Identity Is the New Perimeter
Michael Mignano
@mignano
+4.4%
since Sep 2
Practiced to +14.9% over 35 days before going real.
Practice chapter: simulated results; no money was invested.
The idea
I believe stolen credentials, not malware, are now the main way breaches happen as AI makes phishing and deepfakes cheap and convincing, so security spending keeps shifting toward identity and zero-trust. I hold a mix of pure-play identity names, platform consolidators, zero-trust access providers, and a fraud-verification sleeve, with sector ETFs as ballast so no single stumble derails it. I keep a cash cushion and spread across many names rather than betting big on one, planning to hold for years while the identity layer captures more of the security budget.
What it owns
- Large, diversified security platforms are acquiring identity capabilities at scale, signaling where enterprise security budgets are consolidating and validating the centrality of identity. · Palo Alto NetworksIts acquisition of the leading privileged access management company made identity security the core of its platform, proving how consolidation is reshaping enterprise security spending., Microsoft CorporationEntra ID is the default identity foundation for most enterprises, and Microsoft bundles identity defense into every major deal, creating embedded growth from the theme., CrowdStrike HoldingsIts identity threat protection detects credential misuse in real time, the fastest-growing attack vector, funded by its dominance in endpoint security.23%
- These companies center their entire business on identity platforms, where the shift from network perimeters to identity verification is creating structural demand growth. · Okta, Inc.The largest independent identity platform extends into securing machine identities and privileged access as enterprises rethink security around identity rather than the network edge., SailPoint, Inc.It governs which human and machine identities can access what systems, a problem exploding as AI agents multiply the total number of identities requiring management.18%
- These companies enforce verification on every connection and user, replacing trust-based perimeters that phishing and credential theft have rendered obsolete. · Zscaler, Inc.It defines zero-trust networking by verifying every user and workload per connection, replacing the perimeter that credential attacks have made indefensible., Cloudflare, Inc.Its zero-trust access suite rides identity-first security architecture while its traffic position benefits from securing machine-to-machine connections.15%
- As deepfakes and AI-generated scams target consumers and financial systems, proving identity and detecting fraud become high-margin services with recurring demand. · Gen Digital Inc.It operates the consumer identity protection franchise, where AI-generated scams and deepfake fraud drive recurring subscription demand for personal identity monitoring., Fair Isaac CorporationIts fraud platform screens a huge share of global card transactions and gains pricing power as AI amplifies fraud, making smarter identity scoring and transaction scoring valuable., Clear Secure, Inc.It operates biometric identity verification beyond airports into healthcare and finance, offering protection if document-based identity verification is broken by deepfakes.14%
- Diversified cybersecurity ETFs capture the structural rise in overall security spending, smoothing individual stock volatility while maintaining broad exposure to the theme. · First Trust NASDAQ Cybersecurity ETFThis diversified cybersecurity ETF captures the structural lift in total security spending across the sector, reducing dependence on any single identity security name., Global X Cybersecurity ETFThis concentrated cybersecurity ETF with mid-cap exposure complements broader sector baskets, capturing pure-play growth while diversifying away from single-name risk.13%
- These platforms use machine-speed detection to identify threats targeting identities and data, designed for attacks that move faster than human defenders. · SentinelOne, Inc.It combines identity threat detection with machine-speed AI-native defense, offering asymmetric upside for detecting threats that move too fast for human-paced tools., Varonis SystemsIt maps which identities can access sensitive data and flags abnormal activity, directly containing the damage when credentials are stolen or when an AI agent is compromised.9%
- Cash8%