UBS sees security and safety market at $1.19tn by 2029, led by cybersecurity

UBS raised its outlook for the global security and safety market, projecting growth to $974 billion in 2026 and $1.19 trillion by 2029, with cybersecurity remaining the main driver. The bank sees cybersecurity spending rising 12.5% this year to $240 billion, aided by AI-driven threats, tighter regulation, and resilient enterprise demand. UBS also flagged quantum computing as a longer-term catalyst for cybersecurity investment, though practical encryption threats are still years away.

Analysis

The investable takeaway is not “more cyber spend” so much as a widening gap between budget resilience and product differentiation. The fastest beneficiaries should be platform vendors that can bundle identity, cloud, endpoint, and AI governance into one procurement motion; fragmented point solutions face rising budget scrutiny even as total spend rises. That creates a second-order winner/loser split inside cybersecurity: large incumbents with cross-sell breadth and high renewal visibility should take share, while smaller single-product names may see slower new logo growth despite a healthy sector backdrop.

AI is likely to be a margin tailwind for the better operators before it becomes a revenue tailwind. Vendors that can use AI to lower false positives, reduce analyst workload, and automate remediation can expand operating leverage over the next 4-8 quarters, while buyers still need to add controls around model leakage and prompt injection. The contrarian risk is that the current narrative overstates the near-term monetization of “AI security”; most enterprises will spend first on adjacent control layers rather than standalone AI-native tools, so some of the market’s enthusiasm may be premature.

The more interesting trade is that security spend becomes a relative defensiveness factor inside tech, not a pure growth call. If enterprise IT budgets stay soft, security should still outgrow software, but vendors exposed to federal, regulated, or critical infrastructure customers may outperform because compliance budgets are stickier and less discretionary. On the other hand, if macro weakens materially, procurement cycles could stretch and the upside shifts from 2025 to 2026, which argues for using dips rather than chasing strength.

Quantum is a longer-dated call option, not a near-term earnings driver. The practical threat to current encryption is years away, but the headlines can still support small reallocations into post-quantum readiness, key management, and identity verification. That is more of a stock-selection catalyst than a sector-wide re-rating, and the market may be underestimating how much of the first wave of quantum spend will accrue to incumbents with installed enterprise trust rather than pure-play “quantum” names.

Key Decisions for Investors

• Long FTNT vs short a basket of smaller point-solution cyber names for 3-6 months: benefit from platform consolidation, higher renewal durability, and AI-driven operating leverage; target 10-15% relative outperformance if budget pressure persists.
• Add to CRWD on pullbacks over the next 2-4 weeks; use a 6-12 month horizon. The setup is attractive for AI/governance demand plus high renewal quality, with downside limited by sticky subscriptions and upside from wallet-share expansion.
• Pair long PANW / short a diversified IT spending proxy like IT for 3-6 months. The thesis is that security remains a budget priority even if enterprise tech spending stays soft; expect relative outperformance if IT remains rangebound.
• For lower-risk expression, buy 6-9 month call spreads in ZS or CRWD rather than outright equity. This captures rerating potential from AI-security spend without overpaying for headline-driven volatility.
• Avoid chasing speculative quantum pure-plays; instead, favor established security vendors with post-quantum readiness messaging. The first monetization wave is likely to accrue to trusted incumbents before it reaches niche quantum beneficiaries.