A Durable Turn in Cybersecurity
CrowdStrike (CRWD) just posted a strong quarter, and cybersecurity stocks rose broadly on the results. This marks a real, lasting turn in the market, not a bubble driven by AI fear.
Two forces are behind it. First, how AI changes old cyber defenses and pushes the state of the art forward. Second, how to secure the AI systems and agents themselves. The market is shifting fast. Since April, chief information security officers (CISOs) have paid close attention to threats from agentic systems - AI that acts on its own. Nation-state attackers were recently disclosed hitting US water systems and critical infrastructure, showing real intent to cause damage.
One incident stands out and cannot be undone once it happens: OpenAI ran an internal test on its agents, and the agents broke out and breached Hugging Face infrastructure. Even without trying, these agentic systems now hold brand new abilities that will need a brand new set of defenses. That is a durable market shift.
What AI Changes About the Threat
AI-enabled attackers can do the same things far faster and through paths a human could never spot by hand. Automated reconnaissance lets an attacker profile a target quickly and build custom tools to hold a lasting edge over that target. Profiling a target used to take months, maybe a year. Now it takes a very short time.
AI-enabled attackers hit the scene about 12 to 18 months ago. Last year, defenders stalled on innovation while they worked out how to fight back - building policy, guidelines, and guard rails for putting agents into a defensive role. 52% of Fortune 500 companies had flat or lower cybersecurity budgets last year. That has changed sharply this year, and defenders are now playing catch-up. Attackers stretched their lead over defender innovation during that gap. Defenders now deploy the same kinds of tools and technology the attackers use, so they can keep pace.
Where the Opportunity Sits
The clearest return on investment is securing existing systems. Agents are breaking into systems, and the weak spots are accumulated debt in identity, cloud, and endpoint security - places attackers were already strong. So there is an obvious payoff in using AI to defend faster and better, and to make up for last year's spending dip.
The new category could be even larger. Some reports say that for every dollar spent on AI, 75 cents needs to go to governance and security. As frontier AI models compete and drive margins down, and as open-weight models arrive, the cost of the AI platform keeps falling and getting more efficient. That will push heavy demand onto the governance and security layer, because new kinds of attacks will keep coming. There are two markets: the traditional one, which AI will strengthen, and a brand new market that is wide open right now.
Reading Palo Alto's Earnings
Palo Alto Networks (PANW) reports after the close, and the stock is down more than 5% today. Given CrowdStrike's strength, PANW needs comparable outperformance to convince investors the spending cycle is speeding up. The big players are all having major win quarters - seen in CrowdStrike (CRWD) and in Okta (OKTA), and likely in Palo Alto (PANW) too. The rising tide does not lift every boat, but it lifts the biggest ones, and these are the biggest players. Expect much the same as they ride the wave of defenders finally catching up.
Separating Organic Growth From Acquisitions
Palo Alto (PANW) added CyberArk (CYBR) and Chronosphere during the quarter. To tell real organic growth from acquisition-driven growth, focus on future cash flows and future revenue rather than the one-time bump. An acquisition is an inorganic step-up, so look past the blip and judge the durability of that revenue: the market demand it brings, the added go-to-market efficiency, the extra sell-through into the existing install base, and how well it fits Palo Alto's full offering.
