Why Security Tools Are Losing Money

Lucas (0:01)

If you've been watching the cybersecurity sector this week, the red arrows on your screen are impossible to ignore.

CrowdStrike dropped over 13 percent in just five days, while Palo Alto Networks fell more than 15 percent. It looks like a panic, but I want to suggest it's actually a correction of expectations that got too high, too fast.

Luna (0:23)

It feels visceral when you see those numbers, especially after the hype cycle of last year. But is it really just about valuation resetting, or do the fundamentals actually look weaker now?

Lucas (0:35)

That's the critical question. The headlines are all about the stock prices, but the real story is in the sales cycles. Enterprises are still buying security, but they are buying less of it, and they are demanding much more integration. The era of point solutions, buying one tool for email, another for endpoints, another for cloud is ending.

Vendors who can't prove they're saving customers' money through consolidation are getting left behind.

Luna (1:02)

So you're saying the demand isn't gone, it's just being forced into fewer contracts? That sounds like a tough transition for smaller players who rely on those fragmented sales.

Lucas (1:13)

Exactly. And that's where the margin pressure comes in. When customers ask for three platforms instead of 10, the winning vendor has to absorb more of the implementation cost up front to win the deal. This quarter, several major vendors reported lower gross margins because their acquisition costs went up while their renewal rates stabilized rather than surged. It's a classic squeeze.

Revenue growth slows, but operating expenses stay rigid.

Luna (1:42)

That explains the investor anxiety. They bought the narrative of endless double-digit growth, and now they're seeing linear growth with higher costs.

Lucas (1:51)

Precisely, and let's talk about the role of AI here, because it's not the silver bullet everyone expected. Two years ago, every CISO was told that AI would magically solve the talent shortage. Now, they're realizing that integrating AI models into existing security stacks is expensive and complex.

The initial ROI is lower than projected, which makes procurement committees hesitant to approve large new purchases.

Luna (2:20)

I've heard from friends in IT leadership that they're stuck paying for legacy tools while waiting for AI proof of concepts to mature. It's a limbo state for budgets.

Lucas (2:29)

That limbo is costing vendors dearly. When you have a product roadmap dependent on a technology that isn't quite ready to scale, your sales team starts hitting resistance. Customers are asking for specific outcomes, not just promises.

If you can't show me how your AI reduces my mean time to respond by 20%, I'm not signing that check. And right now, many vendors can't demonstrate that consistently enough to justify premium pricing.

Luna (2:59)

It reminds me of the early cloud migration phase.

Everyone was excited, but then they hit the actual bill and realized integration wasn't free. Is this the same pattern?

Lucas (3:10)

Very similar.

In the cloud era, companies underestimated operational complexity. In the AI security era, they are underestimating data governance and model drift. You can't just plug in a language model and expect it to understand your proprietary network traffic without massive fine-tuning. That fine-tuning requires engineering resources that are currently in short supply and very expensive.

Luna (3:37)

So the vendors who survived this will be the ones with deep engineering teams, not just clever marketing. It shifts the competitive moat from features to infrastructure.

Lucas (3:47)

Yes, and that favors the incumbents. Palo Alto and CrowdStrike have the cash reserves to keep investing in R&D even if sales slow.

Smaller competitors might find themselves squeezed out before they can achieve scale. This week's sell-off is partly a reassessment of which companies have the durability to withstand a longer period of slower growth.

Luna (4:09)

It's interesting that you mentioned durability. Investors usually punish any sign of slowing growth.

So why aren't these stocks crashing completely? There's still support in the floor.

Lucas (4:20)

Because the threat landscape hasn't improved. Ransomware attacks are still frequent, and regulatory pressures are tightening globally. Companies cannot stop spending on security, they can only optimize it.

So while growth rates are normalizing from hyper growth to steady growth, the baseline demand remains robust. It's a shift from expansion to efficiency.

Luna (4:45)

Efficiency over expansion. That's a mature market characteristic. Do you think this leads to more mergers and acquisitions in the sector?

Lucas (4:54)

I do. Large players are looking at the fragmentation problem and realizing that building everything from scratch is too slow.

They may start acquiring smaller niche tools not for their technology, but for their customer lists and specific integrations. It's a defensive move to keep their platform sticky. If you buy our identity management, we'll give you the endpoint detection for free, effectively bundling competitors out of existence.