Cybersecurity stocks that surged earlier this week on expectations of stronger AI-related security spending are now facing a valuation reality check — and the pressure is spilling into ETFs.
CrowdStrike Holdings, Inc. (NASDAQ:CRWD) fell more than 3% on Friday after briefly approaching its $250.32 52-week high, while Palo Alto Networks (NASDAQ:PANW), Okta, Inc (NASDAQ:OKTA) and SentinelOne, Inc (NYSE:S) also came under pressure, all losing between 3% and 4%. The pullback followed Bernstein’s decision to downgrade Palo Alto Networks, Okta and SentinelOne to Market Perform, arguing that the sector’s roughly 100% gains since early 2026 had pushed valuations to or above fair value.
The reversal is notable because the same AI narrative that drove the rally remains intact. Earlier this week, investors treated warnings from AI leaders about increasingly capable systems and AI-enabled threats as a potential catalyst for cybersecurity spending. CrowdStrike, Palo Alto Networks and Okta all surged as investors positioned cybersecurity as a beneficiary of the AI buildout.
See More: Top Momentum Stocks
ETF Exposure Is Now Under Pressure
The selloff is hitting cybersecurity ETFs as well. The First Trust Nasdaq Cybersecurity ETF (NASDAQ:CIBR) was down 1.76% on friday market close, while the Global X Cybersecurity ETF (NASDAQ:BUG) was down 2.16%.
That matters because the funds have significant exposure to the stocks at the center of the valuation debate.
CIBR’s portfolio has CrowdStrike at 9.44% and Palo Alto Networks at 9.35%, meaning the two stocks alone represented nearly 19% of the ETF. Okta adds another 4.01%.
BUG is even more concentrated in several of the names under pressure. Its latest holdings showed Okta at 9.25%, CrowdStrike at 7.78%, Palo Alto at 7.48% and Fortinet at 7.31%.
The ETF takeaway
The pullback does not necessarily challenge the underlying cybersecurity demand story. Rather, it highlights a growing gap between expected AI-driven spending and the valuations investors are willing to pay for that growth.
For ETF investors, that makes the next move in cybersecurity funds increasingly dependent not just on security spending, but on whether their biggest holdings can justify the premium valuations built into the AI-security trade.
Photo: Shutterstock
Login to comment