The idea
I believe security budgets are consolidating: companies are ditching dozens of point tools for a few AI-powered platforms, while AI itself makes attacks nastier and pushes spending toward vendors who can keep pace. So this holds the platform leaders taking share, surrounded by cloud/network, identity, AI-native defense, and attack-surface names riding the same shift, plus two sector ETFs for ballast so no single company can sink it. I'm keeping 10% cash to add if the market overreacts to a weak quarter, with a one to two year horizon.
What it owns
- These companies are actively bundling security tools into platforms, replacing point products and driving their own total contract value growth. · Palo Alto NetworksIt actively bundles security tools into a platform, replacing point products for customers and driving total contract value growth., CrowdStrike HoldingsIt started at the endpoint and keeps adding security modules that customers adopt instead of buying standalone tools., MicrosoftIt sells security as part of licenses companies already pay for, making it the default consolidation choice, and it owns the AI infrastructure both attackers and defenders run on., FortinetIt is converting its firewall base into a broader platform, especially where networking and security merge.32%
- These services replace legacy network infrastructure with cloud-based alternatives, exactly the kind of budget shift this take expects to fund. · ZscalerIt replaces the old corporate network perimeter with a cloud service, the kind of legacy-tool replacement this take expects to fund., CloudflareIt sits in front of a huge share of internet traffic and is layering security and AI services on top of that network position., Check Point SoftwareIt is the cheaper, profitable incumbent pushing its own consolidated platform, offering a value-priced way to own the consolidation shift., Akamai TechnologiesIts growth now comes from security and cloud compute rather than legacy content delivery, making security adoption the key to its future.20%
- Companies building security around AI from the ground up, extending their core products into new security categories as AI raises the stakes. · RubrikIt protects and recovers data after ransomware attacks and is building AI-driven security on top of that data visibility., DatadogIt watches everything running in cloud environments and is extending that visibility into security, fitting the fewer-vendors story., SentinelOneIt built its defense around AI from day one and competes at lower prices, offering a higher-risk bet on fast growth and profitability.14%
- These products map what companies expose to attackers and secure the data itself, becoming more urgent as AI accelerates the speed of attacks. · QualysIt tells companies where they are exposed to attackers before they are found, work that grows more urgent as AI accelerates attacks., Tenable HoldingsIt maps everything a company exposes to the internet, a job that gets bigger as AI lets attackers probe faster., Varonis SystemsIt secures data itself by flagging who can access what, work that matters more as companies feed sensitive data into AI tools.10%
- Broad cybersecurity ETFs that benefit from overall sector spending growth, protecting the take if a different vendor than expected wins consolidation. · First Trust NASDAQ Cybersecurity ETFIt holds the broad cybersecurity sector, protecting the take if security spending rises but a different vendor wins consolidation., Amplify Cybersecurity ETFIt holds broad cybersecurity sector holdings with slightly different mix than other sector ETFs, spreading ballast across multiple providers.9%
- Identity is where most modern attacks begin, so consolidating buyers need strong identity layers independent of broader vendor bundles. · OktaIt is the largest independent identity provider, and consolidating buyers need a serious identity layer to defend their systems.5%
- Cash10%