China probes Palo Alto Networks amid tech sovereignty push
China’s cybersecurity watchdog has quietly opened a security review of Palo Alto Networks, citing sweeping national-security justifications but revealing no details about its concerns. The Cyberspace Administration (CAC) announced the probe under China’s National Security Law and Cybersecurity Law, stating only that it aims to “prevent cybersecurity risks and vulnerabilities” and “safeguard national security.” The statement offers no timeline, no specific issues, and no public evidence—leaving the Silicon Valley giant in the dark about what might trigger a ban.
Palo Alto Networks told The Register that it maintains high standards globally and, at present, sees no impact on its ability to serve customers in China. The situation echoes Beijing’s 2023 review of Micron, which was also announced without warning; weeks later, the chipmaker’s products were deemed a security risk for critical infrastructure, effectively barring sales. Micron ultimately withdrew key offerings from the market, but its financial hit was softened by surging memory prices during the AI boom. The episode suggests that even a tough market exit may not permanently cripple a global vendor if demand elsewhere is strong.
The review also fits a broader Chinese campaign to reduce reliance on foreign cybersecurity products. In January, authorities reportedly urged local firms to phase out security software from a list of U.S. and Israeli vendors—including Palo Alto Networks—encouraging the adoption of domestic alternatives such as Huawei and H3C. The latter openly markets its firewalls as replacements for overseas technology, underscoring Beijing’s push for technological self-reliance.
What the opacity means for vendors
For Western security companies, the lack of specificity is the most unsettling part of the probe. Without clear allegations, vendors cannot prepare targeted responses or estimate potential fallout. The immediate financial impact is hard to quantify, since Palo Alto Networks does not break out China revenue, but any restriction would create openings for domestic competitors and add another layer of uncertainty for firms operating in the country.
Why it matters
This case highlights how cybersecurity reviews are increasingly weaponized in geopolitical competition, turning compliance into a moving target for foreign tech firms. For Palo Alto Networks, the stakes are less about a single investigation and more about navigating China’s accelerating drive toward technological sovereignty. The episode underscores a simple truth for Western vendors: in Beijing’s calculus, national security can trump market access at any time, and opacity is part of the deterrent.
Source: Security Affairs. AI-assisted editorial synthesis — TechnoExpress.