Cybersecurity Stocks: Endpoint, Cloud, Identity & Network

Zscaler is a cloud security company built on zero-trust principles. Its Zero Trust Exchange inspects internet and private-application traffic to secure users, workloads, and devices without traditional network perimeters, and it has expanded into data protection, segmentation, and AI-driven security operations within a SASE framework.

Okta is an identity and access management (IAM) company providing single sign-on, multi-factor authentication, and identity governance for workforce and customer use cases. Its cloud platform secures access to applications and APIs, and the company has expanded into identity threat protection and privileged and machine-identity security.

Rubrik provides data security and cyber resilience software, with backup, recovery, and ransomware-detection tools that help organizations restore data after attacks. Its Rubrik Security Cloud spans on-premises, cloud, and SaaS environments, and the company has expanded into AI-data security and identity-recovery capabilities.

Gen Digital is a consumer cybersecurity company that owns the Norton, Avast, AVG, Avira, and LifeLock brands. Its products include antivirus, VPN, identity-theft protection, and privacy tools for individuals and families, and it has added financial-wellness and scam-protection features using AI-based threat detection.

Check Point is a network and platform security vendor whose products include firewalls, threat prevention, and cloud security. Its Infinity architecture and Quantum gateways protect enterprise networks, endpoints, and cloud workloads, and the company has added AI-driven threat-prevention and security-management capabilities across its portfolio.

SailPoint builds identity security and identity governance software that manages who can access enterprise applications and data. Its platform automates access provisioning, certification, and risk detection across human, machine, and AI-agent identities. SailPoint returned to public markets in 2025 as a pure-play identity vendor.

SentinelOne is an AI-driven endpoint and extended-detection-and-response (XDR) company. Its Singularity platform uses behavioral AI for autonomous endpoint, cloud, and identity protection, and the company has added data and AI-security capabilities along with agentic security-operations features for automated threat response.

Netskope is a cloud security company built around secure access service edge and security service edge architectures. Its platform inspects traffic to web, cloud, and private applications to enforce zero trust access and data protection for distributed users. The company operates its own global network and has extended the platform to govern enterprise use of AI applications.

Qualys provides cloud-based vulnerability management, compliance, and attack-surface software. Its platform scans IT, cloud, and container environments for vulnerabilities and misconfigurations, then helps organizations measure risk and prioritize remediation across their infrastructure. The company has extended the platform to cover the security and governance of AI systems used in enterprises.

Varonis provides data security and data security posture management software. Its platform discovers, classifies, and monitors sensitive data across on-premises and cloud stores, detecting insider threats and abnormal access. The company runs a SaaS platform and has extended its coverage to the data and models that AI tools and autonomous agents reach.

Tenable is an exposure-management and vulnerability-management company whose Nessus scanner is widely used to identify vulnerabilities. Its platform extends across IT, cloud, operational-technology, and identity environments, helping organizations find, prioritize, and reduce cyber exposure across their attack surface.

Cloudflare operates a global network providing web performance and security services, including DDoS protection, web application firewall, zero-trust access, and email security. Security is core to its connectivity-cloud platform, which also includes developer, networking, and AI-inference services for websites and applications.

F5 provides application delivery and application and API security products for data centers and multi-cloud environments. Its portfolio includes web application firewalls, bot defense, API protection, and distributed cloud services that secure traffic for web and API workloads. The company has added a security platform aimed at protecting AI applications and the traffic they generate.

Akamai operates a global edge platform spanning content delivery, cloud computing, and security. Its security portfolio includes web application and API protection, bot management, microsegmentation, and enterprise browser security, which makes security a large and growing share of the business. The company sells these services to enterprises alongside its delivery and cloud infrastructure.

Commvault provides data protection and cyber resilience software that helps organizations back up, secure, and recover data after attacks. Its platform spans on-premises, cloud, and SaaS workloads and includes threat scanning, clean recovery environments, and testing that verifies an organization can restore operations after ransomware.

Netscout provides network performance monitoring and security products, including its Arbor line of distributed denial-of-service (DDoS) protection used by carriers and enterprises. Its Omnis platform combines deep packet inspection with threat detection, giving it meaningful network-security exposure alongside its observability business.

Radware provides application and network security plus application delivery products. It is known for DDoS mitigation, web application and API protection, and bot management delivered through on-premises appliances and cloud services, using behavior-based detection to defend enterprise and carrier networks.

Rapid7 provides vulnerability management, detection and response, and security operations software. Its platform combines exposure management with SIEM and managed detection and response services delivered by its own analysts. The company has added agentic AI capabilities that automate security investigations, and it runs a research group that publishes vulnerability and attacker research.

OneSpan provides authentication, identity verification, and anti-fraud software used heavily by banks and financial institutions. Its products secure digital transactions and agreements through strong authentication, electronic signature, and document protection. The company has extended its portfolio into mobile application security, protecting banking and payment apps that run on customer devices.

Alphabet, through Google Cloud, offers security products including Google Security Operations, Mandiant incident response and threat intelligence, Security Command Center, and Wiz cloud and AI security. Cybersecurity is a meaningful part of Google Cloud but a small share of Alphabet's overall advertising-driven business.

Microsoft operates a very large security business spanning Microsoft Defender, Entra identity, Purview data security, and Sentinel SIEM. These products protect endpoints, identities, cloud workloads, and email across the Microsoft ecosystem, representing a significant but still partial portion of its diversified software and cloud business.

Amazon, through AWS, provides cloud security services such as GuardDuty threat detection, Shield DDoS protection, WAF, and identity and access management. These services secure cloud workloads for AWS customers and represent a meaningful but supporting part of Amazon's diversified retail and cloud business.

Broadcom is a semiconductor and infrastructure-software company that owns the Symantec enterprise security business. Its security portfolio includes endpoint, network, web, and data-loss-prevention products for large enterprises, forming one segment within a company dominated by chips and other enterprise software.

Cisco is a networking company with a large security portfolio spanning firewalls, secure access, email and web security, and zero-trust products. Its 2024 acquisition of Splunk added SIEM and security analytics, expanding Cisco's security and observability footprint within its broader networking business.

IBM provides security software and services, including identity management, data security (Guardium), and security operations, plus consulting and managed security through its services arm and X-Force threat-intelligence team. Security is one part of IBM's diversified software, consulting, and infrastructure business.

Datadog provides observability and cloud monitoring software, with a security portfolio that includes cloud security posture management, application and API protection, and a cloud SIEM for threat detection. Security is one product area inside a broader monitoring and analytics business that engineering and operations teams use to run cloud applications.

Dynatrace provides observability and application-performance monitoring software with AI-driven analytics. Its platform includes an application-security module that detects and prioritizes vulnerabilities and threats in running applications, giving it meaningful but secondary cybersecurity exposure within a broader observability business.

Elastic develops the Elastic Search platform used for search, observability, and security. Elastic Security provides SIEM and endpoint capabilities for threat detection and response, representing one solution area within a broader data-search and analytics business that also powers AI and logging use cases.

Cellebrite builds digital investigation software used by law enforcement agencies, government bodies, and corporate security teams. Its products collect, review, and analyze data from mobile devices, computers, and cloud sources to support criminal investigations and internal incident response. The company sells largely to public sector customers and holds federal cloud security authorizations.

N-able sells IT management, data protection, and security software to managed service providers that support small and midsize businesses. Its portfolio includes endpoint protection, backup and disaster recovery, patch management, and tools that give providers visibility into security risk across many customer environments at once. The company reaches end customers almost entirely through those service providers.

Telos provides cyber risk management, secure networks, and identity and enrollment services for government agencies and commercial customers. Its Xacta product automates security compliance and risk workflows for organizations that must meet federal standards. The company also operates enrollment programs for government screening services, so its revenue extends beyond security software.