Sektory a témata
Cybersecurity Investments: A Sector That Never Takes a Holiday
Key takeaways
- Cybersecurity is a secularly growing industry — spending by companies and governments keeps rising.
- UCITS ETFs cover network security, cloud protection, and identity management.
- The sector is highly concentrated — a handful of large firms make up the majority of most indexes.
- Valuations tend to be stretched; the emergence of cheaper solutions or AI can reprice market leaders.
- Best suited as a satellite position, not a core — volatility is significantly higher than broad indexes.
Cybersecurity is one of the few IT sub-segments where demand grows regardless of the economic cycle — every major attack or regulatory obligation forces companies to spend more.
What the sector covers
Cybersecurity encompasses companies focused on network protection, cloud security, identity and access management, threat detection and incident response, and endpoint security. The market is fast-growing and fragmented, with consolidation through acquisitions being common practice in the sector.
UCITS ETFs in cybersecurity
Several UCITS-compliant funds track specific cybersecurity indexes. Consider:
- Number of holdings in the index — funds with 20–30 names are far more concentrated than those with 50+ holdings.
- Presence of pure-play cybersecurity firms vs. tech conglomerates with a security division.
- Rebalancing — the frequency and methodology significantly alter exposure.
- Fees — thematic ETFs tend to carry higher TERs, as explained in the ETF selection guide.
Investment risks
The key risk is valuation — cybersecurity companies have historically traded at high revenue multiples because markets price in future growth. If the economy slows or supply increases (consolidation, open-source alternatives), multiples can compress sharply. The sector's heavy reliance on recurring subscription models is a strength, but corporate IT budget cuts can trigger contract reviews.
Where cybersecurity belongs
As a satellite position of 3–7% for a technology-oriented investor who believes in the secular trend of cyber threats. The core portfolio remains in broad indexes — read why in the article on active vs. passive investing.
FAQ
Are cybersecurity ETFs available in the EU?
Yes, UCITS-compliant funds exist. They tend to be smaller than mainstream ETFs, with higher TERs and spreads. Always verify liquidity and index composition before buying.
Is cybersecurity a defensive investment?
Partially — demand grows even in a recession because companies cannot defer security spending. But valuations are high and volatility significantly exceeds defensive sectors such as utilities or healthcare.
What impact does AI have on the cybersecurity sector?
A dual one — AI accelerates threat detection and automates defence, but also enables more sophisticated attacks. On balance, the sector benefits from the AI revolution, though entry barriers are falling.