Palo Alto Networks' DEI Employment Practices: What the Company's Own Documents Show — and What They Mean for Employees

Published August 22, 2026 · Last updated August 22, 2026 · By Fett Law — Michigan Employment Discrimination Attorneys

Key facts

Item	Detail
Company	Palo Alto Networks, Inc. (NASDAQ: PANW), the Santa Clara, California–headquartered cybersecurity company; fiscal year ends July 31. Global workforce of 16,068 as of July 31, 2025
Federal nexus	Documented and substantial. Palo Alto Networks products are sold to federal agencies under GSA Multiple Award Schedule contracts GS-35F-0119Y and 47QSWA18D008F, the Army ITES-SW2 vehicle W52P1J-20-D-0042, NASA SEWP V, and a Defense Information Systems Agency Joint Enterprise License Agreement BPA (HC108424A0002). The company holds FedRAMP Moderate (2021) and FedRAMP High (December 2024) authorizations and a DoD Impact Level 5 provisional authorization. It publicly posts its EEO-1 Component 1 report
Documents reviewed	13 company documents, fiscal 2020–fiscal 2025: Forms 10-K for FY2020 through FY2025; proxy statements (DEF 14A) filed October 2020 through November 2025; the FY21 ESG Supplement; the FY24 and FY25 Corporate Responsibility Reports; and the company's published EEO-1 report
Practices documented	(1) A stated requirement of diverse interview panels and diverse candidate slates, with a measured ~90% compliance rate; (2) numeric aspirational 2025 goals for global gender diversity, leadership-team diversity and U.S. underrepresented representation, including a mandatory minimum-of-two floor on functional leadership teams; (3) an executive cash-incentive modifier of plus or minus 10% tied to an ESG scorecard including diversity and inclusion metrics. A development or mentoring program restricted by race or sex is not documented among the company's internal employee programs — see that section below
Source-document status	Mixed. The FY21 ESG Supplement, which contains the representation goals, remains on paloaltonetworks.com but is no longer linked from the company's Corporate Responsibility page. The file panw-fy24-esg-report.pdf returns a 404; the report was renamed to panw-fy24-cr-report.pdf. The company's inclusion-and-diversity landing page has been replaced with a page containing no representation data, no goals and no compensation linkage. The Thurgood Marshall College Fund page for the Palo Alto Networks Cyber Scholars Program returns a 404

Did Palo Alto Networks require diverse interview panels and candidate slates?

The strongest single statement is in the proxy statement Palo Alto Networks filed with the Securities and Exchange Commission on November 3, 2022. The operative verb is require:

"We require diverse interview panels to deliver a quality interview experience to a diverse slate of candidates."

— Palo Alto Networks, Inc., Proxy Statement (DEF 14A), filed November 3, 2022 (source)

The same document describes how candidates were sourced: "Our talent acquisition team utilizes a number of methods to find subject experts in their respective fields, including the use of a variety of channels that focus on reaching underrepresented talents."

The practice was disclosed to investors in the company's annual reports across four consecutive fiscal years. The fiscal 2022 Form 10-K placed it at the center of the company's hiring model:

"Sourcing and hiring diverse talent and enabling them to create and execute is central to our comprehensive approach to talent acquisition, which we refer to as 'The Way We Hire.'"

"We have diverse interview panels to deliver a quality interview experience to a diverse slate of candidates."

— Palo Alto Networks, Inc., Form 10-K for the fiscal year ended July 31, 2022, filed September 6, 2022, Item 1, Human Capital (source)

Palo Alto Networks also published how often the practice was actually followed. Its FY21 ESG Supplement reports a measured compliance rate rather than an aspiration:

"~90% of interview panels and candidate slates are diverse"

Footnote: "Includes gender and racial/ethnic diversity"

— Palo Alto Networks, Inc., FY21 ESG Supplement, published November 22, 2021, p. 22; restated in the FY21 ESG Highlights at p. 49 as "Reached ~90% diverse representation in candidate slates and interview panels" (source)

By fiscal 2023 the company added a governance layer, describing "Global Hiring Committees, with a focus on elevating hiring standards and ensuring the recruitment of diverse talent," and the fiscal 2023 Form 10-K restated the slate practice as "conducting interviews with diverse panelists and providing a balanced evaluation and quality interview experience for a diverse slate of candidates."

One change is worth reading carefully. In the fiscal 2024 Form 10-K the phrase becomes "conduct interviews with a diverse slate of panelists" — attaching the diversity requirement to the interviewers rather than to the candidate pool. That is a materially different statement from the fiscal 2021 through fiscal 2023 language, and the two should not be conflated.

What this meant in practice for an applicant is straightforward to describe and hard to see from the outside. If a hiring team could not close a requisition until the slate satisfied a demographic condition, then the composition of the slate — not only the merits of each candidate — was part of what determined who reached an interview and who did not. A published requirement does not by itself decide any individual case. What matters legally is whether the requirement changed an actual decision. The recruiters, hiring managers and members of the Global Hiring Committees who administered it are the people best placed to know.

Did Palo Alto Networks set racial or gender representation goals?

The goals were published under the heading "WHERE WE'RE GOING NEXT," introduced this way:

"We approach our ESG work as a journey and in that spirit, we are setting several aspirational goals to advance our I&D work"

"WE WILL STRIVE TO ACHIEVE" — followed by three percentage targets: one for "global gender diversity by 2025," one for "diversity on our leadership teams by 2025," and one for "of U.S. workforce from underrepresented backgrounds by 2025."

— Palo Alto Networks, Inc., FY21 ESG Supplement, published November 22, 2021, p. 33 (source). The three percentage figures are rendered on that page as graphics rather than as selectable text; they are legible on the printed page and are not reproduced here rather than risk misquoting them.

The footnote attached to the leadership goal is the more consequential sentence, because it is written as a rule rather than an aspiration and it sets a fixed numeric floor keyed to protected characteristics:

"*functional leadership teams shall include a minimum of 2 individuals who self-identify as female and / or from underrepresented backgrounds"

— Palo Alto Networks, Inc., FY21 ESG Supplement, p. 33, footnote to the leadership-team goal (source)

The company published the baselines the goals were measured from. As of fiscal 2021, "24.7% of global employees self-identify as women" and "14.5% of U.S. employees self-identify as coming from underrepresented communities" — figures the company repeated in its November 22, 2021 announcement of the report. The same document published a full breakdown of U.S. racial and ethnic representation by job category, and of gender representation at director level and above.

In plain terms: for a period beginning in late 2021, Palo Alto Networks published percentages it intended to reach by 2025 in defined populations — the global workforce, functional leadership teams, and the U.S. workforce — and, for leadership teams, wrote a minimum headcount requirement defined by sex and underrepresented status. Employees who competed for leadership roles during that window, and the executives who staffed those teams, are the people who would know whether the floor operated as a description or as an instruction.

Did Palo Alto Networks tie executive pay to diversity metrics?

The clearest statement of what the modifier measured is in the company's own ESG report, on the page describing executive compensation:

"In fiscal 2022, our executive compensation plan includes an incentive modifier based on the achievement of ESG goals, focused on environmental performance, progress towards our aspirational diversity goals and employee engagement metrics."

— Palo Alto Networks, Inc., FY21 ESG Supplement, published November 22, 2021, p. 47 (source); the identical sentence appears in the company's November 22, 2021 announcement of the report (source)

That sentence is the link between the two practices above: the compensation modifier was tied, by the company's own description, to progress against the numeric representation goals published fourteen pages earlier in the same document.

The mechanism and its size were disclosed to shareholders. The 2021 proxy statement announced it — "in fiscal 2022, we added an ESG modifier to our NEOs' cash incentive plan to ensure a linkage between compensation and our ESG goals" — and the 2022 proxy quantified it:

"Addition of ESG modifier to cash incentive plan, which modifies the annual incentive cash compensation (plus or minus 10%), based on our performance relative to an ESG scorecard with climate, inclusion and human capital metrics"

— Palo Alto Networks, Inc., Proxy Statement (DEF 14A), filed November 3, 2022, "Executive Compensation at a Glance" (source)

The same formulation — an ESG scorecard "with climate, inclusion and human capital metrics" — appears again in the proxy statements filed October 27, 2023 and October 29, 2024, each of which records that the company "Maintained an ESG modifier to our cash incentive plan." The fiscal 2024 proxy also records that "In fiscal 2024, established an Inclusion and Diversity Steering Committee, which is made up of members of our management to set objectives and oversee program implementation."

What this means operationally is that for at least three fiscal years, the cash bonus of the company's most senior executives could move by up to a tenth in either direction based partly on how the company performed on inclusion measures — and those executives set the objectives that flowed down to the managers who made hiring and promotion decisions. One limit on the public record should be stated: the proxies say the Compensation Discussion and Analysis contains "data regarding the scorecard measures," but the specific weighting given to the inclusion component, and the numeric target attached to it, are set out deep in filings we have not been able to read in full. Whether an individual manager's own compensation carried a similar linkage is not a matter of public record at all.

Did Palo Alto Networks run programs restricted by race or sex?

This section is included because its answer is largely a negative one, and the difference matters. In the IBM matter, the Justice Department's allegations included training, mentoring and leadership programs whose eligibility was "limited on the basis of race or sex." Palo Alto Networks' published descriptions of its internal programs do not match that pattern. Its Mentorship Connection Program is described as offering "learning in an informal, opt-in environment"; its LEAP program serves "early talent"; its Leadership Accelerator is for "new leaders"; and its Cybersecurity Academy curriculum is described as "free." None of these carries a stated race or sex eligibility condition.

The company's employee network groups carry protected-trait names — the FY21 ESG Supplement lists a "Women's Networking Community, Ujima (Black Employee Network), Juntos (Latinx Employee Network), Salam (Muslim Employee Network), LGBTQIA+, Early-in-Career, VetsNet, and InnovASIAN" — and each has "a dedicated executive sponsor." From fiscal 2024 forward the company's filings describe them as "open to all employees." Earlier filings describe them as "employee-led" without that qualifier. We found no document in any year stating that any group was closed to employees outside its named community, and the absence of the disclaimer in the earlier years is not evidence that one was.

The scholarship program is the one item with an express eligibility restriction. Its published terms open with the institutional gate:

"The Thurgood Marshall College Fund (TMCF), and Palo Alto Networks are proud to offer financial assistance to outstanding students attending one of Historically Black Colleges and Universities (HBCUs) and Predominantly Black Institutions (PBIs)."

Eligibility: "Be enrolled full-time as an undergraduate or a graduate student at a public or private HBCU during the 2022-2023 academic school year"; open to business and STEM majors; minimum 3.0 grade point average; demonstrated financial need; FAFSA submission; U.S. citizenship or permanent residency. Fourteen scholars were to receive awards of up to $10,000.

— TMCF | Palo Alto Networks Cyber Scholars Program, 2022–2023 cycle. The Thurgood Marshall College Fund program page now returns a 404; the terms above are preserved on scholarship listing services including Opportunity Desk and Scholarships360

The eligibility line as written is institutional rather than racial: it turns on where a student is enrolled, not on the student's own race. That distinction is real and we state it plainly. What it does mean is that a recruiting and scholarship channel into the company was routed through a set of institutions selected on the basis of their student demographics — which is a different legal question from an applicant-level racial test, and one that is being litigated in a number of contexts. A student at a non-participating school who wanted that scholarship and that internship track could not apply for it.

How Palo Alto Networks' DEI program changed, 2020–2026

Date	Development
Sept. 2020	The fiscal 2020 Form 10-K reports 8,014 employees and contains no diversity content in its human capital disclosure
Sept. 3, 2021	The fiscal 2021 Form 10-K introduces an Inclusion & Diversity discussion: "We have diverse interview panels to deliver a quality interview experience to a diverse slate of candidates," and reports women at 33% of the board
Oct. 29, 2021	The proxy statement announces that "in fiscal 2022, we added an ESG modifier to our NEOs' cash incentive plan to ensure a linkage between compensation and our ESG goals"
Nov. 22, 2021	The FY21 ESG Supplement is published: three numeric 2025 diversity goals, the "minimum of 2 individuals" leadership-team floor, the ~90% diverse-slate-and-panel compliance figure, full U.S. race and ethnicity workforce tables, and the statement that the executive incentive modifier is based in part on "progress towards our aspirational diversity goals"
Sept. 6, 2022	The fiscal 2022 Form 10-K describes sourcing and hiring diverse talent as "central" to "The Way We Hire"
Nov. 3, 2022	The proxy statement states "We require diverse interview panels to deliver a quality interview experience to a diverse slate of candidates," and quantifies the ESG modifier at plus or minus 10% against a scorecard "with climate, inclusion and human capital metrics"
FY 2023	Global Hiring Committees are introduced "with a focus on elevating hiring standards and ensuring the recruitment of diverse talent"; the modifier is maintained and the proxy expands scorecard disclosure "in response to stockholder feedback"
June 4, 2024	The company files its EEO-1 Component 1 report for reporting year 2023, certified by its Inclusion & Diversity Program Manager, and posts it publicly "in the interest of transparency"
2024	The fiscal 2024 Form 10-K shifts the language to "a diverse slate of panelists"; the proxy records establishment of an Inclusion and Diversity Steering Committee and maintenance of the ESG modifier
Jan. 21, 2025	Executive Order 14173 directs federal agencies to target DEI programs at federal contractors
Aug. 29, 2025	The fiscal 2025 Form 10-K drops the Inclusion & Diversity subsection entirely. The words "diverse slate" and "underrepresented" do not appear in it. Employee network groups are described as "open to all employees"
Nov. 7, 2025	The fiscal 2025 proxy renames the mechanism a "Corporate Responsibility modifier." "Inclusion" is no longer named among the scorecard metrics. The values language changes from "diverse points of view" to "varied points of view"
2025–2026	The annual report is renamed from "ESG Report" to "Corporate Responsibility Report." panw-fy24-esg-report.pdf returns a 404. Neither the FY24 nor the FY25 Corporate Responsibility Report contains the 2025 diversity goals, any progress against them, or any workforce gender or race data. The inclusion-and-diversity landing page is replaced by a page with no representation data. The Thurgood Marshall College Fund program page returns a 404
Aug. 2026	The FY21 ESG Supplement, which contains the goals and the compensation linkage, is still served from paloaltonetworks.com but is no longer linked from the company's Corporate Responsibility page, which lists only the FY25 and FY23 reports. Verified August 2026

Why these practices matter legally

Two recent Supreme Court decisions changed the landscape for these claims. In Muldrow v. City of St. Louis (2024), the Court held that an employee challenging a discriminatory job transfer need show only some harm to the terms or conditions of employment, not a "significant" disadvantage. In Ames v. Ohio Department of Youth Services (2025), a unanimous Court rejected the rule — previously applied in several federal circuits — that a majority-group plaintiff must produce extra "background circumstances" evidence before a discrimination claim can proceed. Separately, 42 U.S.C. § 1981 prohibits race discrimination in the making and enforcement of contracts, including employment relationships, and carries a four-year window with no agency filing requirement. (Title VII, 42 U.S.C. § 2000e-2.)

For companies that sell to the federal government, a second layer arrived on April 10, 2026, when International Business Machines Corporation paid $17,077,043 to resolve allegations — brought under the Justice Department's Civil Rights Fraud Initiative, in the first False Claims Act settlement of its kind — that it certified compliance with federal anti-discrimination requirements while operating DEI practices including a diversity modifier tying bonus compensation to demographic targets, "diverse interview slates," race and sex demographic goals for business units, and programs whose eligibility was "limited on the basis of race or sex" (DOJ press release). Three of those four categories — the compensation modifier, the diverse interview slates, and the numeric demographic goals — are described in Palo Alto Networks' own filings and reports. On the government-business side, Palo Alto Networks products reach federal agencies through GSA Multiple Award Schedule contracts, the Army's ITES-SW2 vehicle, NASA SEWP V and a Defense Information Systems Agency enterprise license agreement, and the company holds FedRAMP High and DoD Impact Level 5 authorizations; whether any particular Palo Alto Networks entity made the certifications at issue in the IBM theory, in a given period, is a fact-specific question the public record does not settle.

To be clear about what is and is not established: no court or agency has found that Palo Alto Networks' practices violated any law, we located no discrimination charge, EEOC action, OFCCP enforcement or False Claims Act matter involving the company, and the IBM settlement itself resolved allegations without any admission or determination of liability. But practices like those documented above — a stated requirement that candidate slates satisfy demographic conditions, a minimum-headcount rule for leadership teams keyed to sex and underrepresented status, and executive pay that moved with progress on representation — are precisely the categories that can give rise to liability under Title VII and § 1981, and, for companies doing business with the federal government, potential False Claims Act exposure. For the complete framework — the four illegal DEI practice categories and when you can sue — see our guide, Is DEI Illegal? 4 Illegal DEI Practices & When You Can Sue.

Were you affected by these practices at Palo Alto Networks?

If you worked at Palo Alto Networks, Inc. — or applied there — between 2021 and 2025, the documented practices above may have touched your career in ways worth examining:

• You applied for a role and never reached an interview, or were interviewed and not selected, during a period when the company told shareholders it required interview panels and candidate slates to satisfy a demographic condition and reported roughly 90% compliance with it.
• You were passed over for a leadership or director-level role at a time when the company had published a rule that functional leadership teams "shall include a minimum of 2 individuals who self-identify as female and / or from underrepresented backgrounds."
• You were a recruiter, hiring manager, or member of a Global Hiring Committee with first-hand knowledge of how the slate and panel requirement was applied to particular requisitions — whether a role was held open, a candidate added, or a decision changed to satisfy it.
• You were an executive, HR or compensation professional who saw how the inclusion component of the ESG scorecard was set, measured, and translated into instructions or targets below the executive level.
• You were a student at a school outside the participating HBCU and PBI list who was ineligible for the Cyber Scholars Program and the recruiting track attached to it.

There is a separate question worth asking if your work touched Palo Alto Networks' federal business. The False Claims Act's qui tam mechanism lets an individual bring a claim on the government's behalf, and potentially share in any recovery, where a company certified compliance with federal anti-discrimination requirements while doing something else — the theory the Justice Department used against IBM. Whether any Palo Alto Networks entity made certifications of that kind during the relevant period is a fact-specific question the public record does not answer; it is the sort of thing an insider may know. Qui tam complaints are filed under seal, so a whistleblower's identity is initially protected. Both Title VII and the False Claims Act prohibit retaliation against people who assert their rights or report violations.

If any of these fits, it costs nothing to find out where you stand — meet our DEI discrimination lawyers, or start below.

What could a claim against Palo Alto Networks be worth?

Whistleblower rewards under the False Claims Act

Under 31 U.S.C. § 3730(d), a qui tam whistleblower (called a "relator") is entitled to 15–25% of what the government recovers when the Justice Department intervenes, and 25–30% when the relator litigates without government intervention. For scale: on a settlement the size of IBM's $17,077,043, the intervened-case whistleblower share would be roughly $2.6 million to $4.3 million. Because False Claims Act recoveries are built on treble damages plus per-claim penalties, recoveries tied to large federal software and enterprise-license programs can run substantially higher.

Damages in individual discrimination cases

Back pay and front pay are uncapped under Title VII. Compensatory and punitive damages under Title VII are capped by employer size — $300,000 for employers with more than 500 employees, the bracket Palo Alto Networks occupies with more than 16,000 employees — but race claims under 42 U.S.C. § 1981 carry no damages caps at all, which is one reason race discrimination cases are often pleaded under it. Several state civil-rights statutes are likewise uncapped, including California's Fair Employment and Housing Act, which governs most of the company's U.S. workforce, and Michigan's Elliott-Larsen Civil Rights Act. Prevailing plaintiffs generally recover attorney's fees on top. For a sense of what employment discrimination cases can produce, Fett Law's own results include a $10.5 million race and age discrimination class action against Ford Motor Company, a $2 million disability harassment result, and a $1.6 million racial harassment result. Prior results do not guarantee a similar outcome.

Class action potential

Class actions are built on a single policy applied to many people — and a requirement that every candidate slate and interview panel satisfy a demographic condition is, by construction, companywide. Palo Alto Networks described it to shareholders as central to "The Way We Hire" and measured compliance across the organization at roughly 90%. Historic employment-discrimination class settlements show the range such cases can reach: Coca-Cola paid $192.5 million (2000), Texaco $176.1 million (1996), and Novartis $175 million (2010) to resolve class claims.

Every case depends on its own facts — these figures show the range the law makes possible, not a promise of any outcome. The fastest way to learn where your situation falls is to start a confidential intake or request a free consultation.

Sources