The re-rating already happened

A popular narrative holds that cybersecurity stocks are the one software corner that missed 2025-26's AI-driven rally and are only now stirring. The price record says otherwise. Over the trailing twelve months, Fortinet, which makes network firewalls, gained 66%; Palo Alto Networks, the largest cybersecurity software platform by revenue, gained 92%; Okta, which sells identity and login-security software, gained 49%; and Cloudflare, which operates a content-delivery and "zero trust" internet-security network, gained 39%. Five of the group's seven members — those four plus Rubrik, a recently public cloud data-backup and ransomware-recovery vendor — currently sit in confirmed uptrends, with 50-day moving averages holding above 200-day averages. Only CrowdStrike, the cloud-based endpoint-security vendor, and Zscaler, which sells cloud-delivered internet-security gateways, have rolled over in the past several weeks. This is a cohort that already re-rated hard, not one waiting to start.

What's driving it, name by name

The growth behind these moves is mostly genuine. Palo Alto Networks' next-generation-security annual recurring revenue (ARR) — its cloud and AI-security subscription line — rose 60% year over year to $8.1 billion in its fiscal third quarter, and total revenue grew 31%, according to its own earnings release. That figure includes $1.6 billion pulled in from its recently closed $25 billion acquisition of identity-security vendor CyberArk, a deal that added roughly 13.5% share dilution and pushed net debt to about 2x EBITDA from near zero, prompting KeyBanc to cut the stock to Sector Weight on leverage concerns even as the growth story holds. Fortinet's product revenue jumped 52% and billings rose 33% in its most recent quarter, evidence of a genuine hardware refresh cycle as customers upgrade firewalls, per its Q2 2026 results. CrowdStrike posted a record $256 million in net-new ARR, up 32%, as customer-concession packages tied to its 2024 global-outage incident finally rolled off, per its Q1 FY2027 release. Rubrik grew subscription ARR 34% to $1.46 billion with net revenue retention near 120%, while stock-based compensation fell from $914 million to $329 million and free cash flow turned positive, per its fourth-quarter results — the cleanest confirmation in the group that price and business are moving together.

Okta is the exception that contradicts the group's pattern: growth decelerated from roughly 13% to 9-10% year over year even as the stock climbed 49-79% over recent months, and net revenue retention has been flat near 107%. The stock's rise appears to be pricing an AI-driven identity-security re-acceleration that hasn't shown up in the numbers yet. Cloudflare's 30-34% revenue growth is real and its "zero trust" security bundle is a plausible AI-traffic beneficiary — more autonomous software agents means more network traffic to secure — but at roughly 40 times sales, it now carries the richest multiple in the group. Zscaler is a different story altogether: its 31% single-day crash in May came after management cut fiscal 2027 growth guidance to 16-17% from a roughly 20% Street expectation and disclosed sales-leadership turnover, a real fundamental reset rather than tape noise, as reported by CNBC. Its recent stabilization looks like a bounce off a justified bottom, not a fresh re-rating.

Valuation: from cheap to stretched in three months

Multiples have followed the price moves. Palo Alto Networks' price-to-sales ratio rose from 14.8x to 24.5x since May; Fortinet's trailing price-to-earnings jumped from 35x to 59x; CrowdStrike remains the group's most expensive on a price-to-sales basis at roughly 36x, with no positive GAAP earnings yet to compute a P/E. Against that, Rubrik trades at 10.3x sales on 35-39% growth, and Zscaler — post-crash — trades at 7.7x sales, the cheapest in the group. A long-flagged structural risk sits underneath all seven: Microsoft has bundled its Defender, Entra and Purview security tools into a unified detection platform explicitly marketed to reduce reliance on standalone point solutions, per Microsoft's own security-cloud materials, though no measurable seat or price losses at any of these seven vendors have been reported to date.

The setup

Where it stands — Five of seven cybersecurity names sit in confirmed uptrends after 12-month gains of 39%-92%, with fundamentals mostly supporting the moves except at Okta. Would confirm — Okta's next-reported quarter shows revenue growth reaccelerating above 10% and net revenue retention rising above 107%. Would invalidate — Palo Alto Networks' next-generation-security ARR growth decelerates below 50% or net debt/EBITDA exceeds 2.0x. Watch next — Palo Alto Networks and CrowdStrike both report fiscal quarters in late August 2026. Valuation — Rubrik trades at 10.3x forward sales against 35-39% growth, the only cohort member below its recent-history multiple for its growth rate.