China’s Cyberspace Administration has opened a formal national security review into products sold by Palo Alto Networks within the country. The announcement, made on August 6, adds another chapter to what is starting to look less like a trade dispute and more like a full-blown technological divorce.
This review didn’t come out of nowhere. Back in January 2026, Chinese authorities ordered domestic firms to stop using cybersecurity software from Palo Alto Networks and more than a dozen other companies, including Fortinet, Check Point, CrowdStrike, and VMware. The deadline for transitioning to domestic alternatives was set for the first half of 2026.
The Cybersecurity Review Office cited national security laws and the need to protect critical information infrastructure in its announcement. It did not provide specific details about what exactly triggered the review, its scope, or its expected timeline.
What makes this escalation notable is the sequencing. First came the order to stop using the products. Now comes the formal security review.
Palo Alto Networks is one of the largest cybersecurity companies in the world, and its products are widely deployed across enterprise and government networks globally. Palo Alto Networks maintains a physical presence in China, indicating the complexities of operations amid heightened geopolitical tensions.
Here’s the thing. China’s share of Palo Alto Networks’ total revenue is not publicly broken out with enough granularity to calculate exact exposure. But the company maintains physical offices in the country and has been selling products there, so the review and the broader ban on foreign cybersecurity tools represent a real revenue headwind, not just a theoretical one.
No expert opinions on the market impact of this specific review have surfaced yet, and the public remains largely uninformed regarding the specifics of the review, including its timeline and potential impacts.