Cybersecurity Stocks Surge Over 20% as AI Agent Identity, Runtime, and Infrastructure Needs Defy SaaS Decline
English summary
While the IGV software ETF fell 12.3% and WCLD 11.9% by June 15, 2026, cybersecurity ETFs CIBR and HACK rose over 20%, driven by three new AI-specific demand areas. First, AI agents require identity and permission management akin to human employees, spurring Palo Alto Networks' $25B acquisition of CyberArk for machine credential control. Second, runtime monitoring of AI behavior—such as prompt injection and unauthorized data exposure—has become critical, with Palo Alto's Prisma AIRS reaching over 300 customers and CrowdStrike's AIDR seeing 250%+ ARR growth. Third, AI data centers need high-throughput, low-latency security, benefiting Fortinet's dedicated FortiASIC chips, which fueled a 41% quarterly product revenue rise. The payment model is shifting to usage-based pricing, making security spending scale with AI adoption, insulating cybersecurity from the broader SaaS downturn.
Chinese summary
截至2026年6月15日，美股软件ETF IGV跌12.3%、WCLD跌11.9%，而网络安全ETF CIBR和HACK均涨超20%，主要受益于三大AI新增需求。一是AI代理需要类似人的身份和权限管理，推动Palo Alto Networks以约250亿美元收购CyberArk管控机器凭证。二是运行时监控AI行为（如提示词注入、数据泄露）成为刚需，Palo Alto的Prisma AIRS客户超300家，CrowdStrike的AIDR年度经常性收入增幅超250%。三是AI数据中心要求高吞吐低延迟的安全防护，Fortinet自研FortiASIC芯片因此需求大增，季度产品收入同比涨41%。安全行业还转向按使用量计费模式，安全预算随AI深度而升高，使其在SaaS颓势中逆势增长。
Key points
Cybersecurity ETFs CIBR and HACK rose 20.74% and 21.16% respectively (vs. IGV’s -12.3%), with six CIBR top holdings up over 50%.
网络安全ETF CIBR和HACK分别上涨20.74%和21.16%（对比IGV下跌12.3%），CIBR前十大持仓中有6只年内涨超50%。
AI agents create a new market for machine identity and permission management; Palo Alto Networks acquired CyberArk for ~$25B to issue and revoke temporary agent credentials.
AI代理催生机器身份与权限管理新市场；Palo Alto Networks以约250亿美元收购CyberArk，用于为代理分配临时权限并在任务结束后自动收回。
Palo Alto’s Prisma AIRS monitors AI inputs/outputs for security violations, growing to 300+ customers and on track for $100M ARR; CrowdStrike’s AIDR discovers and tracks unmanaged agents, with 250%+ ARR growth.
Palo Alto的Prisma AIRS实时监控AI输入输出以防止违规，客户超300家并有望年化收入达1亿美元；CrowdStrike的AIDR发现并追踪未管控的代理，年度经常性收入增幅超250%。
Fortinet’s custom FortiASIC chips provide high-performance, low-latency security for AI data centers, helping push quarterly product revenue up 41% with multiple AI-datacenter orders.
Fortinet通过自研FortiASIC芯片为AI数据中心提供高性能安全防护，季度产品收入同比增长41%，已获得多笔AI数据中心订单。
Security spending is shifting to usage-based models (e.g., token-based licensing), ensuring that the more a company uses AI, the higher its security budget, creating sustainable growth.
安全付费模式转向按使用量计费（如基于Token的授权），企业用AI越深则安全预算越高，形成持续增长动力。