China Launches Cybersecurity Review into Palo Alto Networks Products

China's Cybersecurity Review Office announced on August 6, 2026, that it has initiated a cybersecurity review into products sold in China by Palo Alto Networks. According to the Cyberspace Administration of China and reports by National Business Daily, the review is conducted under the authority of the National Security Law, Cybersecurity Law, and Cybersecurity Review Measures. Regulators stated that the action aims to ensure the safe and stable operation of critical information infrastructure, prevent cybersecurity risks, and protect national security.

The decision to subject Palo Alto Networks to a formal cybersecurity review underscores China's active enforcement of its regulatory regime governing key information technology supply chains. As enterprise firewalls and network security tools sit at the core of corporate IT infrastructure, heightened regulatory scrutiny on foreign security vendors carries significant strategic and operational implications for international businesses and critical sector operators in China.

China’s Cybersecurity Review Office has officially launched a cybersecurity investigation into products sold within the country by Palo Alto Networks, according to a public notice released on August 6, 2026, by the Cyberspace Administration of China and covered by domestic news media including National Business Daily. The regulatory agency stated that the review is being executed in accordance with the National Security Law of the People's Republic of China, the Cybersecurity Law of the People's Republic of China, and the Cybersecurity Review Measures. Official statements emphasized that the primary goals of the regulatory action are to guarantee the safe and stable operation of critical information infrastructure, guard against underlying cybersecurity risks and hazards, and safeguard national security interests. The official announcement published by the authority did not specify particular product models, software versions, or precise compliance deficiencies prompting the review. Under China's established statutory framework for cybersecurity reviews, regulatory evaluations generally examine potential security risks associated with key network products and services. These evaluations typically focus on assessing potential threats to system reliability, supply chain continuity, sensitive data protection, and the risk of unauthorized external control or systemic operational disruption. As a major global vendor of network security hardware and enterprise software, Palo Alto Networks provides specialized tools such as firewalls and threat detection platforms to enterprise clients and foreign enterprises operating within China. The formal launch of this investigation subjects the company's product offerings and commercial operations in the domestic market to direct state regulatory oversight. This announcement highlights the ongoing enforcement of China's statutory framework surrounding critical information infrastructure protection and cybersecurity governance. Chinese law mandates that operators of critical infrastructure enforce rigorous risk assessment procedures when acquiring network equipment and services that could impact national security. The findings and subsequent regulatory determinations issued by the Cybersecurity Review Office will determine the compliance standing and future procurement eligibility of Palo Alto Networks' hardware and software solutions across China's regulated industries.