While most market participants spent the first half of 2026 chasing AI infrastructure names, a quieter re-rating has been taking place in cybersecurity. CrowdStrike (CRWD) crossed $480 per share in late May, recovering fully from its 2024 software outage and adding approximately 38% year-to-date. Palo Alto Networks (PANW) followed with a 27% gain over the same period, driven by platformization revenue that grew 22% year-over-year in its most recent quarter.
The macro driver is not subtle. Nation-state attack volumes are up an estimated 41% since January 2025, according to Microsoft’s most recent Digital Defense Report. Enterprise security budgets, which historically compress during rate tightening cycles, have remained structurally elevated because the cost of not spending is now quantifiable in ways it never was before. The average data breach in 2025 cost $4.88 million per incident. That number is a procurement argument, not a marketing slide.
Where the Flow Is Going
The sector rotation into cybersecurity is visible in ETF data. BUG and CIBR – two of the most widely tracked cybersecurity ETFs – posted combined net inflows of over $620 million in April and May combined, the strongest two-month stretch since Q4 2021. Institutional positioning in CRWD calls with June and September expirations has increased materially, with the 30-day IV rank sitting near the 58th percentile – elevated but not extreme, suggesting the options market sees room to move without pricing in a binary event.
Names Generating the Most Search Volume Right Now
- CrowdStrike (CRWD) – Platform consolidation thesis intact, ARR guidance raised to $4.7B
- Palo Alto Networks (PANW) – Platformization bookings up 34% YoY, free cash flow margin at 38%
- SentinelOne (S) – Smaller float, higher beta, posted first GAAP profit quarter in Q1 2026
- Zscaler (ZS) – Zero-trust architecture demand accelerating in federal vertical post new executive mandate
This is not a momentum story built on speculation. It is a sector where revenue visibility is high, switching costs are structurally embedded, and the threat environment provides a demand floor that does not depend on the business cycle. For traders tracking trending names with durable fundamentals, cybersecurity deserves a position on the primary watchlist heading into Q3 earnings season.
