Cyber security stocks are defensive and growth at the same time Cyber security stocks are defensive and growth at the same time Cyber security stocks are defensive and growth at the same time

Cyber security stocks are defensive and growth at the same time

Equities 8 minutes to read
Peter Garnry

Head of Saxo Strats

Summary:  Most high growth industries have a high sensitivity to the economic outlook but the cyber security industry becoming a necessity for the corporate sector and governments around the world. This means that the underlying demand function is stable throughout the economic cycle and the increased number of cyber attacks have increased the awareness and need for massive investments. The industry is still small and will likely see double-digit growth growth rates over the coming decades as the digitalisation continues and with the rise of Internet of Things. Our cyber security consists of 25 largest publicly-listed cyber security companies.

This year we have been rolling out 15 new equity theme baskets and today we are launching our 16th equity basket focusing on the cyber security industry. This industry has grown considerably the past year and delivered strong returns to shareholders over the past five years. However, the best feature of the cyber security industry is that it has defensive characteristics combined with an above average growth outlook.

The basket

Our cyber security basket consists of 25 companies mainly based in the US with only three non-US companies showing the dominance of the US in cyber security. Despite the growing threats from cyber attacks with the most recent high-profile attack being on a major US pipeline, the industry is still small with a combined market value of $381bn across the 25 companies in our basket.

NameMarket Cap (USD mn.)Sales growth (%)EPS growth (%)Diff to PT (%)5Y return %
Crowdstrike Holdings Inc57,10877.341.11.3NA
Fortinet Inc (**)39,20620.337.6-8.5652.3
Okta Inc36,61540.4-39.912.4NA
Palo Alto Networks Inc35,87822.2-69.719.7202.5
Cloudflare Inc32,22451.0NA-6.6NA
Zscaler Inc29,98153.7-352.15.5NA
VeriSign Inc25,4873.1-13.23.6168.8
Splunk Inc22,571-3.0-79.619.2151.2
Check Point Software Technologies Ltd15,8253.89.914.249.6
NortonLifeLock Inc15,7922.475.21.9145.5
McAfee Corp12,216NANA-2.2NA
F5 Networks Inc10,9847.0-11.018.662.5
Proofpoint Inc9,97016.428.01.4190.3
Trend Micro Inc/Japan7,4435.2-13.17.394.8
Avast PLC7,1272.5-19.216.6NA
Varonis Systems Inc6,18924.3-12.517.7633.3
CyberArk Software Ltd5,4105.8-96.629.5181.4
Rapid7 Inc5,38324.8-52.31.8650.5
SolarWinds Corp5,3416.8448.616.6NA
Sailpoint Technologies Holdings Inc4,84225.4-26.621.6NA
FireEye Inc4,8386.533.49.830.4
Tenable Holdings Inc4,68422.271.833.0NA
Venustech Group Inc4,15432.027.648.129.2
Qualys Inc3,99612.3-4.19.9239.6
CommVault Systems Inc3,7017.896.11.487.3
Aggregate / median380,74914.3-11.09.9160.0

Source: Bloomberg and Saxo Group
* Sales and EPS growth is measured on 12-month trailing figures, Diff to PT is the difference between consensus price target and the current price in %
** Peter Garnry has holdings in these companies

The median revenue growth over the past year is 14% which is quite attractive relative to a global pandemic and lockdowns in many countries. Earnings growth is volatile across the industry with a few players showing stable profit margins while most cyber security companies are investing heavily in growth and expanding the client base. Analysts covering the industry are generally positive on the industry with a median price target being 10% above the current price. Of the 16 companies with a five-year history the median five-year return has been 160% which has been attractive.

The industry and why it is attractive for investors

The cyber attack on the Colonial pipeline was a big deal and brough cyber attacks to the attention of company leaders and political leaders with Biden bringing it up as topic at the recent summit with Putin. Cyber security is becoming a critical part of any country and company’s infrastructure as the world goes more digital and some are even suggesting that it should become compulsory. A Danish home improvement retailer was recently exposed to a cyber attack and the CEO has been out saying that dealing with the pandemic was much easier than this cyber attack. This underscores the growing attention by business leaders that cyber security is a necessity.

The cyber security industry is expected to grow 11% annualized until 2028 from a current estimated market size of $167bn, but this could prove to be too low an estimate given the increased threat from cyber attacks. With the adoption of Internet of Things which we back in May described as the next growth cycle for the semiconductor industry more things will be coupled and connected creating even bigger demand for cyber security.

The combination of double-digit growth rate and defensive characteristics, companies and governments need cyber security no matter the state of the economy, are what makes the cyber security industry attractive for investors.

Key risks

Many cyber security stocks are aggressively valued due to increased attention of investors and the growth outlook. These high valuations make cyber security vulnerable and more volatile over earnings releases as they respond more to the changing outlook. The high valuations also mean that cyber security stocks in the short-term could be sensitive to higher interest rates. As most of the companies in the basket are US-based a higher USD is negative for earnings and revenue growth which means that higher US inflation could be a negative the industry.

Cyber security technology is evolving fast, and some companies might not be able to switch to the new technology vectors. The Orion hack back in 2020 exposed SolarWinds and has caused a crisis at the company and in general this is one of the big tail-risk events for any cyber security company that one day your systems cannot prevent a big cyber attack on your customers’ systems. This could lead to loss of clients and ultimately a failure as a company.


The Saxo Bank Group entities each provide execution-only service and access to Analysis permitting a person to view and/or use content available on or via the website. This content is not intended to and does not change or expand on the execution-only service. Such access and use are at all times subject to (i) The Terms of Use; (ii) Full Disclaimer; (iii) The Risk Warning; (iv) the Rules of Engagement and (v) Notices applying to Saxo News & Research and/or its content in addition (where relevant) to the terms governing the use of hyperlinks on the website of a member of the Saxo Bank Group by which access to Saxo News & Research is gained. Such content is therefore provided as no more than information. In particular no advice is intended to be provided or to be relied on as provided nor endorsed by any Saxo Bank Group entity; nor is it to be construed as solicitation or an incentive provided to subscribe for or sell or purchase any financial instrument. All trading or investments you make must be pursuant to your own unprompted and informed self-directed decision. As such no Saxo Bank Group entity will have or be liable for any losses that you may sustain as a result of any investment decision made in reliance on information which is available on Saxo News & Research or as a result of the use of the Saxo News & Research. Orders given and trades effected are deemed intended to be given or effected for the account of the customer with the Saxo Bank Group entity operating in the jurisdiction in which the customer resides and/or with whom the customer opened and maintains his/her trading account. Saxo News & Research does not contain (and should not be construed as containing) financial, investment, tax or trading advice or advice of any sort offered, recommended or endorsed by Saxo Bank Group and should not be construed as a record of our trading prices, or as an offer, incentive or solicitation for the subscription, sale or purchase in any financial instrument. To the extent that any content is construed as investment research, you must note and accept that the content was not intended to and has not been prepared in accordance with legal requirements designed to promote the independence of investment research and as such, would be considered as a marketing communication under relevant laws.

Please read our disclaimers:
- Notification on Non-Independent Investment Research (
- Full disclaimer (

40 Bank Street, 26th floor
E14 5DA
United Kingdom

Contact Saxo

Select region

United Kingdom
United Kingdom

Trade Responsibly
All trading carries risk. To help you understand the risks involved we have put together a series of Key Information Documents (KIDs) highlighting the risks and rewards related to each product. Read more
Additional Key Information Documents are available in our trading platform.

Saxo is a registered Trading Name of Saxo Capital Markets UK Ltd (‘Saxo’). Saxo is authorised and regulated by the Financial Conduct Authority, Firm Reference Number 551422. Registered address: 26th Floor, 40 Bank Street, Canary Wharf, London E14 5DA. Company number 7413871. Registered in England & Wales.

This website, including the information and materials contained in it, are not directed at, or intended for distribution to or use by, any person or entity who is a citizen or resident of or located in the United States, Belgium or any other jurisdiction where such distribution, publication, availability or use would be contrary to applicable law or regulation.

It is important that you understand that with investments, your capital is at risk. Past performance is not a guide to future performance. It is your responsibility to ensure that you make an informed decision about whether or not to invest with us. If you are still unsure if investing is right for you, please seek independent advice. Saxo assumes no liability for any loss sustained from trading in accordance with a recommendation.

Apple, iPad and iPhone are trademarks of Apple Inc., registered in the U.S. and other countries. App Store is a service mark of Apple Inc. Android is a trademark of Google Inc.

©   since 1992