have taken five to seven years, for “low millions,” while persistent “ultra mode” could daisy-chain flaws into new attack paths. He believes comparable capability will be in the wild within three months, if it is not already.
Analytical SaaS is “over” because enterprises can point language models directly at their data. Jason described cutting an unused 20-seat product to three accounts, connecting its data to Slack and Claude, and reducing the bill by 90%; the next step is querying sales, productivity, and SAP inventory data together rather than buying separate analytical modules.
Infrastructure software becomes more valuable as AI destroys the analytical layer above it. Arora expects enterprises to store 10 times more data within three years, supporting databases and platforms such as Databricks, Snowflake, MongoDB, and Oracle. Systems of work and record are deeply embedded, but their interfaces and workflows could be rebuilt around agents over the next five years.
The model layer trends toward metered utility economics while applications capture the profit pools. Buyers will purchase different levels of intelligence at radically different prices, while application companies arbitrate among models and supply the harnesses, memory, and business-specific reliability enterprises need. The fastest revenue comes from replacing an existing budget or charging consumers roughly $5 per user.
Cyber risk rises asymmetrically because attack uses can tolerate errors that defensive systems cannot. Arora said the false-positive rate on MSO was about 30%—useful for finding possible attack paths, disastrous for paying claims or protecting a vehicle—whereas he wants 0.01% or ultimately 0% in his business. Meanwhile, 89% of attacks or breaches still begin with stolen credentials rather than sophisticated exploits.
Arora argues Google can become the first $1 trillion company because it combines models, assets, infrastructure, and enterprise distribution. Model quality alone does not close customers; the hyperscalers possess the sales forces required to drive adoption. Hardware also persists because low-latency, high-throughput financial-services workloads cannot simply move to the cloud without sacrificing economics.
PANW’s AI-enabled operating leverage could widen its acquisition aperture. Arora described the old playbook of buying product companies and pushing them through PANW’s go-to-market engine. He said that if PANW can run a much more efficient enterprise, what it buys matters less; Jason framed the possible economics as gross margins in the 90s and net margins in the 40s. Arora wants six to 12 months to see how enterprise AI settles. His caveat: AI transformation may require more technical employees, not fewer.

Deep dive

1. Mythos turns decades of bad code into an immediate attack surface

Arora’s framing starts with Google Search democratizing information; AI is now “democratizing intelligence.” It could make output 90% consistent across 250 marketers and give 5,000 customer-facing employees something closer to the performance of the colleague everyone specifically requests.
PANW’s six-week Mythos test found vulnerabilities that its existing process would have taken five to seven years to uncover—even though Arora considers PANW a top-percentile code tester. The cost was in the “low millions,” and persistent “ultra mode” could daisy-chain individual vulnerabilities into a new attack path through the company.
The hosts’ red-team challenge—what happens when this capability escapes—produced Arora’s blunt estimate: “We’re three months away, if not already there.” Although the hosts had assumed six months, he cited models 4.8 and 5.5 and noted that attackers need not crack the hardest target; an old industrial edge system is enough.
The resulting contest is defenders finding and patching vulnerabilities before attackers exploit them. Asked how defenders are doing, Arora answered, “Not as well as we should be doing, which is great for our business.” Jason described CISOs as juggling vendor patches, their own code, and an open-source problem that nobody quite knows how to solve.

2. Cyber’s most fragile edge is ordinary economic plumbing

Arora resisted framing every threat as frontier-model warfare: 89% of attacks happen because credentials are stolen. “I don’t think we need more models to go crack this stuff”—ordinary usernames, passwords, and neglected systems already provide ample openings.
His larger fear is not a heavily defended national-security target but the dentist or doctor running packaged software. When Change Healthcare was breached, physician offices stopped functioning and UnitedHealth had to provide billions of dollars in credits; that is the template for economic chaos.
There is “no silver bullet”: systems must be upgraded, renewed, and repaired over time. That lengthy remediation cycle “increase[s] the terminal value of the industry,” while effective AI defense will require enterprises to collect roughly 10 times more cyber data so models can learn organizational memory, context, and the difference between normal and malicious behavior.
False positives are the barrier between impressive models and dependable defense. Arora said the false-positive rate on MSO was about 30%; he called that “great for attack” but “horrible for defense.” Enterprise harnesses must push 10%-20% error toward 0.01%—and cyber toward 0%—without losing the false-negative performance. “I’m not putting my kids” in a self-driving car with a 10% error rate.

3. Analytical SaaS is over, but infrastructure gets more valuable

Arora’s categorical call: “If you’re an analytical SaaS company, it’s over.” Products that collect a customer’s data and sell analysis back as an incremental marketplace module lose their purpose when the customer can run an LLM directly against the underlying data.
Jason’s concrete example carried the economics: his company had 20 SaaS seats, almost nobody logged in, but the data remained valuable. It retained three accounts, connected the product to Slack and Claude, let everyone interface with it through natural language, and cut the bill by 90%.
The end state combines sales-rep performance, productivity, and SAP inventory in one data layer, enabling questions that previously crossed three SaaS products. Arora therefore calls infrastructure “undervalued”: Databricks, Snowflake, MongoDB, Oracle, databases, and storage benefit if enterprises hold 10 times more data within three years.
Arora calls the middle category the “system of work” or “system of record,” and says it is deeply embedded in how businesses operate. But if agents work, UI could go away: an agent should extract a sales call, update Salesforce or Oracle, and complete the paperwork automatically. He expects the whole system of work and record to be reinvented over five years.

4. Models become utilities while applications capture profit

Arora expects models to become a utility layer where companies buy intelligence “on the fly”: routine work could use a lower-IQ, lower-cost model, while harder tasks command a much higher price. A customer call does not always require the newest, most expensive model.
The hosts asked whether OpenAI and Anthropic should become the new Microsoft Office. Arora’s answer: specialized application companies will arbitrate among models and package harnesses, memory, and workflows—because 50,000 companies need similar applications and should not each rebuild them.
Arora said one model-company CEO told him that the complete weights of the newest model fit on a USB stick; he called the weights “the IP.” Jason then suggested that the data could be distilled in 24 to 48 hours and the model reproduced, but that was Jason’s framing rather than Arora’s claim.
Restricting frontier releases for three to six months will not resolve the safety problem in a global race, Arora argued, because somebody else can release comparable models into open source. Coding is already the breakout application, with cybersecurity another obvious pool and tens of billions of dollars in legacy application software awaiting reinvention. He sees two fastest routes to revenue: replace an incumbent product whose budget already exists, or collect roughly $5 per consumer user—“replacement apps are beautiful.”

5. Google has the assets for $1 trillion, and hardware endures

Playing armchair CEO, Arora called Google underrated and capable of becoming the first $1 trillion company in their lifetime. His mechanism was distribution: even the best model needs a sales force convincing enterprises to adopt it, and the three hyperscalers already possess the largest sales forces.
Hardware remains the cheapest way to handle low-latency, high-throughput bits. Large financial institutions still use it because moving financial-services workloads to the cloud adds latency, and “if you increase latency, you reduce profit.”
The bottleneck is production rather than design: components and factories are back-ordered by the GPU data-center buildout. Arora estimated rebuilding the U.S. supply chain could take 10 years, although the “bonanza of a lifetime” and commitments ranging from $10 billion to $100 billion can fund new capacity. Friedberg added that accelerated depreciation is part of the incentive, with a 100% first-year write-off for capex.

6. AI could widen PANW’s acquisition aperture while increasing headcount

PANW’s original acquisition playbook bought product companies, rewired their back ends, and pushed them through its go-to-market engine—turning a $10 million customer relationship into a potential $20 million one. Arora said that approach carried the company north of $150 billion before it bought a $25 billion company after identifying identity as important for agentic and security use cases; the deal closed three months earlier.
The newer opportunity is broader: if PANW can use AI to run a much more efficient enterprise, its operating margin could exceed the industry’s enough to make a wider range of acquisitions viable. Jason characterized the possible economics as gross margins in the 90s and net margins in the 40s; Arora agreed that if the company can crack that code, what it buys matters less.
Arora says the company needs the next six to 12 months to see how AI settles and how effectively it can be used in enterprises before expanding the menu. He also rejected the easy labor-reduction story: PANW has more technology employees today than it would have had if AI did not exist, because AI is prompting transformation across the business.

Gavin Baker interviews SpaceX CFO Bret Johnsen at Mission Control Emerging Situation: Anthropic's Global Pause, Recursive Self-Improvement, and AI Personhood Arrives