AI Cyber Arms Race
Su@sushaantu
−8.0%
since Oct 7
The idea
I believe AI is making cyberattacks cheaper and faster, which forces defense budgets to keep climbing for years since security is the last line any organization cuts. This basket leans into AI-native detection leaders like CrowdStrike and SentinelOne, surrounds them with identity, cloud and data security names attackers probe hardest, adds steady government cyber contractors and large ballast like Microsoft, and keeps a small cash buffer. It is built for a long arms race rather than a quick trade, with weight concentrated in leaders and smaller asymmetric bets elsewhere.
What it owns
- The core of the take: platforms whose whole product is spotting and stopping attacks in seconds, the thing AI-powered attackers force everyone to buy. · CrowdStrike HoldingsIts Falcon platform uses AI to detect and respond to attacks at machine speed, exactly where the take says security spending flows., Palo Alto NetworksIt's rolling AI into firewalls and security operations tools, betting that CFOs consolidate spending onto one big platform rather than dozens of point tools., SentinelOneIt built its whole product around autonomous, AI-driven response, the machine-speed defense the take says a long-term arms race requires.24%
- Everything now lives in the cloud and on the open internet, and these companies guard the doors. · ZscalerIt sells zero trust architecture, the idea that no connection is trusted by default, which companies adopt when attacks never stop., FortinetIt's the profitable workhorse of network defense, selling firewalls and secure networking to a huge base of mid-sized companies that cannot afford to skimp on security., CloudflareIt sits at the internet's edge absorbing attacks before they reach servers, and AI-generated bot traffic gives it more to block every year., Check Point SoftwareIt's the steady veteran with decades of profits and no debt drama, with a customer base that renews because attacks never stop.21%
- Giant companies with huge security businesses inside them, steadying a volatile sector over a long-term hold. · MicrosoftIt quietly runs one of the largest security businesses bundled into products companies already pay for, with AI infrastructure to defend at machine speed., Cisco SystemsIt owns Splunk, the tool security teams use to sift machine data for signs of attack, so it now captures a core piece of machine-speed detection., First Trust Nasdaq Cybersecurity ETFIt holds the whole cybersecurity sector in one fund, so even if individual picks falter, the backstop still captures rising-budgets spending.16%
- When AI attacks do get through, knowing what data was touched and restoring it fast is the fallback everyone pays for. · RubrikIt provides the insurance policy side of the arms race: when ransomware gets through, companies pay to restore clean data fast., Varonis SystemsIt watches who touches sensitive data, which matters more as AI makes it easier for attackers to find and exfiltrate valuable files., Tenable HoldingsIt scans for the vulnerabilities attackers exploit, and AI tools now find and weaponize those holes faster than humans can patch them., QualysIt maps everything a company exposes to the internet, the attack surface that AI-driven scanning probes constantly.16%
- Defense and intelligence agencies have the longest, stickiest cyber budgets, a floor under the theme. · Leidos HoldingsIt runs cyber operations for the Pentagon and federal agencies, the stickiest budgets in the take because governments cannot opt out of the arms race., CACI InternationalIt does classified cyber and signals work for intelligence agencies with contracts that run for years and renew regardless of the economy., Booz Allen HamiltonIt's one of the biggest sellers of AI and cyber work to the federal government, sitting at the intersection of AI attack and defense funded by stable budgets.12%
- Stolen logins are how most AI-scaled attacks get in, so controlling who gets access becomes mandatory spending. · OktaMost breaches start with a stolen login, and AI makes phishing and credential attacks cheaper every year, so identity becomes one of the hardest-probed layers.5%
- Cash6%