AI Trade Broadens into Cybersecurity as CRWD and NET Enter the Spotlight

The US AI trade is beginning to broaden beyond GPUs, servers and semiconductor hardware as investors increasingly focus on cybersecurity, cloud infrastructure and enterprise software.

For a fuller AI-agent attack-surface and security-stack framework, see AI Cybersecurity Stocks 2026.

To choose among compute, networking, and cybersecurity AI themes, start with the AI & US stock themes guide.

Recent earnings reactions across cybersecurity stocks highlight the shift. CrowdStrike (CRWD) rallied roughly 20.5% following its earnings release, while Okta (OKTA) surged nearly 29%.

The move, however, should not be interpreted as a wholesale rotation out of semiconductors.

AI hardware leaders such as NVIDIA have remained strong, suggesting that investors are not abandoning the compute trade. Instead, the market appears to be expanding the AI investment thesis into additional layers of infrastructure.

Cybersecurity is emerging as one of those layers.

At the same time, performance across the sector remains highly uneven. Investors continue to differentiate aggressively between companies delivering stronger growth, improving recurring revenue metrics and credible forward guidance, and those that fail to meet elevated expectations.

Cloudflare (NET): Q2 Revenue Rises 36% as Internet Traffic Becomes More Automated

Cloudflare reported Q2 2026 revenue of $696.1 million, up 36% year over year.

Current Remaining Performance Obligations, or cRPO, increased 35% from a year earlier, slightly accelerating from 34% growth in the first quarter and signaling continued strength in contracted future revenue.

Developer adoption also expanded sharply.

Cloudflare's developer base surpassed 7.4 million during the quarter, with nearly 2 million developers added in Q2 alone. That quarterly increase exceeded the roughly 1.5 million developers added during the entirety of FY2025.

Cloudflare Q2 2026 Key Metrics

Beyond financial performance, Cloudflare is also positioned at the center of a broader change in Internet traffic.

The company has repeatedly highlighted the growing role of automated traffic across the web. More than half of global Internet traffic is now associated with bots, crawlers and other non-human systems, with AI training crawlers and AI agents becoming an increasingly important component of that activity.

That distinction matters.

Non-human traffic should not be treated as synonymous with AI-agent traffic. It also includes search crawlers, conventional bots and other automated systems.

The broader trend, however, is relevant for Cloudflare.

As AI agents increasingly access websites, call APIs and perform autonomous tasks, demand could rise for API security, bot management, identity verification and edge-network protection.

For NET investors, the key question is whether that structural increase in automated activity can translate into larger enterprise contracts and sustained billings growth.

CrowdStrike (CRWD): Net New ARR Growth Accelerates from 32% to 51%

CrowdStrike provided a more direct fundamental catalyst.

The company reported FY2027 Q1 Net New Annual Recurring Revenue of $256 million, representing 32% year-over-year growth.

In the second quarter, Net New ARR increased to approximately $333 million, accelerating to 51% year-over-year growth.

Q2 total revenue reached $1.47 billion, up 26% from a year earlier, while ending ARR reached $5.84 billion.

CrowdStrike ARR and Revenue

The most important number is not necessarily the 26% revenue growth rate.

The sharper signal is the acceleration in Net New ARR.

ARR remains one of the most closely watched indicators for subscription-based cybersecurity companies because it provides insight into recurring revenue momentum and future business expansion.

CrowdStrike's acceleration supports the view that large enterprises remain willing to prioritize spending on critical security platforms even while broader IT budgets face scrutiny.

It does not, by itself, prove that enterprises are universally abandoning point-security products in favor of consolidated platforms.

But it does strengthen the case that leading cybersecurity platforms with broad product portfolios are retaining meaningful pricing and spending power.

This Is Not a Broad-Based Cybersecurity Rally

Recent market action also shows why the sector should not be treated as a single trade.

CrowdStrike and Okta delivered powerful post-earnings rallies, but performance across other cybersecurity names has been considerably less consistent.

Zscaler (ZS), for example, fell more than 30% following its May earnings report after investors reacted negatively to its outlook and forward growth expectations.

The timing matters.

That decline did not occur alongside the latest CRWD rally, but it remains a useful example of how aggressively the market is punishing cybersecurity companies when expectations are not met.

The divergence suggests investors are not buying the sector indiscriminately.

Instead, the market is rewarding companies that combine:

accelerating growth, strong recurring revenue, credible enterprise demand and guidance capable of supporting premium valuations.

For companies that fail on those measures, high valuation multiples can magnify downside following earnings.

The current setup therefore looks more like selective expansion within the cybersecurity trade than a broad-based sector rally.

Why AI Increases the Strategic Importance of Cybersecurity

The first phase of the generative-AI investment cycle was dominated by compute.

GPUs, servers, data centers and high-speed networking absorbed much of the initial capital expenditure.

As AI moves deeper into enterprise deployment, the next set of problems becomes different.

AI agents may access corporate databases, call internal APIs, modify code, interact with SaaS applications and eventually execute portions of business workflows autonomously.

That means companies are no longer securing only human employees and traditional endpoints.

A growing population of non-human identities also needs to be authenticated, authorized and monitored.

AI therefore creates not only productivity opportunities, but also additional attack surfaces.

From an investment perspective, the AI infrastructure stack is becoming broader:

Semiconductors → Servers → Networking → Cloud Infrastructure → AI Applications → Identity and Cybersecurity

Semiconductors remain one of the core foundations of the cycle.

Cybersecurity, however, is beginning to develop a more independent growth thesis as AI moves from model training into large-scale enterprise deployment.

That helps explain why NET, CRWD and other security names are attracting renewed attention.

The Trade Is Moving from Sector Exposure to Stock Selection

For investors, the growing dispersion across cybersecurity stocks creates both opportunity and risk.

Buying the entire sector simply because cybersecurity may benefit from AI can overlook major differences in growth quality and execution.

The next set of earnings reports should therefore be evaluated through metrics such as:

If these indicators improve across a broader group of companies, cybersecurity could evolve from an extension of the AI narrative into a more independent earnings-driven market theme.

If tier-two companies continue to struggle, however, valuation premiums may remain concentrated among a small group of category leaders.

Trading Cybersecurity Price Dispersion Through Tokenized Stocks

As dispersion increases across US technology stocks, traders may increasingly focus on individual company price movements rather than broad technology-index exposure.

Tokenized stock derivatives linked to names such as NET and CRWD provide another way to track those price movements. The recent expansion of AI and cybersecurity-related tokenized stock listings on MSX reflects the widening of trading interest beyond traditional semiconductor names.

For additional context on how these instruments reference US equity prices and how their market structure works, traders can review the MSX tokenized stock market update and trading mechanics.

These products provide synthetic price exposure rather than direct ownership of the underlying common shares. They therefore do not provide shareholder voting rights or other legal ownership privileges associated with traditional equities.

What to Watch Next

The central question for the second half of 2026 is no longer simply whether AI benefits cybersecurity.

The more important question is whether AI-driven security demand can consistently translate into revenue, ARR and larger enterprise contracts.

Cloudflare needs to demonstrate that growth in developers and automated Internet activity can support continued enterprise contract expansion.

CrowdStrike needs to show that the Q2 acceleration in Net New ARR represents a durable trend rather than a one-quarter rebound.

Upcoming earnings from Zscaler, SentinelOne and other security vendors will also be important.

If more companies begin to report stabilizing revenue growth, stronger recurring revenue metrics and improving guidance, the current rally could broaden into a genuine sector-level expansion.

If weaker names continue to struggle, the market will likely remain concentrated in a small group of companies with the strongest earnings visibility.

Bottom Line

What is happening in the second half of 2026 is not a simple rotation out of semiconductors.

A more accurate interpretation is that the AI trade is broadening into a larger infrastructure stack.

Semiconductors still power the compute layer, while cybersecurity is becoming increasingly important as AI moves deeper into enterprise systems.

Cloudflare's revenue, cRPO and developer growth, combined with CrowdStrike's acceleration in Net New ARR from 32% to 51%, provide stronger fundamental support for that thesis.

The market, however, remains highly selective.

Sharp rallies in CRWD and OKTA do not mean every cybersecurity stock will benefit equally. The next stage of the trade will depend on which companies can convert AI-driven security demand into durable ARR growth, contract expansion and cash flow.

For now, the more accurate framing is:

AI trade broadening — not semiconductor rotation.