The Cybersecurity Earnings Season Splits Winners From Pretenders

Dear readers,

Yesterday we noted that software and cybersecurity were winning because their revenue doesn’t hinge on the Fed’s next move. Today’s earnings season puts that thesis to the test — and the results are messier than the sector-wide rally suggests. Not every company selling “security” or “AI-ready infrastructure” is actually pocketing the margin. Some are, and the difference is becoming very easy to spot.

The macro backdrop gave that rotation room to breathe. Thursday’s producer price index came in flat month-over-month for July, well below the modest increase economists had penciled in, and the surprise eased rate-hike anxiety just enough for indices to push back toward record territory. But the more interesting action isn’t in the headline number — it’s in what’s happening underneath the tech sector, where AI’s rapid adoption is generating exactly the kind of regulatory pressure and security exposure that turns discretionary IT spending into something closer to a mandatory tax.

The AI Threat Becomes a Revenue Driver

CrowdStrike is leaning directly into that shift, expanding its “Project QuiltWorks” initiative toward small and medium-sized businesses and the managed service providers that support them. The rationale is stark: ransomware attacks on SMBs routed through IT service providers have jumped 134 percent over the past year, and industry data now puts the average “breakout” time — how long attackers need to move from initial access to full system compromise — at just 29 minutes. For investors, the read-through is structural rather than cyclical. Once breakout windows shrink to half an hour, vulnerability detection stops being a line item companies can defer and becomes table stakes for anyone running modern AI workloads.

The Hidden Costs of AI Integration

Trend Micro’s second-quarter numbers show why that shift doesn’t automatically translate into profit. Annual recurring revenue crossed $1.7 billion, up 5 percent year-over-year, with the Vision One platform doing the heavy lifting at 49 percent growth. But management cut its full-year operating income forecast by ¥12 billion to ¥44.4 billion — a 23 percent year-over-year decline — and pinned the blame squarely on cloud-related costs, including AI token expenses, that ran well ahead of budget. That’s the uncomfortable footnote to the AI software story: the compute bill for delivering AI-native features is currently outrunning the revenue those features generate, and it’s showing up directly in the margin line, not just in the notes to the financials.

Data Resilience as a High-Margin Safe Haven

Should investors sell immediately? Or is it worth buying Cisco Systems?

Commvault Systems offers the contrast. The data management and cyber-resilience specialist is benefiting from the same enterprise urgency to harden critical infrastructure — without the token bill eating into the upside. SaaS-related ARR climbed 38 percent year-over-year in the first quarter, and non-GAAP EBIT margin hit 22.8 percent, the best quarterly result the company has posted in more than a decade. Management reiterated subscription ARR guidance of $1.20 billion to $1.21 billion, implying roughly 19 percent growth at the midpoint, and reaffirmed a commitment to return at least 60 percent of annual free cash flow to shareholders. The lesson for the sector: the software names actually printing margin expansion right now are the ones doing indispensable, low-drama infrastructure work — not the ones chasing the flashiest AI feature set.

The Networking Giant Rides the Same Wave

Hardware is telling a parallel story, just one layer down the stack. Cisco’s fiscal fourth-quarter results, released Wednesday, showed revenue of $17.3 billion, up 18 percent year-over-year and ahead of estimates. The more telling figure was cumulative: AI infrastructure orders from hyperscalers reached $9.3 billion for the full fiscal year, while networking product orders alone grew 40 percent year-over-year in the quarter. Cisco also nudged its quarterly dividend up roughly 2 percent, from $0.41 to $0.42 per share. Put together, it’s a company benefiting from a genuine “networking supercycle” — the physical wiring beneath AI workloads has to scale right alongside the chips, and right now the order book says it’s doing exactly that.

Physical Gaps in the Digital Fortress

None of this insulates the sector from old-fashioned failure points. Hardware wallet maker Trezor disclosed that a breach at ShipMonk, one of its fulfillment partners, exposed personal data belonging to 13,689 customers, with full names, phone numbers, email addresses, and shipping addresses compromised for 11,742 of them. It’s a useful reminder that current surveys show IT executives are considerably more anxious about data protection than their own operational teams — and for good reason. The weak point in modern security architecture increasingly isn’t the core platform; it’s the third-party vendor with looser controls. Expect budget allocation to follow that risk toward supply-chain security providers in the quarters ahead.

The Takeaway

This week’s numbers make the sector rotation concrete rather than theoretical. CrowdStrike’s expansion push and the breakout-time data confirm cybersecurity spending is becoming structurally unavoidable. But Trend Micro’s margin cut is the necessary counterweight — AI-driven revenue growth means little if the underlying compute cost erases it. Commvault and Cisco show what the winning profile actually looks like: durable demand, disciplined cost structure, and cash returned to shareholders rather than reinvested at any price. As this earnings season plays out, the question worth asking about any software name isn’t whether it’s “AI-exposed.” It’s whether that exposure is actually paying for itself.

Best regards,
The StocksToday.com Editorial