2004-2014
Nikesh Arora was a senior vice president and chief business officer at Google from 2004 to 2014.
“previously, he was the SVP and CBO of Google during its massive growth phase from 2004 to 2014.”
Topic
Nikesh Arora
47 facts from 4 episodes, in date order. These are what speakers said on the shows, each linked to the moment it was said. They aren't independently verified.
2018
Nikesh Arora joined Palo Alto Networks in 2018, when it was known as a next-generation firewall company, and the host says it has since grown six to seven times in size.
“He joined Palo Alto in 2018, when it was the next gen firewall player and has since grown it to six to seven times the size.”
2018
Arora says the average time for an attacker to break in and steal data was three to four days when he started at Palo Alto, and the fastest his firm has seen is 23 minutes.
“the average time to identify a target, get through it and exfiltrate data was in the three to four day timeframe. The fastest we've seen, I think right now is 23 min.”
2020
Nikesh Arora said that since the pandemic began he has spoken with 8,000 Palo Alto Networks employees in small groups.
“since then, I've talked to 8,000 employees in the company on the one sort of small group setting basis.”
Undated
Nikesh Arora had served as CEO of Palo Alto Networks for about six years at the time of this conversation, during which he expanded and reorganized the company.
“Over his six-year tenure, Nikesh has expanded and reorganized the business to meet the full suite of enterprise and government client needs”
Undated
Nikesh Arora says that as more devices become connected, the cybersecurity 'attack surface' grows, letting bad actors attack in more places.
“So that means bad actors can attack you anywhere, impact your connectivity, impact your technology and create unwanted outcomes.”
Undated
Nikesh Arora says attackers need to succeed only once while defenders must succeed every time, so defenders must work much harder.
“they only have to be right once. We have to be right every time, so we have to try a hundred times harder.”
Undated
Nikesh Arora says Palo Alto Networks connects to a company's security systems and analyzes the data in real time with machine learning and precision AI.
“We are connected to every security system that exists in a company. We analyze that data real time using machine learning and precision AI.”
Undated
Palo Alto Networks acquired about nineteen companies in roughly six years, according to CEO Nikesh Arora.
“So we've bought about nineteen companies in the last six years with the premise that somebody else has figured out a way”
Undated
Nikesh Arora says Palo Alto Networks puts the leaders of acquired companies in charge of the related product areas, with Palo Alto teams working for them.
“we make our teams work for them. That's rule number one, you know, take the smarter people, take the people who are really passionate about this, get them to lead these things.”
Undated
Nikesh Arora says Palo Alto Networks gives acquired startups more resources so they need not worry about fundraising or hiring.
“we actually double down and give them more resources because we say, listen, the whole point of getting you to come be part of our fold”
Undated
Nikesh Arora says early in his career he worked at a company whose customer relationship management system was made up of twenty-five separate systems.
“I started my technology career thirty plus years ago, and I used to work for a company where twenty five systems made up our customer relationship management system.”
Undated
Alison Beard states that Nikesh Arora holds an electrical engineering degree from IIT BHU, a master's from Boston College and an MBA from Northeastern University.
“you have a degree in electrical engineering from the Indian Institute of Technology, B H U, as well as a master's from Boston College and an MBA from Northeastern.”
Undated
Nikesh Arora defines zero trust as treating everyone who accesses an organization's infrastructure the same way, regardless of where or how they connect.
“fundamentally what zero trust means is that you know, you have to be able to treat everybody who's accessing your infrastructure the same way, wherever and however they come from.”
Undated
Nikesh Arora advises budget-constrained companies to prioritize detecting security events and remediation and recovery over preventive security controls.
“my view is focus on remediation, fake focus on detecting security events, don't focus as much on, you know, security controls”
Undated
Nikesh Arora says a tool called Worm GPT, found on the dark web, helps attackers study known vulnerabilities and build ways to attack companies.
“there's something called Worm GPT, there's something, you know, on the dark web that goes and helps you take a look at CVs and build capabilities that can attack companies.”
Undated
Nikesh Arora says an AI kill switch could have unintended consequences if it interrupted a critical process such as a nuclear power plant.
“if you put a kill switch in AI and it's running a nuclear power plant and you kill it, then there's a risk that you inter intercept a process which can have unintended consequences.”
Undated
Nikesh Arora predicts AI regulation will focus on transparency, understanding how models work and how guardrails are applied.
“most of the regulation is going to be around transparency, around understanding how these models work, around how guardrails are put around them”
Undated
Nikesh Arora says most recent hacks are not technically complicated and happen because companies have not secured basic entry points.
“a lot of the hacks, if you look in the last six months or last twelve months, are not complicated. They're just hacks that happen because companies haven't bolted their doors and windows carefully”
Undated
Nikesh Arora says that when he started about six years earlier, attackers' dwell time inside a victim's infrastructure was measured in days, with a lag of forty-seven days cited.
“six years ago when I started, I used to hear about things and took eight days or ten days, and the lag was forty seven days of dwell time for somebody to come in and be in your infrastructure”
Undated
Nikesh Arora says attacks now play out in hours rather than days and predicts they will soon take under an hour.
“Now I hear about hours. I think that's going to go down under an hour.”
Undated
Nikesh Arora said Palo Alto Networks had a market capitalization of about $18 billion when he joined seven years earlier and around $120 billion at the time of the interview.
“Seven years ago, when I started, were approximately $18 billion in market cap, and today we're around 120, give or take.”
Undated
Nikesh Arora said the last count put ransomware and online scams at close to $18 billion.
“by last count, there was close to $18 billion, uh, between ransomware and scams, online scams, which are another form of cyber sort of behavior.”
Undated
Nikesh Arora said that when he joined, Palo Alto Networks saw cybersecurity as a roughly $200 billion annual industry in which it held about 1.5% share.
“our thesis was it's about 200 billion dollar revenue industry annually. And we were at one and a half percent market share, and we were one of the top three players in the market.”
Undated
Nikesh Arora described supply-chain attacks as targeting hardware used by thousands of companies so that one break-in opens up all the others.
“Or why don't I attack a piece of hardware that is deployed by 10,000 companies? Once I know how to break into one, I can break into the other 9,999 at will.”
Undated
Nikesh Arora said some distributed denial-of-service attacks are so large that only nation states have the computing power to carry them out.
“Sometimes you see D D o s attacks, which only nation states have the compute capability to go, uh, exercise.”
Undated
Nikesh Arora said utilities are easier targets because they run relatively old infrastructure, which is often connected to the internet through add-on systems.
“they have relatively older infrastructure for the most part, because their job is to provide electricity and provide water and power”
Undated
Nikesh Arora said Palo Alto Networks acquired about twenty companies because it was late in its innovation cycle and could not wait four years to build products.
“We had to buy twenty companies because we were we were sort of on the back foot or late in our innovation cycle, and we couldn't wait four years.”
Undated
Nikesh Arora said the Palo Alto Networks board hired him despite no cybersecurity experience because the company already had 5,000 people who understood cybersecurity.
“They said to me, we have 5,000 people who understand cybersecurity really well, so we don't need one more person who understands cybersecurity.”
Undated
Nikesh Arora said he met 300 cybersecurity companies in his first eighteen months and that about 2,000 cybersecurity companies are formed each year.
“I also used that time to meet 300 individual cybersecurity companies, because our industry is very, very prolific. There's 2,000 cybersecurity companies formed every year.”
Undated
Nikesh Arora said that, drawing on his time at Google, he concluded that cloud and AI would be the two most important technology trends.
“I said, look, the two most important things from a technology perspective would be cloud and A I.”
Undated
Nikesh Arora said security buyers tend to choose products ranked first or second in their category.
“Hey, if you're number one or two, I won't get fired for buying you. If you're number four or five, why would I buy you?”
Undated
Nikesh Arora said cybersecurity companies typically decline after ten to twelve years into a flattish growth path.
“If you look at cybersecurity companies, they decline after ten to twelve years, and they sort of take a sort of glide path, which is sort of flattish over time.”
Undated
Nikesh Arora said Northeastern University offered him a place for business school and paid his tuition in exchange for teaching computer science.
“I was privileged to be offered a place at Northeastern, where they chose to, uh, pay my tuition if I taught computer science”
Undated
Nikesh Arora said about 100,000 people took the exam for roughly 2,000 places at the five engineering schools he wanted to attend in India.
“I think 100,000 people took the exam, to choose 2,000 people to go to those five schools that we wanted to go to.”
Undated
Arora says software developers are the first group to adopt AI at work because they can work with partly right output and fix the rest.
“Developers is the 1st port of call, because the more they're, the most likely to experiment and to be able to work with half baked outcomes.”
Undated
Arora says cybersecurity as an industry only appeared once computers were connected to each other.
“because cybersecurity did not exist before connectivity came about.”
Undated
Arora says cybersecurity is about 25 years old and became fragmented because each new threat was met with a separate point product.
“It's a 25 year old industry, so every time a bad problem showed up, somebody built a point solution to solve that problem.”
Undated
Arora says about 89 percent of attacks involve credential theft, where an attacker takes over someone's identity.
“89 of the attacks happen because of credential theft. Somebody becomes you or me.”
Undated
Arora says that at enterprise software companies under $1 billion in revenue, 50 to 65 percent of costs go to sales, marketing and customer support.
“if you look at a enterprise company with less than $1 billion in revenue, 50 to 65 of the cost is cost of sales, marketing and customer support.”
Undated
Arora says he expanded his staff meeting from eight to 25 people after reading about Jensen Huang's wide management structure.
“I actually expanded my staff meeting from eight to 25.”
Undated
Arora says he meets 50 employees every two weeks to check whether the company's strategy has been understood.
“I meet 50 employees every two weeks and I ask them questions.”
Undated
Arora says he has seen an AI coding agent rewrite 500 lines of code as 75 lines that were more efficient.
“I've seen it take 500 lines of code and and come back with 75 lines of code, which would be much more efficient”
Undated
Nikesh Arora says his company inspects all traffic at an endpoint for about $20 a year, using machine learning that runs on the endpoint's own compute.
“We inspect all traffic at an endpoint at the cost of $20 a year, right?”
Undated
Nikesh Arora describes compressing a small language model, specializing it for one task and training it to 99.9% accuracy as an alternative to using frontier models.
“you take a small language model, you compress it, you make it task specific, you keep keep training it until it gets to 99.9% accuracy.”
Undated
Nikesh Arora says compute advances will concentrate in two large countries and that distance from them will limit access because of supply constraints.
“I fear that we will see fast advances in compute development in two large countries in the world.”
Undated
Nikesh Arora says his first job was at Fidelity Investments, where twenty-three separate systems did what a CRM does today.
“when I started my first job was at Fidelity Investments many years ago. We had twenty three systems, which collectively would be called CRM today.”
Episodes
- 21 Nov 2024Future of Business: Palo Alto Networks’ Nikesh Arora on Managing Risk in the Age of AI21m
- 9 Apr 2025Palo Alto Networks CEO: Global Cyber Threats, Digital Safety, and Tech Leadership51m
- 4 Oct 2025The Impact of AI, from Business Models to Cybersecurity, with Palo Alto Networks CEO Nikesh Arora58m
- 21 Oct 2026Arvind Krishna & Nikesh Arora: Quantum Threat, Open vs Frontier AI, AI Cyber Warfare & SaaS Collapse40m