'Very astute about the type of acquisition and M&A they've undertaken': Boolani on Palo Alto

Key Concepts

• Cybersecurity Exposure: The necessity for investors to increase holdings in security firms due to rising digital threats.
• Agentic AI: AI systems capable of autonomous action, which increase the complexity and volume of potential cyberattacks.
• Supply Chain Risk: The vulnerability of large cybersecurity providers themselves to attacks, necessitating "hardened" infrastructure.
• Data Sprawl: The rapid expansion of data across organizations, increasing the risk of exfiltration and the need for robust recovery solutions.
• Observability: The ability to monitor, manage, and ascertain the health of complex IT systems and AI infrastructure.
• Token Management: Monitoring the usage of AI "tokens" to ensure cost-effective and productive AI operations.

---

1. The Bull Case for Cybersecurity

Fatima Bulani, Managing Director at Citi, argues that the software sector has been unfairly punished by the market, leading to a "throw the baby out with the bathwater" scenario. She advocates for increasing core positions in cybersecurity for two primary reasons:

• AI-Driven Threat Landscape: Recent advancements from frontier labs (e.g., Anthropic, OpenAI) indicate that new AI models can be "weaponized." This will lead to a significant increase in the volume, variety, and sophistication of cyberattacks.
• Systemic Importance: Large cybersecurity firms are now deeply embedded in the world’s largest companies. Because these firms touch broad swaths of the economy, they must be hardened against supply chain attacks to prevent systemic failure.

2. Palo Alto Networks and CrowdStrike: The "Guardians"

Bulani identifies Palo Alto Networks and CrowdStrike as essential partners for organizations undergoing digital transformation.

• Strategic M&A: Palo Alto’s acquisition of CyberArk (a $25 billion transaction) positions them to provide a "multifaceted framework of cyber guardrails."
• AI Integration: As companies deploy agentic AI, these security giants act as the necessary conduit to ensure these systems are built and scaled securely. They are described as being "hand-in-glove" with the IT architecture of modern enterprises.

3. Rubrik: Data Resilience and Recovery

Rubrik is highlighted for its role in data management, which is critical as data becomes the "lifeblood" of AI systems.

• Core Functionality: Rubrik provides the ability to capture, manage, back up, and recover data.
• Risk Mitigation: In the event of a ransomware attack, breach, or natural disaster, Rubrik is essential for business continuity. Bulani notes that as "data sprawl" increases, the risk of data exfiltration becomes more acute, making recovery services non-negotiable.

4. Datadog: Observability and Operational Efficiency

While less of a pure-play cybersecurity firm, Datadog is presented as a vital component of the AI infrastructure stack.

• System Health: As AI systems grow in complexity, Datadog provides the "observability" required to monitor system health and facilitate rapid recovery during outages.
• Cost Management: Datadog assists organizations in managing "token usage"—the currency of AI—ensuring that AI applications are built and scaled in a cost-efficacious and productive manner.

---

Synthesis and Conclusion

The overarching theme of the discussion is that the integration of AI into the global economy creates a dual-sided challenge: it provides powerful new tools for innovation while simultaneously creating a more "nefarious and scary" attack landscape.

Bulani’s perspective is that investors should view cybersecurity not just as a defensive play, but as a foundational requirement for the AI era. By focusing on companies that provide "guardrails" (Palo Alto/CrowdStrike), "resilience" (Rubrik), and "observability" (Datadog), investors can gain exposure to the essential infrastructure required to secure and manage the next generation of AI-powered enterprise systems. The primary takeaway is that the current market undervaluation of software provides a strategic entry point for long-term investors to capitalize on these secular growth trends.