The Global X Cybersecurity ETF (NASDAQ:BUG) has had a rough year. For a thematic ETF built around an exploding threat, that’s disappointing. But here’s the thing: cybersecurity stocks aren’t struggling because the thesis is wrong. They’re struggling because investors now demand perfection from high-growth software companies, and even strong results aren’t enough anymore.
Consider Zscaler (NASDAQ:ZS), a top-10 BUG holding. The company has faced investor scrutiny despite strong operational performance. As one analysis put it, this event marks a transition into a ‘Perfection Regime’ where flawless performance is expected for stocks with high valuation multiples. That regime shift explains much of BUG’s 2025 underperformance.
The Cybercrime Tailwind Is Real
Despite the stock pain, the underlying cybersecurity thesis is strengthening. AI-enabled agentic attacks, where autonomous systems identify and exploit vulnerabilities at scale, are emerging as the next frontier of cyber threats. Enterprise security spending isn’t slowing down. It’s accelerating. BUG holds a concentrated portfolio of cybersecurity companies. The top holdings include CrowdStrike (NASDAQ:CRWD), Palo Alto Networks (NASDAQ:PANW), Fortinet (NASDAQ:FTNT), and Check Point Software (NASDAQ:CHKP), representing both cloud-native and network security leaders.

The ETF’s equal-weight approach means laggards have room to catch up in 2026 if the sector rotates.
What Could Drive 2026 Performance
Watch two things. First, enterprise IT budgets and security spending commitments, typically announced in January and February earnings calls. If CFOs prioritize cybersecurity investments amid rising AI-driven threats, that’s your macro signal. Second, monitor execution quality from BUG’s holdings. The Perfection Regime means companies need to deliver on billings, guidance, and customer growth without hiccups. Check quarterly earnings releases and investor presentations on issuer websites.
Consider This Alternative
For broader exposure with less volatility, look at the First Trust NASDAQ Cybersecurity ETF (NASDAQ:CIBR). CIBR offers deeper liquidity and a longer track record since 2015. It’s less concentrated than BUG, which could smooth out single-stock volatility.
The key for 2026: cybercrime is accelerating, but stock performance depends on whether cybersecurity companies can execute flawlessly in an unforgiving market.