The AI Revolution in Cybersecurity: 2 Stocks to Buy Now and 1 to Avoid

Key Takeaways

  • Industry consolidation creates winners as enterprises demand comprehensive security platforms
  • AI advantage: Larger players leverage massive data sets to enhance threat detection
  • Valuation matters: Even great companies can be poor investments at inflated prices
  • Our picks: Palo Alto Networks (PANW) and Fortinet (FTNT) offer better value than CrowdStrike (CRWD)

The Perfect Storm: Why Cybersecurity Stocks Are Thriving

The cybersecurity sector is experiencing unprecedented growth, driven by three powerful forces converging simultaneously. First, the mass migration to cloud infrastructure has created new attack surfaces that traditional security solutions can’t protect. Second, the permanent shift to hybrid work has dissolved the traditional network perimeter. Third, and perhaps most importantly, artificial intelligence has transformed both cyber attacks and defense mechanisms.

This transformation has created a winner-take-most dynamic. Companies with the largest customer bases can feed more data into their AI models, creating better threat detection capabilities, which attracts more customers—a powerful flywheel effect that’s reshaping the entire industry.

The Consolidation Game: Why Size Matters More Than Ever

Gone are the days when enterprises would piece together security solutions from dozens of vendors. Today’s CISOs demand integrated platforms that provide end-to-end protection with unified management consoles. This shift has triggered a massive consolidation wave, with larger players acquiring specialized vendors and building comprehensive security suites.

The math is simple: more customers generate more telemetry data, which trains better AI models, resulting in superior threat detection. This virtuous cycle gives established players with large installed bases an almost insurmountable advantage over smaller competitors.


CrowdStrike: A Cautionary Tale of Valuation vs. Performance

The Fall and Rise Story

CrowdStrike (NASDAQ: CRWD) has been on a roller coaster ride that would make even seasoned investors dizzy. The company’s catastrophic software update failure in summer 2024 crashed millions of Windows computers globally, causing one of the largest IT outages in history. The incident was a stark reminder that even industry leaders aren’t immune to operational risks.

Current Performance Metrics

  • Market Cap: $104 billion
  • Current Price: $413.92 (as of August 21, 2025)
  • YoY Revenue Growth: 42%
  • Operating Margin: 18% (down from 23% year-over-year)

The Recovery Strategy

CrowdStrike has responded aggressively to rebuild trust:

  • Enhanced quality control: Implemented multi-layer testing protocols
  • Customer incentives: Offered significant discounts for multi-module purchases
  • Increased investment: Ramped up marketing and sales spending to rebuild brand confidence

The strategy appears to be working. Customer adoption of multiple modules has increased significantly, setting the stage for strong net revenue retention rates in the coming quarters.

The Valuation Problem

Here’s where things get concerning. Despite the operational setback, CrowdStrike’s stock has not only recovered but surpassed its pre-incident highs. The current valuation metrics are eye-watering:

  • Price-to-Sales (TTM): 26x
  • Forward P/S: 18x
  • Price relative to sector average: 65% premium

These multiples suggest the market is pricing in perfection—a dangerous assumption for a company that just demonstrated its fallibility. While CrowdStrike remains a strong business, the stock appears significantly overvalued relative to its peers.


The Smart Money Alternatives: Palo Alto Networks and Fortinet

Palo Alto Networks (NASDAQ: PANW): The Platform Play

Why It’s Compelling:

Palo Alto has successfully transformed from a firewall vendor into a comprehensive security platform provider. Their “platformization” strategy—essentially replicating CrowdStrike’s playbook but with a stronger foundation—is gaining serious traction.

Key Metrics:

  • Market Cap: $123 billion
  • Current Price: $183.19
  • Next-gen security ARR growth: 32% YoY
  • Operating margin expansion: 340 basis points YoY
  • Valuation: 15x TTM sales, 12x forward sales

The CyberArk Acquisition:

The proposed $25 billion acquisition of CyberArk represents a bold move into identity security—arguably the hottest segment in cybersecurity. While investors initially balked at the price tag, the strategic rationale is sound:

  • Identity security is growing at 25%+ annually
  • Cross-selling opportunities could accelerate CyberArk’s growth
  • Strengthens Palo Alto’s position in zero-trust architectures

Investment Thesis: At 12x forward sales with 30%+ growth in high-margin software revenues, Palo Alto offers compelling value, especially compared to CrowdStrike’s nosebleed valuations.

Fortinet (NASDAQ: FTNT): The Profitable Growth Story

Why It’s Compelling:

Fortinet has quietly built one of the most comprehensive security portfolios in the industry through organic innovation rather than aggressive M&A. This approach has resulted in industry-leading margins and consistent profitability.

Key Metrics:

  • Market Cap: $61 billion
  • Current Price: $77.75
  • Gross Margin: 81.29%
  • SASE ARR growth: 22% YoY
  • Security Operations growth: 35% YoY
  • Valuation: <10x TTM sales, 9x forward sales

Competitive Advantages:

  • Integrated architecture: Purpose-built security processors deliver superior performance
  • Market leadership: #1 in firewall shipments globally
  • Financial strength: Consistent free cash flow generation funds R&D without dilution

Investment Thesis: Trading at single-digit sales multiples while delivering 20%+ growth in strategic segments, Fortinet represents exceptional value in the cybersecurity space.


The Verdict: Strategic Positioning for the AI-Powered Future

Why We’re Avoiding CrowdStrike (For Now)

Don’t misunderstand—CrowdStrike remains a formidable company with excellent technology and strong market position. However, at 26x trailing sales, the stock prices in flawless execution and continued hypergrowth. The recent outage proved that even the best companies face operational risks. We’d become interested at valuations closer to 15x sales, which would still represent a premium to peers.

Why Palo Alto and Fortinet Are Buys

Both companies offer:

  1. Reasonable valuations relative to growth rates
  2. Proven execution in platform consolidation
  3. Strong competitive moats in core markets
  4. AI capabilities enhanced by large customer bases
  5. Multiple growth drivers beyond their legacy businesses

Portfolio Allocation Strategy

For investors looking to gain exposure to AI-powered cybersecurity:

  • Conservative approach: Equal weight Palo Alto and Fortinet
  • Growth-oriented: Overweight Palo Alto due to higher growth potential
  • Value-focused: Overweight Fortinet given superior margins and lower multiple

Looking Ahead: What to Watch

Key Catalysts for 2025-2026

  1. AI-powered attack sophistication driving demand for advanced defenses
  2. Regulatory requirements expanding (especially in critical infrastructure)
  3. Cloud security spending accelerating as multi-cloud becomes standard
  4. Identity security convergence with traditional network security

Risk Factors to Monitor

  • Economic slowdown impacting IT budgets
  • Emergence of disruptive open-source alternatives
  • Major security breaches affecting sector sentiment
  • Valuation compression if interest rates rise

The Bottom Line

The cybersecurity sector’s transformation into an AI-powered, platform-centric market creates clear winners and losers. While CrowdStrike captures headlines, savvy investors should look beyond the hype to find value. Palo Alto Networks and Fortinet offer compelling combinations of growth, profitability, and reasonable valuations—a rare trifecta in today’s market.

Remember: in cybersecurity investing, the best defense isn’t always the most expensive one.


Disclaimer: This analysis is for informational purposes only and should not be considered investment advice. Always conduct your own research and consult with a qualified financial advisor before making investment decisions.

What’s your take on the cybersecurity sector? Share your thoughts in the comments below.

Comments

Leave a comment