Please ensure Javascript is enabled for purposes of website accessibility
Free Article Join Over 1 Million Premium Members And Get More In-Depth Stock Guidance and Research

Read This Before Investing In Cybersecurity Stocks

By Leo Sun - May 12, 2016 at 6:51PM

You’re reading a free article with opinions that may differ from The Motley Fool’s Premium Investing Services. Become a Motley Fool member today to get instant access to our top analyst recommendations, in-depth research, investing resources, and more. Learn More

Interested in buying a few beaten-down cybersecurity stocks? Read this first.

Cybersecurity has become a hot business over the past few years due to a surge in cyber attacks and data breaches. The Identity Theft Resource Center (ITRC) reports that the number of personal records exposed in data breaches nearly doubled last year to 169 million across the enterprise, healthcare, government, educational, and financial sectors.

Yet cybersecurity stocks have fared poorly this year, with the PureFunds ISE Cyber Security ETF ( HACK -2.18% ) -- which owns a wide variety of cybersecurity stocks -- sliding more than 20% over the past 12 months. That sectorwide decline has revealed some lucrative long-term investment opportunities, but investors should understand the basics of the cybersecurity industry first.

Image source: Pixabay.

Market growth potential

Research firm Markets and Markets expects the global cybersecurity market to grow from $106.3 billion to $170.2 billion in 2020. Last December, a survey by Wakefield Research found that 81% of 700 IT decision makers at SMBs planned to boost their annual IT security budget by an average of 22% in 2016.

Governments, which accounted for 8% of all data breaches last year in the ITRC report, are also facing pressure to increase cybersecurity spending. Earlier this year, the Obama administration proposed increasing federal cybersecurity spending by $5 billion to $19 billion in 2017. Therefore, businesses and governments might reduce spending in other areas, but cybersecurity spending will likely climb as cyberattacks become increasingly sophisticated.

External and internal threats

Cybersecurity companies are generally split into two categories -- those which protect a network from external threats, and those that deal with internal ones.

Companies that deal with external threats create firewalls, threat prevention systems, antivirus software, and other security solutions. "Best in breed" players in this market include firewall providers Palo Alto Networks ( PANW -2.70% ) and Check Point, threat prevention leader FireEye ( FEYE -1.41% ), antivirus maker Symantec, and networking giant Cisco's bundled security solutions.

Companies that tackle internal threats offer network monitoring solutions. Key players in this market include IT giants IBM and Hewlett-Packard Enterprise, IT management software provider CA, cloud-based security firms Splunk and Imperva, and privileged accounts protector CyberArk ( CYBR -11.39% ).

A key threat facing many smaller players in both markets is that larger players like IBM, Cisco, and HPE are bundling more of their own security services into their hardware and services. If that happens, companies which don't have a well-protected niche (like CyberArk in privileged accounts) could be wiped out, while companies which dominate specific niches could be acquired.

Common financial themes

Investors will also notice some common financial themes across the cybersecurity industry. First, it's common for these companies to generate double or triple-digit sales growth for multiple quarters. Palo Alto has delivered over 50% annual sales growth every quarter since the fourth quarter of 2014. FireEye's revenue rose 34% last quarter, while CyberArk's improved 42%.

But sales growth isn't everything. Most companies split their revenue into product and services. Product (or license) revenue growth is considered more important, since companies must keep selling new licenses for their products to generate recurring services revenue from subscriptions and maintenance fees. Product revenue growth outpacing total revenue growth is considered a strong positive indicator of future growth.

However, many cybersecurity companies are deeply unprofitable due to high stock-based compensation expenses and rapid cash burn rates. Many cybersecurity companies -- including Palo Alto, FireEye, and CyberArk -- used secondary offerings to raise cash, which diluted shares for existing investors. Some companies, like CyberArk, have since become profitable on both a GAAP and non-GAAP basis by reining in their spending. Others, like FireEye, remain unprofitable by both measures.

Therefore, investors should look closely at these companies' cash positions and the reconciliation between non-GAAP and GAAP profits. For example, Palo Alto -- which is profitable on a non-GAAP basis -- is unprofitable on a GAAP basis due to stock-based compensation expenses, which soared 76% annually last quarter and swallowed up nearly a third of its revenue.

A volatile but promising market

Investors seemed to sell many cybersecurity stocks over the past year due to concerns regarding softer enterprise spending and competition. But I believe that fears about enterprise spending are unjustified, since companies are realizing that the brand damage caused by data breaches far outweighs the cost of solid protection. Competition is worrisome, but only for certain companies which don't dominate niches, lack growth, and aren't considered "best in breed" players.

Cybersecurity stocks certainly aren't for risk averse investors. But investors who can stomach the volatility could generate big returns within the next few years by investing in the right players in this promising market.

This article represents the opinion of the writer, who may disagree with the “official” recommendation position of a Motley Fool premium advisory service. We’re motley! Questioning an investing thesis – even one of our own – helps us all think critically about investing and make decisions that help us become smarter, happier, and richer.

Invest Smarter with The Motley Fool

Join Over 1 Million Premium Members Receiving…

  • New Stock Picks Each Month
  • Detailed Analysis of Companies
  • Model Portfolios
  • Live Streaming During Market Hours
  • And Much More
Get Started Now

Stocks Mentioned

Palo Alto Networks, Inc. Stock Quote
Palo Alto Networks, Inc.
$520.86 (-2.70%) $-14.44
FireEye, Inc. Stock Quote
FireEye, Inc.
$16.09 (-1.41%) $0.23
CyberArk Software Ltd. Stock Quote
CyberArk Software Ltd.
$151.60 (-11.39%) $-19.49
International Business Machines Corporation Stock Quote
International Business Machines Corporation
$118.84 (1.66%) $1.94
NortonLifeLock Inc. Stock Quote
NortonLifeLock Inc.
$24.13 (0.17%) $0.04
Cisco Systems, Inc. Stock Quote
Cisco Systems, Inc.
$56.23 (0.14%) $0.08
Check Point Software Technologies Ltd. Stock Quote
Check Point Software Technologies Ltd.
$109.26 (-1.67%) $-1.86
Splunk Inc. Stock Quote
Splunk Inc.
$114.21 (-2.32%) $-2.71
CA, Inc. Stock Quote
CA, Inc.
ETF Managers Trust - ETFMG Prime Cyber Security ETF Stock Quote
ETF Managers Trust - ETFMG Prime Cyber Security ETF
$58.90 (-2.18%) $-1.31
Hewlett Packard Enterprise Company Stock Quote
Hewlett Packard Enterprise Company
$15.17 (1.20%) $0.18

*Average returns of all recommendations since inception. Cost basis and return based on previous market day close.

Related Articles

Motley Fool Returns

Motley Fool Stock Advisor

Market-beating stocks from our award-winning service.

Stock Advisor Returns
S&P 500 Returns

Calculated by average return of all stock recommendations since inception of the Stock Advisor service in February of 2002. Returns as of 12/06/2021.

Discounted offers are only available to new members. Stock Advisor list price is $199 per year.

Our Most Popular Articles

Premium Investing Services

Invest better with the Motley Fool. Get stock recommendations, portfolio guidance, and more from the Motley Fool's premium services.