HACK: A Deficient Selection Methodology

The Amplify Cybersecurity ETF (HACK) receives a 'Sell' rating due to its flawed selection methodology, which includes companies with significant non-cybersecurity revenue such as Broadcom and Cisco, leading to its underperformance against the S&P 500 and pure-play cybersecurity stocks. Despite the cybersecurity sector's inelastic demand and high growth potential, particularly among smaller, pure-play firms transitioning to profitability at attractive valuations, HACK's market-cap weighted index design dilutes exposure to these higher-upside opportunities, rendering it an inefficient vehicle for focused cybersecurity investment.

Analysis

The Amplify Cybersecurity ETF (HACK) is presented as a flawed investment vehicle for gaining targeted exposure to the high-growth cybersecurity sector. Its primary weakness lies in its index methodology (HXRXL), which utilizes a market-cap weighting and a revenue contribution score (cybersecurity revenue divided by market cap) that permits the inclusion of large-cap companies with only modest exposure to the sector. Consequently, 33% of the ETF's AUM is concentrated in its top five holdings, which include non-pure-play firms such as Broadcom (AVGO), Cisco (CSCO), and Northrop Grumman (NOC). This portfolio construction has resulted in HACK's significant underperformance against pure-play cybersecurity stocks and only marginal outperformance of the S&P 500. While the broader cybersecurity industry benefits from inelastic demand and secular growth drivers like AI, the analysis identifies a bifurcation: premium-valued large-caps like Palo Alto (PANW) and CrowdStrike (CRWD), and a cohort of 'relatively inexpensive' small-cap stocks entering a high-growth, margin-expansion phase. Based on a cash earnings analysis, names like Rubrik (RBRK) and Varonis (VRNS) are highlighted as potential opportunities, but their impact on HACK is diluted, leading to a subdued weighted average upside potential of just 12% for the ETF.

Key Decisions for Investors

• Investors seeking pure-play exposure to the cybersecurity sector should consider selling positions in HACK, as its methodology results in significant allocation to non-core companies and has led to historical underperformance.
• Rather than using broad, market-cap-weighted ETFs like HACK or CIBR, capital may be more effectively deployed through direct investment in individual cybersecurity firms, particularly small-cap companies identified as being in a 'breakout' phase.
• Further due diligence is warranted on specific emerging companies like Rubrik (RBRK) and Varonis (VRNS), which the analysis suggests are trading at attractive valuations on a price-to-cash-earnings-growth basis.
• When evaluating large-cap leaders such as Palo Alto Networks and CrowdStrike, investors should remain cognizant of their premium valuations and high PEG ratios, which may limit near-term upside relative to smaller, faster-growing peers.