Cybersecurity stocks have emerged as major beneficiaries of the AI investment boom, as investors anticipate that AI-powered attacks, autonomous agents and machine identities will force enterprises to increase security spending. The S&P Kensho cybersecurity index has risen about 41% in 2026, versus roughly 11% for the S&P 500, according to The Information.
The question is whether earnings can ultimately justify these valuations. CrowdStrike has attracted particular attention: The Information reports that its shares have more than doubled this year and recently traded around 36 times estimated forward sales. Such valuations increase sensitivity to any slowdown in growth, customer spending or AI-security adoption.
The underlying business momentum remains substantial. CrowdStrike reported Q2 FY2027 revenue of $1.47 billion, up 26%, with ending annual recurring revenue reaching $5.84 billion. It is expanding into agentic security as AI-driven attacks increasingly cross endpoint, identity, cloud, SaaS and network environments.
Okta presents a different equation. Its Q2 revenue increased 11% to $805 million, while remaining performance obligations grew 17%. Okta sees AI agents creating a new class of machine identities requiring authentication, authorization and governance.
The longer-term opportunity is therefore considerable: AI expands both the attack surface and security market. Cybersecurity companies can potentially monetize AI through agent security, machine-identity protection, autonomous SOCs, behavioral detection and AI-assisted threat response. However, investors will increasingly look for measurable AI-generated revenue rather than product announcements alone.
This could create greater differentiation across cybersecurity stocks. Companies converting AI security into ARR growth, larger contracts, stronger retention and improved margins may better support premium valuations; those unable to demonstrate commercial returns could face valuation pressure. The next phase of the cybersecurity rally may therefore depend less on the AI narrative—and more on AI monetization.
