Cybersecurity ETF Surges in 2026, but Valuation Risks Could Trigger a Pullback

Key Points

Artificial intelligence (AI) is still in its infancy, but it has already emerged as one of the most transformative technologies in human history. While it promises to boost productivity and accelerate scientific discovery, it also presents significant risks when leveraged by malicious actors. Cybercriminals are increasingly utilizing AI to execute highly sophisticated attacks, driving a surge in demand for advanced security solutions. This powerful tailwind has propelled the First Trust Nasdaq Cybersecurity ETF (NASDAQ: CIBR) up by an impressive 42% in 2026, vastly outperforming the S&P 500 and Nasdaq-100 indexes.

However, the rapid surge in cybersecurity stocks has pushed valuations to levels that many analysts find unsustainable, raising the specter of a market correction.

Image source: Getty Images.

AI Fuels the Demand for Integrated Cybersecurity

Historically, the cybersecurity sector was highly fragmented, with vendors specializing in narrow, isolated tools. Enterprises often had to patch together solutions from multiple providers, creating integration challenges and defense gaps that attackers could easily exploit. The rise of AI-driven threats has made this legacy approach obsolete. Modern hackers can identify and exploit vulnerabilities at machine speed, necessitating a shift toward unified, platform-based security architectures.

Today, leading vendors offer holistic, all-in-one platforms designed to protect cloud networks, identities, endpoints, and AI workloads under a single console. The First Trust Nasdaq Cybersecurity ETF captures this shift by holding 42 of the industry’s top players. However, the fund is somewhat concentrated, with its five largest positions accounting for nearly 40% of its total portfolio value:

Data source: First Trust. Portfolio weightings as of Sept. 16, 2026.

Palo Alto Networks (NASDAQ: PANW) stands as the world’s largest pure-play cybersecurity company, offering over 40 integrated products. The company actively promotes “platformization,” encouraging clients to consolidate their security vendors to streamline defenses. Meanwhile, CrowdStrike (NASDAQ: CRWD) utilizes its highly popular Falcon platform, which offers 33 distinct modules that allow enterprises to customize their security posture dynamically. Broadcom (NASDAQ: AVGO), though primarily known for AI semiconductors, also secures a major foothold in cybersecurity through its ownership of Symantec. Other notable holdings include Cloudflare, Okta, Zscaler, and SentinelOne.

Are Valuations Sustainable?

While the long-term outlook for cybersecurity remains robust, the current valuations of top-tier companies appear stretched. Since its launch in 2015, the ETF has delivered a compound annual return of 16.1%, outperforming the S&P 500’s 13.9% over the same period. However, several key holdings are trading at multiples far beyond their historical averages.

For instance, CrowdStrike trades at a price-to-sales (P/S) ratio of 46.8, which is more than seven times higher than the Nasdaq-100 index’s P/S ratio of 6.1. This premium is difficult to justify given the company’s decelerating revenue growth. Similarly, Palo Alto Networks carries a P/S ratio of 24.8, more than double its 10-year historical average of 10.5. Elevated valuations are also present across Fortinet, Cisco Systems, and Broadcom.

CRWD PS Ratio data by YCharts.

If these mega-cap cybersecurity stocks experience a correction, the downturn will likely trigger a sharp decline in the First Trust ETF. Consequently, prospective investors may want to wait for a more attractive entry point or a market pullback before committing capital to this high-flying sector.

Source link