Disrupted or Discounted? Making Sense of the Cybersecurity Sell-Off

Key Takeaways

•  AI disruption fears triggered a sharp repricing: Cybersecurity valuations compressed significantly following Anthropic’s latest model release and advances in vibe coding, with markets increasingly pricing in a disruption scenario.
•  Claude Code Security is evolutionary, not a replacement: The tool primarily operates within application security and complements, rather than replaces, broader enterprise cybersecurity platforms.
•  AI expands the attack surface: As AI accelerates software development and automation, it also increases vulnerabilities, reinforcing demand for layered, AI-augmented security architectures.
•  Enterprise reality differs from disruption narratives: Governance, compliance, resilience and trust remain paramount in cybersecurity, limiting the likelihood of rapid displacement of established providers.
•  Volatility may reflect sentiment, not structural damage: With valuations near historical lows and limited evidence of demand erosion, the sell-off may represent a rare long-term entry opportunity rather than a structural break.

Cybersecurity was one of the more resilient areas of the technology market in recent years, supported in part by AI tailwinds as the proliferation of large language models contributed to a surge in cyber threats and heightened demand for advanced security solutions. However, as AI disruption fears spread across the broader software sector in recent months, valuations began to reset—with cybersecurity increasingly drawn into the sell-off.

The correction intensified following Anthropic’s release of Claude Code Security and its latest model demonstrating advanced “vibe coding” capabilities, alongside the emergence of new AI agents such as OpenClaw. These developments have increased market concerns over whether AI could meaningfully replace elements of core cybersecurity platforms rather than simply augment cybersecurity workflows. Recent share price reactions suggest markets are pricing in a disruption scenario, even as underlying fundamentals across much of the sector remain broadly intact.

Explaining Anthropic’s Claude Code Security

On February 20, 2026, Anthropic released Claude Code Security, an AI-powered application security tool currently in limited research preview. It scans codebases for vulnerabilities before suggesting fixes to a human reviewer. Human review is an important point to highlight, as Claude Code Security doesn’t automatically deploy patches or operate in live production environments. Its role is to assist security teams in managing growing vulnerability backlogs, not replace them.

However, the ensuing market reaction, which came on top of previous weeks of correction in the space, reflects concerns that AI-driven tools like Claude Code Security could eat into revenues of cybersecurity businesses and bode further disruption of the field. Investors fear that portions of the security stack could face margin pressure or reduced differentiation. These concerns have strongly weighed on the share prices of cybersecurity companies, resulting in significant discounts to recent highs observed after the release of ChatGPT in November 2022.

However, it is important to highlight that Claude Code Security, while being a powerful tool showcasing how far AI has come, does not replace endpoint detection and response (EDR), identity and access management (IAM), zero trust network access, cloud security, SIEM/SOC platforms, or resilience infrastructure. These operate at runtime and enforcement layers of the security stack, which require telemetry ingestion, real-time response, infrastructure deployment, and compliance governance beyond code analysis.

Disruption Fears vs. Enterprise Reality

While developments such as vibe coding have fueled disruption narratives across the software sector, their real-world enterprise impact remains largely untested. Generative models capable of rapidly producing functional code may demonstrate impressive capabilities in controlled environments, but large organizations operate under strict governance, compliance, resilience and audit requirements—particularly in cybersecurity, where tolerance for failure is minimal and trust is foundational.

Enterprise security architectures are built not only on technical performance but also on reliability, explainability, regulatory alignment and accountability. In that context, AI-driven coding advances are more likely to augment existing workflows than to replace the deeply embedded security frameworks that underpin modern digital operations. At the same time, cybersecurity businesses are already integrating artificial intelligence into their offerings, both from the perspective of using AI to enhance cybersecurity capabilities and using cybersecurity to secure AI applications. Hence, they are well positioned to benefit from such AI developments while also serving as some of AI’s strongest adopters.

Expert view from Team8, WisdomTree’s expert partner on the WisdomTree Team8 Cybersecurity Index:

“The market’s recent reaction to Anthropic’s Claude Code announcement—a ‘sell-off’ impacting giants like Okta and CrowdStrike—appears to be a significant overreaction that ignores the fundamental architecture of enterprise security. While Claude Code is a powerful ‘Shift Left’ tool that disrupts manual code-triage by automating vulnerability identification and patching, it is an evolution of the developer’s toolkit, not a replacement for a cybersecurity platform.

Securing an organization is vastly more complex than a single developer’s experience. Critical functions like Product Security—which includes architectural threat modeling, cloud infrastructure configuration, and strict regulatory compliance – cannot be solved by a code-level LLM alone. We believe these frontier models will serve as the ‘intelligent glue’ that reduces the manual workload of security teams, rather than acting as a standalone vendor capable of replacing the identity, governance, and real-time protection layers that market leaders provide. For investors, the current dip likely represents a correction of sentiment rather than a shift in fundamental value, as the industry moves toward a future where AI handles the reasoning and existing platforms provide the enforcement.”

—Liran Grinberg, Co-Founder & Managing Partner, Team8.

The Other Side of the Coin: AI Expands the Attack Surface

While markets have focused on AI as a potential disruptor of cybersecurity vendors, the more powerful structural force may be that AI is expanding digital risk itself. AI is accelerating both defenders and attackers: it improves vulnerability detection and secure coding capabilities, but it can also compress attackers’ discovery cycles and speed up exploitation. As software velocity rises, this dynamic strengthens the case for layered, AI-augmented security architectures.

More broadly, AI appears to be increasing the scale and complexity of cyber risk. A January 2026 World Economic Forum report shows that nearly nine in ten organizations view AI-related vulnerabilities as the fastest-growing source of cyber risk. At the same time, 64% now review the security of AI tools before deployment, up from 37% in 2025—clear evidence that AI adoption is translating into greater demand for security oversight.

As AI models become more capable and autonomous, from advanced vibe coding to agentic workflows, this dynamic is unlikely to slow. If anything, recent breakthroughs may accelerate both innovation and exploitation, reinforcing the need for comprehensive, enterprise-grade cybersecurity rather than diminishing it.

Bottom Line: Disrupted or Discounted?

The recent sell-off suggests markets might be increasingly pricing in a disruption scenario. Yet with valuations across the cybersecurity universe compressing sharply, the reset might be driven largely by sentiment, uncertainty around AI’s longer-term impact and liquidity-driven positioning shifts, rather than clear evidence of structural deterioration.

Source: Bloomberg, for the period November 2, 2020 to February 27, 2026. Valuation multiple is represented by price-to-sales ratio. 

Periods of elevated macro uncertainty and rapid technological change often amplify short-term trading dynamics, particularly in high-growth areas. Importantly, there is no indication of broad customer rotation or significant slowdown in growth in the latest earnings reports. Given that long-term tailwinds for cybersecurity are being reinforced by AI, and that leading cybersecurity businesses are poised to remain the dominant choice for enterprise adoption, the current environment may represent a rare opportunity to build exposure to a foundational digital infrastructure theme at historically discounted levels.

—

Originally Posted March 12, 2026 – Disrupted or Discounted? Making Sense of the Cybersecurity Sell-Off

Important Risks Related to this ArticleThere are risks associated with investing, including possible loss of principal. The Fund invests in companies primarily involved in the investment theme of Artificial Intelligence (AI) and Innovation. Companies engaged in AI typically face intense competition and potentially rapid product obsolescence. These companies are also heavily dependent on intellectual property rights and may be adversely affected by loss or impairment of those rights. Additionally, AI companies typically invest significant amounts of spending on research and development, and there is no guarantee that the products or services produced by these companies will be successful. Companies that are capitalizing on Innovation and developing technologies to displace older technologies or create new markets may not be successful. The Fund invests in the securities included in, or representative of, its Index regardless of their investment merit and the Fund does not attempt to outperform its Index. The composition of the Index is governed by an Index Committee and the Index may not perform as intended. Please read the Fund’s prospectus for specific details regarding the Fund’s risk profile.