Wall Street Eyes Cybersecurity Titans: Palo Alto Networks and CyberArk Shine
The short version:
- Investment bank Stephens started covering Palo Alto Networks and CyberArk with a positive view.
- The firm pointed to steady growth in security spending.
- More frequent attacks keep demand for both companies’ products high.
- Each has a strong position in its part of the market.
Stephens starts coverage
Stephens has initiated coverage of two large security companies, Palo Alto Networks and CyberArk, with an optimistic stance. The case is simple. Companies keep spending on security even when other IT budgets are tight, and these two hold large shares of the segments they serve, which gives them pricing power and a steady base of renewals to build on.
Palo Alto Networks: the platform play
Palo Alto Networks started with firewalls and now sells a broad platform that also covers cloud security and security operations. Its strategy is to get customers to consolidate many separate tools onto its products.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
Wall Street has mostly rewarded that approach. The company is profitable. It has also been adding AI features across its products, which analysts see as a way to keep customers on the platform.
AI in the product line
Palo Alto has built machine learning into threat detection for years. The newer push is AI that helps analysts investigate and respond faster, and that predicts likely attacks rather than just reacting to them.
CyberArk: identity security
CyberArk specializes in identity security and is best known for privileged access management, which controls the powerful admin accounts that attackers most want to steal. Identity attacks have grown. So has demand.
Investors like CyberArk’s focus. It has also expanded through acquisitions, including Venafi for machine identities and Zilla Security for identity governance.
Narrow focus, wider reach
Privileged access is still CyberArk’s core, but the company now sells protection for all kinds of human and machine identities. That gives it a larger market to grow into.
Demand keeps rising
Attacks are becoming more frequent and more damaging, and spending on defenses keeps climbing year after year regardless of the wider economy. Both companies are positioned to win a large share of that money, Palo Alto as a broad platform and CyberArk as an identity specialist.
Stephens expects the structural growth in security spending to continue, with these two among the leaders.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
What investors are watching
Analyst initiations do not change a company’s business. They can shift sentiment, though. For these two, investors will be watching quarterly results for signs that the platform and identity strategies keep working.
Palo Alto’s test is whether customers keep consolidating on its platform. CyberArk’s is whether it can turn its acquisitions into new revenue.
Investors weighing either stock should look past the rating and at the numbers: revenue growth, recurring revenue and margins.
Newer CyberExperts coverage on this topic
This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.
Citrix NetScaler CVE-2026-19490: The Auth Bypass That Went From PoC to Probes in a Day
CVE-2026-19490 is a CVSS 9.3 NetScaler Gateway/AAA auth bypass. A public PoC on Sept 2 was followed by live probes within a...
PaperCut NG/MF: The Print Server That Learned Remote Code Execution Again
CVE-2026-81578 and CVE-2026-82078 chain to pre-auth RCE on PaperCut Application Server. Confirm Emergency Patch Release 2, restrict admin exposure, and hunt like...
JFrog Artifactory CVE-2026-82329: Empty Join Key, Full Admin Token, Busy Scanners
CVE-2026-82329 lets attackers forge Artifactory admin tokens via a deterministic empty join key. Mass scanning peaked near 406,000 attempts; patch fixed builds...
Friday’s brief: Apache’s HTTP/2 fix, then Check Point break-ins, a ScreenConnect add-on and a GitHub secret stealer
The fastest way to catch up on what changed after this article was published.
Start your morning with the signal that matters.
Get the biggest cybersecurity developments, why they matter, and where to go deeper on CyberExperts.
By subscribing you agree to our Privacy Policy.
Free. Weekdays. Built for operators.