Morgan Stanley: Cybersecurity Valuations Stretched, Capital Rotating to Okta, Fortinet and Others
nashnova research
Morgan Stanley's latest cybersecurity report says AI agents are widening enterprise attack surfaces and security spending will accelerate — but stretched valuations are now investors' top concern, pushing capital from CrowdStrike and Palo Alto toward cheaper names like Okta and Fortinet.
How expensive has cybersecurity become?
CrowdStrike and Palo Alto Networks remain the market's consensus AI-security winners, but they trade at roughly 30× and 18× estimated 2028 sales, respectively.
This means → many sidelined investors are choosing to wait for a pullback rather than chase.
Morgan Stanley projects CrowdStrike's FY2027 ARR — annual recurring revenue, the subscription income a company can count on each year — growing 25.8% year-on-year, slowing to 24.7% in FY2028. FY2028 ARR is estimated at $8.236 billion, with revenue at $7.337 billion.
Why is capital turning to Okta?
In Morgan Stanley's recent investor conversations, Okta and Fortinet were the most frequently mentioned names outside the two dominant platforms.
The core thesis: as AI agents multiply, enterprises must manage not just human access but AI-agent permissions and behavior. This means → identity and access management (IAM — the security layer that controls "who gets in and what they can do") is gaining strategic weight fast.
Okta recently unveiled AI-related products at its Oktane conference — Agent SSO, A2A connectivity, and the "Blueprint Alliance." Management said IAM could become one of the largest segments in cybersecurity over the next five years.
What is the math behind Okta's price-target raise?
Morgan Stanley raised Okta's target from $200 to $245 — a 22.5% increase — and maintained its Overweight rating.
The driver is a higher long-term valuation multiple: the bank lifted its 2027 estimated free-cash-flow multiple from 33× to 41×, implying roughly 12× 2027 EV/sales.
The bank estimates Okta's free-cash-flow CAGR at 15–20% over the next several years, with the IAM market exceeding $40 billion — leaving significant room for share gains.
A caveat, though: growth from AI-agent identity will not arrive overnight. Near-term improvement stems mainly from enterprises working through legacy tech debt. In plain terms = the long-term story is compelling, but the near-term catalyst has not yet landed.
Can Fortinet's growth momentum last?
Fortinet's product revenue has accelerated noticeably over recent quarters, making it a go-to pick for investors hunting cheaper cybersecurity exposure.
The market's core worry: once the pandemic-era device-refresh cycle laps next year, the company faces a tougher year-over-year comparison base. This means → sustaining above-consensus growth gets materially harder.
Morgan Stanley is relatively cautious and notes the tough-comp dynamic could ripple across the entire firewall segment, including Cisco and Check Point.
What is the real choice investors face now?
SentinelOne and SailPoint were mentioned roughly a quarter as often in investor conversations, but both carry about 20% growth at more attractive valuations.
Morgan Stanley sums up the sector as "expensive, but increasingly non-discretionary."
This reflects a shift: the core question is no longer "Will AI boost security spending?" but "At what price should you participate?" — the divide between high-multiple platforms and cheaper alternatives will define the next phase of capital allocation.
市场有风险，内容仅供研究参考，不构成投资建议。