Wall Street’s fervent embrace of cybersecurity stocks throughout much of 2026, largely driven by the burgeoning risks and opportunities presented by artificial intelligence, appears to be entering a new, more discerning phase. According to a recent analysis from Bernstein, the initial "easy part" of this lucrative trade has largely concluded, with one notable exception: Zscaler, Inc. Bernstein’s latest report, spearheaded by analyst Peter Weed, signals a critical re-evaluation of valuation across the sector, distinguishing between companies that still offer substantial growth potential at current prices and those where future upside is already heavily priced in. This shift underscores a growing maturity in how the market assesses the long-term impact of AI on digital security, moving beyond broad enthusiasm to scrutinize individual company fundamentals and strategic positioning.
The cybersecurity landscape has undergone a dramatic transformation over the past few years, profoundly influenced by the rapid advancements and widespread adoption of artificial intelligence. As enterprises globally integrate AI into their operations, from enhancing productivity with generative AI tools to automating complex processes, the attack surface for malicious actors has expanded exponentially. AI-powered phishing attacks, sophisticated malware, and advanced persistent threats have become more prevalent, compelling organizations to significantly ramp up their cybersecurity investments. This burgeoning demand created a fertile ground for cybersecurity stocks, which experienced robust rallies through late 2025 and into 2026. Investors, recognizing the indispensable nature of digital defense in the AI era, poured capital into companies offering innovative solutions to combat these evolving threats. The market’s initial reaction was largely indiscriminate, rewarding nearly all players in the sector that could credibly claim to address AI-related security challenges. However, as the initial euphoria settles, analysts like Bernstein are now prompting investors to look beyond the general narrative and evaluate specific companies based on their unique growth drivers, competitive advantages, and, crucially, their current valuations. The underlying demand for AI security solutions remains robust and is projected to continue its upward trajectory for the foreseeable future, but the investment thesis is evolving from broad sector plays to selective stock picking, emphasizing sustainable growth and untapped value.
On September 17, 2026, Bernstein analyst Peter Weed released a pivotal research note that sent ripples through the cybersecurity investment community. The report maintained an "Outperform" rating for Zscaler, Inc. (NASDAQ: ZS) while simultaneously raising its price target to an ambitious $298. This new target implied a significant upside potential of approximately 46% at the time the call was published, making Zscaler a standout in a sector facing increasing valuation scrutiny. In stark contrast, Bernstein downgraded Palo Alto Networks, Inc. (NASDAQ: PANW), a long-standing market leader, along with several other prominent cybersecurity firms, to a "Market Perform" rating. This decisive move was not predicated on a diminishing belief in the enduring demand for AI-driven security solutions; rather, it was a strategic recalibration based almost entirely on valuation dynamics. Weed’s analysis highlighted that while the need for robust cybersecurity, particularly in the context of AI risks, remains paramount, the market had, in many cases, already priced in much of the anticipated growth and strength for several industry giants. The distinction drawn by Bernstein was clear: the opportunity for substantial rerating and outsized returns now lay predominantly with companies whose current market capitalization did not yet fully reflect their future potential, despite strong underlying business fundamentals. This selective approach signals a more mature phase of investment in the AI-cybersecurity nexus, where fundamental analysis of growth drivers, competitive positioning, and most importantly, valuation, takes precedence over sector-wide optimism.
Zscaler’s recent trajectory has presented a unique opportunity for a significant rerating, as highlighted by Bernstein’s upgraded outlook. Entering the period of the analyst call, Zscaler shares had underperformed significantly compared to many of its peers in 2026, experiencing a decline of approximately 11.5% while other cybersecurity stocks rallied. This relative dip created the very valuation discount that Bernstein now believes makes Zscaler an attractive investment. A key driver behind Bernstein’s optimistic stance is Zscaler’s strategic pivot from what was characterized as "opportunity-based selling" – often transactional and focused on securing new, isolated deals – towards fostering deeper, more enduring customer relationships. This shift emphasizes cross-selling additional products and services within its integrated Zero Trust Exchange platform and ensuring greater customer success and satisfaction, leading to higher retention and expansion.
Evidence of this strategy bearing fruit was seen in Zscaler’s fiscal Q1 report, where the company announced an impressive 115% dollar-based net retention rate (DBNR). This metric, which measures the percentage of revenue retained from existing customers over a period, including expansions and upgrades, but net of churn, is a critical indicator of customer satisfaction and product stickiness. Management further underscored its strength by stating that this high level of retention had remained fairly stable over several preceding quarters, indicating a consistent ability to expand its footprint within its existing client base. For Zscaler, which specializes in zero-trust network access (ZTNA) and cloud security, this stable and high DBNR is particularly compelling. It suggests that as existing customers adopt more of Zscaler’s comprehensive suite of security products – a trend likely accelerated by the increasing complexity of their IT environments due to AI adoption – and as AI drives an increase in the number of users, agents, and workloads requiring robust security, Zscaler’s growth can remain strong. This robust internal growth mechanism, coupled with the stock’s previous underperformance, creates a straightforward "rerating case" where the market can adjust Zscaler’s valuation multiples upwards to align with its fundamental strength and future potential, without the stock needing to carry the same elevated expectations and premium as its "hotter" peers.
However, the discount on Zscaler’s stock, which now presents an opportunity, has not been without its reasons. The company continues to grapple with challenges such as slower incremental Annual Recurring Revenue (ARR) growth in certain segments and intense competition from larger, more diversified cybersecurity firms. These competitors often bundle multiple security functions into a single platform, appealing to large enterprises seeking vendor consolidation to simplify management and potentially reduce costs. In such an environment, a focused zero-trust specialist like Zscaler must consistently prove that its specialized, best-of-breed solutions warrant a separate budget allocation and offer superior security outcomes compared to integrated platform offerings. The long-term success of Zscaler’s rerating will therefore depend not only on its ability to maintain high retention and expand within existing accounts but also on its capacity to effectively articulate the unique value proposition of its Zero Trust Exchange in a competitive market increasingly favoring comprehensive, consolidated security ecosystems.
In stark contrast to Zscaler’s rerating opportunity, Palo Alto Networks, Inc. (NASDAQ: PANW) faces what Bernstein identifies as an "opposite problem." Palo Alto Networks has, for years, been lauded for its expansive and robust platform approach, which offers enterprises a single vendor solution across critical domains including network security, cloud security, and security operations. Through a combination of organic development and strategic acquisitions, Palo Alto Networks has aggressively expanded its technological reach, becoming a dominant force in the cybersecurity industry. This broad platform strategy has resonated deeply with large enterprises that prioritize vendor consolidation, seeking to streamline their security infrastructure, reduce complexity, and achieve greater operational efficiencies by dealing with fewer providers. The market has historically rewarded Palo Alto Networks handsomely for this comprehensive strategy, embedding a significant premium into its stock valuation.
Bernstein’s recent downgrade of PANW to Market Perform, however, reflects the analyst’s view that investors are already paying a substantial price for this established strength. The company’s current valuation, in Bernstein’s assessment, already fully accounts for its market leadership, platform breadth, and future growth prospects. Furthermore, the path to continued outsized returns faces several hurdles. Integration costs associated with its numerous acquisitions, while strategically beneficial, can weigh on short-term profitability and operational efficiency. A larger share count, often a byproduct of M&A and employee stock compensation, can dilute earnings per share growth. Perhaps most critically, Palo Alto Networks faces increasingly challenging "slowing growth comparisons" as its revenue base expands. Maintaining extremely high percentage growth rates becomes incrementally difficult for a company of its scale, leading to natural deceleration. These factors collectively raise the hurdle for the stock to deliver significant further upside from its current levels, even as the underlying business remains fundamentally strong and continues to benefit from the overarching demand for cybersecurity. While Palo Alto Networks’ strategy of offering an integrated, end-to-end security solution is undoubtedly powerful and appealing to a broad segment of the market, Bernstein’s analysis suggests that its valuation has largely captured the benefits of this strength, leaving less room for unexpected positive surprises or a substantial rerating.
Despite Bernstein’s differentiated outlook, institutional investor positioning data reveals a nuanced picture, indicating that major funds have not entirely abandoned either Zscaler or Palo Alto Networks. Insider Monkey’s tracking of hedge fund activity for Q2 2026 showed an increase in the number of funds holding Zscaler, rising from 46 in Q1 to 52 in Q2. This modest but consistent increase suggests a growing institutional interest in Zscaler, potentially aligning with Bernstein’s thesis that the stock offers untapped value. Similarly, Palo Alto Networks continued to see strong institutional backing, with its ownership edging up from 87 funds in Q1 to 89 in Q2. This indicates that while some analysts might be concerned about valuation, a significant portion of the institutional investment community still sees long-term value in PANW’s robust platform and market leadership. A notable example is Fisher Asset Management, which dramatically increased its position in Palo Alto Networks by an astounding 2,143% during Q2, accumulating approximately 5.8 million shares. Such a substantial investment from a prominent asset manager underscores a powerful conviction in PANW’s enduring strength and strategic importance, despite broader valuation concerns.
Furthermore, an examination of Zscaler’s short-interest snapshot as of August 31, 2026, revealed approximately 6.35 million shares held short. This figure represented roughly 4.7% of its public float and indicated about 2.9 days to cover. While a short interest percentage of 4.7% suggests some level of bearish sentiment or hedging activity among investors, it is not an alarmingly high figure that would typically signal widespread negative expectations or an imminent downturn. The relatively low "days to cover" metric also implies that short sellers could quickly exit their positions without significant market disruption if positive news emerged. This mixed institutional sentiment – increasing long positions for both companies while Zscaler maintains a moderate short interest – highlights the ongoing debate within the investment community regarding the future trajectories and appropriate valuations for these cybersecurity leaders. It suggests that even as analysts like Bernstein draw lines within the popular cybersecurity trade, many investors are maintaining their positions or even increasing exposure, possibly anticipating different long-term outcomes or employing alternative investment strategies.
Bernstein’s call is particularly insightful because it moves beyond generic bullish cybersecurity commentary, drawing a distinct line within an already popular and high-growth trade. It serves as a potent reminder that even within sectors driven by transformative technologies like AI, fundamental principles of valuation and differentiated growth opportunities remain paramount. The report doesn’t dispute Palo Alto Networks’ formidable position as a market leader with a robust, broad platform business. Indeed, its comprehensive suite of offerings continues to be highly attractive to enterprises seeking consolidation and simplified security management. However, Bernstein’s analysis posits that the market has already factored in much of this inherent strength into PANW’s current share price. The implication for investors is that while Palo Alto Networks may continue to deliver steady growth, the potential for a dramatic rerating or outsized capital appreciation from its current valuation levels appears limited.
Conversely, Zscaler’s story, as articulated by Bernstein, presents a compelling narrative of a company whose recent underperformance, coupled with a strategic pivot towards deeper customer engagement and impressive retention rates, has created a unique "valuation setup." This setup allows Wall Street analysts and investors to envision a significant rerating – an upward adjustment of its market multiples – that could unlock substantial upside. This is a crucial distinction: Zscaler, despite facing competitive pressures, now possesses a characteristic that PANW increasingly lacks at its current market capitalization – the perceived room for its stock to grow significantly to reflect its true underlying value and future growth trajectory.
The broader implications of this analysis extend to the entire cybersecurity sector and the wider technology investment landscape. It suggests a maturing market where general enthusiasm for AI-driven themes is giving way to a more disciplined, company-specific evaluation. Investors are increasingly being asked to differentiate between robust businesses and robust investment opportunities. This shift could lead to greater volatility for some cybersecurity stocks as the market re-calibrates expectations, but it also highlights pockets of opportunity for those willing to undertake thorough fundamental analysis. For companies like Zscaler, this is an affirmation of their strategic direction and a potential catalyst for renewed investor confidence. For market leaders like Palo Alto Networks, it signals a need to consistently demonstrate innovative growth vectors and efficient capital deployment to justify their premium valuations. Ultimately, Bernstein’s report underscores that while the demand for advanced cybersecurity will only intensify with the proliferation of AI, the discerning investor’s focus must now sharpen on valuation, execution, and the unique competitive advantages that can still drive significant stock performance.
