Cybersecurity’s Unlikely Edge in the AI Slump

The recent AI selloff, which saw chip stocks plummet as investors grew wary of the costs associated with developing smarter models, had an unexpected beneficiary: cybersecurity. As CrowdStrike Holdings, Inc. and Palo Alto Networks, Inc. rose against the tide, it became clear that Wall Street is separating the cost of building AI from the cost of securing existing systems.

This distinction speaks to a fundamental truth about the relationship between technology advancement and security concerns. The current crop of AI-enabled cyber threats is not merely a result of rapid innovation; rather, it’s often a direct consequence of what already exists in our digital infrastructure. Trying to repair a house built on shaky ground illustrates this point – no matter how much new construction you do, the foundation itself remains vulnerable.

CrowdStrike’s latest quarterly results show revenue soaring to $1.47 billion, with annual recurring revenue rising 25% to $5.84 billion. These numbers suggest that investors’ growing caution about AI development is not matched by a corresponding decrease in demand for robust security measures – particularly given the increasing presence of autonomous agents in our digital lives.

While CrowdStrike and Palo Alto are often associated with innovation, their success relies less on developing new solutions than on enterprises’ growing unease about what current models can already do. These companies have positioned themselves as beneficiaries of the existing security burden – a burden that will only continue to grow as we become increasingly reliant on AI-powered systems.

The rising concern over AI-enabled cyber risk is driving this trend. High-profile breaches like Revolut’s demonstrate that even seemingly secure systems can be vulnerable to attack, creating an environment in which companies like CrowdStrike and Palo Alto can thrive – by capitalizing on existing anxieties rather than innovating new solutions.

However, the commoditization of AI-powered security products threatens to erode the pricing power of companies like CrowdStrike. If third-party foundation models become ubiquitous, competitors will be able to license similar intelligence, essentially leveling the playing field and reducing barriers to entry for new players.

Palo Alto Networks faces additional challenges due to its broader platform strategy. Buying capabilities around agentic workflows may make it easier for large customers to consolidate security spending, but it also increases debt, shares outstanding, and execution complexity. Management acknowledges that some next-generation security growth will likely decelerate after recent acquisition-assisted comparisons.

Recent hedge fund activity offers further insight into this dynamic. Insiders like D.E. Shaw have increased their positions in CrowdStrike, while Fisher Asset Management has done the same with Palo Alto. These moves suggest that investors are still willing to bet on companies positioned to capitalize on existing security concerns – even as they grow wary of AI development.

As we become increasingly reliant on AI-powered systems, our digital infrastructure will remain vulnerable – and companies like CrowdStrike and Palo Alto will be poised to capitalize on that vulnerability. The question is no longer whether we can afford to invest in new security measures; it’s how much we’re willing to pay for the existing burden. By acknowledging the complex interplay between technology advancement and security concerns, we may uncover a more nuanced approach to addressing our digital anxieties – one that prioritizes existing vulnerabilities over revolutionary innovation.