NET, ZS, PANW End Second Week Higher — Citrini Research Sees Cybersecurity Stocks Pulling Further Ahead Of Software
Citrini Research says cybersecurity stocks are outperforming enterprise software as AI-driven threats increase. It cites iShares Cybersecurity ETF (IHAK) up 30% vs S&P Expanded Tech Software ETF (IGV) down 6.2% and weekly incidents per org rising to 2,270 in June. It highlights PANW, Fortinet, NET and ZS, noting Cloudflare Q2 2026 earnings beat and raised outlook. NET, ZS and PANW YTD moves are cited.
How this was made
The 30-second read
Why it matters
The only company-specific, time-sensitive datapoint is NET’s Q2 2026 earnings beat and full-year outlook raise; PANW and ZS are supported mainly by a structural thesis and relative performance stats.
Market read
Traders may use the piece as a sentiment and positioning input for cybersecurity versus software, with NET’s earnings-based outlook raise providing the most immediate catalyst.
What to watch
The article cites incident metrics and an OpenAI/Hugging Face example, but does not quantify how much incremental revenue these events drive for each vendor, nor does it address competitive pricing or customer budget constraints beyond a survey.
Background
Citrini Research argues cybersecurity is decoupling from enterprise software due to autonomous AI agents increasing threat frequency and sophistication.
Ticker impact
Citrini flags Cloudflare as a core winner because each newly deployed AI agent creates distinct traffic needing continuous inspection.
Near-term sentiment tailwind likely, but magnitude depends on whether traders treat the thesis as incremental versus already-known earnings.
The only hard company-specific datapoint is that NET beat Q2 revenue expectations and raised full-year outlook; the rest is analyst thesis and relative performance stats.
Citrini cites Zscaler as a core winner since every AI agent deployment adds new traffic sources requiring continuous inspection.
Limited incremental impact; any move is more likely sentiment-driven from the broader cybersecurity/agentic AI narrative.
ZS is included via analyst positioning and a stated YTD performance figure, without new ZS filings, guidance, or product announcements.
Citrini singles out Palo Alto Networks as a structural beneficiary, citing FE400 chips for high-speed TLS decryption that LLMs cannot replicate.
Potential support for relative performance versus software peers, but not a standalone catalyst for a decisive trade.
The piece is primarily a research-driven sector divergence argument; it does not disclose new PANW guidance, contracts, or regulatory actions.
Market effects
Reinforces a rotation trade into cybersecurity hardware and inspection platforms as agentic AI increases threat velocity and volume.
No explicit regional linkage; likely US-led sentiment spillover into global cybersecurity peers.
Threat landscape described as global, but the actionable content is US-listed equities and an ETF relative-performance comparison.
Counterpoint
The divergence may be valuation and momentum-driven rather than durable fundamentals; analyst theses about “cannot be vibecoded away” may overstate moat durability.
Key entities
- companyPalo Alto Networks
Citrini highlights FE400 chips for high-speed TLS decryption as a defensible advantage in agentic AI traffic inspection.
- companyFortinet
Citrini also cites NP7 ASIC hardware for TLS decryption, positioned as a structural beneficiary.
- companyCloudflare
Citrini calls NET a core winner; article also notes NET beat Q2 revenue expectations and raised full-year outlook.
- companyZscaler
Citrini frames ZS as benefiting because each AI agent adds a distinct traffic source requiring continuous inspection.
- ETFiShares Cybersecurity ETF
IHAK is cited as up 30% over the past year, illustrating the sector’s relative strength.

