The idea
I believe security budgets are consolidating: companies are ditching dozens of point tools for a handful of AI-powered platforms, while AI itself makes attacks worse and pushes spend toward whoever can keep up. This basket owns the platform leaders at its core, surrounded by cloud, network, identity, AI-native defense, and attack-surface names riding the same shift, with two sector ETFs for ballast so no single name can sink it. I'm holding cash on the side to add if the market overreacts to a bad quarter, and I'm thinking in years, not weeks.
What will be bought
- These companies are winning by bundling multiple security tools into unified platforms that replace point products, consolidating vendor counts and budgets toward fewer, broader suppliers. · Palo Alto NetworksIt is the leading advocate of security platformization, bundling point products to consolidate vendor counts, so the take depends on its bundled deals and contract values continuing to grow., CrowdStrike HoldingsIt started at the endpoint and keeps adding security modules that customers adopt instead of separate tools, so the take needs customers to attach more modules per deal over time., MicrosoftIt bundles security into licenses companies already buy and runs the AI infrastructure underlying both attack and defense, so the take needs its security revenue to grow faster than the sector., FortinetIt is converting its large firewall customer base into a broader platform, especially where networking and security overlap, so customers must upgrade into the wider bundle rather than just renew hardware.32%
- These companies replace legacy network perimeters and infrastructure with cloud-native services, capturing the budgets moving away from older standalone tools. · ZscalerIt replaces legacy corporate network perimeters with cloud services, the kind of budget shift this take expects, so large-customer additions and billings growth are the signals that matter., CloudflareIt sits in front of massive internet traffic and layers security and AI services on top of that network position, so the take needs security revenue to keep compounding as companies simplify onto its platform., Check Point SoftwareIt is a profitable incumbent pushing its own consolidated platform at a lower price, giving the take a value-priced way to own the same shift, and needs at least modest platform growth., Akamai TechnologiesIts growth now comes from security and cloud compute rather than its old content delivery business, so security must keep becoming a bigger share of its revenue for this position to work.20%
- These companies built security around artificial intelligence from inception and are expanding that AI-driven approach into protecting and detecting threats across infrastructure and data. · RubrikIt protects and recovers data after ransomware attacks and is building AI-driven security on top of that data, so it needs fast subscription growth as rising AI threats push recovery spending up., DatadogIt watches everything running in cloud infrastructure and is extending that visibility into security, so it must keep converting its monitoring customers into security customers for this leg to work., SentinelOneIt built endpoint defense around AI from inception and competes directly with established players at lower prices, but needs to keep growing fast and moving toward profit for consolidation to include it.14%
- These companies map and secure the exposed parts of corporate infrastructure before attackers find them, a job that grows more urgent as AI accelerates attack speed. · QualysIt tells companies where they are exposed before attackers find them, a job that grows more urgent as AI-generated attacks accelerate, and it is profitable and steady., Tenable HoldingsIt maps everything a company exposes to the internet, a job that gets bigger as AI lets attackers probe faster, so its broader exposure-management platform must keep winning deals beyond basic scanning., Varonis SystemsIt secures data itself by flagging who can access what, which matters more as companies feed sensitive data into AI tools, so its shift to cloud subscription must keep converting customers.10%
- These ETFs hold the broader cybersecurity sector, providing exposure to general security spending growth and reducing risk from individual stock selection. · First Trust NASDAQ Cybersecurity ETFIt holds the broad cybersecurity sector, so the take still wins if security spending rises even if a different vendor than expected wins consolidation, capping damage from individual stock picks., Amplify Cybersecurity ETFIt holds the broad cybersecurity sector across a different fund provider with different holdings than CIBR, keeping the take alive on general spending trends even if individual picks miss.9%
- Identity is the primary target of modern attacks, so consolidation buyers need independent identity platforms to complement broader security bundles. · OktaIdentity is where most modern attacks start, so consolidating buyers need a serious identity layer, and it must keep winning identity budgets rather than losing them to bundled alternatives.5%
- Cash10%