Security budgets are the least discretionary line in enterprise IT, and AI raises both the threat surface and the product opportunity. Small by S&P 500 construction — most pure plays live outside the index — so treat it as a signal of the complex, not full coverage.
Follow the theme against the wider market.
Series before each basket's creation date are a backtest of the membership as of creation; live tracking starts at creation.
| Return | 1 day | 5 days | 20 days | 60 days | MTD | YTD | 1 year |
|---|---|---|---|---|---|---|---|
| Basket | +3.4% | -0.3% | -2.5% | +21.9% | -0.4% | +62.0% | +49.2% |
| vs FW 3000 | +2.7% | -1.0% | -3.1% | +17.4% | -1.8% | +43.0% | +30.1% |
1y · 2025-10-21 – 2026-10-21 · 252 / 252 sessions
Basket total returns · Annualized using 252 trading sessions · 0% risk-free rate and downside target. As of 2026-10-21 · close.
Sharpe: average daily simple return divided by its sample standard deviation, multiplied by √252. The risk-free rate is assumed to be 0%; this is not a cash-adjusted ratio.
Sortino: average daily simple return divided by downside deviation, multiplied by √252. Downside deviation is the square root of the average squared shortfall below 0%, counting all sessions, including zeros for gains.
Historical volatility: √(252 × average squared daily log return), matching the Vol page’s realized-volatility convention. This differs from the sample standard deviation used in Sharpe.
Each period requires complete history and at least 5 sessions. MTD and YTD follow the calendar; 1y is 252 sessions. Missing data or an undefined ratio displays — with a reason. Short periods can produce unstable ratios; intraday snapshots include a partial session. History before this basket’s creation is backtested. If a new basket has no stored daily return series yet, estimates from its rounded published chart levels are marked ≈.
Current members and the reasoning behind each inclusion. Returns are for individual holdings.
| Why it’s included | Added | |||||
|---|---|---|---|---|---|---|
| TENBTenable Holdings, Inc. | Vulnerability and exposure management | +4.3% | +6.7% | +12.3% | +72.8% | 2026-06-11 |
| ZSZscaler, Inc. | Zero-trust network security pure play | +7.8% | +4.8% | +7.9% | +2.8% | 2026-06-11 |
| QLYSQualys, Inc. | Vulnerability management; debt-free model | +3.3% | +3.7% | +6.4% | +48.0% | 2026-06-11 |
| RBRKRubrik, Inc. | Cyber-resilience and backup security (Rubrik) | +5.1% | +5.7% | +4.2% | +57.4% | 2026-06-11 |
| OKTAOkta, Inc. | Identity and access management | +7.5% | -1.6% | +1.6% | +141.3% | 2026-06-11 |
| CSCOCisco Systems, Inc. | Splunk + security networking attach | +0.5% | -5.6% | +1.2% | +41.8% | 2026-06-11 |
| VRNSVaronis Systems, Inc. | Data security posture management | +0.0% | +3.5% | +0.7% | +48.4% | 2026-06-11 |
| FTNTFortinet, Inc. | Firewall + SASE installed base | +1.8% | -5.4% | -2.6% | +119.2% | 2026-06-11 |
| SSentinelOne, Inc. | AI-native endpoint security (SentinelOne) | +3.5% | -0.2% | -5.5% | +51.8% | 2026-06-11 |
| GEN | Consumer security annuity | +0.2% | +1.4% | -8.0% | -10.0% | 2026-06-11 |
| CRWDCrowdStrike Holdings, Inc. | Endpoint/XDR share gainer | +5.3% | -4.0% | -8.8% | +104.2% | 2026-06-11 |
| PANWPalo Alto Networks, Inc. | Platform consolidation leader | +2.0% | -7.4% | -11.7% | +88.5% | 2026-06-11 |
| NETCloudflare, Inc. | Edge security and zero-trust network | +5.3% | -5.3% | -12.8% | +55.8% | 2026-06-11 |
| AKAMAkamai Technologies, Inc. | Edge security pivot | +0.7% | -1.6% | -23.8% | +3.5% | 2026-06-11 |
Partial price histories: RBRK from 2024-04-25, S from 2021-06-30.
Equal-weighted; monthly rebalance, buy-and-hold between rebalances; dated membership changes reset the target weights.
Tracked since 2026-06-11. Membership decisions are documented below.
Read the methodology →Basket returns include dividends. “vs FW 3000” compares the basket’s compounded growth with the benchmark’s. Green means positive; red means negative.
Cross-checked against CIBR. Daily return correlation: 0.95 across 1710 sessions. most listed pure plays trade outside the S&P 500 — the FW 3000 version holds them; the S&P version is the index-eligible subset
FW 3000 pass: added ZS, OKTA, NET, S, TENB, QLYS, RBRK, VRNS — names outside the S&P 500 but inside our broad universe; they count only in the FW 3000 version of this basket. Effective-dated to creation so the broad backtest covers the full set. The S&P 500 basket is unchanged.
Widening pass reviewed and deliberately unchanged: the S&P 500 contains no further security pure plays (Zscaler, Okta, CyberArk et al. live outside the index). Reference pinned to CIBR.
Initial composition: index-constrained six.