Leading U.S. Cybersecurity Stocks Surge Over 100% in Three Months
Miles Bennett
Palo Alto Networks and Rapid7 have each surged over 100% in three months, nearly unnoticed amid AI-stock turbulence — cloud demand recovery and momentum-factor resonance are driving the rally, but valuations have entered contested territory.
Who rallied the hardest?
Palo Alto Networks and Rapid7 led the pack, each gaining over 100% in three months.
CrowdStrike, Qualys, Fortinet, Okta, and Tenable followed closely, with gains clustered between 85% and 95%.
This means → capital is not betting on a single name — it is systematically loading up across the entire cybersecurity sector.
Valuations are already stretched — why keep buying?
Forward EV/Sales — enterprise value divided by projected revenue, a higher multiple signals a bigger premium — for Palo Alto Networks and CrowdStrike have risen in lockstep with share prices.
Yet investors keep buying. This reflects a high confidence premium on long-term cybersecurity demand growth.
In plain terms = the buyer logic is "expensive does not mean topped out, as long as demand is still accelerating."
Cloud demand recovery — what do the fundamentals look like?
Coatue data show major cloud providers' revenue growth is re-accelerating as AI adoption rises.
Deeper enterprise cloud migration is directly boosting procurement of identity verification, endpoint protection — technology that shields laptops, phones, and other devices from intrusion — and cloud-security products.
This means → cybersecurity's valuation expansion is not pure speculation; recovering cloud spend provides a fundamental floor.
How dangerous is the momentum-AI resonance?
The momentum factor — a quant strategy that keeps buying recent winners — rebounded over 9% in a single day after a 33% drawdown, the largest one-day gain in nearly five years.
Goldman Sachs data show the correlation between the momentum factor and AI-linked assets has climbed above 95%.
In plain terms = momentum trading has effectively become AI trading — every swing in AI stocks amplifies through the momentum factor, dragging cybersecurity names along.
Bubble or starting point — what does each side say?
Tech valuations — bubble here or room to run?
BULL
Fundamentals far healthier
Fidelity's Timmer argues the price path mirrors 1999, but fundamentals are far healthier than 26 years ago.
Rally still undershoots
Numera notes tech gains still lag the actual pace of demand acceleration.
BEAR
Semis at historic extreme
Semiconductor market cap is 14% of S&P 500 total — nearly double the dot-com peak.
Already in a bubble
Strategist Andy Constan: we are in a bubble; a burst would look like 2000.
Apple P/S at all-time high
Per Bilello data, Apple's price-to-sales ratio is near 11×, its highest ever.
In plain terms = bulls focus on demand, bears focus on price — both sides have real data, and the core disagreement is whether 'expensive' can get more expensive.
What to watch next?
Whether cybersecurity can hold its premium ultimately hinges on two things: whether cloud demand keeps delivering, and whether AI-driven security spending actually converts into corporate earnings growth.
Goldman Sachs flags that the momentum factor's 30-day volatility is at extreme highs versus the broad index, suggesting sharp single-day swings may persist.
This means → even if direction is right, violent volatility along the way is itself a cost of holding the position.
Content is for reference only, not financial advice.