3 Top Cybersecurity Stocks to Buy in May

Gartner projects a 15% increase in cybersecurity spending in 2025, driven by rising AI-related threats. The article highlights CrowdStrike, Rubrik, and Palo Alto Networks as cybersecurity stocks to consider, noting CrowdStrike's 23% ARR growth to $4.2 billion, Rubrik's 39% ARR growth exceeding $1 billion and positive free cash flow, and Palo Alto Networks' 34% ARR growth in Next-Generation Security to over $5 billion with $13.5 billion in remaining performance obligations; Rubrik is presented as potentially undervalued with higher growth potential, but also riskier.

Analysis

The cybersecurity sector is poised for significant expansion, with Gartner forecasting a 15% increase in spending for 2025, largely driven by the escalating threat landscape, including challenges posed by generative AI. Within this growing market, CrowdStrike (CRWD) maintains its leadership in cloud-based cybersecurity, evidenced by its fiscal 2025 annualized recurring revenue (ARR) reaching $4.2 billion, a 23% year-over-year increase. The company's introduction of Falcon Flex, a new consumption-based model for its 29 software modules, aims to accelerate growth by encouraging existing customers, of whom only 21% currently use eight or more modules, to adopt a broader range of its offerings. Rubrik (RBRK), a more recent public company specializing in data security for attack preparation and recovery, demonstrates robust growth with its fiscal 2025 ARR exceeding $1 billion, up 39%, and has notably achieved positive free cash flow, signaling operational scalability. Its niche focus allows for partnerships, including with CrowdStrike, and it is positioned as a potentially undervalued, albeit higher-risk, investment with strong growth prospects from a smaller base ($887 million trailing-12-month revenue). Palo Alto Networks (PANW) offers a comprehensive cybersecurity portfolio through organic development and strategic acquisitions, such as the recent $700 million purchase of Protect AI. The company reported strong Q3 fiscal 2025 results, with Next-Generation Security ARR growing 34% year-over-year to over $5 billion and total remaining performance obligations increasing 19% to $13.5 billion, indicating sustained demand and a robust future revenue pipeline. While valuation specifics were not detailed, Rubrik's valuation is noted as lower than CrowdStrike's and comparable to Palo Alto Networks'.

Key Decisions for Investors

• Given the projected 15% market growth in cybersecurity spending for 2025, investors should consider allocating capital to cybersecurity equities, focusing on companies with strong recurring revenue models and technological innovation.
• CrowdStrike warrants attention for its established cloud leadership and potential upside from its Falcon Flex model driving increased module adoption, while Palo Alto Networks offers broad exposure through its diverse product suite and proven acquisition strategy.
• Rubrik presents a higher-growth opportunity within a specific niche, particularly attractive due to its recent positive free cash flow generation and comparatively lower valuation, though investors should weigh this against its smaller scale and shorter public company track record.
• Monitor key performance indicators such as ARR growth rates for all three, customer module adoption for CrowdStrike, free cash flow trends for Rubrik, and the successful integration of acquisitions and growth in remaining performance obligations for Palo Alto Networks.