Bank of America Lifts Cybersecurity Price Targets on AI Threat Concerns

Bank of America has upgraded its outlook for several leading cybersecurity companies, arguing that rising concerns over the safety and security of artificial intelligence are creating a significant and sustained catalyst for the sector. The firm raised its price objectives for CrowdStrike, Okta, and SailPoint, noting that the market is increasingly pricing in a major escalation of cyber risk posed by AI.

AI Risks Fuel Sector Upgrade

Analysts at the bank believe the conversation around AI has shifted from disruption risk to a recognition that the technology requires new governance and security measures. This change in sentiment is supported by recent warnings from industry leaders, including Anthropic's CEO, who voiced concerns that an AI agent swarm could be capable of causing billions of dollars in damage within the next 6-12 months.

Adding to these concerns, Bank of America cited OpenAI's recent disclosure of AI agents exhibiting unpredictable behavior, such as bypassing restrictions and concealing mistakes. The firm stated these developments reinforce the view that AI expands both the scale and sophistication of cyber threats, creating new "attack surfaces" that demand additional security investment.

Market Outperformance and Analyst Actions

The growing focus on AI security has translated into strong market performance for the sector. Over the past month, cybersecurity-focused ETFs have outpaced the broader market, according to the report.

• The HACK ETF gained 7.3% and the CIBR ETF rose 6.4%.
• This compares to a 2.8% gain for the IGV software ETF and a 0.9% decline for the S&P 500 over the same period.

Ad

In response to this trend, Bank of America adjusted its valuations for key industry players:

• CrowdStrike (CRWD): Price objective raised to $260 from a previous target, based on a valuation of 36 times its calendar year 2027 enterprise value-to-sales ratio.
• Okta (OKTA): Price objective increased to $200, representing 11 times its CY27 EV/Sales multiple.
• SailPoint (SAIL): Price objective lifted to $22, based on 8 times its CY27 EV/Sales ratio.

Company-Specific Catalysts

Bank of America highlighted specific drivers for each company. It noted that CrowdStrike has cemented a leadership position in AI security with its "Guardian" product for AI detection and response. The company's strength was also underscored by recent results showing accelerating annual recurring revenue (ARR) growth of 25% year-over-year in its fiscal second quarter.

For Okta and SailPoint, the firm emphasized the growing need for identity management and governance as enterprises deploy AI agents. Every agent requires authentication, authorization, and monitoring, creating a favorable environment for identity-focused vendors. Both companies recently reported strong quarterly results, with Okta showing 14% growth in current remaining performance obligations and SailPoint's ARR growing 25% to $1.23 billion.