Why should you consider investing in cybersecurity stocks?
According to the Identity Theft Resource Center, the number of data breaches set a new record in 2021, with the number of incidents jumping 68% from 2020 and up 23% from the previous high in 2017. The number of data compromise events remained near that all-time high in 2022, but the total number of individual victims that were affected soared almost 42% year-over-year in 2022.
It shouldn’t be surprising that global spending on cybersecurity is expected to exceed $200 billion in 2023 (up about 12% from 2022) and will likely continue to be a high-growth industry for years, according to research from IDC. Cybersecurity stocks are a red-hot niche of the tech industry, so knowing how to invest in them can yield some big returns in the decade ahead.
Here are some of the top cybersecurity stocks to own in 2023 and beyond
Cloud Security, Identity Management, and Legacy Security Vendors
As cloud computing has quickly grown into an industry worth hundreds of billions annually, sales of security software that’s cloud-native (built in and for the cloud) have skyrocketed. The leaders in this space have some of the best long-term potential:
CrowdStrike Holdings
A cloud-native software company, CrowdStrike Holdings (CRWD 0.56%) provides endpoint security — protection for devices such as laptops, PCs, and smartphones, and any other device connected to a network. Because it’s cloud-based, CrowdStrike is particularly well-suited for supporting remote work.
CrowdStrike’s software uses machine learning (a type of artificial intelligence) to detect security breaches and hunt down threats. It’s also easy to deploy to the millions of people working from home and the billions of machines connected to the internet. The company has steadily increased the number of modules on its platform to help its customers, and it has new integration agreements with other tech companies to make data protection more consistent across an organization’s IT infrastructure.
The premium-priced stock was hit hard in 2022, but CrowdStrike’s sales have been booming nonetheless. It’s also highly profitable as measured by free cash flow. In an increasingly mobile world with more devices continually coming online, CrowdStrike is poised to continue growing at a brisk rate.
Zscaler
Another cloud-native security vendor, Zscaler (ZS -4.46%), works in tandem with endpoint security services to help keep data secure. The company has been increasing its sales at a rapid pace and is another of the largest pure-play cybersecurity stocks as measured by market cap — even though the stock itself sold off 65% in 2022.
Zscaler got started with a software-as-a-service product designed for network protection in the modern cloud computing era, but it has since added new internet security and end-user monitoring products. End-user monitoring is increasing with so many people now working from home. And with global spending on cloud computing expected to exceed $1 trillion annually this decade, Zscaler is well-positioned to profit from a massive secular growth trend.
Okta
Okta (OKTA 1.22%) is a pioneer of identity and access management, which rethinks traditional security by using what’s called zero-trust architecture. This type of identity management constantly requires verification of a user before allowing access to data and applications. If legacy security is a castle with a wall and a moat, then zero-trust security acts more like a counterspy agency.
In an increasingly mobile and cloud-based world, Okta’s identity management software has been in high demand. Businesses often have a complicated web of stakeholders, including employees, third-party contractors, suppliers, and customers. The sheer size and complexity of web-based applications has driven Okta’s growth story and attracted some attention, too. Private equity firm Thoma Bravo acquired three identity and access management companies in 2022: ForgeRock, SailPoint, and Ping Identity.
Okta is in the lead in this branch of security. However, a cyberattack in January 2022 affected two of its customers, helping to accelerate the decline of its stock during the bear market. Even so, Okta remains in growth mode as new customers adopt its software to manage identity and access security.
SentinelOne
SentinelOne (S 2.47%) is another recent pure-play cybersecurity company to be publicly listed. Its initial public offering (IPO) in June 2021 raised $1.2 billion in cash and valued the company at $10 billion, making SentinelOne's IPO the largest ever for a cybersecurity company. However, a rough go for the stock market in 2022 and slowing revenue growth at SentinelOne has sent the stock below its IPO price.
Despite the slowdown, this small company still more than doubled its sales year-over-year in 2022. It's expecting about another 50% increase in sales in 2023. As a result of its rapid expansion, SentinelOne is also making steady progress towards turning a profit. It operates a cloud-based endpoint security platform, which puts it in competition with CrowdStrike. Its ability to automatically detect and resolve cybersecurity threats is being well-received in the market.
Palo Alto Networks
Hailing from an era that predates cloud technology, Palo Alto Networks' (NYSE:PANW) specialty is rooted in firewalls — devices that protect traffic into and out of physical locations such as offices and data centers. While its legacy services still experience plenty of demand, the real growth is in the cloud.
The company's highly profitable platform has helped it to acquire more than a dozen smaller cloud-native businesses in the past few years. As a result, Palo Alto Networks has given its security operation a serious makeover. Management predicts double-digit percentage revenue growth in the years ahead for its next-gen security portfolio geared for the cloud era. This steady growth and market leadership helped make its stock one of the best performers among cybersecurity companies in 2022, and 2023 is looking promising too.
Palo Alto Networks is the largest pure-play cybersecurity operation by revenue and market cap. Now also a leading cloud security provider, this legacy business is highly competitive in the cybersecurity industry. Shares trade for a relative value compared to its younger, high-flying, cloud-native rivals. The company also completed a 3-for-1 stock split in September 2022.
Fortinet
Another legacy security software provider, Fortinet (FTNT 0.59%) is also one of the largest cybersecurity companies in the world by revenue and market cap. Like its peer Palo Alto Networks, it has maintained double-digit percentage growth and is highly profitable. But, unlike Palo Alto Networks’ acquisition spree, Fortinet has invested in its organic development of cloud security to remain competitive.
One of its developments is a recently announced software-based internet security product being built and deployed with one of Europe’s leading telecom providers, Telefónica (TEF 0.26%). The company also recently announced a partnership with Singapore's Quantum Engineering Programme to develop next-gen security for quantum computing.
Fortinet is also a top provider of firewalls. Its best-in-class hardware continues to generate more revenue as many organizations turn to Fortinet for help when building new data centers and 5G mobile networks. It also completed a stock split in 2022, initiating a 5-for-1 split in June 2022. For investors looking for a good balance of both sales and profitability growth, Fortinet is one of the best security stocks on the market.
