Cybersecurity is the real bubble right now, because greater importance in the age of AI does not justify paying valuations like 40x sales for names such as Cloudflare, CrowdStrike and Palo Alto Networks. x.comÂ
Finance Jack
Equity Research
Hyperscaler cloud integration and frontier AI labs could take a fair bit of cybersecurity's economics. Rising AI-token budgets also make higher cyber spending a stretch. Palo Alto Networks, CrowdStrike and Cloudflare have nearly $1 trillion in market cap on less than $20 billion in revenue; even high-quality Palo Alto and Cloudflare look too expensive, while Okta looks indefensibly expensive. The theme has real demand, but these valuations look too high in the short to medium term. x.comÂ
Anthropic and OpenAI's inevitable move into cybersecurity threatens CrowdStrike and Palo Alto Networks' valuations. They look like the market's biggest bubble stocks right now; CrowdStrike trades at 40x ARR despite 25% growth and negative GAAP EBIT. x.com x.comÂ
CrowdStrike may distinguish itself from an expensive cybersecurity group by showing more breakneck growth at earnings next month. Fortinet's slowing product revenue exposed how much relentless execution investors had priced into the group's extreme multiples, pulling CrowdStrike down in sympathy. CrowdStrike remains in a higher tier than Fortinet, which itself ranks above SentinelOne. x.com x.comÂ
Cybersecurity is a great AI play, but some valuations are getting absolutely ridiculous, and great companies are not great stocks at any price. CrowdStrike trades at 186x forward earnings and 40x sales, Cloudflare at 209x and 43x, Palo Alto Networks at 87x and 21x, and Rubrik at 327x and 11.5x. x.comÂ
Cybersecurity stocks are priced for near-perfect execution. Forward P/Es stand at 201x for Cloudflare, 163x for CrowdStrike, 77x for Palo Alto Networks, 44x for Fortinet, 39x for Okta and 32x for Zscaler. x.comÂ
Cybersecurity stocks catching a bid makes sense, because boards and CTOs will react strongly to cyber risks from agent proliferation. AI lab chiefs Dario Amodei and Sam Altman proving untrustworthy again also makes CTOs less willing to use their labs for cyber. The multiples are too high, though. x.comÂ
CrowdStrike and Palo Alto Networks need 50%-plus growth to deliver even a 10% IRR over a realistic horizon, but almost no conceivable case gets them there. They feel as dumb as Zoom and Peloton in 2021. Even if revenue doubles over four to five years, Palo Alto would still trade at 10x revenue and CrowdStrike at 20x, leaving little prospect of a real IRR; Palo Alto is growing in the teens today. x.com x.com x.comÂ
Palantir, CrowdStrike and Cloudflare are top-tier companies, but their valuations may have reached bubble territory, a reason to book profits on long-term holds. Their combined market cap has grown from about $90B to $840B, and their P/E and P/S multiples price in much future growth. CrowdStrike and Cloudflare in particular trade on hopes that the agentic era, with bots charged for access and usage-based AI pricing, will make revenue explode. Trimming Cloudflare and CrowdStrike has started. … Show more
AI-powered attacks are spreading so fast that companies are unlikely to cut security budgets, even if they slow broader AI spending. The latest wave hit governments, banks, hospitals, grocery chains and businesses, while AI finds vulnerabilities and breaks in around the clock. That is why Cloudflare, Zscaler, CrowdStrike and Palo Alto Networks rose as broader AI concerns hit tech shares. x.com x.comÂ
Combining estimated NTM revenue growth with trailing GAAP EBITDA margin makes Palo Alto Networks, Datadog, JFrog, Rubrik and Snowflake look overvalued against forward EV/sales. Zoom, Alphabet, Oracle, AppLovin, Microsoft, Fair Isaac, Adobe, Amazon and Teradata remain undervalued on this Rule of 40 comparison; Palantir, Cloudflare and CrowdStrike remain overvalued. x.comÂ