Cloud security is becoming a core enterprise spending priority as workloads move across hybrid and multi-cloud environments. Attackers are following that shift, targeting identities, APIs, misconfigurations, cloud-native applications, and the connections between users, devices, data, and workloads. That creates a broad investment theme rather than a single software category. The companies in this list approach the opportunity from different angles, including identity, secure access, application protection, exposure management, networking, and security operations.
The structural case rests on several durable forces: regulatory requirements, cyber insurance standards, vendor consolidation, and the need to secure artificial intelligence workloads and agentic applications as they reach production. Buyers increasingly want unified policy enforcement and fewer point products. That favors platforms that can expand from one security layer into adjacent modules. Cloud security also tends to benefit from software and service models with recurring elements, strong gross margins, and room for customers to add capabilities over time.
This seven-stock countdown covers both focused cloud-security specialists and broader cybersecurity companies with meaningful cloud exposure. The selections appear in countdown order, beginning with #7 and moving to #1. Depth of exposure to cloud security is the primary organizing principle, while growth, profitability, valuation, earnings execution, and analyst sentiment provide the business-fundamentals context for each company.
Our screen is limited to US-listed companies with market capitalizations above $500 million and meaningful exposure to cloud security. We first assess how directly each business addresses identity, SASE, cloud workloads, application protection, exposure management, or security analytics and response. We then weigh the available fundamentals, including revenue and earnings growth, margins, returns, valuation, earnings surprises, and analyst consensus. The article is presented as a countdown from #7 to #1, with the best-ranked pick reserved for the final section.
What they do. The company provides security, delivery, and cloud-computing solutions, with products covering web application and API protection, bot and abuse prevention, account-takeover defenses, credential-stuffing protection, and persistent-scraper blocking. Its API Security products discover, audit, and monitor APIs, while its application-component protection analyzes traffic between microservices. That combination gives Akamai a differentiated position at the intersection of internet infrastructure, application delivery, and security services.
Why it fits. Akamai reaches several cloud-security layers, particularly application protection, API security, bot management, and cloud-native infrastructure. Its cloud-computing portfolio includes compute, storage, networking services, and an application platform with templates for deploying and scaling Kubernetes clusters. The exposure is broad, although security is one part of a larger delivery and infrastructure business, which explains its lower placement in a cloud-security-focused ranking.
Numbers that matter. Akamai generated $4.3228 billion of revenue and posted 5.4% year-over-year revenue growth, but earnings growth was negative 26.8%. Gross margin was 57.5%, operating margin was 7.63%, and net margin was 9.51%, with ROE of 8.92%. The core valuation data show a trailing P/E of 44.6512 and forward P/E of 18.4843, a substantial difference that makes the earnings outlook important.
Recent momentum. The latest reported quarter, dated August 6, 2026, produced EPS of $0.64 versus a $0.90 estimate, a negative 28.9% surprise. Akamai has nevertheless beaten estimates in six of the last eight listed quarters. Analyst coverage consists of two Buy ratings, eight Holds, and one Sell, alongside a 4.087 consensus score and an average target of $157.4309.
What they do. The company operates as an identity partner, providing Single Sign-On, Adaptive MFA, Universal Directory, API Access Management, Access Gateway, and device-access tools for cloud and hybrid environments. Its newer products extend into Identity Threat Protection, Identity Security Posture Management, governance, privileged access, machine-to-machine tokens, and security for AI agents. Okta’s competitive position is centered on making identity a common control plane across applications, infrastructure, devices, and increasingly autonomous software.
Why it fits. Identity and access management is one of the most important layers of cloud security because users, machines, APIs, and AI agents all require authentication and authorization. Okta directly addresses that layer through MFA, lifecycle management, privileged access, API controls, and machine-to-machine tokens. Its Okta for AI Agents and Auth0 for AI Agents offerings also align with the emerging requirement to discover, authenticate, govern, and manage agentic applications.
Numbers that matter. Revenue was $2.996 billion, up 11.2% year over year, while earnings growth was 21.2%. Okta reported a 77.4% gross margin, a 7.32% operating margin, and an 8.24% net margin; ROE was 3.67% and ROA was 1.14%. Valuation remains demanding, with a trailing P/E of 104.2899 and forward P/E of 37.4532.
Recent momentum. Okta’s latest completed quarter on May 28, 2026, produced EPS of $0.41 against a $0.31 estimate, a 32.3% beat. The listed earnings history shows a seven-for-seven beat rate, although the August 26 earnings entry remains an estimate rather than a reported result. Analysts include eight Buys, 18 Holds, and one Sell, with a 3.9556 consensus score and an average target of $136.063.
What they do. The company combines networking and security through FortiOS, FortiASIC processing, FortiCloud, FortiEndpoint, OT Security, firewalls, wireless products, and secure-connectivity tools. Its Unified SASE offering includes firewall, software-defined wide-area networking, secure web gateway, cloud access security broker, data-loss prevention, and zero-trust network access. Fortinet also sells cloud-native firewalls, application protection, code security, AI-driven operations, threat intelligence, security services, and technical support, giving it a broad integrated position.
Why it fits. Fortinet is exposed to cloud security through FortiCloud, virtualized and cloud-native firewalls, cloud-native application protection, code security, and SASE. It also addresses the networking layer that connects branch locations, users, data centers, and cloud environments. That convergence can appeal to buyers seeking fewer vendors and more consistent policy enforcement, though the company remains a larger networking-and-security platform rather than a pure cloud-security specialist.
Numbers that matter. Fortinet generated $7.5274 billion of revenue, up 25.6% year over year, while earnings growth reached 43.9%. Its 80.2% gross margin, 33.6% operating margin, and 28.17% net margin are among the strongest profitability figures in this group. ROE was 117.44% and ROA was 14.17%; valuation was also elevated at 54.8646 times trailing earnings and 50.2513 times forward earnings.
Recent momentum. In the latest reported quarter on July 29, 2026, Fortinet delivered EPS of $0.81 versus a $0.66 estimate, a 22.7% positive surprise. It has beaten estimates in all eight listed quarters, including a 32.3% beat in the preceding quarter. Analyst coverage shows seven Buys and 27 Holds, while the Sell count is not reported; the consensus score is 3.4667 and the average target is $160.8649.
Get AI research on any stock
Instant reports, daily intelligence, and an AI analyst in your pocket.
What they do. The company offers Prisma Access for SASE, Strata Cloud Manager, Prisma AIRS for AI-ecosystem protection, a cloud-native application protection platform, Code to Cloud, and virtual firewalls for multi- and hybrid-cloud environments. Its Cortex portfolio covers AI-driven security operations, endpoint detection and response, orchestration, automation, and attack-surface management. Palo Alto Networks sells products through channel partners and directly, with subscription services spanning threat prevention, SaaS security, API security, data-loss prevention, and sensitive-data protection.
Why it fits. Palo Alto Networks touches nearly every major cloud-security layer in the theme: SASE, CNAPP, cloud and virtual firewalls, API and SaaS security, code-to-cloud protection, AI security, and security operations. Its Cortex and Prisma families give the company exposure to both prevention and response as enterprises consolidate tools. The breadth of its platform makes it one of the most direct ways to express the cloud-security theme, although the valuation and recent earnings execution temper its fundamentals ranking.
Numbers that matter. Revenue was $10.6065 billion, with year-over-year revenue growth of 31.1% and earnings growth of 60.5%. Gross margin was 72.0%, while operating margin was negative 2.47% and net margin was 7.95%; ROE was 4.83% and ROA was 1.77%. The valuation data show a trailing P/E of 321.2143 and forward P/E of 90.9091, leaving limited room for execution disappointments.
Recent momentum. Palo Alto Networks reported EPS of $0.32 versus a $0.43 estimate on June 2, 2026, a negative 25.6% surprise. The broader record remains solid at six beats in seven listed reported quarters, but the latest miss is notable. Analysts list 11 Buys and 13 Holds, with the Sell count not reported; the consensus score is 4.1346 and the average target is $347.974.
What they do. The company delivers its Falcon platform and related modules through a cloud-delivered, SaaS subscription model. Falcon protects endpoints, cloud workloads, identity, and data, while adjacent offerings cover managed security, vulnerability management, identity protection, threat intelligence, data protection, SaaS security posture management, security information and event management, log management, and AI-powered workflow automation. Its unified platform gives CrowdStrike a broad competitive position across prevention, detection, response, and security operations.
Why it fits. CrowdStrike directly addresses cloud workloads and identity while extending into SaaS posture management, data security, security operations, and generative-AI workload protection. That platform architecture fits a market in which enterprises want cloud-native zero trust and AI-native security rather than disconnected tools. Its exposure is especially relevant as customers seek a single subscription platform that can cover endpoint, workload, identity, and response requirements.
Numbers that matter. Revenue reached $5.0942 billion, up 25.6% year over year, while the listed earnings-growth figure was 533.3%. Profitability remains weaker than the growth profile suggests: gross margin was 75.1%, operating margin was negative 2.21%, net margin was negative 0.6%, ROE was negative 0.25%, and ROA was negative 1.0%. The trailing P/E is unavailable in the core valuation data, while forward P/E was 172.4138.
Recent momentum. CrowdStrike’s latest reported quarter on June 3, 2026, produced EPS of $0.28 versus a $0.27 estimate, a 3.7% beat. The earnings history shows five beats in seven listed reported quarters, with the March and December 2025 quarters matching estimates rather than exceeding them. Analysts include 12 Buys, 11 Holds, and one Sell, producing a 4.2745 consensus score and an average target of $199.55.
Pick #2Premium members only
Premium members see this pick's full breakdown — investment thesis, key financial metrics, recent earnings execution, and analyst consensus.
Premium members get the complete breakdown — pick rationale, financial metrics, and recent earnings detail.
The screen covers US-listed companies with market capitalizations above $500 million and identifiable exposure to cloud security. Ranking priority goes first to depth of exposure across identity, SASE, cloud workload and application protection, exposure management, and security analytics or response. Business fundamentals then shape the ordering, including revenue growth, earnings growth, gross and operating margins, returns on equity and assets, valuation multiples, earnings-surprise history, and analyst consensus. The list is refreshed monthly using primary-source financial data and composite metrics. It is intentionally shown in countdown format, from #7 through the final #1 selection.
▌The Daily Briefing · Free
A new stock idea, every evening.
One stock worth watching each weekday, plus the analysis behind it. Free, in your inbox.
