Citi and Wells Fargo channel work points to stronger cybersecurity demand into 2027, even as sector shares pulled back. AI adoption is expanding security needs, but ratings and company exposure remain sharply different.
Cybersecurity stocks have pulled back even as analyst channel work points to firmer enterprise demand. Citi raised price targets on CrowdStrike, Palo Alto Networks and Zscaler while keeping Buy ratings, and Wells Fargo said reseller discussions indicated spending momentum was building into 2027.
The demand argument has a practical mechanism. Companies deploying AI agents create new identities, data flows and automated actions that must be monitored. Attackers are also adopting AI tools. CrowdStrike recently described a campaign in which a threat actor used the open-source ARTEX penetration-testing system and large language models against South Korean financial organizations, with data exfiltration reported.
Palo Alto Networks' survey of more than 1,600 critical-infrastructure security leaders across 11 countries found that 95% were concerned about attacks powered by frontier AI models. The figure measures concern, not actual incident frequency, and comes from a vendor-sponsored survey. It nevertheless shows why AI budgets can create additional security spending rather than merely replace existing tools.
One sector, different signals
Analyst target increases do not make every stock equally attractive. Wells Fargo raised its Fortinet target to $160 from $135 but kept an Underweight rating. At the cited closing price of $184.05, that target still implied downside. Citi lifted Okta's target while retaining a Neutral rating, in contrast with its Buy ratings on CrowdStrike, Palo Alto Networks and Zscaler.
The useful investor question is which vendors can convert AI-related demand into durable platform revenue without sacrificing margins. Channel surveys are forward-looking indicators, not booked sales. Upcoming earnings should show whether billings, remaining performance obligations and large-deal activity confirm the optimism.
For PANW, the spending evidence is constructive, and critical-infrastructure concerns support the market need. The risk is valuation and competition, not an absence of demand. Investors should keep the analyst calls separate from company-reported results and wait for those results to validate the channel checks.
Research and commentary are provided for information, not personalized investment advice. Verify material claims with the linked source and original company disclosures. Report a correction · About BTI
