Hey there, bargain hunter. The market handed you a gift wrapped in fear. While the broader tech tape has been grinding through macro noise, rate sensitivity debates, and AI-disruption panic, cybersecurity stocks have quietly been sold off to levels that — when you actually read the earnings reports — do not match the operational reality underneath. Revenue is up. ARR is expanding. Free cash flow is improving. And yet the stocks are sitting on multi-year relative lows versus their growth rates. That is exactly the setup The Cheap Investor lives for.
Let's do the work.
The Scoreboard: What Is Actually Happening in This Sector
Start with the market itself. Fortune Business Insights pegs the global cybersecurity market at $218.98 billion in 2025, growing to $699.39 billion by 2034 — a 13.8% CAGR. MarketsandMarkets puts the figure slightly lower at $227 billion in 2025 but still projects $351 billion by 2030 at a 9.1% CAGR. Either way, you are looking at a market that roughly doubles in under a decade.
Why the relentless growth? Because the threat environment is getting worse, not better. AI is now on both sides of the battle. Autonomous attack tools have compressed ransomware kill chains to as little as 25 minutes. Voice phishing attacks surged 442% in late 2024. And 73% of enterprises reported AI-related breaches in 2025, with the average breach costing $4.4 million according to IBM's Cost of a Data Breach Report 2025.
Here is the cruel irony for bears: the same AI wave that was supposed to disrupt software budgets is actually making cybersecurity spending more non-negotiable than ever. As one Wedbush analyst framed it, vendors are hiking sales targets by as much as 30% this year to keep pace with a strengthening demand pipeline. CISOs are not cutting security budgets. They are the last line standing.
And yet — operationally strong cybersecurity companies are trading at the widest stock-vs.-fundamentals disconnect in years. That is the setup. Now let's look at the five names where the math gets interesting.
The Five Names: AI Defense + Possible Value
1. CrowdStrike (CRWD) — The Platform King With a Valuation Asterisk
What it does: CrowdStrike's cloud-native Falcon platform covers endpoint security, threat intelligence, identity protection, cloud workloads, and next-gen SIEM — all under one roof. Its Charlotte AI engine is the intelligence layer binding it together. The company is, in plain English, building the operating system of enterprise cybersecurity.
Recent numbers: Q3 FY2026 (ended October 31, 2025) was called one of their best quarters in company history. Revenue hit $1.23 billion — up 22% year-over-year. Annual recurring revenue accelerated to $4.92 billion, up 23% YoY. Net new ARR in Q3 alone was $265 million, up 73% year-over-year. Non-GAAP net income reached a record $245.4 million, up 29%. Free cash flow came in at $295.9 million versus $230.6 million in the prior-year period. Non-GAAP subscription gross margin was 81%.
The module flywheel: 49% of customers now use six or more Falcon modules. 34% use seven or more. 24% use eight or more. Each additional module expands ARR per customer and deepens switching costs. Falcon Flex adoption unlocked over $1 billion in in-quarter deal value.
Valuation reality check: CRWD currently trades at roughly 19x price-to-sales — expensive vs. the peer average of ~9x. Consensus price target sits at approximately $551, implying ~18% upside from current levels. The DCF argument is also live: one analysis estimates fair value at $541 versus a recent price of ~$350–430, suggesting the stock is meaningfully below intrinsic cash flow value. That said, the P/S premium is real, and valuation compression risk is material if growth decelerates.
The cheap-ness argument: CRWD is not the cheapest name on this list in absolute multiple terms. But it is cheap relative to its own history and relative to the quality of its business. A market cap of ~$118 billion against $4.92 billion in ARR growing at 23% is a very different equation than it appears on a raw P/S screen.
|
Buffett's oldest and most profitable strategy revealed
Nvidia... Coca-Cola... Geico... Some companies have success built into their DNA... No matter what the competition does, it just can't overcome the one factor all these companies have in common. What is it?
Find out here - and see how you could use it to make a killing
|
2. Palo Alto Networks (PANW) — Platformization Paying Off, But Priced for It
What it does: PANW is the largest pure-play cybersecurity company by revenue. CEO Nikesh Arora's "platformization" strategy — bundling network, cloud, and AI-driven security into unified deals — has been pulling enterprise clients away from point-solution vendors for two years running. Its Cortex XSIAM, Prisma SASE, and next-gen firewall suites are the three pillars.
Recent numbers: Revenue grew from $4.3 billion in fiscal 2021 to $9.2 billion in fiscal 2025 — a 116% five-year increase. FY2025 gross margin held at 73.4%. EBIT margin rose sharply to 17.3%. Net income turned positive — $1.1 billion in FY2025 versus a $499 million loss in 2021. In fiscal Q3 2025, revenue grew 15% YoY to $2.3 billion. PANW's remaining performance obligations (RPO) — the forward revenue backlog — climbed 19% to $13.5 billion. The company recently surpassed a $10 billion annual revenue run rate. Large contracts over $5 million grew 25% year-over-year, with 74 active deals at that threshold. Platformized customer count grew 40%.
Valuation context: PANW trades at roughly 101x trailing P/E — stretched. But on a forward basis and on free cash flow ($5.20 per share), the picture softens. Analyst consensus target is approximately $213, against a recent price of ~$165 — implying ~29% upside. The stock has been punished partly on acquisition uncertainty (the proposed CyberArk acquisition drew investor pushback). Net of that noise, the business underneath is generating real cash and expanding margins.
3. Fortinet (FTNT) — The Margin Machine the Market Keeps Discounting
What it does: Fortinet is the bridge between legacy hardware security (firewalls, appliances) and cloud-native, software-defined protection. Its FortiSASE and FortiOS platforms are the recurring-revenue pivot, and those segments are growing over 20% year-over-year. The hardware installed base — tens of millions of devices globally — is an unmatched distribution moat.
Recent numbers: Revenue grew from $3.3 billion in 2021 to $6.8 billion in 2025 — more than doubling. Gross margin sits at an industry-leading 80.8%. EBIT margin is 33.4% — the highest of any company on this list. Net margin is a steady ~27%. Q1 2025 operating margin hit a quarterly record of 29.5%, up from 23.7% a year prior. Free cash flow in Q1 reached a record $782.8 million. Full-year revenue guidance is $6.68–6.83 billion. Fortinet's deals over $1 million rose 29%, and AI solutions are now its fastest-growing product line.
Why it might be cheap: Analysts have flagged Fortinet as screening as one of the cheapest large-cap names in cybersecurity, given its negative stock returns in 2025. A post-earnings selloff of 25% in 2025 (despite a beat) reflects market skepticism about the durability of the firewall upgrade cycle — a legitimate concern. But at a stock near $83 with analyst targets around $87–$88 (conservative consensus), the street may be under-appreciating the margin expansion story as FortiSASE scales. Morgan Stanley's September CIO survey confirmed cybersecurity spend is expected to grow 50% faster than overall software spend — and Fortinet is a direct beneficiary. For a patient investor, the margin profile here is the real story.
|
Gold Headed Above $6,000 per Ounce in 2026? Here's How to Play It...
With so many strange events happening across the economy (consumer confidence plummeting, credit-card delinquencies soaring, and more), it's no wonder the richest investors are loading up on gold. But what you might not realize is that there's a much better way to profit from rising gold prices - WITHOUT ever touching an ETF, mining stock, or even bullion.
Get the full details here. |
4. SentinelOne (S) — The Cheapest Platform You Probably Forgot About
What it does: SentinelOne's Singularity platform is an AI-native, autonomous security suite covering endpoints, cloud workloads, and identity. Its Purple AI offering — a generative AI security analyst — reached a 40% attach rate on new licenses in late 2025. The company competes directly with CrowdStrike but trades at a fraction of the valuation.
Recent numbers (FY2026, ended January 31, 2026): Full-year revenue crossed $1 billion for the first time — $1,001.3 million, up 22% year-over-year. ARR hit $1.119 billion, up 22%. Enterprise customers paying over $100,000 annually grew 18% to 1,667. Non-GAAP operating margin improved from -3% to +3% — its first full-year positive operating margin. Non-GAAP net income was $68.3 million. Free cash flow margin expanded from 1% to 5%. Cash on the balance sheet stands at $769.6 million with minimal debt.
Guidance: FY2027 revenue guided at $1.195–$1.205 billion (approximately 20% growth). Non-GAAP operating income guidance of $110–$120 million. Non-GAAP EPS of $0.32–$0.38 — beating analyst estimates by 17.5% on the FY2027 EPS midpoint.
Why it might be cheap: Approximately 55% of covering analysts have a Buy or Strong Buy rating, with an average price target of approximately $20–$21.50 — implying 45–50% upside from current levels near $14. At roughly 4x price-to-sales with $1 billion in ARR and a 5-year revenue CAGR of 60.8%, SentinelOne is arguably the widest valuation gap relative to growth quality in the peer group. The stock has been punished by AI disruption fears and growth deceleration concerns. But the underlying transition from -19% non-GAAP operating margin to +3% in two years is exactly the kind of margin inflection that precedes re-ratings in software.
5. Okta (OKTA) — Identity Is the New Perimeter, and the Price Finally Reflects the Pain
What it does: Okta is the independent identity security platform. In a zero-trust world — where every user, device, and increasingly every AI agent must be authenticated continuously — identity sits at the center of all security architecture. Okta's platform handles workforce identity, customer identity, and is now building directly for securing AI agents.
Recent numbers (FY2026, ended January 31, 2026): Total revenue was $2.919 billion, up 12% year-over-year. Subscription revenue was $2.855 billion, up 12%. GAAP operating income turned positive at $149 million — a dramatic reversal from a $74 million operating loss in FY2025. Non-GAAP operating income grew to $766 million (26% margin) from $587 million the prior year. Non-GAAP net income was $646 million. Free cash flow hit $863 million — a 30% FCF margin. The balance sheet carries $2.553 billion in cash with just $350 million in convertible notes outstanding. RPO (remaining performance obligations — forward backlog) stands at over $4 billion.
Why it might be cheap: Okta's stock is down ~16% over the past 12 months. The EV/FCF ratio sits at approximately 12.3x — one analysis notes Okta is cheaper than ~66% of its industry peers on a price-to-free-cash-flow basis. The forward P/E is roughly 21x, broadly in line with the S&P 500 — a remarkable valuation for the dominant independent identity platform in a sector growing at double digits. Analyst consensus target is approximately $99–$105, versus a current price of ~$79–81. The bear argument is slowing revenue growth (11–12% versus 20%+ peers). The bull argument is that no other vendor owns independent, neutral identity at enterprise scale. Growth in AI agent security — where Okta is uniquely positioned as the authenticator for non-human identities — could be the re-acceleration catalyst.
The Data Section: Side-by-Side Comparison
| Company | Ticker | Revenue (Latest FY) | YoY Growth | Gross Margin | FCF Margin | Approx. P/S | Analyst Upside |
|---|
| CrowdStrike | CRWD | ~$3.95B (FY2026E) | ~22% | 78–81% | ~24% | ~19x | ~18% |
| Palo Alto | PANW | $9.2B (FY2025) | ~15–16% | 73.4% | ~20% | ~10x | ~29% |
| Fortinet | FTNT | $6.8B (FY2025) | ~13–14% | 80.8% | ~30%+ | ~7–8x | ~5% |
| SentinelOne | S | $1.0B (FY2026) | 22% | ~79% | 5% | ~4x | ~45–50% |
| Okta | OKTA | $2.92B (FY2026) | 12% | ~76% | 30% | ~5–6x | ~29–33% |
Sources: Company IR filings, TipRanks, StockAnalysis, Simply Wall St, Finterra, FinancialContent. All figures approximate and based on latest available data as of March 2026. Not investment advice.
Is It Cheap? The Valuation Framing
Here is the honest answer: none of these five names are cheap in the traditional sense. You will not find 8x earnings here. What you will find is a group of businesses growing revenue at 12–22% annually, generating real free cash flow, operating in a market expanding at 10–14% CAGR, and trading at multiples that in several cases sit at five-year lows relative to their own growth rates.
The real question is not "is it cheap vs. the S&P 500" — it is "is it cheap vs. what it is likely worth in three to five years." On that framing, SentinelOne at 4x P/S with 22% ARR growth and a freshly positive operating margin looks materially mispriced. Okta at roughly 5–6x P/S with $863 million in FCF and $4 billion in RPO looks like it's priced for the worst-case growth scenario. Palo Alto at 10x P/S with a $13.5 billion RPO backlog and an accelerating platformization engine is closer to fairly valued — but not obviously expensive relative to the cash flow trajectory.
Fortinet is the outlier: the most profitable on a margin basis, guiding to $6.7+ billion in revenue, and trading at the cheapest P/S of the group. The market is discounting it for slowing growth. If FortiSASE re-accelerates, the re-rating could be sharp.
|
Do THIS before the next big OpenAI story breaks
OpenAI is gearing up for a historic IPO, and Silicon Valley insider Luke Lango has found a way for you to invest BEFORE the announcement is even made. You don't need to file any special paperwork... buy shares from a former employee... have a source on the inside – or jump through any other hurdles.
Best of all, all you need is just $10 to get started.
|
Bull / Base / Bear: What Could Go Right and Wrong
| Scenario | Driver | Implication |
|---|
| Bull | AI agent proliferation forces identity + endpoint re-architecture at scale; platform consolidation accelerates; ARR growth re-rates upward | CRWD, PANW, and S see 30–40%+ re-rating over 12–18 months; OKTA catches agentic AI wave |
| Base | Cybersecurity budgets hold; growth stays in 12–22% range; margins expand slowly; stocks drift 15–25% higher as multiples stabilize | Patient holder rewarded; no dramatic re-rating but solid compounding |
| Bear | AI "tax" on IT budgets cannibalizes security spend; macro recession cuts enterprise deals; Microsoft/Google bundle security into cloud at near-zero marginal cost | ARR growth decelerates sharply; multiple compression hits hardest on CRWD, PANW; S most exposed due to smaller scale |
Action Plan: How to Think About Sizing These
- CrowdStrike (CRWD): Core position for quality-focused investors. Rich valuation demands a long time horizon. Scale in on any 15%+ pullbacks from current levels. Do not chase rips.
- Palo Alto Networks (PANW): The most institutionally owned name. Solid base case. Watch RPO growth rate as the leading indicator. Preferred entry: pullbacks to the low-to-mid $160s or below.
- Fortinet (FTNT): The contrarian value play of the group. Highest margins, cheapest multiple. Entry here is driven by conviction in the FortiSASE re-acceleration thesis. Keep position size modest until subscription revenue share crosses 50%.
- SentinelOne (S): Highest potential upside, highest execution risk. Treat as a growth-at-a-reasonable-price (GARP) opportunity. Current levels near $14 imply ~45–50% upside to analyst consensus. Scale in over 60–90 days. Watch net retention rate closely.
- Okta (OKTA): The cash flow compounder nobody wants. Free cash flow yield at current prices is compelling. The re-acceleration catalyst is AI agent identity security. Buy below $85. Hold through the agentic AI adoption cycle.
The Cheap Investor Scorecard: 10 Things to Track
| # | Metric to Watch | Why It Matters |
|---|
| 1 | ARR growth rate (quarterly) | The forward revenue signal — leading indicator for stock re-rating |
| 2 | Net Revenue Retention (NRR) | Are customers expanding spend? Anything above 115% is best-in-class |
| 3 | Remaining Performance Obligations (RPO) | Contracted future revenue — the truest backlog signal |
| 4 | Free cash flow margin trajectory | Expanding FCF margin is the proof of scalable unit economics |
| 5 | Large customer count (>$1M ARR) | Enterprise depth reduces churn risk and increases platform stickiness |
| 6 | Module/product adoption breadth (CRWD, PANW) | More modules = deeper moat = lower churn = higher LTV |
| 7 | AI agent security pipeline (OKTA, PANW) | The next growth wave — early pipeline momentum is the tell |
| 8 | FortiSASE subscription revenue share (FTNT) | The transition metric — software revenue mix determines multiple re-rating |
| 9 | Purple AI attach rate (SentinelOne) | Already at 40% on new licenses — continued expansion validates AI-native thesis |
| 10 | Macro IT budget survey data (Morgan Stanley CIO Survey) | Security spending growing 50% faster than overall software — watch for any shift |
Bottom Line
Here is the conditional conclusion, bargain hunter: If AI-driven threat escalation continues to make cybersecurity spending non-discretionary — and there is substantial evidence it will — then these five companies are building durable businesses in a structurally expanding market, and several of them are currently priced as if growth stops tomorrow.
SentinelOne offers the most asymmetric upside in the group if the margin inflection holds. Okta offers the best free cash flow profile for a value-oriented investor. Fortinet offers the best margin quality at the lowest multiple. Palo Alto is the platform consolidator with the most institutional conviction. CrowdStrike remains the category leader with the ARR engine that its peers haven't matched.
None of these are slam dunks. The bear case — Microsoft and Google commoditizing security layers, macro-driven deal compression, or AI disruption to existing platform models — is real and should be sized accordingly. But the data, the ARR trends, the cash flows, and the market structure all point to a sector that is operationally stronger than its stock prices currently reflect.
That gap between operational reality and stock price? That is where The Cheap Investor does its best work.
— The Cheap Investor
Tidak ada komentar:
Posting Komentar