Cybersecurity Spending Improves, but Stock Valuations Diverge

Cybersecurity stocks pulled back from record levels even as Citi and Wells Fargo reported better demand signals. The contrast suggests investors are not disputing the need for security. They are debating which vendors can convert higher spending into growth that justifies their valuations.

Citi raised targets on CrowdStrike, Palo Alto Networks and Zscaler while keeping Buy ratings on all three. It also lifted Okta's target but retained a Neutral rating. Wells Fargo raised its Fortinet target to $160 from $135 while keeping an Underweight rating because the new target remained below the reference share price.

Spending signals are getting better

Citi cited an improving chief information officer survey and additional security investment tied to AI deployments. Wells Fargo based its view on ten detailed channel-partner conversations and a reseller survey, according to The Fly. The firm also expects the firewall replacement cycle to continue, supported partly by pricing.

These are useful leading indicators, but they are surveys and analyst checks rather than company-reported bookings. They can identify direction before earnings, yet they do not show which vendor won the spending or whether discounting reduced margins.

AI creates demand and competition

As companies deploy generative AI, they must control model access, data movement, identities and automated actions. That expands the security surface and can support spending across endpoint, network, identity and cloud-security products.

The opportunity does not accrue evenly. Platform vendors can bundle products, specialist vendors can win on technical depth, and new AI-native entrants can pressure pricing. Reports that OpenAI was discussing an acquisition of security company Trail of Bits added another reminder that the competitive map may change.

Palo Alto Networks' 2026 survey of more than 1,600 security leaders across 11 countries found that 95% were concerned about attacks powered by advanced AI models. The result measures concern, not purchase intent, but it helps explain why security remains a protected budget area.

Evidence must move from surveys to results

The analyst actions were not uniformly bullish. Wells Fargo's higher Fortinet target still implied downside, while Citi's Buy ratings reflected greater confidence in CrowdStrike, Palo Alto and Zscaler. Investors should compare these views with billings, remaining performance obligations, renewal rates and operating margins in upcoming reports.

A sector-wide spending tailwind can coexist with poor returns for an expensive stock. The most important next step is to identify which vendors turn AI-related concern into contracted revenue without sacrificing profitability. Until earnings provide that evidence, improving surveys support the demand case but not every valuation.