Cybersecurity stocks have been through the wringer lately. After what one analyst calls one of the sharpest non-recession drawdowns in decades, the sector might finally be getting something it's been missing: a little insider love. And not just any insider—the boss himself.
According to JPMorgan analyst Brian Essex, the clearest signal came from Nikesh Arora. The CEO of Palo Alto Networks, Inc. (PANW) just walked into the open market and bought roughly $10 million worth of his own company's stock. In a sector that's been dominated by executives cashing out, that kind of check-writing stands out.
A Rare Buy In A Sea Of Selling
Let's set the scene. The broader software world has been under serious pressure. The iShares Expanded Tech (IGV) ETF is down sharply this year. The big fear? That artificial intelligence is going to disrupt everything, maybe even reducing long-term demand for traditional software. That anxiety has compressed valuations across the board.
Insider trading activity has been a perfect mirror of that stress. Essex's coverage highlights that names like CrowdStrike Holdings, Inc. (CRWD) and JFrog Ltd. (FROG) have seen heavy insider selling, with transactions running into the tens—and in some cases hundreds—of millions of dollars.
Against that gloomy backdrop of executives heading for the exits, Arora's $10 million buy isn't just notable. It's downright contrarian.
Early Signs Of A Shift
But maybe he's not completely alone. Essex also points to some early, if smaller, signs of improving insider support elsewhere in cybersecurity.
Meaningful insider buying has started to pop up in names like Varonis Systems, Inc. (VRNS), Tenable Holdings, Inc. (TENB), and Elastic N.V. (ESTC). It's not CEO-sized yet, but it suggests a trickle of returning confidence from people who should know their businesses best.
What's the common thread here? According to Essex, these are companies viewed as "AI-resilient"—or even outright beneficiaries. The thinking goes that as AI creates more complex digital landscapes and "agentic" workflows (think AI agents performing tasks), it also creates brand new, sprawling attack surfaces that need defending. That's a tailwind, not a headwind, for certain security players.
.jpeg)
