PagerDuty, Inc.

United States · owned by Independent (United States) · www.pagerduty.com · 30 vendors

PagerDuty, Inc. is a cloud-based digital operations management platform that helps organizations detect, respond to, and resolve critical IT incidents in real time. Its AI-first Operations Platform automates alerting, on-call scheduling, and incident response workflows for DevOps, IT, and business teams. The company is publicly traded on the New York Stock Exchange under the ticker symbol 'PD'.

Resilience scores

Disruption prediction

PagerDuty, Inc. has a 45% probability of disruption in the next 6 months.

19 of PagerDuty, Inc.'s 30 vendors monitored for disruptions.

Technology vendors

Services catalogue

6 services in catalogue across 3 categories; runs on 30 sub-vendors.

Insights

Last updated 2026-09-13 · revision 3

30 direct vendors, 282 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 10/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

PagerDuty exhibits exceptionally high migration readiness. Its internal technology stack is already highly modern, cloud-native, and leverages containerization (Kubernetes, Docker) and distributed systems (Apache Kafka, Cassandra), indicating an architecture that is inherently flexible and portable. The company's extensive use of APIs and a Developer Platform further supports integration and potential re-platforming efforts. PagerDuty's strong regulatory compliance framework, including adherence to GDPR, HIPAA, SOC 2 Type II, ISO 27001, and NIS2 applicability, demonstrates its capability to manage complex data protection and operational requirements across various regions, which is a significant advantage for any migration. Furthermore, the existing support for data residency in multiple regions (US, EU, APAC) shows a mature approach to data governance and location flexibility. Financially, consistent revenue growth provides the necessary resources to fund significant migration initiatives. The most impactful factor for migration readiness is the stated "Total Vendors: 0" in its vendor relationships. If PagerDuty has no external vendor dependencies for the 31 services, it faces no vendor lock-in risks, which is a critical enabler for seamless migration. While "Vendor HQ Countries" and "Vendor Geographic Diversity" are listed, their direct implication for PagerDuty's *own* external vendor lock-in is ambiguous given the explicit "Total Vendors: 0" count. The main challenge is the absence of data on revenue concentration, which could otherwise inform the strategic implications of a large-scale migration.

Compliance

11 in-scope frameworks identified; showing 3.

PIPEDA — Assessment Required

PagerDuty has Canadian operations (Toronto office) and serves Canadian customers. Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) applies to private sector organizations that collect, use, or disclose personal information in the course of commercial activities. Risk is Low because: (1) PagerDuty's existing GDPR and CCPA compliance infrastructure provides a strong foundation for PIPEDA compliance; (2) PIPEDA requirements are generally less stringent than GDPR; (3) Canada's proposed Bill C-27 (Consumer Privacy Protection Act) would modernize Canadian privacy law but has not yet been enacted; (4) no Canadian Privacy Commissioner enforcement actions against PagerDuty were found.

Evidence: https://www.pagerduty.com/region-specific-data-privacy-laws/, https://www.pagerduty.com/privacy-policy/

SOX — Compliant

PagerDuty, Inc. is a publicly traded company listed on the New York Stock Exchange (NYSE: PD), making it subject to the Sarbanes-Oxley Act of 2002 (SOX). SOX requires public companies to maintain adequate internal controls over financial reporting (ICFR) and have them assessed annually (Section 404). Risk is Low because: (1) as a NYSE-listed company, PagerDuty is subject to SEC oversight and mandatory SOX compliance; (2) annual 10-K filings with the SEC include management's assessment of ICFR; (3) PagerDuty's external auditors (Deloitte & Touche LLP, based on SEC filings) provide attestation on ICFR; (4) no material weaknesses or SEC enforcement actions were publicly identified.

Evidence: https://investor.pagerduty.com/overview/default.aspx, https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=PD&type=10-K&dateb=&owner=include&count=40

FedRAMP — Compliant

PagerDuty has achieved FedRAMP Authorization at the Low baseline, as explicitly confirmed on its Security page. FedRAMP is a US federal government program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services. Risk is Low because: (1) the authorization is confirmed and publicly disclosed; (2) FedRAMP Low authorization allows US government agencies to use PagerDuty; (3) FedRAMP requires continuous monitoring and annual assessments by a Third Party Assessment Organization (3PAO); (4) this demonstrates PagerDuty's ability to meet stringent federal security standards.

Evidence: https://www.pagerduty.com/security/, https://www.pagerduty.com/newsroom/pagerduty-achieves-fedramp-low-authorization/, https://marketplace.fedramp.gov/

Financials

Three-year financials

Financial Resilience Score: 7/10

PagerDuty has demonstrated meaningful improvement in financial resilience, achieving GAAP profitability in FY26 after years of losses, with four consecutive quarters of GAAP net income and positive operating income. Non-GAAP operating margin has expanded dramatically from (8)% in FY22 to 25% in FY26, reflecting disciplined cost management, with sales & marketing dropping from 50% to 32% of revenue and R&D from 25% to 18%. Free cash flow generation is strong at ~$102-108M annually the last two fiscal years, and Q1 FY27 free cash flow margin reached 34%. Liquidity is solid with $444M in cash and investments versus ~$396M in convertible senior notes, resulting in a roughly neutral to modestly positive net cash position. The SaaS subscription model provides high recurring revenue quality with ~86% non-GAAP gross margins and ARR of ~$496M. The enterprise customer base is strong, covering approximately two-thirds of Fortune 100 companies with 860 customers paying over $100K ARR. However, growth has decelerated sharply from +8% (FY25) to +5% (FY26) to +1% (Q1 FY27), with FY27 guidance implying potentially flat or slightly negative revenue growth. Dollar-based net retention has declined from 104% to 97%, indicating aggregate customer spend is shrinking. Concentration risk from dependence on incident management as the majority revenue source, combined with competitive pressure from Datadog, ServiceNow, and AI-native entrants, plus leadership transition risk, temper the resilience score.

Key strengths: Achieved GAAP profitability with four consecutive quarters of GAAP net income, Non-GAAP operating margin expanded from (8)% in FY22 to 25% in FY26, Strong free cash flow of $102-108M annually, 34% FCF margin in Q1 FY27, $444M cash and investments providing solid liquidity, High recurring SaaS revenue with 86% non-GAAP gross margin and $496M ARR, Enterprise customer base includes ~2/3 of Fortune 100, Disciplined cost control: S&M dropped from 50% to 32% of revenue

Risk factors: Revenue growth decelerated sharply to +1% YoY in Q1 FY27, Dollar-based net retention fell below 100% to 97%, Heavy revenue concentration on single incident management product, ~$396M convertible senior notes on balance sheet, Leadership transition with new CEO appointed May 2026, Competitive pressure from Datadog, Splunk/Cisco, ServiceNow, and AI-native entrants, FY26 GAAP net income inflated by one-time deferred tax benefit

Revenue by geography

Revenue by product/service

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report