Hightower’s Stephanie Link says market is failing to appreciate Microsoft's AI value

Hightower's Stephanie Link is buying into underappreciated big-tech and security names, opening a Microsoft position despite the shares being up ~14% year-to-date but down roughly 11% since its fiscal Q1 print and a reported contraction of its multiple by about five points. She favors Snowflake—up over 73% YTD and having reaffirmed Q3 and fiscal 2026 guidance—though she says it will need to beat revenue estimates and expand margins to sustain gains. Link also recommends Palo Alto Networks (only up ~3% YTD) over pricier peers like CrowdStrike, citing recent sizable acquisitions (CyberArk ~ $25bn, Chronosphere $3.35bn, Protect AI $650–700m) as long-term positives despite near-term integration risk.

Analysis

Market structure: AI and data infrastructure winners are Snowflake (SNOW) and platform owners like Microsoft (MSFT); cybersecurity consolidation benefits Palo Alto Networks (PANW) while high-valuation pure software names (CRM, ADBE, CRWD) face pricing pressure. PANW’s $25B CyberArk and $3.35B Chronosphere deals shift share toward integrated security stacks and increase pricing power for bundled enterprise subscriptions; Snowflake’s 73% YTD run signals strong demand for curated data but raises execution expectations.

Risk assessment: Tail risks include regulatory/antitrust action on large AI partnerships (MSFT–OpenAI), integration failures at PANW producing 10–20% EPS downside, or Snowflake missing elevated revenue/margin targets (needs to beat by >200bps to justify current multiples). Near-term (days–weeks): earnings and guidance reactions; medium (3–12 months): M&A approvals and execution; long-term (12–24 months): AI monetization rates and margin expansion. Hidden dependencies: MSFT’s AI growth tied to OpenAI cadence and cloud capex cycles; PANW’s leverage post-deal could pressure free cash flow.

Trade implications: Tactical longs: selective exposure to MSFT (scale/margin expansion), SNOW (data flywheel) and PANW (buy-on-weakness around integration milestones). Use pair trades to express relative value (long PANW, short CRWD; long SNOW, short CRM/ADBE) and option structures (6–12 month call spreads on SNOW/MSFT to cap premium) around earnings and M&A catalysts. Rotate 3–6% weight from expensive application software into infra/cyber over next 4–12 weeks.

Contrarian angles: Consensus underprices MSFT’s margin-led cashflow resilience and ecosystem monetization—multiple contraction of ~5 points is likely mean-reverting if AI sales accelerate. Conversely, Snowflake’s bar is high; disappointment on a single quarter could produce 20–30% downside. PANW’s integration fear may be overstated versus execution track record; however, unintended consequence is higher leverage risk and potential covenant stress if macro softens. Historical analog: 2013–2016 cloud leaders showed durable multiples after early-listing volatility, but only after consistent beat-and-raise quarters.

Key Decisions for Investors

• Establish a 2–3% long position in MSFT within 2 weeks: scale 1% now and add 1–2% on any 5–10% pullback; target 12–18% upside over 6–12 months, stop-loss at 10% below weighted average entry.
• Initiate a 1.5–2% long in SNOW via 6–12 month call spread (buy calls and sell higher strikes to cap cost); increase to 3% if Snowflake posts revenue growth > guidance by +200bps next quarter or margin expansion >200bps.
• Implement a relative-value pair: long PANW (1.5–2% of portfolio) vs short CRWD (equal notional) for 6–12 months to capture valuation reversion; exit if PANW outperforms CRWD by 20% or if CyberArk deal receives an antitrust second request.
• Reduce CRM and ADBE exposure by 2–4% and redeploy to infra/cyber over 4–12 weeks; rationale: expensive multiples vs growth profile and higher vulnerability if AI spend concentrates on cloud/data players.
• Hedge M&A/execution risk: buy 6–9 month protective puts on PANW sized to 0.5% portfolio (strike ~7–10% OTM) to guard against a 15–25% downside from integration or regulatory setbacks; monitor DOJ/FTC and EU filings over next 60 days as trigger events.