China Opens Security Probe Into Palo Alto Networks — And Tells Us Absolutely Nothing About Why
China's Cyberspace Administration (CAC) has launched a security review of Palo Alto Networks' products. The official justification, verbatim: protecting critical information infrastructure, preventing cybersecurity risks, and safeguarding national security. That's it. No further detail, no timeline, no indication of what specifically triggered the probe.
Palo Alto, for its part, issued the kind of statement you write when legal has signed off on every word. The company says it maintains the highest standards of business conduct and security practices, and that operations in the region remain unaffected for now. Reassuring boilerplate, essentially.
Anyone who followed the Micron saga in 2023 will find this uncomfortably familiar. The CAC announced that probe with similar vagueness, published its findings a few weeks later, and concluded that Micron's products posed an unacceptable security risk for critical infrastructure buyers. The effective result was a ban on sales to those entities. Micron eventually exited the Chinese datacenter and server market entirely, wiping billions from its annual revenue. The main beneficiaries were Chinese memory manufacturers, who conveniently happen to be largely shut out of the American market anyway.
The pattern is worth noting. Prior to the Micron probe, the company had been involved in IP and antitrust disputes in China. Nobody formally connected those cases to the security review, but the timing was not exactly subtle.
Palo Alto operates in a market where it has local competition. Huawei and H3C both offer network security products, and Chinese buyers under pressure to buy domestic have no shortage of alternatives. Palo Alto doesn't break out China revenue publicly, so quantifying the potential damage is difficult, though it would almost certainly hurt.
China has spent years accusing Western tech firms of facilitating US surveillance and offensive cyber operations. It would be genuinely surprising if those accusations didn't feature prominently in whatever findings eventually emerge here. Western governments, of course, say exactly the same things about Huawei and ZTE. Everyone accuses everyone. The difference is who controls the infrastructure at the end of it.