Nikesh Arora: Mythos is Real, Analytical SaaS is Dead, and Google can be a $10T company
Palo Alto's CEO says Claude's Mythos AI found 5-7 years' worth of code vulnerabilities in just 6 weeks — and that capability will be available in open source in 3 months.
All-In with Chamath, Jason, Sacks & Friedberg
Nikesh Arora: Mythos is Real, Analytical SaaS is Dead, and Google can be a $10T company
Palo Alto's CEO says Claude's Mythos AI found 5-7 years' worth of code vulnerabilities in just 6 weeks — and that capability will be available in open source in 3 months.
TL;DR
Palo Alto Networks CEO Nikesh Arora joins the All-In pod to break down how Claude's Mythos model found years' worth of code vulnerabilities in just six weeks [1] — Nikesh Arora "Palo Alto Networks ran Claude's Mythos model against its own codebase for 6 weeks and found vulnerabilities that would have taken 5 to 7 ye…" 01:40 , why analytical SaaS is categorically dead [2] — Nikesh Arora "Any SaaS company whose core value proposition is collecting and analyzing data for you is finished. You can now run an LLM directly against…" 07:03 , and where the real AI profit pools will emerge. He argues models will commoditize into a utility layer while application-layer companies capture the value, and offers armchair CEO takes on Waymo, Google (his pick for first $10 trillion company [3] — Nikesh Arora "Google: first $10 trillion company: Nikesh Arora believes Google is underrated and will become the first $10 trillion company in our lifeti…" 21:38 ), and OpenAI. Key takeaway: false positive rates — not raw capability — are the defining challenge for deploying AI in enterprise settings.
Palo Alto Networks CEO Nikesh Arora joins the All-In besties to discuss Claude's Mythos AI finding years of code vulnerabilities in weeks, why analytical SaaS is dead, where AI profit pools will emerge, and his armchair CEO takes on Waymo, Google, and OpenAI.
-
The episode opens with a montage of clips setting up Nikesh Arora as a major figure in cybersecurity, followed by Jason welcoming him to the pod. Nikesh opens with a memorable framing: Google Search democratized information; AI is democratizing intelligence. He reflects on money as a scoreboard rather than an end goal, immediately signaling the philosophical depth beneath the business conversation. The hosts flag that Palo Alto has grown from a $17 billion to a $238 billion company under his 8-year tenure, and tease that the conversation will touch on Mythos, the rise and fall of SaaS, and more.
-
This is the episode's most electric segment. Nikesh Arora drops a bombshell: Palo Alto, one of the most security-conscious companies on earth, ran Anthropic's Mythos model against its own codebase for six weeks and found vulnerabilities that would have taken five to seven years to uncover through traditional methods — all for a few million dollars in compute costs. [1] — Nikesh Arora "In 6 weeks, we found vulnerabilities which would have normally taken us 5 to 7 years to find." 02:54 He explains that Mythos' 'ultra mode' can chain vulnerabilities together to map entirely new attack paths, a capability that's great for offense but terrifying at scale. Even more alarming: Nikesh estimates that Mythos-level capabilities will be available in open-source or Chinese models within three months. [2] — Nikesh Arora "3 months to open-source Mythos capability: Nikesh Arora estimates Mythos-level AI vulnerability-finding capabilities will be available in o…" 04:30 He notes that models like Llama 4.8 and 5.5 already have similar capabilities, and you don't need to crack the hardest targets — an old industrial OT system is a much easier mark.
-
With the Mythos revelations still fresh, David Friedberg presses Nikesh on who's actually winning the AI cyber arms race. The answer is uncomfortable: defenders are falling behind. Every software vendor is now showing up at enterprise CIOs' doors asking them to patch newly discovered vulnerabilities — at exactly the same moment those CIOs are scrambling to audit their own codebases. The situation is compounded by open source, which nobody quite knows how to defend at scale, though IBM's $5 billion project signals the market is waking up. Nikesh frames this bluntly: 'Not as well as we should be doing — which is great for our business, but that's a different story.' [1] — Nikesh Arora "AI is supercharging attackers faster than defenders can respond. Every vendor is now showing up at CIOs' doors asking them to patch newly d…" 05:15
-
This chapter contains the episode's most sweeping strategic insight. Nikesh carves the SaaS world into three buckets with surgical precision. First: analytical SaaS — any company whose core value is collecting and analyzing your data — is finished. LLMs can now query raw data directly, making the entire middleware analytics market redundant. [1] — Nikesh Arora "Any SaaS company whose core value proposition is collecting and analyzing data for you is finished. You can now run an LLM directly against…" 07:03 Jason illustrates this perfectly with a real example: his firm eliminated 17 of 20 SaaS seats, connected the data source to Claude via Slack, and cut the bill by 90%. Second: infrastructure software — databases, data platforms like Databricks, Snowflake, MongoDB, Oracle — is massively undervalued, because enterprises will need to store 10 times their current data over the next three years to train and defend AI systems. [2] — Nikesh Arora "While analytical SaaS dies, infrastructure software is quietly undervalued. Enterprises will need to store 10 times their current data over…" 08:50 Third: systems of work (CRMs, ERPs, sales tracking) need to be reinvented for an agentic world where agents, not humans, do the data entry — eliminating the need for the UIs that trillions of dollars have been spent building.
-
The conversation turns to model economics and where value will ultimately accrue in the AI stack. Nikesh offers a vision of AI models becoming pure utilities — you buy 120 IQ for routine tasks, 250 IQ for complex ones, paying fractions of cents versus dollars. The implication: model providers won't own the profit pools. That's why OpenAI is racing to build Codex and Anthropic is building Claude Code — they're attacking the application layer, which is where enterprise software spending already lives. [1] — Nikesh Arora "AI models will commoditize into a utility layer where you buy intelligence on demand at different price-performance tiers. The profit pools…" 14:06 But here's Nikesh's key observation: the AI-native application companies that will replace legacy SaaS are not yet fully formed. Fifty thousand enterprises need the same HR system, the same sales platform — it's wildly inefficient for each to build their own on top of raw model APIs. The opportunity waiting to be captured is building that next generation of enterprise application companies, complete with harnesses, memory, and data pipelines.
-
The tone lightens as David Sacks runs an armchair CEO segment with Nikesh. He declines to rate Uber (he's on the board). On Waymo: the cars work and they should be in more cities faster. On Google — his most memorable take — he calls it 'underrated' and predicts it will be the first $10 trillion company in our lifetime. [1] — Nikesh Arora "Google is underrated. It has the models, the data, and critically — the largest enterprise sales force of any hyperscaler. Most people forg…" 21:35 His reasoning is structurally compelling: everyone can build a model, but converting model capability into enterprise revenue requires a massive, disciplined sales force. The three hyperscalers — Google, Microsoft, Amazon — have the biggest enterprise sales organizations in the world, and that advantage is systematically undervalued by the market. On OpenAI, he notes they should be selling faster, citing Anthropic's apparently stronger ARR growth driven by an all-in focus on enterprise and coding. A brief, comedic interlude erupts when Chamath tries to walk back an earlier comment about founder vs. hired-hand CEOs — earning Nikesh's theatrical forgiveness.
-
The episode closes with Nikesh mapping Palo Alto's acquisition strategy. Phase one was elegant: buy product companies, plug them into a high-performing go-to-market engine, and increase revenue per customer at negligible incremental cost. That playbook ran the market cap from $17 billion to north of $150 billion. [1] — Nikesh Arora "For years, Palo Alto bought product companies and plugged them into its sales engine — doubling revenue per customer at negligible incremen…" 28:20 Phase two, signaled by the $25 billion identity security acquisition, is different in kind: it's about using AI to run the most operationally efficient enterprise in the sector. If Palo Alto can drive its operating margins far above industry norms, it becomes a universal acquisition machine — any asset bought at a lower margin can be upgraded to Palo Alto's margin profile, making the deal immediately accretive regardless of the target's adjacency to core cybersecurity. Nikesh closes with a contrarian workforce prediction: despite all the talk of AI-driven headcount reduction, Palo Alto has more technical employees today than it would have without AI, because AI-driven transformation creates demand for engineers faster than it eliminates them.
- Mythos
- Anthropic's advanced AI security model (built on Claude) capable of persistent, multi-step reasoning to find code vulnerabilities; used here as a red-team tool against Palo Alto's codebase.
- False positive rate
- The percentage of flagged findings that turn out to be incorrect; in cybersecurity, a high false positive rate means the system alerts on threats that don't actually exist, wasting resources.
- Analytical SaaS
- Software-as-a-service products whose primary value is collecting enterprise data and providing analysis on top of it — Nikesh Arora argues this category is made obsolete by LLMs.
- Profit pools
- The segments of an industry or value chain where the majority of economic profit concentrates; used here to describe where AI's financial value will ultimately accrue.
- Replacement TAM
- A total addressable market opportunity defined by replacing an existing product or spending category rather than creating entirely new demand; considered easier to capture than greenfield markets.
- TAM
- Total Addressable Market — the total revenue opportunity available if a company captured 100% of its target market.
- System of work / system of record
- Enterprise software categories: 'system of record' stores authoritative business data (e.g., CRM, ERP); 'system of work' describes how employees interact with that data to get tasks done.
- Agentic AI
- AI systems that autonomously execute multi-step tasks on behalf of users, making decisions and taking actions (like data entry or system calls) without constant human input.
- Ultra mode
- A persistent, extended-thinking mode in Claude's Mythos where the model keeps iterating until it reaches a solution, used to chain together multiple vulnerabilities into a single attack path.
- Daisy-chain vulnerabilities
- The practice of linking multiple smaller security weaknesses together to create a single, more powerful attack path into a system.
- OT code
- Operational Technology code — software that monitors and controls physical industrial systems (power plants, factories, pipelines) as opposed to traditional IT systems.
- CISO
- Chief Information Security Officer — the executive responsible for an organization's information and cybersecurity strategy.
- LLM
- Large Language Model — a type of AI trained on vast text datasets capable of generating, summarizing, and analyzing text; models like GPT-4, Claude, and Gemini are examples.
- GenAI
- Generative AI — AI systems capable of generating new content (text, code, images) rather than just classifying or retrieving existing information.
- ARR
- Annual Recurring Revenue — a metric for subscription businesses representing the annualized value of recurring contract revenue; used here to compare OpenAI and Anthropic's growth rates.
- Hyperscaler
- A company that operates massive-scale cloud computing infrastructure; typically refers to AWS (Amazon), Microsoft Azure, and Google Cloud.
- SaaSp ocalypse
- Informal term used in this episode to describe the anticipated collapse of traditional SaaS business models driven by AI commoditizing data analysis and enterprise workflows.
- Distilled (model distillation)
- A technique where a smaller AI model is trained to replicate the behavior of a larger one, producing a compact model with similar performance at much lower compute cost.
Chapter 1 · 00:00
Intro
The episode opens with a montage of clips setting up Nikesh Arora as a major figure in cybersecurity, followed by Jason welcoming him to the pod. Nikesh opens with a memorable framing: Google Search democratized information; AI is democratizing intelligence. He reflects on money as a scoreboard rather than an end goal, immediately signaling the philosophical depth beneath the business conversation. The hosts flag that Palo Alto has grown from a $17 billion to a $238 billion company under his 8-year tenure, and tease that the conversation will touch on Mythos, the rise and fall of SaaS, and more.
Palo Alto Networks grew from a $17 billion market cap when Nikesh Arora became CEO 8 years ago to $238 billion as of the episode recording.
Chapter 2 · 00:47
Claude Mythos found years of vulnerabilities in Palo Alto's code in weeks
This is the episode's most electric segment. Nikesh Arora drops a bombshell: Palo Alto, one of the most security-conscious companies on earth, ran Anthropic's Mythos model against its own codebase for six weeks and found vulnerabilities that would have taken five to seven years to uncover through traditional methods — all for a few million dollars in compute costs. [1] — Nikesh Arora "In 6 weeks, we found vulnerabilities which would have normally taken us 5 to 7 years to find." 02:54 He explains that Mythos' 'ultra mode' can chain vulnerabilities together to map entirely new attack paths, a capability that's great for offense but terrifying at scale. Even more alarming: Nikesh estimates that Mythos-level capabilities will be available in open-source or Chinese models within three months. [2] — Nikesh Arora "3 months to open-source Mythos capability: Nikesh Arora estimates Mythos-level AI vulnerability-finding capabilities will be available in o…" 04:30 He notes that models like Llama 4.8 and 5.5 already have similar capabilities, and you don't need to crack the hardest targets — an old industrial OT system is a much easier mark.
Palo Alto Networks ran Claude's Mythos model against its own codebase for 6 weeks and found vulnerabilities that would have taken 5 to 7 years using conventional methods. The cost was in the low millions — and the capability will be in the wild within 3 months.
Claude's Mythos model found vulnerabilities in Palo Alto's codebase in 6 weeks that would have normally taken 5 to 7 years to discover through conventional methods.
Running Claude's Mythos model on Palo Alto's codebase for 6 weeks cost only a few million dollars in compute, with costs expected to fall further.
Nikesh Arora estimates Mythos-level AI vulnerability-finding capabilities will be available in open-source models within 3 months.
Chapter 3 · 05:15
Are cyber defenders losing the race against AI attackers?
With the Mythos revelations still fresh, David Friedberg presses Nikesh on who's actually winning the AI cyber arms race. The answer is uncomfortable: defenders are falling behind. Every software vendor is now showing up at enterprise CIOs' doors asking them to patch newly discovered vulnerabilities — at exactly the same moment those CIOs are scrambling to audit their own codebases. The situation is compounded by open source, which nobody quite knows how to defend at scale, though IBM's $5 billion project signals the market is waking up. Nikesh frames this bluntly: 'Not as well as we should be doing — which is great for our business, but that's a different story.' [1] — Nikesh Arora "AI is supercharging attackers faster than defenders can respond. Every vendor is now showing up at CIOs' doors asking them to patch newly d…" 05:15
AI is supercharging attackers faster than defenders can respond. Every vendor is now showing up at CIOs' doors asking them to patch newly discovered vulnerabilities — while CIOs are simultaneously trying to find and fix their own — and open source remains an unsolved nightmare.
Chapter 4 · 06:50
Analytical SaaS is dead, so what survives the AI wave?
This chapter contains the episode's most sweeping strategic insight. Nikesh carves the SaaS world into three buckets with surgical precision. First: analytical SaaS — any company whose core value is collecting and analyzing your data — is finished. LLMs can now query raw data directly, making the entire middleware analytics market redundant. [1] — Nikesh Arora "Any SaaS company whose core value proposition is collecting and analyzing data for you is finished. You can now run an LLM directly against…" 07:03 Jason illustrates this perfectly with a real example: his firm eliminated 17 of 20 SaaS seats, connected the data source to Claude via Slack, and cut the bill by 90%. Second: infrastructure software — databases, data platforms like Databricks, Snowflake, MongoDB, Oracle — is massively undervalued, because enterprises will need to store 10 times their current data over the next three years to train and defend AI systems. [2] — Nikesh Arora "While analytical SaaS dies, infrastructure software is quietly undervalued. Enterprises will need to store 10 times their current data over…" 08:50 Third: systems of work (CRMs, ERPs, sales tracking) need to be reinvented for an agentic world where agents, not humans, do the data entry — eliminating the need for the UIs that trillions of dollars have been spent building.
Any SaaS company whose core value proposition is collecting and analyzing data for you is finished. You can now run an LLM directly against your raw data and get better, faster answers — no middleware needed. The entire incremental-module business model is gone.
While analytical SaaS dies, infrastructure software is quietly undervalued. Enterprises will need to store 10 times their current data over the next three years to train and defend AI systems — making databases, data platforms, and cloud storage essential picks-and-shovels plays.
Nikesh Arora argues enterprises will need to store 10 times the data they currently hold over the next 3 years to properly defend against AI-powered cyber threats.
Enterprise UIs were always just a workaround to let humans interact with data. Once agents can do that interaction directly, the entire trillion-dollar investment in enterprise UI becomes unnecessary. The system-of-work software layer must be fully reinvented in the next five years.
The real AI cyberattack threat isn't cracking power grids or defense systems — those are well-protected. The danger is the ransomware attack on a healthcare clearing house that shuts down every physician's office in the country, like Change Healthcare. Small offices with old software are the real attack surface.
According to Nikesh Arora, 89% of cybersecurity breaches occur not from sophisticated exploits but from stolen username and password credentials.
Chapter 5 · 14:06
If models become a utility, where will the money be made?
The conversation turns to model economics and where value will ultimately accrue in the AI stack. Nikesh offers a vision of AI models becoming pure utilities — you buy 120 IQ for routine tasks, 250 IQ for complex ones, paying fractions of cents versus dollars. The implication: model providers won't own the profit pools. That's why OpenAI is racing to build Codex and Anthropic is building Claude Code — they're attacking the application layer, which is where enterprise software spending already lives. [1] — Nikesh Arora "AI models will commoditize into a utility layer where you buy intelligence on demand at different price-performance tiers. The profit pools…" 14:06 But here's Nikesh's key observation: the AI-native application companies that will replace legacy SaaS are not yet fully formed. Fifty thousand enterprises need the same HR system, the same sales platform — it's wildly inefficient for each to build their own on top of raw model APIs. The opportunity waiting to be captured is building that next generation of enterprise application companies, complete with harnesses, memory, and data pipelines.
AI models will commoditize into a utility layer where you buy intelligence on demand at different price-performance tiers. The profit pools are in the application layer — which is why OpenAI is pushing Codex and Anthropic is pushing Claude Code. They know that's where the money will be.
A major AI model CEO told Nikesh Arora that the full weights of their newest frontier model fit on a single USB stick and can be distilled in under 48 hours. That fact alone makes a 6-month export control regime essentially meaningless — the IP walks out the door.
A CEO of a leading AI model company told Nikesh Arora that the entire weights of their newest frontier model fit on a single USB stick, distillable in under 48 hours.
Mythos had a 30% false positive rate — meaning nearly 1 in 3 vulnerabilities it found didn't exist. For offense that's fine; for defense it's catastrophic. The real challenge of deploying AI in enterprise isn't getting the newest model, it's driving false positives from 20% down to 0.01%.
Claude's Mythos model had a 30% false positive rate when used for vulnerability detection — great for offense, but problematic for defense.
Chapter 6 · 20:35
Armchair CEO: Nikesh rates Waymo, Google, and OpenAI
The tone lightens as David Sacks runs an armchair CEO segment with Nikesh. He declines to rate Uber (he's on the board). On Waymo: the cars work and they should be in more cities faster. On Google — his most memorable take — he calls it 'underrated' and predicts it will be the first $10 trillion company in our lifetime. [1] — Nikesh Arora "Google is underrated. It has the models, the data, and critically — the largest enterprise sales force of any hyperscaler. Most people forg…" 21:35 His reasoning is structurally compelling: everyone can build a model, but converting model capability into enterprise revenue requires a massive, disciplined sales force. The three hyperscalers — Google, Microsoft, Amazon — have the biggest enterprise sales organizations in the world, and that advantage is systematically undervalued by the market. On OpenAI, he notes they should be selling faster, citing Anthropic's apparently stronger ARR growth driven by an all-in focus on enterprise and coding. A brief, comedic interlude erupts when Chamath tries to walk back an earlier comment about founder vs. hired-hand CEOs — earning Nikesh's theatrical forgiveness.
Google is underrated. It has the models, the data, and critically — the largest enterprise sales force of any hyperscaler. Most people forget that selling AI at scale requires an army of salespeople, and Google already has that army. That's why it wins.
Nikesh Arora believes Google is underrated and will become the first $10 trillion company in our lifetime, citing its full-stack AI assets and massive sales force.
The fastest path to revenue in AI is replacement — taking existing software budget and replacing the incumbent with something better. You don't have to create demand; it's already there. Replacement TAMs are beautiful because the customer already knows they need to pay.
For years, Palo Alto bought product companies and plugged them into its sales engine — doubling revenue per customer at negligible incremental cost. That playbook ran to $150 billion. The next phase is using AI to drive operating margins far above industry norms, making any acquisition accretive regardless of the target.
Chapter 7 · 28:22
Palo Alto's M&A playbook and the path to $1 trillion
The episode closes with Nikesh mapping Palo Alto's acquisition strategy. Phase one was elegant: buy product companies, plug them into a high-performing go-to-market engine, and increase revenue per customer at negligible incremental cost. That playbook ran the market cap from $17 billion to north of $150 billion. [1] — Nikesh Arora "For years, Palo Alto bought product companies and plugged them into its sales engine — doubling revenue per customer at negligible incremen…" 28:20 Phase two, signaled by the $25 billion identity security acquisition, is different in kind: it's about using AI to run the most operationally efficient enterprise in the sector. If Palo Alto can drive its operating margins far above industry norms, it becomes a universal acquisition machine — any asset bought at a lower margin can be upgraded to Palo Alto's margin profile, making the deal immediately accretive regardless of the target's adjacency to core cybersecurity. Nikesh closes with a contrarian workforce prediction: despite all the talk of AI-driven headcount reduction, Palo Alto has more technical employees today than it would have without AI, because AI-driven transformation creates demand for engineers faster than it eliminates them.
Palo Alto's strategy of buying product companies and integrating them into its go-to-market engine drove the company's valuation from $17 billion to north of $150 billion.
Palo Alto Networks acquired a $25 billion identity security company that closed 3 months prior to the episode, pivoting toward agentic security infrastructure.
Contrary to conventional wisdom, Nikesh Arora says Palo Alto has more technical employees today than it would have had without AI, because AI is driving demand for transformation across the enterprise.
No indexed bits in this chapter.
Show stoppers
Snapshots ()
Key Quotes ()
This episode
Claims & Sources
Factual claims made this episode, and whether a source was named.
Claude's Mythos AI model found vulnerabilities in Palo Alto Networks' codebase in 6 weeks that would have taken 5 to 7 years to find through conventional security testing.
Running Claude's Mythos model on Palo Alto's codebase for 6 weeks cost only a few million dollars.
Mythos-level AI capabilities for finding code vulnerabilities will be available in open-source or Chinese models within approximately 3 months.
89% of cybersecurity breaches occur due to stolen credentials, not sophisticated technical exploits.
Claude's Mythos model had a 30% false positive rate when used for vulnerability detection at Palo Alto Networks.
Enterprises will need to store 10 times their current data volume within the next 3 years to support AI cybersecurity defenses.
IBM announced a $5 billion project to address open-source software vulnerabilities.
Palo Alto Networks grew from a $17 billion market cap to $238 billion over the 8 years of Nikesh Arora's tenure as CEO.
The full weights of a leading frontier AI model fit on a single USB stick and can be distilled in under 24 to 48 hours.
Palo Alto Networks acquired a $25 billion identity security company that closed approximately 3 months before the episode.
Palo Alto Networks' M&A-and-integration playbook drove the company's market cap to north of $150 billion before requiring a strategic pivot.
Building 1 gigawatt of AI compute capacity costs approximately $10 billion.
This episode
Cast
-
Track
Cybersecurity company led by Nikesh Arora, used as the central case study for AI-powered vulnerability detection and enterprise M&A strategy.
-
Discussed as a competitor to Anthropic and as an example of a model company moving into the application layer via products like Codex.
-
Track
Nikesh Arora's former employer; he predicted Google will be the first $10 trillion company, citing its AI assets and enterprise sales force.
-
AI model company behind Claude; cited as having accelerated ARR growth faster than OpenAI by focusing on enterprise and coding applications.
-
Track
Used as a canonical example of an analytical SaaS company whose marketplace model is threatened by direct LLM data querying.
-
Autonomous vehicle company praised by Nikesh Arora for its working technology, with the suggestion it should expand to more cities faster.
-
Healthcare payment clearing company breached by ransomware, causing widespread physician office shutdowns and billions in emergency credits from UnitedHealth.
-
Cited as an example of undervalued infrastructure software that enterprises will increasingly need as data storage requirements grow 10x.
-
Track
Used as an example of hardware's resilience — once written off, Dell has rebounded to a $300-400 billion market cap, illustrating hardware's enduring value.
-
Track
Mentioned as having announced a $5 billion project to address open-source software vulnerabilities — highlighting the scale of the open-source security problem.
-
Track
Cited alongside Databricks as infrastructure software companies that are undervalued relative to their strategic importance in the AI era.
-
Japanese conglomerate where Nikesh Arora previously served as President, establishing his credentials as a senior business executive before Palo Alto.
-
Track
Nikesh Arora sits on Uber's board and declined to comment on the company for that reason during the armchair CEO segment.
-
Track
Had to provide billions of dollars in emergency credits to physicians after the Change Healthcare ransomware breach disrupted the payment clearing system.
-
Anthropic's AI model, specifically its Mythos security variant, used by Palo Alto to find years of code vulnerabilities in weeks.
Stats