Category: News

  • Daily briefing — 7 July 2026

    1. AI memory has become the market’s stress test for the whole AI capex cycle.

    Samsung pre-announced Q2 operating profit of KRW89.4tn / c.$58.4bn, up 19x yoy, with revenue up 129%, yet the stock fell as much as 10.1% and wiped out more than $100bn of market value. That is the signal: investors no longer need proof that AI memory demand is strong; they need proof that pricing, hyperscaler ROI and capex discipline can survive 2027–30 capacity additions. Most exposed: Samsung, SK Hynix, MU, ASML, AMAT, LRCX, KLAC, NVDA and hyperscalers.

    2. Micron is still the fulcrum stock: bulls call the dip a buying opportunity, bears see peak scarcity.

    Barron’s flagged that Micron is down 14% over five trading days despite a nearly 700% one-year gain, while UBS still sees memory fundamentals supported by a supply-demand gap into at least Q228 and rising DDR pricing. The debate is not whether HBM/DRAM demand exists; it is whether investors are paying peak multiples just as Samsung/SK Hynix capital intensity rises. Read-across: MU, WDC, STX, SK Hynix, Samsung, NVDA, AMD and AVGO.

    3. Broadcom has added an edge-AI leg to the custom-silicon debate.

    Broadcom extended its Apple chip partnership through 2031, protecting a customer that Reuters says contributes c.20% of annual revenue, while Barron’s framed the deal as edge-AI relevant. This matters because the AI ASIC debate is broadening beyond hyperscale training/inference into on-device AI, RF/connectivity and custom silicon. Bull case: AVGO owns both data-centre custom AI and Apple edge-AI exposure; bear case: Apple concentration and eventual insourcing risk remain. Exposed: AVGO, AAPL, QCOM, MRVL, ARM and TSMC.

    4. The next rotation debate is semis versus hyperscalers, not semis versus software alone.

    Morgan Stanley now argues investors may pivot from chipmakers to hyperscalers as the SOX has fallen more than 11% over two weeks and the Magnificent Seven begins to recover. That is a subtle but important shift: investors may be moving from “own the suppliers” to “own the platforms that can monetise the spend”. Positive read-across for MSFT, AMZN, GOOGL, META and ORCL; more cautious for NVDA, MU, AVGO, AMD and MRVL if capex discipline replaces scarcity FOMO.

    5. Cyber remains the strongest software AI narrative, with identity becoming the new angle.

    The latest cyber rally was helped by Okta upgrade commentary around AI agents creating a new class of enterprise identities to secure, while CRWD and PANW continue to be treated as AI-security platform winners. The debate is shifting from “AI increases attacks” to “AI agents become non-human users with permissions, data access and lateral-movement risk”. That supports OKTA, PANW, CRWD, ZS, SAIL and CYBR; second-order beneficiaries include DDOG, NET, TENB and QLYS if AI expands monitoring, exposure and remediation workloads.

  • Daily briefing — 6 July 2026

    1. Memory/HBM remains the cleanest AI scarcity trade, but the capital cycle is getting bigger.

    SK Hynix is launching a $28bn Nasdaq ADR listing after a 273% share-price rise this year, with proceeds aimed at fabs and advanced equipment, including ASML tools. Bulls will read this as structural demand validation; bears will see peak-cycle equity issuance into AI enthusiasm. Most exposed: SK Hynix, Samsung, MU, ASML, AMAT, LRCX, KLAC and NVDA.

    2. Samsung’s expected profit surge keeps the AI-memory bull case alive.

    Samsung is expected to report an 18-fold jump in Q2 operating profit to KRW86tn / c.$56.4bn, helped by DRAM and NAND price increases of 44% and 53%. The debate is whether undersupply lasts through 2027, or whether today’s pricing power triggers tomorrow’s glut.

    3. The Micron debate is now “contracted scarcity versus Korea overbuild”.

    Micron’s $22bn customer-commitment story and long-term pricing deals support the case that memory is less boom-bust than before, but Samsung/SK Hynix’s $518bn+ Korean investment plans create a 2028–30 supply-risk narrative. MU is still the fulcrum stock for AI infrastructure sentiment.

    4. Software remains a selective recovery trade, not a blanket AI winner.

    The market is willing to revisit Salesforce, ServiceNow and Palantir-style workflow/control-plane names, but the core debate is unchanged: AI must drive usage, attach and renewal expansion rather than seat compression. Better positioned: NOW, PLTR, DDOG, SNOW, PANW and CRWD; still debated: CRM, ADBE, TEAM, HUBS and legacy per-seat SaaS.

    5. Cybersecurity keeps the best software AI narrative.

    AI expands vulnerability discovery, attack automation, identity sprawl and runtime-governance needs, which favours platforms with telemetry and enforcement points. The investor debate is now proof, not story: ARR attach, platformisation, renewal strength and AI-security monetisation. Most exposed: PANW, CRWD, ZS, FTNT, TENB, QLYS, OKTA, S and NET.

  • Daily briefing — 5 July 2026

    1. AI semis: Micron is now the sentiment fulcrum.

    Micron closed below $1,000 for the first time since mid-June after two sharp down days, despite the broader AI-memory story remaining intact. The debate is whether this is just valuation digestion after a 240%+ 2026 move, or whether HBM/DRAM scarcity is starting to price in peak optimism. Most exposed: MU, SK Hynix, Samsung, NVDA, AVGO, AMD, WDC, STX and ASML.

    2. Korea’s AI-chip buildout validates demand, but also creates the next bear case.

    South Korea’s Samsung/SK Hynix-led plan includes c.$518bn of chip-fab investment and broader AI/data-centre ambitions. Bulls see sovereign confirmation that memory and packaging are strategic bottlenecks; bears see the seeds of 2028–30 overcapacity. Exposed: SK Hynix, Samsung, MU, ASML, AMAT, LRCX, KLAC and TSMC.

    3. Software’s bounce is now an “AI Armageddon is overdone” trade.

    Guggenheim’s upgrades of Salesforce, ServiceNow and Check Point helped reframe the software debate: enterprise systems may be disrupted by agents, but embedded workflows, customer data and renewal inertia still matter. The bull case is multiple repair; the bear case is that organic growth and AI monetisation remain unproven. Exposed: CRM, NOW, CHKP, WDAY, ADBE, TEAM, HUBS and ORCL.

    4. Palantir is the cleanest software counter-narrative.

    Palantir’s Nvidia partnership helped reverse a seven-day losing streak, with the stock up 19% from 25 June after a 9% Wednesday move. The debate is whether PLTR is becoming an AI control plane for secure government/enterprise workflows, or simply the highest-beta beneficiary of software short-covering. Read-across: PLTR, NOW, DDOG, SNOW, MSFT, PANW and CRWD.

    5. Cybersecurity still has the best AI demand logic inside software.

    J.P. Morgan’s view that Chinese AI progress should increase demand for Western cyber tools supports the core thesis: AI raises vulnerability discovery, attack automation, identity sprawl and remediation workload. The risk is that stocks now need evidence, not narrative — ARR attach, platformisation, renewal expansion and AI-security monetisation. Exposed: CRWD, PANW, TENB, QLYS, ZS, FTNT, OKTA and S.

  • Daily briefing — 4 July 2026

    1. AI semis: memory bounced in Asia, but the bear case is now louder.

    Korea’s KOSPI rebounded 5.76% on 3 July after a sharp sell-off, with SK Hynix up 10.9% and Samsung up 8.2%, supported by renewed memory enthusiasm and reports of Samsung talks with Anthropic. The debate is whether this is a healthy reset in the cleanest AI scarcity trade, or the first proper warning that investors are capitalising peak HBM/DRAM pricing too aggressively. Most exposed: MU, SK Hynix, Samsung, ASML, AMAT, LRCX, KLAC, TSMC and NVDA.

    2. Micron has become the battleground stock for the entire AI infrastructure trade.

    Micron fell 5.5% on Thursday after a prior 10.6% drop, even though DRAM pricing remains tight and it recently signed long-term supply deals including GM. The bull case is contracted scarcity; the bear case is Michael Burry-style “peak FOMO”, with the stock up 241% in 2026 before the pullback. If Micron breaks, AI capex sentiment breaks; if it stabilises, the semi trade can re-open.

    3. Software’s rebound is now valuation-led, not AI-led.

    Salesforce, ServiceNow and broader SaaS are bouncing because analysts argue “AI Armageddon” fears are overdone, not because AI monetisation is suddenly proven. That is important: the market is willing to buy washed-out software, but the sustainable rerating still needs evidence of usage pricing, workflow control and agentic AI attach. Most exposed: CRM, NOW, WDAY, ADBE, HUBS, TEAM, PLTR and DDOG.

    4. Palantir is the cleanest software counter-narrative to “AI kills SaaS”.

    Palantir’s Nvidia partnership helped reverse a sharp losing streak, with shares up 19% since 25 June after a 9% move on Wednesday. The debate is whether PLTR is genuinely becoming an AI operating layer for government and enterprise workflows, or simply the highest-beta expression of the software rebound. Read-across is positive for workflow/control-plane software: PLTR, NOW, DDOG, SNOW, MSFT and cyber platforms.

    5. Cybersecurity remains the best software sub-sector debate.

    The strongest argument is that AI does not replace cyber spend; it increases vulnerability discovery, attack automation, identity sprawl and remediation workload. J.P. Morgan’s framing around Chinese AI vulnerability discovery is supportive for CrowdStrike, Palo Alto, Tenable and Qualys. The risk is valuation and proof: investors now need platform ARR, renewal expansion and AI-security monetisation, not just “AI tailwind” language. Exposed: CRWD, PANW, ZS, FTNT, TENB, QLYS, OKTA, S and NET.

  • Daily briefing — 3 July 2026

    1. AI semis: Asia bounced, but the debate is still “scarcity versus overbuild.”

    South Korea’s KOSPI rebounded 2.8% after the prior sell-off, with Samsung up 7% and SK Hynix up 4.9%, but the US tape stayed weak in AI chips: Micron fell 5.5%, Nvidia 1.4% and Lam Research 10.2%. The investor debate is whether the memory/HBM pullback is healthy profit-taking after a huge run, or the first sign that the market is starting to discount 2028–30 overcapacity risk. Most exposed: MU, SK Hynix, Samsung, NVDA, ASML, AMAT, LRCX, KLAC and TSMC.

    2. Meta’s cloud pivot is the cleanest sign hyperscalers want AI capex monetisation, not just model leadership.

    Meta is reportedly building a cloud business to sell excess AI compute, letting developers access Meta-hosted models and pay for usage. That is strategically logical, but it also exposes the core bear case: if every AI spender tries to resell capacity, pricing power may shift away from cloud providers and toward scarce inputs like GPUs, memory, networking and power. Exposed: META, AMZN, MSFT, GOOGL, ORCL, NVDA, AVGO, AMD and CoreWeave.

    3. Meta also admitted AI agents are progressing slower than expected — a negative read for near-term SaaS disruption, but not a full bull case.

    Zuckerberg reportedly told staff that AI-agent development is moving slower than expected, despite a $145bn AI infrastructure budget and major internal restructuring. For SaaS, this supports the “AI Armageddon is overdone” camp: enterprise workflows will not be replaced overnight. The counter is that slower agent progress also delays AI monetisation for software vendors. Exposed: CRM, NOW, WDAY, ADBE, MSFT, PLTR and enterprise automation names.

    4. Software’s rally is becoming more stock-specific: Palantir and ServiceNow-style workflow control are being rewarded.

    Palantir was upgraded to Buy by DA Davidson, with a $175 target, on the argument that its Ontology layer improves AI model security and accuracy and that government AI restrictions may favour PLTR. Separately, Guggenheim’s software upgrade cycle lifted ServiceNow, Salesforce and Check Point, arguing embedded enterprise systems are undervalued versus AI-replacement fears. The debate is now less “AI kills software” and more “which software owns the workflow/control plane?” Exposed: PLTR, NOW, CRM, CHKP, PANW, DDOG and SNOW.

    5. Cyber remains the cleaner software debate, but investors still need proof of platform monetisation.

    The cyber thesis is benefiting from the same logic as Palantir: AI needs governance, secure data flows, identity control, runtime monitoring and enforcement points. The risk is valuation: if cyber stocks rerate on AI narrative alone, the next earnings season must show ARR attach, platformised customers, renewal strength and AI-security monetisation. Most exposed: PANW, CRWD, FTNT, ZS, CHKP, OKTA, TENB, QLYS, NET and DDOG.

  • Daily briefing — 2 July 2026

    1. AI semis: the unwind has moved from US profit-taking to Asia contagion.

    Reuters reported South Korea’s KOSPI fell 4.8% on 2 July, with SK Hynix down 8.5% and Samsung down 7.2%, after a 68% quarterly rally in Korea tied to AI-chip demand. The debate is now whether memory/HBM is still the cleanest AI scarcity trade, or whether investors are starting to price the next overcapacity cycle after sovereign and corporate capex announcements. Most exposed: SK Hynix, Samsung, MU, ASML, AMAT, LRCX, KLAC and TSMC.

    2. Micron’s GM deal reinforces that memory tightness is spreading beyond AI data centres.

    Micron signed a long-term semiconductor supply agreement with GM, with Reuters noting DRAM prices are up c.70% since December and that the deal is one of 16 strategic customer agreements Micron disclosed in Q3. Bulls will argue this proves memory scarcity is structural across AI, autos and edge compute; bears will argue higher memory costs will squeeze downstream margins and encourage capacity overbuild. Exposed: MU, GM, WDC, STX, Samsung, SK Hynix and auto-semiconductor names.

    3. Software is finally getting a “too cheap versus AI fears” bid.

    Salesforce rose after Guggenheim upgraded the stock to Buy, arguing “AI Armageddon” fears are overdone despite acknowledging agentic AI disruption risk. The debate is not whether CRM becomes a major AI winner; it is whether the market has already discounted too much SaaS destruction. This is the key software setup: valuation support can drive a bounce, but sustainable rerating still needs proof of AI monetisation, usage pricing or workflow control. Exposed: CRM, NOW, WDAY, ADBE, INTU, HUBS, TEAM and broader SaaS.

    4. Meta’s AI-cloud move broadens the hyperscaler debate.

    IBD reported Meta jumped 8.8% on plans for an AI-focused cloud platform, effectively entering the AWS/Azure/Google Cloud competitive lane. The bull case is that AI infrastructure demand is so large that new platforms can monetise capacity; the bear case is that more cloud competition pressures AI returns just as capex concerns are rising. Exposed: META, AMZN, MSFT, GOOGL, ORCL, NVDA, AVGO, AMD and neoclouds such as CoreWeave/Nebius.

    5. Cyber remains the cleaner software narrative, but it needs stock-specific proof.

    The market is increasingly willing to buy the argument that AI expands attack surface, identity sprawl, SOC workload and runtime-governance needs; however, cyber will not rerate uniformly. The winners need evidence of platform attach, ARR expansion, AI-security monetisation and renewal resilience. Best exposed: PANW, CRWD, FTNT and ZS; second-order names include OKTA, S, TENB, QLYS, DDOG and NET.

  • Daily briefing — 1 July 2026

    1. AI semis: the mid-year scorecard is spectacular, but now looks harder to defend.

    Reuters notes the SOX nearly doubled in 1H26, while some AI chip winners such as Micron and Sandisk were up as much as 700%; Asia’s AI-linked markets also surged, with the Nikkei up 37%, Kospi 68% and Taiex 45% over the quarter. The debate is no longer “is AI demand real?” but whether investors are capitalising peak scarcity and peak capex growth too far ahead. Most exposed: MU, NVDA, AVGO, AMD, MRVL, SK Hynix, Samsung, TSMC, ASML and AI power/networking suppliers.

    2. Bubble-risk framing is becoming mainstream, not fringe.

    Reuters says the recent tech sell-off has revived bubble concerns, with the Buffett Indicator at 218% and BofA’s Bubble Risk Indicator for the PHLX Semiconductor Sector at 0.91. Bulls will argue earnings delivery still supports multiples; bears will argue debt-funded AI capex, crowded positioning and high margin assumptions leave little room for error. The read-across is most negative for long-duration AI infrastructure winners and hyperscalers funding the spend: NVDA, MU, AVGO, AMD, MSFT, AMZN, GOOGL, META and ORCL.

    3. Cybersecurity has a cleaner AI demand argument than generic SaaS.

    Barron’s highlights J.P. Morgan’s view that Chinese AI progress in vulnerability discovery could increase demand for Western cyber tools, with CrowdStrike and Palo Alto seen as well positioned, Tenable rated Overweight, and Qualys upgraded to Neutral. The debate is whether AI commoditises security workflows or creates a larger remediation/exposure-management burden. For now, the better argument is cyber demand expansion: more vulnerabilities, more automated attacks, more identity/runtime risk. Exposed: CRWD, PANW, TENB, QLYS, ZS, FTNT, S and OKTA.

    4. CrowdStrike’s stock split is cosmetic, but the momentum signal matters.

    CrowdStrike is set for its first 4-for-1 split after Wednesday’s close, with IBD noting the stock is up 58% in 2026. The split itself changes nothing fundamental, but it matters because CRWD has moved from “post-outage recovery” to “AI-enabled cyber platform winner” in investor perception. The risk is valuation fatigue after a sharp rerating; the bull case is that endpoint, XDR, SIEM and AI-security workflows remain one of the cleanest software growth narratives.

    5. SaaS remains the weakest part of the AI software debate.

    Business Insider frames the renewed “SaaSpocalypse” concern after the Nasdaq 100’s huge quarter, with the iShares software ETF reportedly down 11% over the past month and names such as Intuit, HubSpot, Atlassian and Microsoft under pressure. The investor debate is simple: AI can be additive for usage-priced platforms, but destructive for seat-based workflows if agents reduce human users. Better positioned: DDOG, PANW, SNPS, ORCL, MSFT and NOW; more debated: CRM, ADBE, INTU, HUBS, TEAM and legacy per-seat SaaS.

  • Daily briefing — 30 June 2026

    1. AI semis: the scarcity trade is now colliding with sovereign overbuild risk.

    South Korea’s Samsung/SK Hynix-led plan to invest $518bn in a new chipmaking hub reinforces the bull case that AI memory demand is structurally higher, but it also plants the next bear case: governments and suppliers may be building the next capacity glut while investors are paying peak scarcity multiples. Near term this supports SK Hynix, Samsung, MU, ASML, AMAT, LRCX and KLAC; longer term it raises 2028–30 HBM/DRAM margin risk.

    2. Magnificent Seven weakness is the market asking: who earns the AI profit pool?

    The FT reported the Magnificent Seven lost $2.3tn in June, with investors increasingly worried about AI capex profitability, rising component costs and whether hyperscalers can monetise the spend. The rotation is clear: own suppliers with visible orders, fade the spenders until ROI is clearer. Exposed: NVDA, MU, WDC, STX and ASML positively; MSFT, AMZN, GOOGL, META and ORCL under more scrutiny.

    3. Software is stabilising, but the recovery is still a valuation trade rather than a fundamentals trade.

    ServiceNow rose on Monday while Salesforce and Oracle lagged, but NOW remains far below its prior 52-week high. The debate is whether the market is beginning to separate workflow owners from seat-based SaaS casualties, or simply covering shorts after the “AI kills software” sell-off. Better positioned: NOW, PLTR, DDOG, SNOW and cyber platforms; still debated: CRM, ADBE, ORCL and legacy per-seat software.

    4. Cybersecurity is now one of the cleaner software narratives again.

    Fortinet hit another 52-week high, but underperformed stronger moves in CrowdStrike and Palo Alto on Monday. The read-through is that cyber is being re-rated as AI expands attack surface, SOC complexity, identity sprawl and data movement, but investors are still discriminating between platform proof and AI-labelled point products. Most exposed: PANW, CRWD, FTNT, ZS, OKTA, SAIL and DDOG.

    5. AI infrastructure is broadening beyond GPUs into power semis, substrates and edge/data-centre components.

    Allegro rallied after positive commentary around power semis for AI data centres, while Soitec gained on a ZenSemi partnership tied to AI data centres, robotics, EVs and industrial equipment. The second-order implication is important: the AI capex trade is moving down the stack into power, materials, storage, cooling and networking. Exposed: ALGM, STM, NXPI, ADI, ON, SOI, WDC, STX, DELL and SMCI.

  • Daily briefing — 29 June 2026

    1. AI semis: the “scarcity trade” has gone sovereign.

    South Korea announced a $576bn AI-chip investment drive, led by Samsung and SK Hynix, including expanded DRAM/HBM capacity and packaging infrastructure. The investor debate is whether this validates multi-year AI memory scarcity, or whether governments and suppliers are now collectively building the next overcapacity cycle. Near term this is bullish for SK Hynix, Samsung, MU, ASML, AMAT, LRCX and KLAC; longer term it raises 2028–30 supply risk for memory margins.

    2. China AI silicon is moving from strategic theme to valuation bubble risk.

    Baidu’s Kunlunxin is reportedly targeting a $50bn Hong Kong IPO valuation, versus c.$3bn only six months ago, with Reuters Breakingviews flagging the extreme valuation and China self-reliance angle. The bull case is clear: export controls create a protected domestic accelerator market. The bear case is equally clear: this is AI scarcity being capitalised at bubble multiples. Exposed: BIDU, Huawei ecosystem, Alibaba, Tencent, ByteDance suppliers, NVDA China exposure and Asian semi equipment.

    3. The first-half leadership split is brutal: hardware has crushed software.

    The Guardian notes chip and storage winners have surged in 1H26, with Sandisk, Western Digital, Micron, Seagate, Samsung and SK Hynix massively outperforming, while software names such as Microsoft have lagged as investors worry about capex intensity. The debate is whether this is rational — “own the picks and shovels” — or late-cycle crowding into the only part of AI with visible orders. Read-across: positive for MU/WDC/STX/NVDA/AVGO; pressure on MSFT, CRM, NOW, ADBE and broader SaaS.

    4. Qualcomm remains the most important AI-infrastructure challenger story.

    The Meta data-centre CPU win, $15bn 2029 data-centre target and $3.9bn Modular deal turn QCOM from handset recovery into a credible open-AI-stack debate. The bull case is that inference/custom silicon fragments away from Nvidia CUDA over time; the bear case is that Qualcomm is late and must still prove software ecosystem depth. Exposed: QCOM, NVDA, AVGO, MRVL, ARM, AMD and META.

    5. Software/cyber: selectivity remains the message, not blanket re-rating.

    Reuters’ software rebound framing still matters: investors prefer AI-integrated, usage-priced and infrastructure-adjacent names, with Datadog, Palo Alto, Synopsys, Oracle and Microsoft cited as better-positioned examples. For cyber, the debate is favourable but not automatic: AI expands attack surface and identity/runtime risk, but investors still need platform KPIs, ARR attach and renewal proof. Best exposed: PANW, CRWD, ZS, FTNT, DDOG, SNPS, ORCL and MSFT.

  • Daily briefing — 28 June 2026

    1. The key debate has moved from AI demand to AI profitability.

    The latest tape is no longer rewarding “AI exposure” indiscriminately: the S&P 500 and Nasdaq reportedly fell c.2% and 4.6% over the week despite strong Micron news, as investors questioned AI returns, private credit risk, supply chains and rates. The buy-side debate is now whether AI capex is a self-funding productivity cycle or a margin/ROIC drag for hyperscalers. Most exposed: NVDA, AVGO, AMD, MU, MSFT, AMZN, GOOGL, META and ORCL.

    2. Qualcomm is becoming the cleanest “new AI infrastructure challenger” story.

    Qualcomm used its 24 June Investor Day to target $40bn of non-handset revenue by 2029, including >$15bn from data centres, helped by Meta, Modular and Alphawave. The debate is not whether it displaces Nvidia; it is whether it can become a credible inference/custom-silicon alternative alongside Broadcom and Marvell. The second-order read-across is more competition in AI silicon, more pressure on software ecosystems, and potentially lower long-run AI compute costs.

    3. Memory remains the strongest part of the AI semi stack, but scarcity cuts both ways.

    Micron’s Anthropic supply agreement reinforces that AI model companies are locking up memory/storage as strategic infrastructure, not commodity input. Bulls see HBM as sold-out, contracted and structurally higher-margin; bears argue that rising memory cost worsens hyperscaler AI economics and eventually invites overcapacity. Exposed: MU, SK Hynix, Samsung, WDC, STX, NVDA, AMD and AVGO.

    4. Software is trying to re-enter the debate through rotation, not fundamentals yet.

    The “mega rotation” out of crowded mega-cap tech into broader value/cyclicals is important because software may benefit if investors reduce semi concentration. But SaaS still needs proof that AI drives attach, workflow ownership or usage pricing rather than seat compression. Better-positioned software remains security, observability and data platforms; exposed names include PANW, CRWD, ZS, FTNT, DDOG, SNOW, PLTR, NOW, CRM and MDB.

    5. Cybersecurity’s relative set-up remains strong, but the market wants platform evidence.

    The AI debate is more favourable for cyber than generic SaaS because AI expands attack surface, data movement, identity sprawl and runtime-governance needs. The key debate is who captures this spend: platform vendors with enforcement points and telemetry, or point tools selling AI features. Best exposed: PANW, CRWD, ZS and FTNT; second-order beneficiaries include NET, DDOG and identity/security-data platforms.