China's Cyberspace Administration launched a security review of Palo Alto Networks products sold in the Chinese market, according to an official statement dated August 6. The regulator did not disclose which specific products face review or provide a timeline for the investigation.
The move comes as Chinese authorities have intensified scrutiny of foreign technology vendors operating domestically. Palo Alto Networks, a Santa Clara-based cybersecurity firm with annual revenue exceeding $8 billion, sells firewalls, cloud security software, and endpoint protection tools globally, including in China. The company had not publicly commented on the review as of August 6.
China's Cyberspace Administration has conducted similar security reviews of other foreign tech firms in recent years. In 2022, the agency investigated Micron Technology's memory chips and restricted their use in critical infrastructure. The following year, authorities reviewed Qualcomm's semiconductor operations. These investigations typically examine whether products pose risks to national security or contain vulnerabilities that could be exploited.
Palo Alto Networks operates through subsidiaries and partnerships in China and counts Chinese financial institutions and government agencies among its customers. The company's threat intelligence division, Unit 42, publishes research on Chinese state-sponsored hacking groups, which has drawn scrutiny from Beijing in the past.
No specific allegations have been made public. The Cyberspace Administration's announcement provided no detail on whether the review targets particular product lines, specific vulnerabilities, or broader concerns about data access and control. Palo Alto Networks did not immediately respond to requests for comment.
The review adds Palo Alto Networks to a growing list of U.S. technology companies facing Chinese regulatory action. Foreign firms operating in China increasingly confront investigations that can restrict market access or require technology transfers. Palo Alto Networks generated roughly 15 percent of its revenue from the Asia-Pacific region in its most recent fiscal year, though China's share of that was not itemized in filings.
The document to watch is any formal determination from China's Cyberspace Administration, which typically concludes reviews with either clearance to continue operations, required modifications to products or data handling, or restrictions on sales to specified sectors.
