The cybersecurity sector has staged a commanding re-rating in 2026, with CrowdStrike (CRWD) surging 123% year-to-date, Fortinet (FTNT) climbing 141%, and Palo Alto Networks (PANW) gaining 117% — all dwarfing the First Trust NASDAQ Cybersecurity ETF's (CIBR) 51% return and the Nasdaq-100's ($IUXX) 20% advance.
The explosive outperformance reflects a fundamental shift in enterprise spending as organizations race to secure AI workloads and defend against increasingly sophisticated threat actors targeting critical infrastructure, yet Morningstar analysts warn that many of these names now appear overvalued relative to the broader technology sector — setting up a tension between structural demand and nosebleed multiples.
CrowdStrike reported record net new annual recurring revenue of $333 million, up 51% year over year, bringing ending ARR to $5.84 billion and prompting its CEO to describe it as the best quarter in company history. Revenue reached $1.47 billion, growing 26%, alongside record operating income of $372 million, and management raised full-year net new ARR growth guidance to 34% at the midpoint.
The stock, however, trades at a forward price/earnings (P/E) ratio of roughly 220x and a price-to-sales ratio near 52x — meaning any deceleration in AI-driven security demand could trigger a sharp correction.
Okta (OKTA), the identity security specialist, represents a notably more balanced entry point, trading at a forward P/E of approximately 59x and a P/S ratio around 12.5x — a fraction of CrowdStrike's valuation. The company posted record bookings for a non-Q4 quarter, beat estimates by a wide margin, and saw its stock jump nearly 20% on the results.
Okta has reached consistent profitability with net income of roughly $235 million on nearly $2.9 billion in revenue, while eliminating its remaining convertible debt. That's a significant financial milestone after years of post-breach recovery.
Zscaler (ZS), with approximately $3.35 billion in subscription revenue and a market cap near $38 billion, continues to benefit from accelerating enterprise adoption of zero-trust architecture, particularly among Global 2000 firms.
Tenable Holdings (TENB), valued at around $4.6 billion, offers exposure to the expanding attack surface created by cloud migration and AI adoption, generating roughly $1 billion in annual revenue from its exposure management platform.
Rapid7 (RPD) is refocusing on core detection and response capabilities, though at a much smaller market capitalization near $926 million it carries notably higher execution risk.
Rising geopolitical tensions — including Middle East conflict and Brent crude futures (CBZ26) pushing above $106 per barrel — are amplifying concerns about critical infrastructure vulnerability and reinforcing the structural case for cybersecurity spending.
The AI proliferation tailwind and expanding enterprise attack surfaces continue to justify premium multiples for sector leaders, even as current valuations leave little margin for error.
For investors weighing cybersecurity exposure this month, CrowdStrike offers the highest growth trajectory paired with the greatest valuation risk, Okta provides proven profitability at a more digestible multiple, and Fortinet's 141% year-to-date sprint proves that both subscription and hardware-linked security models are being richly rewarded.
The sector's best quarter ever may already be in the price — which means the next one had better be even better.
This article was created with the support of automated content tools from our partners at Sigma.AI. Together, our financial data and AI solutions help us to deliver more informed market headline analysis to readers faster than ever.