Cybersecurity Stocks Projected For 18.8% CAGR Through 2028

A May 2026 report highlighted the projected rapid growth trajectory for select cybersecurity stocks, driven by corporate spending on artificial intelligence infrastructure and related defense needs. The global cybersecurity market is forecast to grow at a compound annual rate of 18.8% through 2028, exceeding an estimated total value of $400 billion. Some equities within the sector currently trade at forward price-to-earnings ratios below the technology sector average, presenting a relative value argument for institutional investors.

Context — Why this matters now

The last comparable surge in cybersecurity investment followed the 2020-2021 pandemic-driven shift to remote work, which spurred a 15.3% annual market expansion as detailed in Gartner's 2022 forecast. The current catalyst chain originates from the global build-out of generative AI and large language models, which simultaneously create new attack surfaces and demand specialized, AI-native security tools. This expansion occurs against a macro backdrop of moderating interest rates, with the U.S. 10-year Treasury yield near 4.2%, improving the present-value calculation for long-duration growth equities. Corporate capital expenditure is pivoting from general cloud migration to targeted AI and security stacks, creating a durable multi-year demand cycle for vendors.

Data — What the numbers show

Key equities illustrate the sector's scale and growth. CrowdStrike Holdings reported fiscal 2025 annual recurring revenue of $3.44 billion, representing year-over-year growth of 34%. Palo Alto Networks achieved a fiscal 2025 billings figure of $10.13 billion, though its forward P/E ratio of 46x sits above the sector median. Zscaler's revenue climbed to $2.09 billion in its last fiscal year, a 32% increase. SentinelOne, while growing revenue at over 40% annually, has yet to reach consistent GAAP profitability, reflecting the growth-investment trade-off. The First Trust Nasdaq Cybersecurity ETF, ticker CIBR, holds a market capitalization of $5.7 billion and has recorded a year-to-date return of +22% through late May 2026, outperforming the Nasdaq-100's +14% gain over the same period.

Metric	CrowdStrike	Palo Alto Networks	Sector Average
Forward P/E Ratio	68x	46x	32x
Revenue Growth (YoY)	34%	19%	18.8%

Analysis — What it means for markets / sectors / tickers

The primary second-order effect is capital rotation within technology from pure-play AI semiconductor stocks toward software and infrastructure enablers like cybersecurity. Companies providing cloud-native platforms for endpoint and identity security, including CrowdStrike and Zscaler, are positioned to capture a disproportionate share of new budgets. A counter-argument notes that heightened competition and vendor consolidation could pressure margins, as evidenced by Palo Alto Networks' strategic shift toward platform consolidation in early 2025, which initially impacted its growth rate. Institutional positioning data shows net inflows into cybersecurity-specific ETFs have accelerated for three consecutive quarters, while hedge fund short interest remains concentrated on smaller, pre-profitability names like SentinelOne.

Outlook — What to watch next

The next significant catalyst is the Q2 2026 earnings season, commencing in mid-July, where guidance for 2027 will be scrutinized for spending durability. Investors will monitor the 50-day moving average for the CIBR ETF, currently near $56.50, as a key support level following its recent rally. Upcoming industry conferences, including Black Hat USA in August 2026, often serve as launchpads for new product cycles that can shift competitive dynamics. A break below the 200-day moving average for sector leaders would signal a deterioration in the growth narrative. Federal appropriation deadlines for U.S. government cybersecurity grants in Q4 2026 provide another tangible demand catalyst.

Frequently Asked Questions

What does AI have to do with cybersecurity stock growth?

AI development directly increases the need for cybersecurity in two ways. First, AI models and their training data become high-value targets, requiring specialized protection. Second, AI-powered tools are now essential for defenders to identify novel threats and automate responses at machine speed, creating a new product cycle. This dual demand driver is pulling corporate and government IT budgets toward vendors that integrate AI into their security operations centers.

Are all cybersecurity stocks considered expensive?

Valuation dispersion is significant within the sector. Mature, cash-flow positive platform companies like Palo Alto Networks and Fortinet trade at more moderate earnings multiples, sometimes below broad tech indices. High-growth, cloud-native leaders like CrowdStrike command premium valuations based on sustained >30% growth rates. Pure valuation plays exist in legacy hardware or services firms trading at depressed multiples, though their growth prospects are often more limited.

How does this projected growth compare to the dot-com era tech bubble?

The fundamental driver differs. The late-1990s bubble was often fueled by speculation on pre-revenue internet concepts. Today's cybersecurity growth is underpinned by measurable, recurring revenue from enterprises facing quantifiable regulatory and operational risks. Recurring subscription revenue models provide high visibility, and total addressable market calculations are based on existing IT spending shifting to security, not hypothetical future demand.

Bottom Line

The structural demand for cybersecurity tools, amplified by AI proliferation, supports sustained sector growth with select equities offering relative value.

Disclaimer: This article is for informational purposes only and does not constitute investment advice. CFD trading carries high risk of capital loss.