Home / Themes / Data Owners '25: Cybersecurity & Threat Intelligence
Data Owners '25: Cybersecurity & Threat Intelligence (view performance)
Last updated
Theme thesis · 5/5 sections · Tickers 11 with notes · 9 pending
Bull / Bear Details has the investment thesis and bull/bear points. Overview is monitoring guidance (hiring, forums, second-order trends, search keywords, Google Trends, datasets).
Bull / Bear DetailsData Owners '25: Cybersecurity & Threat Intelligence is compelling as AI-driven threats accelerate demand for advanced defense. The theme benefits from platform
Thesis
Data Owners '25: Cybersecurity & Threat Intelligence is compelling as AI-driven threats accelerate demand for advanced defense. The theme benefits from platform consolidation and critical identity/data security needs in the agentic AI era. Risks include macro slowdowns, intense competition, and rising infrastructure costs, but the existential threat of cyberattacks makes the bull case more potent.
Bull case
The proliferation of AI agents and AI-powered attacks is creating an unprecedented expansion of the attack surface, driving urgent demand for advanced cybersecurity solutions. Companies owning vast security data are uniquely positioned to detect and respond to these machine-speed threats.
Enterprises are increasingly moving towards comprehensive, integrated cybersecurity platforms and Zero Trust architectures to simplify operations, improve efficacy, and reduce vendor sprawl. This trend favors data owners with broad telemetry and AI-driven analytics across endpoint, cloud, network, and identity.
The rise of non-human identities (AI agents, machine identities) is making identity governance and data security posture management mission-critical. Solutions that provide visibility, control, and resilience for these new identities and sensitive data are seeing significant demand and market expansion.
Bear case
Persistent macroeconomic uncertainties and geopolitical tensions are leading to increased budget scrutiny and extended sales cycles for cybersecurity investments. This can temper overall enterprise spending, impacting new logo acquisition and expansion rates across the theme.
The cybersecurity market remains highly competitive, with large incumbents (e.g., Microsoft) bundling security offerings and numerous point solutions vying for market share. Rapid integration of diverse AI-driven capabilities and acquisitions into comprehensive platforms presents significant execution challenges and potential for pricing pressure.
The build-out of AI infrastructure, including increased demand for GPUs, memory, and storage, is driving up CapEx and operational costs for security data owners. Furthermore, while AI-driven solutions are in high demand, the long-term monetization models and widespread adoption rates for nascent AI governance and agentic security offerings remain somewhat uncertain, potentially impacting future profitability.
Overview
Hiring Trend Watchpoints
High-performing operators in Cybersecurity & Threat Intelligence are aggressively hiring for specialized roles driven by the 'Agentic AI' era and platform consolidation. Key roles include AI Security Engineers, AI Governance Specialists, Prompt Security Engineers, Cloud Security Architects (especially for SASE and Zero Trust), Identity Resilience Engineers, and DevSecOps specialists. There's also strong demand for full-stack security architects and integration specialists to support platformization efforts (e.g., PANW, CRWD, DDOG). Sales and go-to-market roles, particularly for enterprise accounts and GSI partnerships, remain critical for converting the expanding pipeline. Watch for increased job postings in these specialized AI/Cloud/Identity security domains as a confirmation of theme strengthening. A decline in these roles or a significant increase in 'cost optimization' positions without corresponding strategic hiring would signal deterioration. An inflection would be a rapid shift in AI roles towards 'AI agent security' or 'prompt security' specialists, indicating market maturity in securing autonomous systems.
Forum Watchlist
- Reddit — r/cybersecurityHigh
Emerging threats, industry sentiment, new tools
- Reddit — r/infosecHigh
Strategic discussions, policy implications, advanced attack vectors
- Forum — Dark Reading CommunityMedium
Enterprise security challenges, vendor comparisons, CISO perspectives
- Reddit — r/cloudsecurityHigh
Cloud-native security trends, SASE adoption, specific vendor discussions (ZS, NET, MSFT)
- Reddit — r/identitymanagementHigh
Identity governance, AI agent identities, Okta/SailPoint discussions
- Community — SANS Institute ForumsMedium
Technical deep dives, incident response, threat intelligence sharing
- Reddit — r/crowdstrikeMedium
Product updates, user experiences, Falcon platform discussions
- Reddit — r/paloaltonetworksMedium
Platformization, Prisma/Cortex adoption, competitive landscape
Second Order Trends
The most prominent second-order trend is the rapid evolution of 'Agentic AI Security,' moving beyond securing AI models to governing and protecting autonomous AI agents and non-human identities. This is creating a new 'identity fabric' for AI (SailPoint, Okta) and demanding 'preemptive recovery' (Rubrik) against machine-speed attacks. Another trend is the intensified debate between comprehensive 'platformization' (Palo Alto Networks, CrowdStrike) and specialized 'best-of-breed' solutions for niche AI security challenges, which could lead to a fragmented market or new integration opportunities. Hardware cost inflation (memory, GPUs) is emerging as a significant factor for cloud-native security providers (Zscaler, Akamai), potentially impacting their CapEx and profitability, and favoring those with more efficient architectures (Cloudflare). Finally, the rise of AI-native security operations (SentinelOne's Purple AI, Palo Alto Networks' XSIAM) suggests a future where security teams are augmented by, or even replaced by, autonomous AI systems for threat hunting and incident response, shifting human roles towards oversight and strategic governance.
Search Keywords Brand Product
- AI security
- agentic security
- AI agent governance
- cyber resilience
- data security posture management
- identity fabric
- prompt security
- XDR
- SASE
- zero trust everywhere
- cloud workload protection
- API security
- machine identity management
- AI Red Teaming
Search Keywords Policy Regulatory
- EU AI Act cybersecurity
- NIST AI Risk Management Framework security
- CISA AI security guidelines
- data sovereignty cyber
- critical infrastructure AI protection
Search Keywords Event Phrases
- AI-powered cyberattacks
- Mythos inflection point security
- AI security budget allocation
- enterprise AI adoption security challenges
- GenAI security risks
- cyber resilience investment trends
Google Trend Product Category Intent
• best AI security platform
• agentic identity management solutions
• cyber resilience software
• zero trust SASE comparison
• cloud security posture management tools
• API security gateway
• AI agent governance tools
• XDR endpoint security
Google Trend Consumer Intent
• how to secure AI systems
• AI cyber threat landscape
• identity theft protection AI
• AI privacy concerns cybersecurity
• data breach recovery services
Google Trend Macro Policy Terms
• AI regulation cybersecurity impact
• national AI security strategy
• critical infrastructure cyber defense AI
Top datasets to track
1. AI Security Job Postings Type: Alternative Data · Provider: Thinknum Cadence: Weekly/Monthly Why it matters: Tracks demand for specialized AI security talent, indicating enterprise investment and the maturity of the AI security market. Suggested query: AI Security Engineer, AI Governance Specialist, Agentic AI Security, Prompt Security Engineer at Fortune 500 companies Confidence: High
2. AI Security Market Spending Forecasts Type: Industry Research · Provider: Gartner/IDC Cadence: Quarterly/Annually Why it matters: Provides top-down view of enterprise budget allocation towards AI security, validating the theme's growth trajectory. Suggested query: Gartner AI security market forecast, IDC AI cybersecurity spending Confidence: High
3. Theme Constituent Net New ARR & AI Product Contribution Type: Company Financials · Provider: Public Company Filings (SEC, Investor Relations) Cadence: Quarterly Why it matters: Direct measure of individual company performance and the financial impact of AI-driven security offerings (e.g., CRWD's AIDR, SAIL's Agentic Fabric, S's AI Security ARR). Suggested query: CRWD Net New ARR, SAIL Agentic Fabric ARR, S AI Security ARR growth Confidence: High
4. DRAM and NAND Flash Pricing Indices Type: Economic/Commodity Data · Provider: TrendForce, DRAMeXchange Cadence: Weekly/Monthly Why it matters: Directly impacts CapEx and gross margins for hardware-dependent cloud security providers (e.g., ZS, AKAM), signaling potential profitability pressures or relief. Suggested query: DRAM spot price index, NAND flash contract price Confidence: Medium
5. Cybersecurity Vulnerability & Threat Bulletins Type: Public Security Intelligence · Provider: CISA (Cybersecurity and Infrastructure Security Agency) Cadence: Weekly Why it matters: Provides real-time insights into emerging threats, especially AI-related vulnerabilities, validating the ongoing need for advanced cybersecurity solutions. Suggested query: CISA weekly bulletin AI threats, US-CERT vulnerability report Confidence: High
Key Metrics
| Metric | Cadence | What It Signals | Update Source |
|---|---|---|---|
| Cloud-Native Security Platform Annual Recurring Revenue (ARR) Growth | Quarterly | Sustained high growth indicates strong enterprise adoption of integrated, data-driven cloud security platforms, validating the theme's core thesis of consolidating security data. | LLM_Approved |
| AI-Driven Cybersecurity Market Growth | Annually (with quarterly updates on company-specific AI security ARR) | Rapid acceleration signals the theme's success in securing the expanding AI attack surface and monetizing AI-driven threats/opportunities, indicating strong demand for advanced threat intelligence. | LLM_Approved |
| Non-Human Identity Governance Adoption Rate | Annually (with company-specific updates quarterly) | Increasing adoption indicates enterprises are addressing a critical, emerging security risk from AI agents and machine identities, driving demand for specialized identity data owners. | LLM_Approved |
Upcoming Catalysts
| Catalyst | Estimated Timing | Estimated Date Start | Estimated Date End | Why It Matters | Ticker Or Theme Specific | Source Types | Contributing Tickers | Mention Count | Base Score | Source Weight | Specificity Weight | Macro Bridge | Macro Bridge Multiplier | Theme Score | Date Aggregated | Manual Override | Bridge Mention Count | Theme Base Score | Theme Importance Score | Catalyst Source | Catalyst ID | Transcript Date | Source Type |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Continued Acceleration of AI-driven Cyber Attacks and Defense Adoption | Ongoing, with updates during Q2/Q4 earnings calls (July - September 2026) | 2026-07-01 | 2026-09-30 | The increasing sophistication of AI-driven cyber attacks, coupled with the proliferation of AI agents and non-human identities, continues to drive urgent demand for advanced cybersecurity and threat intelligence solutions. Updates on specific AI security product adoption and customer wins (e.g., SailPoint Agentic Fabric, CrowdStrike AIDR, Palo Alto Networks Prisma AIRS, Okta for AI agents, SentinelOne Purple AI) will validate the theme's investment case and drive growth across multiple constituents. | Theme | theme_composer | CRWD, PANW, MSFT, ZS, NET, S, OKTA, SAIL, RBRK, DDOG, AKAM, RPD, OSPN, RDWR, VRNS | 15 | 31.6322 | 1.18 | 1.0 | Regulatory/Policy | 1.35 | 5039.0159 | 2026-06-25 | False | 2 | 3.8354 | 610.9867 | Theme composer | |||
| Trends in Memory Chip Pricing and Supply Chain for Hardware-Dependent Solutions | Ongoing, with updates during Q2/Q4 earnings calls (July - September 2026) | 2026-07-01 | 2026-09-30 | Rising memory chip prices, driven by strong demand from the AI sector, directly impact the capital expenditures and gross margins of companies that rely on hardware for their security solutions or cloud infrastructure. Continued inflation could pressure profitability, while stabilization or decline could provide a tailwind for companies like Zscaler and Akamai, who have already noted increased CapEx due to these costs. | Theme | theme_composer | ZS, AKAM, FTNT, CHKP | 4 | 11.3447 | 1.18 | 1.0 | Regulatory/Policy, Economic | 1.688 | 2259.0212 | 2026-06-25 | False | 1 | 0.6378 | 126.998 | Theme composer | |||
| Broad market adoption of AI technologies by enterprises, leading to increased demand for identity security solutions. | FY '27 will be the year of AI adoption | 2026-02-01 | 2027-01-31 | This macro trend is expected to drive durable growth for SailPoint by increasing demand for securing non-human identities and expanding their customer base, directly impacting their FY27 performance. | Theme | SAIL (ticker) | SAIL_84652b6a | 2026-03-18 | earnings_transcript | ||||||||||||||
| Acceleration of existing SailPoint customers' shift to SaaS and adoption of AI identity solutions (AIS, MIS, DAS). | FY '27 | 2026-02-01 | 2027-01-31 | This strategy aims to deepen SailPoint's footprint within its customer base, driving SaaS ARR growth and leveraging flexible pricing models, which is a key component of their FY27 growth plan. | Ticker | SAIL (ticker) | SAIL_c2ec1062 | 2026-03-18 | earnings_transcript | ||||||||||||||
| Increased acquisition of new enterprise customers seeking foundational security in the AI era. | FY '27 | 2026-02-01 | 2027-01-31 | This is expected to expand SailPoint's market share and contribute to new logo ARR, forming a critical part of their durable growth engine for FY27. | Ticker | SAIL (ticker) | SAIL_d290eaf7 | 2026-03-18 | earnings_transcript | ||||||||||||||
| SailPoint achieving 90% to 95% of net new ARR from its SaaS cloud platform. | FY '27 | 2026-02-01 | 2027-01-31 | This is a key assumption in SailPoint's FY27 financial guidance, indicating successful execution of their SaaS-first strategy and strong customer adoption of cloud offerings, though it may temporarily impact reported revenue and operating margin. | Ticker | SAIL (ticker) | SAIL_d9de4233 | 2026-03-18 | earnings_transcript | ||||||||||||||
| Migration of existing perpetual and term license customers (representing approximately $350 million in ARR) to SailPoint's Identity Security Cloud. | FY '27 and beyond | 2026-02-01 | 2029-01-31 | This represents a significant and durable growth tailwind with a potential 2 to 3 times ARR uplift upon migration, contributing substantially to long-term ARR expansion. | Ticker | SAIL (ticker) | SAIL_00a0ee05 | 2026-03-18 | earnings_transcript | ||||||||||||||
| An inflection point in the market's adoption and SailPoint's monetization of securing non-human identities (AI agents). | build over time | 2026-02-01 | 2029-01-31 | Management views this as the 'single greatest market expansion driver.' An earlier or stronger inflection point than currently factored into guidance could lead to significant outperformance and re-rating of the stock. | Ticker | SAIL (ticker) | SAIL_cbead9dd | 2026-03-18 | earnings_transcript | ||||||||||||||
| Market validation of SailPoint's AI identity solutions and their ability to address customer needs for securing Agentic environments. | fiscal '27 this calendar '26 | 2026-02-01 | 2026-12-31 | Successful delivery and market proof will solidify SailPoint's competitive position as a leader in securing AI-powered enterprises, driving adoption of their emerging products and potentially leading to outperformance of guidance. | Ticker | SAIL (ticker) | SAIL_17f79095 | 2026-03-18 | earnings_transcript | ||||||||||||||
| Increased monetization and revenue contribution from SailPoint's Agentic Fabric and new AI-related offerings, leading to a more significant impact on financial results. | towards the latter half of the year | 2026-07-01 | 2026-12-31 | A significant increase in AI-related revenue could materially impact SailPoint's top-line growth, potentially leading to raised guidance and positive investor sentiment, validating their AI strategy. | Ticker | SAIL (ticker) | SAIL_5b8d747b | 2026-06-09 | earnings_transcript | ||||||||||||||
| Intensification of regulatory pressures related to AI risk frameworks (Treasury, NIST) and legal mandates (EU AI Act). | as these regulatory pressures intensify | 2026-06-11 | 2027-06-11 | Increased regulatory scrutiny on AI governance and non-human identities could drive greater demand for SailPoint's identity security solutions, strengthening its competitive advantage and potentially accelerating adoption. | Theme | SAIL (ticker) | SAIL_619b83f9 | 2026-06-09 | earnings_transcript | ||||||||||||||
| Progress and acceleration of on-premise to SaaS migrations, specifically achieving or exceeding the 10% migration target for the $350 million on-prem ARR base in FY27. | for fiscal year 2027 | 2026-06-11 | 2027-01-31 | Successful and accelerated SaaS migrations, especially with the 2-3x ARR uplift, would significantly boost SailPoint's SaaS ARR, revenue, and profitability, validating its cloud-first strategy and driving long-term value. | Ticker | SAIL (ticker) | SAIL_3990b418 | 2026-06-09 | earnings_transcript | ||||||||||||||
| Quarterly volatility in commercial bookings and remaining performance obligation (RPO) growth rates due to the significant multi-year OpenAI contract signed in Q2 FY26. | going forward | 2026-02-01 | 2028-12-31 | This volatility could make it challenging for investors to accurately forecast Microsoft's future revenue growth and could impact investor sentiment regarding the stability of its commercial pipeline. | Ticker | MSFT (ticker) | MSFT_8acfa048 | 2026-01-28 | earnings_transcript | ||||||||||||||
| The timing and pace of new Azure infrastructure capacity (data centers, GPUs, CPUs) coming online to meet strong demand, which will cause quarterly variability in Azure's year-on-year growth rates. | quarterly variability in year-on-year growth rates depending on timing of capacity delivery. And when it comes online | 2026-02-01 | 2028-12-31 | Delays or faster-than-expected deployment of capacity will directly impact Microsoft's ability to monetize strong Azure demand, affecting revenue growth rates and competitive positioning in the cloud and AI infrastructure market. | Ticker | MSFT (ticker) | MSFT_2fef4b0d | 2026-01-28 | earnings_transcript | ||||||||||||||
| Increased memory pricing and its potential impact on Windows OEM and on-premises server transactional purchasing, capital expenditures, and Microsoft Cloud gross margins. | Q3...rest of the fiscal year and beyond | 2026-02-01 | 2027-01-31 | Rising memory prices could negatively affect revenue in the More Personal Computing and Intelligent Cloud segments, increase CapEx, and gradually pressure Microsoft Cloud gross margins, impacting overall profitability. | Theme | MSFT (ticker) | MSFT_504cbf3e | 2026-01-28 | earnings_transcript | ||||||||||||||
| Okta's Q2 FY'27 financial results, including total revenue growth, current RPO growth, non-GAAP operating margin, and free cash flow margin, against provided guidance. | For the second quarter of FY '27 | 2026-05-01 | 2026-07-31 | Meeting or exceeding guidance would positively impact investor sentiment and valuation, while missing could have a negative impact on the stock. | Ticker | OKTA (ticker) | OKTA_c742658d | 2026-05-28 | earnings_transcript | ||||||||||||||
| Okta's full-year FY'27 financial results, including total revenue growth, non-GAAP operating margin, and free cash flow margin, against provided guidance. | For the full year FY '27 | 2026-02-01 | 2027-01-31 | Performance relative to full-year guidance will significantly influence investor perception of the company's growth trajectory and profitability, impacting valuation. | Ticker | OKTA (ticker) | OKTA_8f3fc8a9 | 2026-05-28 | earnings_transcript | ||||||||||||||
| The impact of Okta's strategic decision to shift more professional services business to partners, resulting in lower professional services revenue, begins to materialize. | expected to start to materialize in Q2 | 2026-05-01 | 2026-07-31 | This strategic shift could impact reported revenue growth but is intended to improve partner-sourced bookings and overall scalability. The actual financial impact and success of partner enablement are key uncertainties. | Ticker | OKTA (ticker) | OKTA_77600275 | 2026-05-28 | earnings_transcript | ||||||||||||||
| Realization of a ~1 point impact on FY'27 free cash flow margin due to lower interest income from the stock repurchase program and cash settlement of convertible notes. | FY '27 free cash flow margin guidance includes about a 1 point impact | 2026-02-01 | 2027-01-31 | This event directly affects the company's profitability metrics and capital allocation efficiency, influencing investor sentiment on financial management. | Ticker | OKTA (ticker) | OKTA_dfecb446 | 2026-05-28 | earnings_transcript | ||||||||||||||
| Continued improvement in sales force productivity and retention, leading to stronger go-to-market execution and increased bookings. | continue to see increased retention and increased productivity | 2026-05-01 | 2027-01-31 | Enhanced sales efficiency directly impacts bookings, revenue growth, and overall profitability, signaling effective go-to-market strategy and potentially leading to upside in future guidance. | Ticker | OKTA (ticker) | OKTA_3d23c33a | 2026-05-28 | earnings_transcript | ||||||||||||||
| Successful integration of CyberArk and Chronosphere acquisitions, including aligning go-to-market engines, account planning, sales incentives, and product innovation roadmaps. | second half of the year | 2026-07-01 | 2026-12-31 | Crucial for realizing strategic value, synergies, and financial benefits (ARR, revenue, profitability) from these significant acquisitions. Failure could lead to disruption, missed targets, and negative investor sentiment. | Ticker | PANW (ticker) | PANW_47914d06 | 2026-02-17 | earnings_transcript | ||||||||||||||
| Completion of the acquisition of Koi, a pioneer in securing the agentic endpoint. | intent to acquire | 2026-02-17 | 2026-09-30 | This acquisition will enhance PANW's endpoint capabilities within XDR 2.0 and integrate into its universal AI security platform, extending security and governance to autonomous agents. It is critical for addressing the evolving AI attack surface and maintaining competitive positioning. | Ticker | PANW (ticker) | PANW_d283cd56 | 2026-02-17 | earnings_transcript | ||||||||||||||
| Enterprises moving beyond AI experimentation to integrate foundational models into real workflows, leading to a demand for more consistent and consolidated security stacks. | ongoing trend | 2026-02-17 | 2027-02-17 | This trend directly supports Palo Alto Networks' platformization strategy, potentially accelerating sales of integrated security solutions (SASE, XSIAM, AI security) and improving net retention rates, impacting revenue growth and market share. | Ticker | PANW (ticker) | PANW_61404065 | 2026-02-17 | earnings_transcript | ||||||||||||||
| The scaling of enterprise AI adoption and associated traffic volumes translating into substantial revenue generation from PANW's AI security products like Prisma AIRS, AgentiX, and future Koi integrations. | early days, yet to be built, a bit patient | 2026-07-01 | 2028-02-17 | This represents a major future growth driver. Faster-than-expected adoption and monetization could significantly boost PANW's long-term revenue and valuation, while delays or underperformance could negatively impact growth prospects. | Ticker | PANW (ticker) | PANW_c161f490 | 2026-02-17 | earnings_transcript | ||||||||||||||
| Launch and customer adoption of Palo Alto Networks' 'next-generation trust subscription' and quantum security capabilities, leveraging Venafi and other integrations, to prepare customers for the post-quantum era. | coming architectural uplift and shift, opportunity in coming years | 2026-07-01 | 2029-02-17 | This addresses a critical long-term security challenge and represents a new product ramp and market opportunity. Successful execution could establish PANW as a leader in post-quantum security, driving new revenue streams and competitive differentiation. | Ticker | PANW (ticker) | PANW_0f12077f | 2026-02-17 | earnings_transcript | ||||||||||||||
| Completion of the migration of most Prisma customers to Cortex Cloud. | most Prisma customers will be migrated to Cortex Cloud by the end of the fiscal year. | 2026-06-02 | 2026-07-31 | Successful migration is crucial for product portfolio rationalization and customer experience, potentially impacting customer retention and future cloud security revenue. | Ticker | PANW (ticker) | PANW_dbe22c5a | 2026-06-02 | earnings_transcript | ||||||||||||||
| A leading frontier AI lab customer completing its migration to Chronosphere. | expect that to continue to grow again next quarter as they complete their migration to Chronosphere. | 2026-05-01 | 2026-07-31 | Successful completion of this migration would validate Chronosphere's capabilities at AI scale and contribute to its ARR, demonstrating strong traction in the observability market. | Ticker | PANW (ticker) | PANW_06f2d8cc | 2026-06-02 | earnings_transcript | ||||||||||||||
| Prisma AIRS achieving $100 million in Annual Recurring Revenue (ARR). | clear visibility towards $100 million in ARR with the next couple of quarters. | 2026-05-01 | 2026-10-31 | This milestone would signify strong market adoption and leadership in the rapidly growing AI security platform market, positively impacting Next-Generation Security (NGS) ARR and investor confidence. | Ticker | PANW (ticker) | PANW_85f8f5f3 | 2026-06-02 | earnings_transcript | ||||||||||||||
| Palo Alto Networks surpassing 4,000 total platformized customers. | by fiscal 2030 | 2026-06-02 | 2030-07-31 | This long-term strategic goal is a primary driver for achieving the $20 billion NGS ARR target, indicating deep customer architectural commitments and sustained revenue growth. | Ticker | PANW (ticker) | PANW_938fece8 | 2026-06-02 | earnings_transcript | ||||||||||||||
| Completion of the migration of CyberArk's critical back-end systems to common Palo Alto Networks systems. | next 4 months. We think we'll get there before the end of this calendar year. | 2026-06-02 | 2026-12-31 | Successful integration of back-end systems is crucial for realizing synergy targets and improving profitability, reinforcing confidence in the M&A strategy. | Ticker | PANW (ticker) | PANW_812901a6 | 2026-06-02 | earnings_transcript | ||||||||||||||
| Rubrik Agent Cloud (RAC) moving from beta to General Availability (GA). This product suite enables enterprises to deploy AI agents safely and confidently at scale, offering agent monitoring, governance, and remediation capabilities. | not too far in the future | 2026-03-08 | 2026-07-31 | Successful GA and adoption of RAC would validate Rubrik's AI Operations thesis, open a new revenue stream, and potentially capture a significant share of the emerging AI governance market, impacting future growth and valuation. | Ticker | RBRK (ticker) | RBRK_050c80e9 | 2025-12-04 | earnings_transcript | ||||||||||||||
| Updates on Rubrik Agent Cloud (RAC) customer adoption, successful Proof-of-Concepts (POCs) conversions, and early monetization. | coming quarters and years | 2026-05-01 | 2027-01-31 | RAC is a new product suite targeting the emerging AI Operations market. Strong traction would validate Rubrik's AI strategy, expand its addressable market, and contribute to future revenue growth, positively impacting valuation and investor sentiment. | Ticker | RBRK (ticker) | RBRK_c24f499e | 2026-03-12 | earnings_transcript | ||||||||||||||
| Resolution of sales leadership transitions and their impact on sales execution and growth trajectory. | short term | 2026-05-01 | 2027-04-30 | The departure of two sales leaders and the ongoing transition could disrupt sales execution, potentially impacting net new ARR growth and overall revenue. Management has already taken a 'prudent approach' to guidance due to this uncertainty. | Ticker | ZS (ticker) | ZS_86551063 | 2026-05-26 | earnings_transcript | ||||||||||||||
| Higher capital expenditures in Q4 FY26 and fiscal year 2027 due to increasing memory, storage, and processor prices, impacting free cash flow margin. | Q4 | 2026-05-01 | 2027-04-30 | Increased CapEx will negatively impact free cash flow margin in Q4 FY26 and FY27, as reflected in the lowered free cash flow margin guidance for FY26. This could impact profitability and investor sentiment. | Ticker | ZS (ticker) | ZS_a5e0f27c | 2026-05-26 | earnings_transcript | ||||||||||||||
| Accelerated enterprise adoption of AI and the emergence of powerful frontier AI models driving increased demand for Zscaler's Zero Trust security solutions. | will have impact in fiscal '27 | 2026-05-01 | 2027-04-30 | This represents a significant tailwind, potentially boosting pipeline, new logo wins, and upsells for Zscaler's AI Protect and Zero Trust solutions, positively impacting revenue and ARR growth. | Theme | ZS (ticker) | ZS_ab629f13 | 2026-05-26 | earnings_transcript | ||||||||||||||
| Rollout and customer uptake of the integrated SecOps solution, combining Zscaler's platform with Red Canary's capabilities. | in '27 | 2026-05-01 | 2027-04-30 | Successful uptake could drive further upsell and cross-sell opportunities, contributing to ARR growth. The uncertainty around the pace of uptake could impact the realization of this growth. | Ticker | ZS (ticker) | ZS_8c7cb2dc | 2026-05-26 | earnings_transcript | ||||||||||||||
| Execution and effectiveness of new initiatives to accelerate new logo acquisition, particularly in the mid-market enterprise segment and through channel partners. | an important part of our fiscal '27 plan | 2026-05-01 | 2027-04-30 | Improved new logo growth is a strategic focus and could significantly boost ARR and market share, offsetting the 'tempered view' currently incorporated into FY27 guidance. Failure to execute could further pressure growth. | Ticker | ZS (ticker) | ZS_494da17d | 2026-05-26 | earnings_transcript | ||||||||||||||
| CapEx plan to invest approximately $250 million in 2026 to augment the AI Inference Cloud, driven in part by memory-chip cost pressures. | in 2026 | 2026-01-01 | 2026-12-31 | Signals aggressive scale-up of AI inference infrastructure; near-term margin pressure from hardware investments but supports long-term CIS growth and AI deployments. | Ticker | AKAM (ticker) | AKAM_e7e75de8 | 2026-02-19 | |||||||||||||||
| Guidance that FY27 net new ARR growth will be at least 20% YoY. | FY '27 year-over-year net new ARR growth of at least 20% | 2026-02-01 | 2027-01-31 | Signals durable growth beyond FY26 and supports long-term TAM expansion from NextGen SIEM, Cloud, and Identity, with potential for multiple expansion if growth outpaces expectations. | Ticker | CRWD (ticker) | CRWD_a5d8a49b | 2025-12-02 | earnings_transcript | ||||||||||||||
| Completion of native integration of SGNL.ai and Seraphic acquisitions into the Falcon platform, followed by the full scaling of their go-to-market efforts. | remaining quarters of FY '27 | 2026-05-01 | 2027-01-31 | Successful integration and subsequent full scaling are crucial for these acquisitions to materially contribute to ARR beyond the initial minimal contribution, expanding CrowdStrike's identity and browser security offerings and validating its M&A strategy. | Ticker | CRWD (ticker) | CRWD_87a07c9e | 2026-03-03 | earnings_transcript | ||||||||||||||
| Customer adoption and utilization of Microsoft Azure consumption commitment dollars for Falcon on the Microsoft marketplace. | now open for business (impact in future quarters) | 2026-03-03 | 2027-01-31 | This new channel could significantly expand CrowdStrike's reach, drive new customer acquisition, and accelerate ARR growth by leveraging existing customer spend commitments with Microsoft, impacting revenue and competitive positioning. | Ticker | CRWD (ticker) | CRWD_18f83bee | 2026-03-03 | earnings_transcript | ||||||||||||||
| The broader AI revolution and its impact on the cybersecurity software market, specifically the differentiation between 'existentially vulnerable' and 'thriving' software companies. | unfolding in the market... into the future | 2026-03-03 | 2028-12-31 | CrowdStrike believes it is positioned to thrive as a 'mission-critical, trusted infrastructure technology' in the AI era. The actual market outcome will materially impact CrowdStrike's long-term valuation, investor sentiment, and competitive landscape. | Theme | CRWD (ticker) | CRWD_7c8021c9 | 2026-03-03 | earnings_transcript | ||||||||||||||
| CrowdStrike's ability to achieve its raised full-year FY27 net new ARR growth acceleration target of 27.7% at the midpoint, translating to $1.291 billion of net new ARR. | For the full year | 2026-02-01 | 2027-01-31 | This is a key financial guidance metric; exceeding or missing this target would materially impact valuation and investor sentiment, as it reflects the company's ability to capitalize on AI-driven demand and platform consolidation. | Ticker | CRWD (ticker) | CRWD_15d5c321 | 2026-06-03 | earnings_transcript | ||||||||||||||
| Continued rapid growth and adoption of AIDR (AI Detection and Response) solutions, with Q2 pipeline already exceeding $50 million, and its potential to become a larger market opportunity than EDR. | As I look forward | 2026-05-01 | 2027-01-31 | Successful execution and market penetration of AIDR could significantly expand CrowdStrike's total addressable market and drive substantial future ARR, positively impacting valuation and investor sentiment. | Ticker | CRWD (ticker) | CRWD_53e96eca | 2026-06-03 | earnings_transcript | ||||||||||||||
| CrowdStrike's actual financial results for Q2 FY27 relative to its guidance for ARR ($5.793B-$5.795B), net new ARR ($284M-$286M), and total revenue ($1.436B-$1.442B). | For the second quarter of FY27 | 2026-05-01 | 2026-07-31 | Meeting or exceeding this short-term guidance is crucial for maintaining investor confidence and validating the company's growth trajectory, especially given the raised full-year outlook. | Ticker | CRWD (ticker) | CRWD_cdad19ec | 2026-06-03 | earnings_transcript | ||||||||||||||
| CrowdStrike's ability to achieve its raised full-year FY27 financial guidance for ARR ($6.532B-$6.556B), net new ARR ($1.279B-$1.303B), and total revenue ($5.915B-$5.959B). | For the full fiscal year 2027 | 2026-02-01 | 2027-01-31 | This is a critical long-term financial target; achieving or surpassing this guidance would strongly affirm the company's market position and growth potential, while a miss could negatively impact valuation. | Ticker | CRWD (ticker) | CRWD_03654344 | 2026-06-03 | earnings_transcript | ||||||||||||||
| The impact and implementation of the US government's executive order to upgrade systems for advanced AI on federal cybersecurity spending and prioritization. | as they unfold | 2026-06-05 | 2027-06-05 | This regulatory action could create a significant tailwind for CrowdStrike by driving increased demand for modern cyber defenses within federal agencies, potentially boosting public sector revenue. | Theme | CRWD (ticker) | CRWD_90e8575b | 2026-06-03 | earnings_transcript | ||||||||||||||
| SentinelOne's ability to meet or exceed its full fiscal year 2027 guidance for revenue ($1.195B-$1.205B), operating income ($110M-$120M), EPS ($0.32-$0.38), and adjusted free cash flow margin (tracking operating margin). | For the full fiscal year 2027 | 2026-02-01 | 2027-01-31 | Achieving or surpassing these financial targets would validate management's strategy for profitable growth and positively impact investor confidence and valuation, while missing them could lead to negative sentiment. | Ticker | S (ticker) | S_d1c5f63d | 2026-03-12 | earnings_transcript | ||||||||||||||
| SentinelOne's ability to achieve a year-over-year improvement in net new Annual Recurring Revenue (ARR) for fiscal year 2027, as implied by its revenue outlook. | For the full fiscal year 2027 | 2026-02-01 | 2027-01-31 | Sustained improvement in net new ARR is a key indicator of market demand, competitive strength, and future revenue growth potential, which is crucial for investor confidence. | Ticker | S (ticker) | S_ec3cb123 | 2026-03-12 | earnings_transcript | ||||||||||||||
| The actual shift in SentinelOne's net new ARR seasonality from a 40/60 first-half/second-half dynamic to approximately a 50/50 split in fiscal year 2027. | this year | 2026-02-01 | 2027-01-31 | A more balanced seasonality, particularly a stronger first half, could lead to more predictable and consistent revenue and ARR growth, potentially improving investor perception of execution. | Ticker | S (ticker) | S_2ec5c046 | 2026-03-12 | earnings_transcript | ||||||||||||||
| The actual impact of the evolving macroeconomic environment and geopolitical uncertainties on SentinelOne's deal timing and sales cycles. | still influence deal timing and sales cycles across the industry | 2026-03-18 | 2027-01-31 | A deterioration in macro conditions could lead to extended sales cycles and reduced customer spending, negatively impacting SentinelOne's ability to meet its financial targets. | Theme | S (ticker) | S_c9054e56 | 2026-03-12 | earnings_transcript | ||||||||||||||
| SentinelOne's success in executing its strategy to optimize its sales force and achieve improved sales productivity throughout fiscal year 2027. | next year | 2026-02-01 | 2027-01-31 | Enhanced sales productivity and an optimized go-to-market strategy are crucial for driving operating leverage and accelerating the path to the Rule of 40, directly impacting profitability and valuation. | Ticker | S (ticker) | S_3844628e | 2026-03-12 | earnings_transcript | ||||||||||||||
| The sustained strong adoption and increasing revenue contribution from SentinelOne's emerging solutions, specifically AI security (Prompt Security), Data solutions (AI SIEM, DSPM), Cloud security, and Wayfinder Threat Services. | rising contributions from our emerging solutions, including AI, Data, Cloud, Wayfinder, and others | 2026-02-01 | 2027-01-31 | Continued robust growth in these diverse, high-demand areas validates the company's platform expansion strategy and is critical for long-term revenue growth and market leadership in the AI era. | Ticker | S (ticker) | S_872ff40f | 2026-03-12 | earnings_transcript | ||||||||||||||
| SentinelOne's ability to meet its full fiscal year 2027 guidance for revenue ($1.195 billion - $1.205 billion), operating income ($115 million - $125 million), and diluted earnings per share ($0.32 - $0.38). | For the full fiscal year '27 | 2026-05-01 | 2027-04-30 | Achieving or exceeding this guidance would validate management's strategy for durable growth and profitability, positively impacting investor sentiment and valuation. Missing it could lead to negative sentiment. | Ticker | S (ticker) | S_2ae1066b | 2026-05-28 | earnings_transcript | ||||||||||||||
| The rate of customer adoption and the resulting revenue contribution from SentinelOne's AI-native solutions, including Prompt Security, Purple AI, AI SIEM, and Cloud Security. | throughout the year | 2026-05-01 | 2027-04-30 | Strong adoption and revenue growth from these emerging solutions are critical for SentinelOne to expand its market share, diversify its revenue streams, and achieve its long-term growth targets, reinforcing its AI leadership. | Ticker | S (ticker) | S_a0597409 | 2026-05-28 | earnings_transcript | ||||||||||||||
| The evolving impact of frontier AI models (e.g., Mythos, GPT 5.5) on the cybersecurity threat landscape, customer spending behavior, and the expansion of the attack surface. | structural tailwinds throughout the year | 2026-05-01 | 2027-04-30 | Increased AI-driven threats and an expanding attack surface could accelerate demand for SentinelOne's AI-native defense solutions, creating significant structural tailwinds and market share opportunities. | Theme | S (ticker) | S_e9ee3423 | 2026-05-28 | earnings_transcript | ||||||||||||||
| Q2/Q4 Fiscal Year Earnings Season for Key Constituents | Late July 2026 - Early September 2026 | 2026-07-29 | 2026-09-08 | These upcoming earnings reports will provide the latest financial performance, updated guidance, and crucial insights into customer demand, AI product traction, and competitive dynamics for a significant portion of the theme's constituents. Strong results and positive outlooks will boost investor confidence in the overall theme, particularly regarding the monetization of AI security solutions. | Theme | theme_composer | SAIL, CRWD, RBRK, PANW, ZS, OKTA, S, DDOG, AKAM | 9 | 31.5138 | 1.18 | 1.0 | Regulatory/Policy | 1.35 | 5020.1408 | 2026-06-25 | False | 2 | 1.727 | 275.1179 | Theme composer | |||
| Black Hat USA 2026 Conference | August 1-6, 2026 | 2026-08-01 | 2026-08-06 | Black Hat is a premier cybersecurity conference where new threats, vulnerabilities, and defensive technologies are often unveiled. This event can drive awareness, influence purchasing decisions, and lead to new product announcements or partnerships among theme constituents, particularly those focused on threat intelligence, endpoint security, and cloud security, especially in the context of AI-driven threats. | Theme | theme_composer | CRWD, PANW, MSFT, ZS, NET, S, RBRK, QLYS, TENB, DDOG, AKAM, RPD, CHKP, FTNT | 14 | 22.5442 | 1.18 | 1.05 | Regulatory/Policy, Conference/Council | 1.62 | 4525.0211 | 2026-06-25 | False | 1 | 3.6577 | 734.1735 | Theme composer | |||
| Okta's AI agent products (Okta for AI Agents and Auth0 for AI Agents) begin to materially contribute to revenue by converting the large pipeline into significant deals. | over the next several quarters and several years | 2026-08-01 | 2029-05-28 | Successful conversion of the AI agent pipeline into substantial revenue would validate Okta's AI strategy, unlock a new growth vector, and materially impact future results and valuation. Failure to convert could dampen investor enthusiasm. | Ticker | OKTA (ticker) | OKTA_d12671c1 | 2026-05-28 | earnings_transcript | ||||||||||||||
| The growth of AI data center builds beginning to taper off or plateau. | next few quarters, if not a few years. | 2026-08-01 | 2029-06-02 | A slowdown in AI data center growth would reduce a significant structural catalyst for demand for high-throughput hardware and network security, potentially impacting hardware revenue growth. | Theme | PANW (ticker) | PANW_f9b7000e | 2026-06-02 | earnings_transcript | ||||||||||||||
| Realization of approximately $45 million in annualized cost savings from SentinelOne's workforce optimization initiative, following a one-time restructuring charge in Q2 FY27. | Once fully implemented, we expect this action to result in approximately $45 million in annualized cost savings. | 2026-08-01 | 2027-07-31 | These savings are expected to provide financial flexibility, allow reinvestment in key growth areas, and contribute to significant operating margin expansion, positively impacting profitability and shareholder value. | Ticker | S (ticker) | S_abee4b06 | 2026-05-28 | earnings_transcript | ||||||||||||||
| General Applicability of the EU AI Act | August 2, 2026 | 2026-08-02 | 2026-08-02 | The EU AI Act will establish comprehensive regulations for AI systems, including requirements for data governance, risk management, and transparency. The general applicability of the Act will likely create a significant compliance burden for enterprises, driving demand for identity governance, data security posture management, and AI security solutions offered by theme constituents. | Theme | theme_composer | SAIL, OKTA, RBRK, VRNS, QLYS, TENB, MSFT, PANW, ZS | 9 | 10.6392 | 1.18 | 1.05 | Regulatory/Policy | 1.35 | 1779.57 | 2026-06-25 | False | 1 | 2.6662 | 445.9665 | Theme composer | |||
| Frontier AI models evolving into more sophisticated, autonomous hacking entities, capable of executing comprehensive attack campaigns at machine speed. | 3- to 6-month window before these systems evolve into more sophisticated hacking entities globally. Within a few years, we expect Agentic AI to reach a level of autonomous execution that is truly unprecedented | 2026-09-02 | 2029-06-02 | This paradigm shift elevates cybersecurity to a mission-critical priority, driving increased demand for advanced, real-time defensive platforms like Palo Alto Networks' solutions. | Theme | PANW (ticker) | PANW_6dc4213b | 2026-06-02 | earnings_transcript | ||||||||||||||
| A 4-year, roughly $200 million Cloud Infrastructure Services contract with a major U.S. tech company, largely for Akamai Inference Cloud; revenue recognition expected to start in Q4 2026. | fourth quarter of 2026 | 2026-10-01 | 2026-12-31 | Significant multi-year AI compute win that expands Inference Cloud adoption and provides a measurable revenue ramp starting in late 2026. | Ticker | AKAM (ticker) | AKAM_b3c6671c | 2026-02-19 | |||||||||||||||
| CyberArk's profitability profile converging with Palo Alto Networks' overall profitability. | within the next 12 to 18 months. | 2027-06-02 | 2027-12-02 | This milestone is key to achieving Palo Alto Networks' target of a 40% free cash flow margin by fiscal 2028, signaling successful M&A integration and improved financial efficiency. | Ticker | PANW (ticker) | PANW_02994241 | 2026-06-02 | earnings_transcript | ||||||||||||||
| Stock-based compensation (SBC) as a percentage of revenue returning to pre-acquisition levels. | in approximately 12 to 18 months. | 2027-06-02 | 2027-12-02 | A reduction in SBC as a percentage of revenue would positively impact GAAP profitability and could improve investor sentiment regarding the dilutive effects of recent acquisitions. | Ticker | PANW (ticker) | PANW_ce29122a | 2026-06-02 | earnings_transcript |
NotesEarnings Summary
| Date | Type | Comment | Detail | Sentiment | Tickers |
|---|---|---|---|---|---|
| 2026-06-25 | Theme Refresh Synthesis | The "Data Owners '25" theme is strongly validated by the AI-driven cybersecurity paradigm shift. Companies like CRWD, PANW, RBRK, S, OKTA, and SAIL are leveraging vast security data to secure AI infrastructure and proliferating non-human identities. This "Agentic Era" is driving unprecedented demand for comprehensive platforms and cyber resilience solutions, accelerating growth for many. However, some face challenges like increased CapEx and growth deceleration. | Earnings Summary | Positive | CRWD, PANW, RBRK, S, OKTA, SAIL, ZS |
Constituents
- — SailPoint, Inc.
- — Datadog, Inc.
- MSFTT2— Microsoft Corporation
- OKTAT2— Okta, Inc.
- PANWT2— Palo Alto Networks, Inc.
- RBRKT2— Rubrik, Inc.
- ZST2— Zscaler, Inc.
- AKAMT3— Akamai Technologies, Inc.
- CRWDT3— CrowdStrike Holdings, Inc.
- NETT3— Cloudflare, Inc.
- ST3— SentinelOne, Inc.
- CHKPT3· no notes yet
- FTNTT3· no notes yet
- GENT3· no notes yet
- OSPNT3· no notes yet
- QLYST3· no notes yet
- RDWRT3· no notes yet
- RPDT3· no notes yet
- TENBT3· no notes yet
- VRNST3· no notes yet