Home / Themes / Cybersecurity '26: Application, API & DevSecOps Security

Cybersecurity '26: Application, API & DevSecOps Security (open on stockthemes)

Last updated

Theme thesis · 5/5 sections · Tickers 7 with notes · 6 pending

Loading chart…
Loading…

Bull / Bear Details has the investment thesis and bull/bear points. Overview is monitoring guidance (hiring, forums, second-order trends, search keywords, Google Trends, datasets).

Bull / Bear Details

The Cybersecurity '26 theme is driven by the critical need to secure modern, distributed applications and APIs, especially amidst the explosion of AI-driven tra

Thesis

The Cybersecurity '26 theme is driven by the critical need to secure modern, distributed applications and APIs, especially amidst the explosion of AI-driven traffic and agentic workloads. Enterprises are consolidating security onto unified platforms and integrating it throughout the DevSecOps pipeline.

Bull case

  • The exponential growth of AI-driven traffic and autonomous agents is creating a massive, expanding attack surface and driving unprecedented demand for application, API, and edge security solutions. This fundamental shift from human to machine-driven internet traffic necessitates new security paradigms and infrastructure investments.

  • The industry is seeing a strong trend towards platform consolidation and the integration of security throughout the entire DevSecOps lifecycle, from code to cloud. This unified approach simplifies security management, enhances visibility, and enables proactive "shift-left" security, driving adoption of comprehensive security platforms.

  • The increasing complexity and volume of application-layer attacks, including zero-day exploits, sophisticated bots, and API abuse, are forcing organizations to invest in advanced, AI-powered Web Application and API Protection (WAAP) solutions. This continuous evolution of threats ensures sustained demand for best-in-class security.

Bear case

  • The aggressive capital expenditures required to build out AI-specific infrastructure, particularly for GPU capacity and edge compute, are leading to significant margin pressure and impacting near-term profitability for theme participants. This high investment can strain financial health and limit free cash flow.

  • While AI is a significant demand driver, the material revenue contribution and proven monetization models for AI-specific security and agentic workload platforms are still largely unproven at scale. Customer adoption of advanced AI security solutions is in early stages, leading to potential delays in revenue recognition and growth deceleration.

  • The cybersecurity market, particularly in application and API security, remains intensely competitive with a diverse landscape of vendors ranging from legacy players to hyperscalers and specialized startups. This intense competition, coupled with potential pricing pressure and the need for continuous, aggressive R&D, can limit market share gains and profitability.

LLM_Approved · Updated 2026-09-18

Overview

Hiring Trend Watchpoints

High-performing operators in this theme are aggressively hiring for specialized roles to address the evolving threat landscape and the rise of AI. Key hiring trends include:1. AI/ML Security Engineers: Strong demand for professionals capable of securing AI models, applications, and underlying infrastructure. This includes roles focused on AI Guardrails, AI Red Teaming, and securing AI inference workloads. (PANW Prisma AIRS, NET Agentic Internet, AKAM Inference Cloud, FFIV AI Guardrails).2. DevSecOps Engineers/Architects: Continued need for experts who can embed security throughout the entire software development lifecycle, from code to cloud runtime, emphasizing automation and shift-left practices. (GTLB Duo Agent Platform, PANW Prisma Cloud, FROG JFrog Security).3. API Security Specialists: Growing demand for engineers with expertise in API discovery, posture management, schema validation, abuse detection, and runtime API protection. (AKAM App & API Protector, NET API Shield, FSLY Next-Gen WAF, FFIV API security).4. Cloud Security Architects/Engineers: Roles focused on securing complex multi-cloud and hybrid-cloud environments, with an emphasis on cloud-native application security and workload protection. (PANW Prisma Cloud, FFIV Distributed Cloud, CHKP CloudGuard).5. Edge Compute/Network Security Engineers: Increased hiring for securing distributed edge infrastructure, managing high volumes of AI agent traffic, and optimizing low-latency security services. (AKAM CIS, FSLY Compute@Edge, NET Connectivity Cloud).6. Enterprise Sales & Solution Architects: Companies are expanding their go-to-market teams to target larger enterprise accounts, requiring skilled sales and pre-sales engineers who can articulate the value of integrated security platforms. (NET enterprise transformation, PANW platformization, FSLY security-led growth).Confirmation of Theme Execution: Accelerating job postings for these specific, specialized roles, particularly those mentioning "AI security," "agentic AI," "DevSecOps platform," "API runtime protection," or "edge security." Increased investment in R&D and sales teams dedicated to these areas.Warning of Deterioration: Hiring freezes or significant slowdowns in these specialized areas, a noticeable shift away from AI-specific security product development, or a reduction in enterprise sales capacity for platform solutions.

Forum Watchlist

  • Reddit — r/devsecopsHigh

    Discussions on integrating security into DevOps, tools, best practices, AI in DevSecOps

  • Reddit — r/apisecurityHigh

    Specific discussions on API vulnerabilities, protection strategies, and new tools

  • Forum — OWASP CommunityHigh

    Discussions around OWASP Top 10, API Security Top 10, application security testing, and best practices

  • Reddit — r/cloudsecurityMedium

    Cloud-native security challenges, multi-cloud strategies, and related application/API security concerns

  • Community — Cloudflare DevelopersMedium

    Discussions on Cloudflare Workers, API Shield, and edge security for developers

Industry Publications

  • Dark Reading (darkreading.com) — Comprehensive coverage of enterprise cybersecurity, including application security, API security, DevSecOps, and AI-driven threats.
  • DevOps.com (devops.com) — Focuses on DevOps practices, tools, and trends, with significant coverage of DevSecOps, shift-left security, and automation.
  • The New Stack (thenewstack.io) — Deep dives into cloud-native technologies, developer experience, and the intersection of AI, edge computing, and security.
  • Infosecurity Magazine (infosecurity-magazine.com) — Provides news, features, and analysis across various cybersecurity topics, including cloud security, AI, and application/API protection.
  • Light Reading (lightreading.com) — Covers telecommunications, edge computing, and network infrastructure, highly relevant to the delivery and security of applications at the edge.

Second Order Trends

1. The "Agentic Internet" and AI Agent Security: The internet is rapidly shifting from human-driven traffic to AI agent-driven traffic, creating a massive new attack surface and demand for real-time, context-aware security at the edge. This includes protecting against prompt injection, data poisoning, and securing autonomous AI agents. Companies are developing specialized "AI Guardrails" and "AI Red Teams" to address these threats, and new monetization models for AI scraping are emerging (e.g., Cloudflare's 'Pay Per Crawl').2. Identity Security for Non-Human Entities: The proliferation of AI agents and machine identities necessitates a new focus on identity and access management (IAM) beyond human users. Securing "machine identities" and "non-human identities" is becoming critical, as evidenced by Palo Alto Networks' acquisition of CyberArk (now Idira) to expand into this area.3. Platform Consolidation Driven by AI Complexity: Enterprises are increasingly seeking to reduce operational complexity and improve security posture by consolidating their application delivery and security tools onto unified platforms. The escalating sophistication of AI-driven threats and the need for seamless DevSecOps workflows are accelerating this trend, favoring vendors offering comprehensive, end-to-end solutions over disparate point products.4. Edge AI Inference Security: The explosive demand for low-latency AI inference at the edge is driving significant investment in distributed cloud infrastructure. Securing these edge AI workloads, including data in transit and at rest, and protecting the APIs that facilitate their communication, is emerging as a critical and high-growth area for security providers.5. AI-Powered Security Operations: AI is not only a source of new threats but also a powerful tool for defense. There's an increasing adoption of AI-powered Web Application Firewalls (WAFs), bot management solutions, and Security Operations platforms (like Palo Alto Networks' XSIAM) to detect, analyze, and respond to advanced threats more effectively and at machine speed, reducing human intervention.

Search Keywords Brand Product

  • Prisma AIRS
  • XSIAM
  • SASE
  • Idira
  • Akamai Inference Cloud
  • Akamai Workforce Protector
  • Akamai API Security
  • Fastly Next-Gen WAF
  • Fastly Compute@Edge
  • BIG-IP
  • NGINX
  • GitLab Duo Agent Platform
  • CloudGuard WAF
  • InsightAppSec
  • Web Application Scanning
  • API Shield
  • App & API Protector
  • Artifactory Security
  • application security
  • API security
  • DevSecOps
  • WAF
  • bot management
  • DDoS protection
  • runtime security
  • shift-left security
  • software supply chain security
  • cloud-native application security

Search Keywords Policy Regulatory

  • AI governance
  • cybersecurity regulation
  • EU AI Act
  • data privacy laws

Search Keywords Event Phrases

  • AI inflection point
  • CyberArk integration
  • Chronosphere acquisition
  • Fastly Investor Day
  • GitLab Act 2 strategy

Google Trend Product Category Intent

• AI security platform • DevSecOps platform • API security solutions • WAF protection • edge AI computing • serverless security • AI inference security

Google Trend Consumer Intent

• cybersecurity threats • data breach prevention

Google Trend Macro Policy Terms

• AI regulation • data protection laws

Economic Data Watch

1. Gartner/IDC — Worldwide IT Spending Forecast

Matchedgartner_it_spending_market_forecasts · access=file · map_only

Metric/field Total Enterprise IT Spending (USD Trillions)

Cadence irregular

Why it matters Indicates overall enterprise technology budgets, directly impacting spending on cybersecurity, cloud, and DevSecOps solutions.

Signal to watch increasing

Confidence: high

2. Institute for Supply Management (ISM) — Services PMI Report

Not in registryaccess=api

Metric/field Services PMI Business Activity Index (FRED: NAIBS)

Cadence monthly

Why it matters Reflects the health and expansion of the services sector, which includes many of the theme's enterprise customers, influencing their IT and security investments.

Signal to watch increasing

Confidence: high

3. US Census Bureau — Quarterly Retail E-commerce Sales

Not in registryaccess=api

Metric/field E-commerce Sales as a Percent of Total Retail Sales (ECOMNSA)

Cadence quarterly

Why it matters Growth in online commerce directly increases the attack surface for web applications and APIs, driving demand for security solutions.

Signal to watch increasing

Confidence: medium

4. US Bureau of Labor Statistics (BLS) — Job Openings and Labor Turnover Survey (JOLTS)

Not in registryaccess=api

Metric/field Job Openings: Information Technology (JTSJOLIT)

Cadence monthly

Why it matters Indicates overall demand for IT professionals, including cybersecurity talent, reflecting the health and investment levels in the broader tech sector.

Signal to watch increasing

Confidence: medium

5. Federal Reserve (FRED) — Industrial Production and Capacity Utilization

Not in registryaccess=api

Metric/field Industrial Production: Information Processing Equipment (IPG334000S)

Cadence monthly

Why it matters Reflects investment in the hardware infrastructure that underpins cloud services and enterprise IT, indirectly impacting demand for application and API security.

Signal to watch increasing

Confidence: low

Free Alt Data Watch

1. Google Trends — Search Interest

Not in registry

Metric/field Relative Search Volume Index for 'API Security' + 'DevSecOps' + 'Web Application Firewall' (normalized index)

Cadence weekly

Why it matters Indicates public and enterprise awareness and interest in the core technologies of the theme, signaling potential demand.

Signal to watch increasing

Confidence: high

2. OWASP Foundation — OWASP API Security Top 10

Not in registry

Metric/field Updates to the 'OWASP API Security Top 10' list (e.g., new/re-ranked risks)

Cadence event_driven

Why it matters Tracks the evolving threat landscape for APIs, directly influencing the need for advanced API security solutions.

Signal to watch new/higher severity risks

Confidence: high

3. GitHub Trending Repositories — Open-Source Project Activity

Not in registry

Metric/field Weekly Stars/Forks for 'DevSecOps' or 'Application Security' related open-source tools (e.g., SAST/DAST frameworks)

Cadence weekly

Why it matters Reflects developer adoption and community interest in integrating security tools into the software development lifecycle.

Signal to watch increasing

Confidence: medium

4. MITRE Corporation — Common Vulnerabilities and Exposures (CVE) Database

Not in registry

Metric/field Monthly count of new CVEs categorized under 'Web Applications' or 'APIs' (CWE-89, CWE-79, CWE-20, etc.)

Cadence monthly

Why it matters Provides insight into the volume and severity of newly discovered vulnerabilities, indicating the ongoing need for robust application and API protection.

Signal to watch increasing

Confidence: high

5. Stack Overflow — Developer Survey

Not in registry

Metric/field Percentage of developers reporting use of 'DevSecOps practices' or 'cloud-native security tools' in their workflow (survey results)

Cadence annually

Why it matters Indicates broader industry trends in developer adoption of secure coding practices and integrated security tools.

Signal to watch increasing

Confidence: medium

Paid Alt Data Watch

1. Revelio Labs/Thinknum Alternative Data — Job Postings Data

Matched (medium)engine_advertising_brand_tracking · access=file · map_only

Metric/field YoY growth in unique job postings for 'DevSecOps Engineer' + 'API Security Engineer' + 'Application Security Architect' (across major tech companies)

Cadence irregular

Why it matters Indicates enterprise investment in internal DevSecOps capabilities and the demand for specialized security talent, reflecting market growth.

Signal to watch accelerating growth

Confidence: high

2. Gartner Peer Insights/G2 Crowd — Customer Review & Sentiment Data

Matchedgartner_vendor_market_share_data · access=file · map_only

Metric/field Average customer satisfaction score (e.g., 5-star rating) for 'Web Application and API Protection (WAAP)' solutions (across top vendors)

Cadence irregular

Why it matters Provides direct feedback on product effectiveness, user experience, and competitive positioning of solutions within the theme.

Signal to watch increasing

Confidence: high

3. Similarweb/Semrush — Web Traffic & Engagement Data

Matchedsimilarweb_website_traffic_engagement · access=file · map_only

Metric/field Total unique visitors to product pages for 'API Security' or 'WAF' solutions on key vendor websites (e.g., Cloudflare, Akamai, F5, Palo Alto Networks)

Cadence irregular

Why it matters Indicates customer interest, research activity, and potential sales pipeline for leading application and API security providers.

Signal to watch increasing

Confidence: medium

4. IDC/Gartner — Market Share Reports

Matchedgartner_vendor_market_share_data · access=file · map_only

Metric/field Web Application and API Protection (WAAP) Market Share (by vendor, %)

Cadence irregular

Why it matters Tracks the competitive landscape and market leadership shifts among the key players in the application and API security space.

Signal to watch increasing share for theme constituents

Confidence: high

5. Recorded Future/Mandiant (or similar threat intelligence platform) — Cybersecurity Incident Data

Not in registry

Metric/field Monthly/Quarterly count of reported breaches or incidents specifically attributed to 'Web Application' or 'API' vulnerabilities (e.g., OWASP Top 10 related)

Cadence monthly/quarterly

Why it matters Reflects the real-world impact of application and API threats, driving urgent demand for effective security solutions.

Signal to watch increasing

Confidence: high

LLM_Approved · Updated 2026-09-18

Key Metrics3 rows
MetricCadenceWhat It SignalsUpdate Source
Global API Security Market Growth Rate (Year-over-Year %)Annually (with interim updates/forecasts)Accelerating growth indicates increasing enterprise investment in protecting APIs, which are critical attack vectors for modern applications. Deceleration may signal market saturation or shifts in security priorities.LLM_Approved
Percentage of Organizations Implementing DevSecOps PracticesAnnuallyIncreasing adoption indicates successful integration of security into the software development lifecycle, driving demand for DevSecOps platforms and tools. Stagnation suggests barriers to adoption or shifting priorities.LLM_Approved
Global AI-driven Application & API Security Spending Growth (Year-over-Year %)Annually (with interim updates/forecasts)Rapid growth signals increasing recognition and investment in AI-powered solutions to combat sophisticated, AI-driven threats and secure AI-enabled applications/APIs. Slowdown could indicate challenges in AI security adoption or efficacy.LLM_Approved

MarketsandMarkets (or similar industry research firm) · Updated 2026-09-18

Upcoming Catalysts25 rows
CatalystEstimated TimingEstimated Date StartEstimated Date EndWhy It MattersTicker Or Theme SpecificSource TypesContributing TickersMention CountBase ScoreSource WeightSpecificity WeightMacro BridgeMacro Bridge MultiplierTheme ScoreDate AggregatedManual OverrideBridge Mention CountTheme Base ScoreTheme Importance ScoreCatalyst SourceCatalyst IDTranscript DateSource Type
EU AI Act Compliance Deadlines for AI System Providers: The upcoming compliance deadline of December 2, 2026, for providers of AI systems generating synthetic content, and the general application of the majority of the AI Act rules from August 2, 2026, will drive increased demand for security solutions that ensure AI system integrity, transparency, and data protection.August 2, 2026 - December 2, 20262026-08-022026-12-02This regulatory catalyst creates new mandates for securing AI-driven applications and APIs, directly benefiting companies offering DevSecOps, application, and API security solutions to ensure compliance and mitigate risks associated with AI development and deployment.Themetheme_composerNET, AKAM, FFIV, PANW, FROG, FSLY, GTLB, CHKP, TENB, QLYS, RPD, RDWR, HO.PA130.01751.180.92Regulatory/Policy, Conference/Council1.623.07942026-09-18False12.5259444.2148Theme composer
Increased Enforcement of US SEC Cybersecurity Disclosure Rules: The ongoing enforcement of SEC rules requiring public companies to disclose material cyber incidents within four business days will heighten corporate focus on proactive cybersecurity measures, incident response, and robust application and API security to avoid reputational damage and regulatory penalties.Ongoing through 20262026-09-182026-12-31This regulatory pressure compels publicly traded companies to invest more in comprehensive cybersecurity, including application and API security, to ensure rapid detection, containment, and transparent reporting of breaches.Themetheme_composerNET, AKAM, FFIV, PANW, FROG, FSLY, GTLB, CHKP, TENB, QLYS, RPD, RDWR, HO.PA130.01641.180.92Regulatory/Policy1.352.40582026-09-18False22.5259370.179Theme composer
Acceleration of AI-Driven Traffic and Agentic Internet Adoption: The continued exponential growth of non-human AI agent traffic and the broader adoption of agentic internet models will significantly expand the attack surface, driving sustained demand for advanced application and API security, bot management, and edge compute solutions.Ongoing through 2026 and beyond2026-09-182027-12-31This fundamental shift in internet traffic patterns directly fuels the core investment thesis of the theme, creating a massive and growing market for security providers protecting applications and APIs from sophisticated AI-powered threats and managing AI workloads.Themetheme_composerNET, AKAM, FFIV, PANW, FSLY, GTLB, CHKP, RPD, RDWR90.01411.180.85Regulatory/Policy1.351.91532026-09-18False21.7084231.332Theme composer
F5 anticipates an inflection in software revenue growth, leading to a higher growth rate beginning in fiscal year 2027.beginning in fiscal year 20272026-10-012026-12-31This signals a positive shift in a key revenue segment, driven by strong consumption rates and a larger renewal base, which could improve long-term revenue and profitability outlook.TickerFFIV (ticker)FFIV_1794269f2026-04-28earnings_transcript
A 4-year, roughly $200 million Cloud Infrastructure Services contract with a major U.S. tech company, largely for Akamai Inference Cloud; revenue recognition expected to start in Q4 2026.fourth quarter of 20262026-10-012026-12-31Significant multi-year AI compute win that expands Inference Cloud adoption and provides a measurable revenue ramp starting in late 2026.TickerAKAM (ticker)AKAM_b3c6671c2026-02-19
GitLab achieving stronger ramped sales capacity through increased headcount and overhauled territory design.beginning in Q32026-09-012026-11-30This initiative is expected to have the "biggest immediate impact on FY '27" growth by improving coverage of existing customers and accelerating new logo acquisition, which is critical for reaccelerating revenue growth.TickerGTLB (ticker)GTLB_585b2c942026-03-03earnings_transcript
Deconsolidation of JiHu, GitLab's joint venture in China.cannot predict the likelihood or timing of when that may occur.2026-06-042028-03-03Deconsolidation would remove JiHu's expenses (forecasted at $15 million for FY '27) from GitLab's financials, potentially improving operating margins and simplifying the company's structure.TickerGTLB (ticker)GTLB_e06c9d4b2026-03-03earnings_transcript
The benefits from FY '26 quota-carrying headcount investments and continued capacity growth are expected to materialize, leading to increased gross bookings.most of the benefit to land in the second half of the year2026-07-012026-12-31Increased sales capacity is crucial for driving first-order growth and expanding market share, directly impacting future bookings and revenue acceleration.TickerGTLB (ticker)GTLB_213cf84e2026-06-02earnings_transcript
GitLab expects to reinvest the vast majority of savings from its Act 2 restructuring into team members, architectural bets (R&D resources), and internal AI tooling.over the following 3 quarters2026-08-012027-04-30These investments are critical for accelerating the Act 2 strategy, delivering on architectural bets, and driving long-term durable growth and operating leverage, but also carry execution risk.TickerGTLB (ticker)GTLB_801f0e392026-06-02earnings_transcript
Zillow Group is expected to fully deploy GitLab Duo Agent platform across hundreds of developers, with the active user base projected to grow nearly 20x upon full deployment.later this year2026-07-012026-12-31This large-scale deployment by a top 10 U.S. bank serves as a significant proof point for DAP's effectiveness and scalability, potentially influencing other enterprise customers and driving future adoption and revenue.TickerGTLB (ticker)GTLB_0b6696292026-06-02earnings_transcript
GitLab expects its non-GAAP operating income to reach its lowest point in Q3 FY27 due to the timing of investments following the Act 2 restructuring.expect profitability to trough in Q3 due to timing of investments post restructuring2026-08-012026-10-31This indicates a temporary dip in profitability as the company reallocates resources, which could impact short-term investor sentiment but is framed as necessary for long-term growth.TickerGTLB (ticker)GTLB_131c48d92026-06-02earnings_transcript
GitLab's goal to deconsolidate JiHu, its joint venture in China.though we cannot predict the likelihood or timing of when that may occur.2026-06-042027-12-31Deconsolidation could simplify GitLab's operational structure and financial reporting, potentially impacting its international strategy and investor perception of its global footprint. The uncertainty around timing makes it a potential overhang.TickerGTLB (ticker)GTLB_d337a21d2026-06-02earnings_transcript
The tail end of a large LLM customer's migration to Chronosphere from an incumbent vendor will be completed.through Q1 of fiscal 272026-09-012026-10-31This event will conclude a significant migration that benefited Q4 FY26 ARR and impacted Q1 FY27 seasonality, providing clearer visibility into Chronosphere's organic growth moving forward.TickerPANW (ticker)PANW_e63f94a02026-09-01earnings_transcript
Launch and customer adoption of Palo Alto Networks' 'next-generation trust subscription' and quantum security capabilities, leveraging Venafi and other integrations, to prepare customers for the post-quantum era.coming architectural uplift and shift, opportunity in coming years2026-07-012029-02-17This addresses a critical long-term security challenge and represents a new product ramp and market opportunity. Successful execution could establish PANW as a leader in post-quantum security, driving new revenue streams and competitive differentiation.TickerPANW (ticker)PANW_0f12077f2026-02-17earnings_transcript
Palo Alto Networks surpassing 4,000 total platformized customers.by fiscal 20302026-06-022030-07-31This long-term strategic goal is a primary driver for achieving the $20 billion NGS ARR target, indicating deep customer architectural commitments and sustained revenue growth.TickerPANW (ticker)PANW_938fece82026-06-02earnings_transcript
Completion of the migration of CyberArk's critical back-end systems to common Palo Alto Networks systems.next 4 months. We think we'll get there before the end of this calendar year.2026-06-022026-12-31Successful integration of back-end systems is crucial for realizing synergy targets and improving profitability, reinforcing confidence in the M&A strategy.TickerPANW (ticker)PANW_812901a62026-06-02earnings_transcript
The scaling of enterprise AI adoption and associated traffic volumes translating into substantial revenue generation from PANW's AI security products like Prisma AIRS, AgentiX, and future Koi integrations.early days, yet to be built, a bit patient2026-07-012028-02-17This represents a major future growth driver. Faster-than-expected adoption and monetization could significantly boost PANW's long-term revenue and valuation, while delays or underperformance could negatively impact growth prospects.TickerPANW (ticker)PANW_c161f4902026-02-17earnings_transcript
Successful integration of CyberArk and Chronosphere acquisitions, including aligning go-to-market engines, account planning, sales incentives, and product innovation roadmaps.second half of the year2026-07-012026-12-31Crucial for realizing strategic value, synergies, and financial benefits (ARR, revenue, profitability) from these significant acquisitions. Failure could lead to disruption, missed targets, and negative investor sentiment.TickerPANW (ticker)PANW_47914d062026-02-17earnings_transcript
Enterprises moving beyond AI experimentation to integrate foundational models into real workflows, leading to a demand for more consistent and consolidated security stacks.ongoing trend2026-02-172027-02-17This trend directly supports Palo Alto Networks' platformization strategy, potentially accelerating sales of integrated security solutions (SASE, XSIAM, AI security) and improving net retention rates, impacting revenue growth and market share.TickerPANW (ticker)PANW_614040652026-02-17earnings_transcript
Q3/Q4 2026 Earnings Season for Cybersecurity Companies: A concentrated period of earnings reports from late October to mid-November 2026 will provide critical insights into the financial health, growth trajectories, and forward-looking guidance of key players in the application, API, and DevSecOps security space, particularly regarding the impact of AI-driven demand and enterprise security spending.Late October 2026 - Mid-November 20262026-10-222026-11-18These reports will offer a comprehensive view of market trends, customer adoption of new security solutions, and the competitive landscape, influencing investor sentiment and the overall theme's outlook.Themetheme_composerNET, AKAM, FFIV, PANW, FSLY, GTLB, HO.PA70.01631.181.05Regulatory/Policy, Conference/Council1.623.282026-09-18False21.3175264.4369Theme composer
Major Cybersecurity Industry Conferences: Key industry events such as ISC2's Security Congress in October 2026 and the RSA Conference in April 2027 will showcase new product innovations, emerging threat landscapes, and strategic partnerships in application, API, and DevSecOps security, influencing vendor strategies and customer adoption.October 2026 - April 20272026-10-242027-04-08These conferences are crucial for setting industry trends, highlighting best practices in DevSecOps and API security, and fostering competitive differentiation among theme constituents through new product announcements and thought leadership.Themetheme_composerNET, AKAM, FFIV, PANW, FROG, FSLY, GTLB, CHKP, TENB, QLYS, RPD, RDWR, HO.PA130.01751.180.92Regulatory/Policy, Conference/Council1.623.07942026-09-18False22.5259444.2148Theme composer
Effective date for full compliance with transparency obligations under the EU AI Act for artificially generated content.December 2, 20262026-12-022026-12-02This regulatory action will drive demand for tools that ensure machine-readable marking and compliance for AI-generated content, impacting Cloudflare's generative AI offerings and those serving EU customers, potentially increasing adoption of its security and developer platforms.ThemeNET (ticker)NET_b838626c2026-08-06earnings_transcript
End of software support for F5's iSeries appliances, which is expected to drive acceleration of customer refresh activity to rSeries products.end of software support date in our Q2 of '272027-01-012027-03-31This milestone is anticipated to accelerate the iSeries to rSeries refresh cycle, significantly boosting F5's hardware revenue and reinforcing its 'refresh plus' growth dynamic.TickerFFIV (ticker)FFIV_012e8c342026-07-27earnings_transcript
Stock-based compensation (SBC) as a percentage of revenue returning to pre-acquisition levels.in approximately 12 to 18 months.2027-06-022027-12-02A reduction in SBC as a percentage of revenue would positively impact GAAP profitability and could improve investor sentiment regarding the dilutive effects of recent acquisitions.TickerPANW (ticker)PANW_ce29122a2026-06-02earnings_transcript
CyberArk's profitability profile converging with Palo Alto Networks' overall profitability.within the next 12 to 18 months.2027-06-022027-12-02This milestone is key to achieving Palo Alto Networks' target of a 40% free cash flow margin by fiscal 2028, signaling successful M&A integration and improved financial efficiency.TickerPANW (ticker)PANW_029942412026-06-02earnings_transcript

LLM_Approved · Updated 2026-09-18

NotesTable

New Initiative

DateTypeCommentDetailSentimentTickers
2026-09-18Theme UpdateThe theme is significantly bolstered by the accelerating "Agentic AI" era, which expands the attack surface and drives demand for advanced application, API, and DevSecOps security.

New Initiative

PositivePANW, NET, AKAM, FSLY, FFIV, GTLB, HO.PA

LLM_Approved · Updated 2026-09-18

News

4 stories tagged to this theme — Narrative Radar (NewsAPI.ai) and TimBot picks.

September 2026

August 2026

Constituents

  • FFIVT2
    — F5, Inc.
  • HO.PAT2
    — Thales S.A.
  • AKAMT3
    — Akamai Technologies, Inc.
  • FSLYT3
    — Fastly, Inc.
  • GTLBT3
    — GitLab Inc.
  • NETT3
    — Cloudflare, Inc.
  • PANWT3
    — Palo Alto Networks, Inc.
  • CHKPT3
    · no notes yet
  • FROGT3
    · no notes yet
  • QLYST3
    · no notes yet
  • RDWRT3
    · no notes yet
  • RPDT3
    · no notes yet
  • TENBT3
    · no notes yet