As AI Supercharges Hackers, Cybersecurity Stocks Split Into Platforms and Point Solutions

Recent reports indicate that attacks executed by AI-powered hackers surged by 89% last year, according to CrowdStrike's own threat assessment. This shift in threat landscape is prompting a reevaluation of security software purchasing strategies. Instead of relying on a single system or a collection of independent tools, organizations are increasingly considering a consolidated approach.

This trend has also caught the attention of investors, with CrowdStrike and Palo Alto Networks experiencing declines of over 13% from their October 6 record highs. Other affected companies include Fortinet and Okta, which have also witnessed a decline in stock prices. The market's reaction may be attributed to a suggestion that OpenAI might acquire a cybersecurity startup and enter the sector.

Despite these developments, none of the affected companies have lost customers or revenue. As a result, it is essential to consider the underlying valuation of these companies before making investment decisions. CrowdStrike's Falcon Flex bundling program has grown its contracted value past $2 billion, more than doubling in a year, which demonstrates that customers are opting to consolidate their security tools under one roof rather than continuing with separate systems.

Palo Alto Networks has also adopted a similar strategy, adding approximately 220 platformization deals in a recent quarter, nearly doubling the pace from two years prior. Fortinet, which holds the top position in network firewalls, is leveraging this leadership to cross-sell newer security products to existing customers. While Cloudflare, SentinelOne, and Zscaler also consider themselves platforms, their cases are less compelling.

Cloudflare's security offerings are just one part of its larger internet infrastructure business, making it difficult to categorize it as a platform or a point solution. SentinelOne and Zscaler have smaller annual recurring revenues compared to CrowdStrike. Zscaler, in particular, employs a different approach by routing a company's internet traffic through its cloud first, checking for threats before allowing access to the destination.

This distinct method makes it challenging to classify Zscaler as either a platform or a point solution. Okta remains focused on providing a single service: verifying user identities and access permissions. With AI agents requiring their own logins, Okta's offerings are geared towards assisting organizations in managing these AI agents effectively.