The cybersecurity sector staged a broad-based rally on Tuesday as investors bet that accelerating artificial intelligence adoption will drive a sustained new wave of enterprise security spending — lifting shares of CrowdStrike, Zscaler, Tenable, Qualys, and Rapid7 in a sector-wide move that analysts say may be the start of a longer re-rating.
CrowdStrike Holdings (CRWD) led large-cap gains, rising 1.71% to $418.20 after KeyBanc Capital Markets upgraded the stock from Hold to Buy and installed a $525 price target — implying roughly 25% upside from current levels. The investment bank cited CrowdStrike’s AI-native Falcon platform and its entrenched position in enterprise endpoint security as foundations for the bullish call.
AI Is Expanding the Attack Surface — and the Opportunity
The logic driving Tuesday’s rally is straightforward: as companies deploy AI agents, large language models, and cloud-native infrastructure at scale, they dramatically expand the number of endpoints, APIs, and data pipelines that must be defended. That dynamic is creating structural tailwinds for security vendors even as broader enterprise IT budgets remain under pressure.
“AI adoption doesn’t just add capabilities — it adds complexity, and complexity is what attackers exploit,” one security analyst framed it. “Every new model endpoint, every new autonomous agent, every new data pipeline is a potential entry point.” The observation underpins a growing thesis on Wall Street that cybersecurity is the one category of software spending enterprises can least afford to cut.
Industry research supports that view. Gartner projected global information security spending to reach $212 billion in 2025, growing at a compound annual rate of roughly 11% through 2027 — a pace that has accelerated as AI-powered cyberattacks become more sophisticated. The World Economic Forum’s 2025 Global Cybersecurity Outlook flagged a widening skills gap and rising nation-state threat activity as compounding the challenge for corporate security teams.
CrowdStrike: From Outage Overhang to Analyst Favorite
CrowdStrike’s trajectory since its July 2024 software outage — which briefly crashed millions of Windows devices globally — illustrates how quickly sentiment can shift when fundamentals remain intact. The stock fell as low as $220 in the aftermath of that incident, but it has since more than recovered as customers renewed contracts and the company demonstrated that its core platform had not lost competitive ground.
At $418.20, CRWD carries a market capitalization of approximately $106 billion and trades significantly below its 52-week high of $566.90. The KeyBanc upgrade brings the analyst consensus increasingly into “Buy” territory, with the average price target on Wall Street now implying meaningful upside from current levels. Wolfe Research had previously upgraded the stock in March, also assigning an Outperform rating.
CrowdStrike’s business model — built around an annual recurring revenue engine with high gross retention — gives it visibility that pure-play SaaS peers often lack. The company’s move into identity security, cloud workload protection, and AI-powered threat detection has expanded its addressable market well beyond its original endpoint roots.
Zscaler: Deep Value or Value Trap?
The more contested name in Tuesday’s rally was Zscaler (ZS), which climbed 2.53% to $134.33. Despite the day’s gains, Zscaler remains one of the steeper losers in the cybersecurity space year-to-date, having fallen more than 40% since January even as the company reported $816 million in fiscal Q2 FY2026 revenue — a number that would be cause for celebration at many enterprise software firms.
The disconnect between Zscaler’s operating performance and its stock price reflects a broader re-rating of growth multiples that swept through the software sector in 2025 and 2026. At a forward price-to-earnings ratio of roughly 28x, Zscaler is no longer priced for perfection — a shift from its peak years when the stock commanded 50x-plus earnings multiples on the promise of cloud-native zero-trust architecture becoming the default enterprise network model.
KeyBanc maintained an Overweight rating on Zscaler in mid-April but lowered its price target from $220 to $160, reflecting continued uncertainty around the pace of large-deal closings. The average analyst price target of $231.56, however, signals that the Street broadly sees the current price as offering a significant margin of safety relative to the company’s long-term earnings power.
Mid-Cap Names Flash Bigger Moves
Further down the market-cap spectrum, Tenable Holdings, Qualys, and Rapid7 all posted outsized gains Tuesday as analysts projected accelerating benefits for vulnerability management and cloud security platforms from AI adoption. The mid-cap cybersecurity cohort had underperformed larger peers for much of 2025, making the sharp reversal a signal worth watching for those tracking sector rotation.
Tenable, which specializes in exposure management and vulnerability assessment, has positioned itself as an “AI-era” security platform — arguing that the proliferation of AI-generated code introduces new classes of software vulnerabilities that require continuous scanning rather than periodic audits. Qualys has made similar arguments around its cloud-based security and compliance platform. Rapid7 has leaned into managed detection and response (MDR), a segment growing at double-digit rates as enterprises outsource security operations.
Geopolitical Tensions Add Another Layer
Beyond the AI adoption story, cybersecurity stocks benefit from a less pleasant but equally persistent tailwind: rising nation-state threat activity. U.S. government agencies and their international counterparts have issued a series of advisories in 2025 and early 2026 about sophisticated intrusion campaigns linked to state-sponsored actors in China, Russia, North Korea, and Iran — targeting critical infrastructure, financial services, and defense contractors.
That backdrop has accelerated federal and enterprise security investment cycles in ways that don’t readily reverse when macroeconomic conditions soften. National security-linked cybersecurity demand has historically been one of the stickier categories of government technology spending, insulating vendors with federal exposure from broader budget pressure.
The Valuation Reset and What Comes Next
Perhaps the most significant development for sector watchers is not just Tuesday’s rally but the valuation reset that preceded it. With Zscaler down 40% year-to-date and other names trading well below their 2021-2022 peaks, the cybersecurity sector no longer demands the faith-based multiple expansion that once made it a lightning rod for skeptics.
Investors now have the opportunity to assess companies like CrowdStrike, Zscaler, and Palo Alto Networks (PANW) on the basis of recurring revenue growth, free cash flow conversion, and net revenue retention — metrics that have generally held up even as share prices corrected. For a sector that is structurally tied to two of the most durable macro themes of the decade — AI adoption and elevated geopolitical risk — that combination may prove more durable than Tuesday’s one-day move suggests.
Not every name in the sector will benefit equally. Vendors that fail to integrate AI into their detection and response workflows risk being displaced by platforms that natively leverage large language models for threat analysis, alert triage, and automated remediation. The next 18 months may prove a meaningful inflection point in determining which cybersecurity companies emerge as durable franchises and which get rationalized out of enterprise software stacks.
Key Metrics at a Glance
- CrowdStrike (CRWD): $418.20, +1.71% Tuesday; $106B market cap; 52-week range $342.72–$566.90; KeyBanc Buy, $525 PT
- Zscaler (ZS): $134.33, +2.53% Tuesday; $21.6B market cap; down 40%+ YTD; Avg analyst PT $231.56
- Tenable, Qualys, Rapid7: All posted gains Tuesday on AI-driven security spending thesis
- Global cybersecurity market: Projected at $212B in 2025, growing ~11% annually through 2027 (Gartner)
Disclosure: This article was produced with AI assistance and reviewed before publication. It is for informational purposes only and is not investment advice.