Convequity
AI Value-Chain & Enterprise Technology Research
Model labs threaten cybersecurity unevenly, so vendors split by how easily AI can absorb their work. Host agents, inline enforcement and shift-right operations dealing with people, live environments and adversaries stay relatively hard to absorb for now, favoring Palo Alto Networks, CrowdStrike, Fortinet and Netskope. Shift-left, checkable work such as vulnerability scanning is already hit hardest by stronger coding agents, exposing Tenable, Qualys and Rapid7. x.comÂ
AI agents expand the enterprise attack surface, creating demand for cybersecurity and agent-aware defenses. The PHP2Shell vulnerability discovery underscored AI's role in finding and exploiting flaws; prompt injection, machine identities, model supply chains and data exfiltration add risks. Morgan Stanley called cybersecurity a major structural winner as model supply explodes. x.comÂ
CrowdStrike may distinguish itself from an expensive cybersecurity group by showing more breakneck growth at earnings next month. Fortinet's slowing product revenue exposed how much relentless execution investors had priced into the group's extreme multiples, pulling CrowdStrike down in sympathy. CrowdStrike remains in a higher tier than Fortinet, which itself ranks above SentinelOne. x.com x.comÂ
Tenable looks cheap among cybersecurity software names, trading at a lower P/E than Palo Alto Networks and CrowdStrike, a lower forward P/E than Fortinet, and one of the group's lowest PEG ratios. Its chart shows a double breakout from a triangle and range highs, with low cycles and confirming on-balance volume. x.comÂ
Cybersecurity stocks catching a bid makes sense, because boards and CTOs will react strongly to cyber risks from agent proliferation. AI lab chiefs Dario Amodei and Sam Altman proving untrustworthy again also makes CTOs less willing to use their labs for cyber. The multiples are too high, though. x.comÂ
Cybersecurity has one of software's strongest moats, and AI makes it more valuable because it also creates faster, more sophisticated attacks. As AI gets more capable, every layer of the security stack matters more: data security (Rubrik), identity (Okta), network (Zscaler, Netskope), endpoint (CrowdStrike, SentinelOne, Microsoft), exposure management (Qualys, Tenable) and code security (JFrog, GitLab). Rubrik, Qualys and Netskope are the largest cybersecurity positions. x.comÂ
Palo Alto Networks risks losing its growth to the AI labs rather than its existing contracts. The incremental security opportunity will be absorbed by the labs, and as legacy incumbents phase out, new AI-native companies will sidestep Palo Alto entirely in favor of tools like Claude. A Google Cloud leader described building a model to patch identified bugs; anything standing between more token consumption and the labs will be taken out, with security and design most exposed. x.com x.comÂ
Cybersecurity may be the next big AI trade, because AI agents create a whole new attack surface. CrowdStrike CEO George Kurtz says the threat is now autonomous campaigns at machine speed, and each agent becomes a privileged identity needing least-privilege access and a kill switch, pushing security into runtime infrastructure. CrowdStrike, Palo Alto and Zscaler are in a land grab. CrowdStrike's 15 years of telemetry can't be copied, making its Threat Graph a network effect. x.comÂ
Microsoft is a relative beneficiary of slower, safety-focused frontier AI, mainly through cybersecurity, though to a lesser degree than CrowdStrike and Palo Alto Networks. Agentic AI risk from misbehaving internal agents and adversaries should make security every enterprise's top priority, driving upgrades to best-of-breed providers and much larger budgets. A paced frontier also lowers extreme tail risk for software broadly. Compute plans should not change, as supply stays severely constrained. … Show more
Cloudflare has three AI-driven trends working in its favor. AI will uncover more vulnerabilities; protection against more AI bots, agents and crawlers is needed; and its developer platform, including Workers, is becoming the default for agent-related development. CrowdStrike is not a favorite. x.comÂ
Palo Alto Networks and CrowdStrike are clear AI winners the market is sleeping on, because AI makes cyber offense 10x better, faster and cheaper and defense 10x more valuable to every CISO. Both already sit on endpoint, cloud, identity and application telemetry, a data and integration moat nobody can replicate overnight. They must shift from human-speed to AI-speed detection and resolution, but they have the leadership, M&A firepower, customer trust and channel distribution to win big. x.comÂ
