Cybersecurity stocks present entry point after RSA conference By Investing.com

TD Cowen projects cybersecurity spending to exceed $320B by 2030 (~12% CAGR) and cites AI/agentic AI as the next growth phase, favoring PANW, CRWD and NET; the sector trades at ~5x EV/2027 revenue (median 3.5x) with several names under 4.5x. Netskope beat Q4 FY2026 expectations with revenue $196.3M (+32% YoY vs $189.4M consensus) and ARR $811M (+31% YoY vs $796.2M street), but brokers lowered price targets (Citizens $23; BMO $14; RBC $14) over profitability and billings-transition concerns while TD Cowen reiterated a Buy.

Analysis

The secular pivot to AI is changing the pricing and demand math in security: usage-linked revenue lowers revenue visibility and raises correlation to episodic LLM/agent activity spikes, which will amplify quarter-to-quarter volatility for vendors with meter-based models. That favors vendors with deep telemetry and scale (lower marginal cost of ingest and inference) and disadvantages small vendors that rely on fixed-subscription predictability; expect valuation dispersion to widen as investors re-price predictability separately from growth.

A second-order beneficiary set are the infra and networking suppliers that sit under the security stack — NIC/accelerator vendors, server integrators, and edge CDN providers will see asymmetric upside if enterprises accelerate AI inference and egress-heavy workloads. Conversely, legacy on-prem players face margin pressure not just on product relevance but from slower customer migration and compressed renewal economics as buyers consolidate.

Near-term catalysts to monitor: billings-to-revenue conversion and dollar-based net retention as leading indicators of durable demand, monthly meter-usage growth for AI-related products (look for sustained >20% month-over-month lifts during pilots), and synthetic churn signals. Key risks that could reverse the trend within 3–12 months are a macro-driven capex pullback, a durable slowdown in enterprise AI pilots, or large-scale customer pushback on usage pricing that forces re-negotiations or slower adoption.

Key Decisions for Investors

• Pair trade (12 months): Long PANW (overweight 2% NAV) / Short CHKP (short 1% NAV). Rationale: capture platform vs legacy consolidation premium. Target net outperformance +30%; stop-loss: cut both legs if pair underperforms by -12% (limits one-sided political/geo squeezes).
• Event-driven long (9–12 months): Buy NTSK call spread (long near-ATM, short ~30% OTM, size 2% NAV) to play ARR durability while limiting downside from billings transition noise. Risk/reward: max loss = premium (~2% NAV), target 3x premium if billings conversion normalizes and churn stays low.
• Tactical options (6 months): Buy ZS calls (size 0.75% NAV) to capture asymmetric upside from meter-based adoption during enterprise AI rollouts; enter on any <10% pullback or ahead of quarter showing meter growth. Max loss = premium; target 2.5x if meter metrics print meaningfully above guide.
• Contrarian small long (12–24 months): Small position in NTNX (1% NAV) with a wide stop (30%) — thesis: undervalued exposure to AI infrastructure with binary upside if execution stabilizes. Treat as high-beta recovery swing; take profits incrementally at +50% and +100%.