We recently compiled a list of the 10 best cybersecurity stocks recommended by hedge funds, and in this article we’ll take a look at how CyberArk Software, Inc. (NASDAQ:CYBR) positions itself against other cybersecurity stocks.
Increased internet usage has made internet connectivity a ubiquitous part of the daily lives of businesses and individuals, and it has also increased the ways in which malicious individuals and organizations can extort money, steal sensitive data, and disrupt critical infrastructure and systems. The scale of this activity is also staggering, with studies estimating that cybercriminals will have caused $6 trillion in damages as of 2021, more than all but the world’s two largest economies.
These threats have led to the growth of a vibrant cybersecurity industry, which became the focus of media coverage worldwide after an outage hit as many as 8.5 million computers worldwide in July 2024. The outage revealed the complex nature of the global computing ecosystem and the risks that exist when there is a single point of failure in security infrastructure. While it is too early to speculate on the losses, insurance company Parametrix estimates that insured losses could reach up to $1 billion for Fortune 500 companies. As if this were not enough, the CEO of the insurance company believes that the global impact could be several times greater. In his estimates, the total financial losses could reach $15 billion, with global insured losses ranging from $1.5 billion to $3 billion.
Looking at the scale of these losses, it’s natural to ask yourself what caused the global cyber outage. The problems began when the cybersecurity provider, the world’s third largest cybersecurity company, rolled out an upgrade to its Falcon security platform. The software upgrade contained corrupted files that run at the deepest layer of a computer, called the kernel, which caused systems using the Windows operating system to crash. The OS displayed the infamous blue screen, a software response to protect users from kernel damage that can lead to data loss. The chaos also lasted for quite some time, as all systems affected by the update could only function properly after being manually booted into safe mode to remove the corrupted files.
Returning to the financial aspects of the cybersecurity industry, like other industries, this industry is also facing disruption from artificial intelligence. According to a study, the AI-driven cybersecurity industry was worth $20 billion in 2023. From then until 2027, the industry is expected to grow at a compound annual growth rate (CAGR) of 25.3% to a final value of $49.2 billion. In other words, the industry is expected to more than double in four years. The cost of cybersecurity breaches is also expected to increase from 2021 levels in the AI era. These costs are estimated to reach $8 trillion by the end of 2023 and jump to $10.5 trillion by the end of 2025. The current era in the financial industry is characterized by high interest rates, which also impacts cybersecurity mergers. In 2023, 363 M&A deals were announced in the cybersecurity industry, a decrease of 18.8% per year.
The story continues
Of these deals, strategic acquirers – acquirers buying companies that align with their business strategy – accounted for 57.3% of deals. Although deal volume declined, valuations remained strong. From Q4 2020 to Q4 2023, the average EV/revenue and EV/EBITDA multiples for the cybersecurity M&A sector were 3.3x and 11.6x, respectively, above the broader averages of 2.1x and 10.4x.
Digging deeper, cybersecurity stocks recorded some solid returns despite tough corporate spending and inflation in 2023. This came at a time when broader SaaS (software as a service) stocks were struggling due to uncertainty regarding companies’ future spending plans. The Houlihan Lokey Cybersecurity Index, which tracks the performance of the top 28 cybersecurity stocks, was up 83% year-to-date through the end of 2023, and up 28% in the fourth quarter. These returns were accompanied by 18% revenue growth and strong 29% profit growth, showing the benefits of operating in a high-margin software industry, allowing cybersecurity stocks to earn more pennies in terms of profits. The index’s 83% return by itself represents a large 58 percentage point lead over the flagship S&P, but if we narrow the top cybersecurity stocks further to include only high-growth companies, this band widens. The return over the past 12 months as of the end of 2023 was 101%, with an even wider range of 76 percentage points.
Turning to valuation, cybersecurity stocks, like the broader SaaS industry, are primarily valued on enterprise value to revenue. The median EV/2024 expected revenue ratio for high-growth cybersecurity stocks was 9.8x. The medians for mid- and low-growth stocks were 5.9x and 3.0x, respectively. Importantly, the ratios for high- and mid-growth cybersecurity stocks were significantly higher than the EV/revenue ratios of the acquisition targets profiled above. This means that as far as the current environment for cybersecurity acquisitions is concerned, value appears to be driving at least some of the deals as high interest rates make it difficult for companies to raise capital. In terms of revenue growth, the medians ranged from 33% for high-growth companies to 4% for low-growth companies.
Our Methodology
To compile a list of hedge fund picks for the best cybersecurity stocks to buy, we ranked the holdings of several cybersecurity ETFs based on the number of hedge funds that bought shares in the first quarter of 2024 and selected the stocks with the largest number of hedge fund investors.
Why are we interested in hedge fund concentrated stocks? The reason is simple: our research shows that you can outperform the market by mimicking the top stock picks of the best hedge funds. Our quarterly newsletter strategy selects 14 small and large stocks each quarter, and has returned 275% since May 2014, beating the benchmark by 150 percentage points (more details here).
The 20 most valuable data companies in the world
Data center with repetitive design of computer servers, showing efficient and secure IT infrastructure of a company.
CyberArk Software Inc. (NASDAQ:CYBR)
Number of hedge fund investors in Q1 2024: 63
CyberArk Software Ltd. (NASDAQ:CYBR) is another identity management platform company. The company has recently been facing revenue growth tailwinds. These include increased cloud adoption and migration, new SEC rules requiring companies to promptly report cybersecurity breaches, and the growing need for multi-factor authentication in identity management. This growth has positively impacted CyberArk Software Ltd. (NASDAQ:CYBR)’s recurring revenue. In Q4 2023, ARR grew at a healthy 36% year-over-year rate, and in Q1 2024, it maintained the trend by posting 34% growth. Although the latter occurred in the first quarter, which is typically a slow quarter for software spending, CyberArk Software Ltd. (NASDAQ:CYBR) maintained its pace, bringing in $811 million through ARR. CyberArk Software Ltd. (NASDAQ:CYBR) is also targeting the relatively new machine identity management industry, which deals with companies validating their computer systems. The company announced its decision to acquire machine identity management company Venafi for $1.5 billion in May 2024, which was in addition to CyberArk Software Ltd.’s (NASDAQ:CYBR) new product announcement of CORA AI, a real-time, environment-agnostic, AI-powered threat monitoring and response management system.
CyberArk Software Ltd. (NASDAQ:CYBR) management commented on Machine ID during its Q1 2024 earnings call:
“The world of securing machine identities is changing rapidly. Organizations are dealing with an ever-growing and diverse population of machines, from applications to bots, workloads to IoT devices. Each of these machines needs to be protected and managed across the entire lifecycle of multiple identity components, from secrets to digital keys to certificates. The rise of AI is further accelerating the growth and complexity of machine identities, which is quickly becoming a top security challenge.
Traditionally, machine management has often fallen outside the purview of security teams. However, this approach exponentially increases risk and is unsustainable in today’s threat landscape. Customers are increasingly realizing that they need to extend their machine identity security programs beyond local vaults, loosely applied policies, and open source tools. They need an enterprise-ready machine identity security approach that is scalable and tied to their human identity security programs through a single platform. One big success that demonstrated everything I’m talking about was with a CyberArk customer that has been with us since 2018. We expanded our long-standing relationship with the UK Department for Work and Pensions with an expansion program, as well as launching a robust secrets management program.
Overall, CYBR ranks #4 on our list of best cybersecurity stocks to buy. To see other cybersecurity stocks that hedge funds are watching, check out “Hedge Funds’ 10 Best Cybersecurity Stocks to Buy.” While we acknowledge CYBR’s potential as an investment, we believe some AI stocks have a better chance of delivering higher returns in a shorter time frame. If you’re looking for AI stocks that are more promising than CYBR but trade at less than 5x price to earnings, check out our report on the cheapest AI stocks.
Next: Analysts Predict New $25 Billion “Opportunity” for NVIDIA, 10 Best-of-Breed Stocks to Buy in Q3 2024 According to Bank of America.
Disclosures: None. This article was originally published on Insider Monkey.
