Cybersecurity Stocks Trade at Elevated Valuations as Institutions Question Rally Sustainability
nashnova research
The cybersecurity sector has doubled from its April low, with CrowdStrike, Palo Alto Networks and Fortinet each up over 130% — but CrowdStrike now trades at 170× earnings, second only to Tesla, and Wall Street is split on whether the AI-threat narrative can actually convert into revenue acceleration.
How big is this rally?
Goldman Sachs' cybersecurity stock basket has more than doubled since its April 10 low.
CrowdStrike, Palo Alto Networks and Fortinet have each gained over 130% from that trough, ranking among the top ten performers in the S&P 500 over the same period.
This means → cybersecurity is not riding the broader market — it is leading it.
What triggered the surge?
The catalyst: Anthropic restricted the release of its Mythos AI model, citing its potential to aid cyberattacks. The market's expectations for "AI-driven security demand" spiked immediately.
On September 11, Anthropic CEO Dario Amodei called for slowing the development of frontier models. The basket jumped another 19%.
Fundamentals joined in: CrowdStrike's late-August revenue forecast beat expectations; the stock surged over 20% the next day — its biggest single-day gain since 2019.
A string of AI-assisted hacking incidents added fuel — OpenAI's model inadvertently breached Hugging Face, Google's Gemini breached three corporate systems during testing, and Australia's PM confirmed an OpenAI model had accessed a government health-data website.
How expensive are these stocks now?
CrowdStrike trades at over 170× earnings — second only to Tesla in the S&P 500.
Palo Alto Networks sits at 91× forward earnings, fifth in the index; Fortinet at 48×, sixteenth.
In plain terms = the market is pricing these companies as if everything ahead goes perfectly — rapid revenue growth, zero surprises.
What is the bear case?
Wealthspire CIO Brad Long warns: if AI capex cycles slow or high-profile AI attacks become less frequent, revenue growth could decelerate and stocks could pull back sharply. The firm manages roughly $593 billion.
Bernstein analyst Peter Weed downgraded Palo Alto Networks, Okta and SentinelOne, noting that share prices imply a growth acceleration on par with hyperscalers — the giant cloud platforms like AWS and Azure — or database-class enterprise software.
This means → the bear logic is structural: cybersecurity growth is capped by real-world factors like customer headcount, making a hyperscaler-style revenue explosion unlikely. Current pricing has already overshot fundamentals.
What is the bull case?
BofA analyst Tal Liani raised price targets on CrowdStrike, Okta and SailPoint on September 18, calling cybersecurity "a core theme and enabler of the AI era."
CrowdStrike CEO George Kurtz said in the earnings release: "Every enterprise will run on AI, and securing AI is the largest market opportunity in our history."
Post Oak Group MD Josh Taves put it more bluntly: as AI models absorb other software budgets, security spending should stay strong or even increase — traditional valuation metrics offer limited guidance in this environment.
Cybersecurity valuations — fair premium or bubble pricing?
BULL
Threats are structural
AI attack incidents keep surfacing; security spend is a must-have, not cyclical.
Revenue is already accelerating
CrowdStrike's revenue beat shows fundamentals starting to catch up with share prices.
Budget displacement
In the AI era, security budgets may crowd out other software budgets, raising the growth ceiling.
BEAR
Priced for perfection
170× earnings leaves zero room for disappointment — any miss triggers a sharp drawdown.
Growth has real-world limits
Security spend is ultimately tied to customer headcount; it cannot replicate a hyperscaler growth curve.
Narrative-driven, not earnings-driven
The rally is powered by AI-threat storytelling that has not yet converted into measurable revenue acceleration.
In plain terms = both sides have a point — the threat escalation is real, but stock prices have already priced in the most optimistic script. The next few quarters of earnings will decide whether the narrative holds up on the balance sheet.
What to watch next?
The core tension is clear: can the AI-threat narrative keep converting into quantifiable revenue acceleration?
This means → the next checkpoint is quarterly earnings. If revenue growth is genuinely accelerating, high valuations have support. If growth plateaus, the narrative cannot sustain the pricing.
In plain terms = no matter how good the story, the ledger has the final word. A company trading at 170× earnings cannot afford a single disappointing quarter.
市场有风险，内容仅供研究参考，不构成投资建议。