◉Tech Investing RadarBY MARC WINN
← All markets

Software

Cybersecurity platforms

Established
Investment window unassessed

Established technology can produce a fresh re-rating. An early technology can already be expensive.

WHAT IS ALREADY HAPPENING

CrowdStrike reported $5.84 billion ARR and $1.47 billion quarterly revenue in fiscal Q2 2027. Palo Alto Networks reported $3.41 billion fiscal Q4 2026 revenue. Security platforms already have large paying customer bases while AI changes attack and defence economics.

Adoption view 22 Oct 2026 · review due 21 Nov 2026

Where could value be captured?

Which security vendors retain trusted, profitable customer relationships as attack volume rises?

THE BEGINNING

What would open the window?

Require verified customer outcomes, renewal quality and organic cash generation, with valuation allowing for competition, dilution and incident liability.

THE END

What would end the move?

Review if retention weakens, platform bundles commoditise features, material incidents undermine trust, or the price outruns sustainable organic growth.

What would support staying with the thesis?

Look for further independent evidence, delivered customer economics and price behaviour consistent with the original thesis.

What would invalidate it?

ARR is not current cash revenue. Acquisitions, share compensation and adjusted metrics need reconciliation; growing threats do not ensure every vendor wins.

THE COUNTERCASE

ARR is not current cash revenue. Acquisitions, share compensation and adjusted metrics need reconciliation; growing threats do not ensure every vendor wins.

What is still missing before an investment decision?
  • A defined investable instrument or comparable cohort and exposure materiality
  • A dated narrative change supported by independently attributed evidence
  • A permitted price, liquidity and capital-flow observation for the same instrument
  • Valuation scenarios showing what success is already assumed in the price
  • A prospective horizon, continuation test and predeclared invalidation
  • An independent investment-case review

The adoption evidence

Original sources, with dates

BASELINE, NOT AN ACTIVE INVESTMENT CASE

This market is in the broader universe. The adoption baseline does not establish a current investment opportunity.