AI Cybersecurity
All research in AI Cybersecurity — 5 reports.
SentinelOne is an AI-native endpoint security vendor expanding from autonomous detection into a broader platform through Purple AI, AI-SIEM, and other emerging products. Its latest-quarter ARR was about $1.163 billion, up 23% year over year, and emerging products already account for half of ARR, but revenue growth has slowed from 47% to 22%, stock-based compensation is about 30% of revenue, and the stock trades at a large discount to CrowdStrike. Research rating Hold: the discount has a business basis, while Microsoft bundling and pressure from the leader still leave execution to be proven.
Palo Alto Networks is a high-quality cybersecurity platform business with strong cash flow, durable customer demand, and a moat that is still widening through platformization. The problem is price: at about $252.92 as of 2026-05-22, the stock is already close to an optimistic scenario, while my conservative intrinsic value range is $150–180. Research rating Watch: a strong business, but the current price leaves too little margin of safety for a conservative long-term value investor.
A high-quality cybersecurity platform company with strong cash flow, ample net cash, and deep founder leadership, underpinned by solid service revenue and deferred revenue. But at 129.46 dollars it trades at roughly 39.5x TTM free cash flow, already near the top of the optimistic range, with a starting owner-earnings yield of just 2.2%-2.5% and no margin of safety. Rating Watch: an excellent business whose price leaves too little room for a conservative buyer.
A high-quality platform cybersecurity company: Falcon's subscription retention and module penetration are strong, with ample net cash. But near $627 it trades at 32x EV/Sales, well above even the optimistic range, while heavy SBC erodes owner earnings and leaves no margin of safety. Rating Watch: an excellent business at a price that demands near-flawless execution; ideal buy 180-280 dollars.
AI cybersecurity has graduated from a "product feature" into the control plane and governance layer of the AI value chain, spanning models, agents, data, identity, runtime, development, and the SOC. Two budget curves diverge: using AI to do security (replacing or upgrading existing SIEM/SOAR/XDR/MDR) lands fast in the near term, while protecting AI itself (AI-SPM/agent identity/RAG permissions/MCP governance/AI gateway) carries greater long-run elasticity. The public companies with the clearest revenue leverage are Palo Alto Networks (NGS ARR $4.8 billion, +37%; RPO $13 billion), CrowdStrike (FY25 ARR $4.24 billion), Fortinet (Unified SASE/SecOps ARR +26%/+30%), Zscaler, and Rubrik (Subscription ARR $1.09 billion, +39%); the defensive beneficiaries are Microsoft, Datadog, Cloudflare, Check Point, and Qualys. The most bubble-prone are pure prompt injection, LLM firewalls, and single-point red-teaming, most of which will be absorbed or acquired by the platforms. Rating Watch: a sector-level control plane in formation, where business certainty and valuation attractiveness have already separated.