2 Cybersecurity Stocks Positioned for the AI Agent Boom

Listen to the audio version of this article (generated by AI).

Editor’s Note: A piece of code smaller than a text message once knocked out ATMs and airline flights in 10 minutes. That’s where my friend Jonathan Rose starts today – and he ends with two cybersecurity stocks he thinks you should consider now.

Today’s issue showcases the thing I appreciate most about how he works. Instead of stopping at “here’s a great company,” he tells you exactly what he needs to see before risking a dollar on it. That discipline comes from nearly three decades on America’s busiest trading floors, including years as a market maker. And it shows in the results – since launching in 2024, his Advanced Notice recommendations have averaged an 81% gain, winners and losers included.

Now Jonathan is issuing a challenge – he calls it the $10K to $100K Challenge – and next Wednesday, Oct. 14, at 8 p.m. Eastern, he’s laying out the approach behind it: how he spots unusual trading activity, how he structures trades you can enter for less than $500, and how he decides what he’s willing to lose before he ever thinks about what he might make – for free. Reserve your spot here.

Now, here’s Jonathan.

Just after midnight on January 25, 2003, a tiny piece of code began racing across the internet.

It was a computer worm – dubbed the SQL Slammer – that could copy itself from one vulnerable machine to the next without anyone clicking a link.

Slammer was only 376 bytes long. It simply told each infected server to send out more copies of itself, as fast as it could.

That was enough.

The number of infected machines doubled about every 8.5 seconds. Within 10 minutes, Slammer had reached more than 90% of the computers vulnerable to it. The flood of traffic knocked networks offline, interfered with ATMs, and disrupted airline flights.

Microsoft Corp. (MSFT) had released a fix for the weakness Slammer exploited months earlier, but plenty of organizations still hadn’t installed it.

AI Agents Create a Different Version of the Same Problem

We’re at a similar moment with AI agents – software that can search for information, use tools, and carry out tasks with little human guidance. Companies putting agents to work have to control what those agents can access and catch them when they do something nobody intended.

Recent incidents have shown why. OpenAI says its reviews have found agents from their lab bypassing access controls, using exposed credentials, and interacting with third-party systems beyond their intended access. It has notified dozens of affected hacked parties – including the Australian and U.S. governments – while the reviews continue.

That creates a new job for cybersecurity companies. And I see two stocks investors should consider buying now.

Let me show you what each company sells – and what I’m watching before making a trade.

AI Agent Security Is Creating a New Cybersecurity Market

Think of an employee’s credentials as a set of keys. An AI agent working for that employee may need access to certain files and applications. Give it too many keys, and an error – or an attacker manipulating the agent – can carry it somewhere it shouldn’t go.

That makes identity security unusually important. 

Palo Alto Networks: Securing the Agent’s Identity

This is where Palo Alto Networks Inc. (PANW) has made a significant move. It completed its acquisition of CyberArk in February, adding that company’s identity-security products to a business that already sells network, cloud, and security-operations tools. 

In plain English, Palo Alto is trying to give large customers a single place to manage more of their defenses, including the permissions granted to AI agents. The integration is still underway, so investors need to watch how well it delivers on that plan.

In its latest reported quarter, Palo Alto’s revenue rose 34% from a year earlier, to $3.41 billion. Its next-generation security annual recurring revenue – the value of subscriptions it expects to collect over a year – reached $9.1 billion. Those figures include the effects of acquisitions, so I’m watching what growth looks like as the businesses are brought together.

PANW is my first buy of the two. It gives me a large, established cybersecurity business with a clear path to sell more to customers as they add AI agents. 

CrowdStrike: Watching AI Agents Where They Work

CrowdStrike Holdings Inc. (CRWD) comes at the AI agent problem from another direction.

Its Falcon software already operates across customers’ computers and other devices – the places where a great deal of AI-agent activity starts. This month, CrowdStrike introduced Falcon Guardian, designed to help companies discover which agents are running, see what they do, control which ones have permission to run, and respond when their behavior becomes dangerous. 

It’s a new product, so I would watch customer adoption before assuming it will become a major revenue source.

CrowdStrike ended its latest reported quarter with $5.84 billion in annual recurring revenue, up 25% from a year earlier. 

I would buy CRWD, too, but I’d start with a smaller position. Investors already recognize how strong this company is. That can leave less room for disappointment if a new product takes longer to catch on or growth slows.

And spending on security is still growing. Gartner forecasts worldwide information-security spending of about $244 billion in 2026, with demand for products that both use AI to improve defenses and secure companies’ own AI use.