Global X Cybersecurity ETF (BUG) Delivers +25% YTD as AI Drives Security Spending

Key Takeaways

• BUG provides pure-play exposure to approximately 32 cybersecurity companies that derive at least 50% of revenue from core security activities, tracking the Indxx Cybersecurity Index.
• The fund's top holdings — including Okta, Fortinet, Palo Alto Networks, and CrowdStrike — collectively represent roughly 30% of net assets and have all posted substantial gains in 2026.
• Cybersecurity has emerged as a principal beneficiary of enterprise AI adoption, as expanding digital attack surfaces and AI-enabled threats drive non-discretionary security budget increases.
• A notable rotation out of semiconductor stocks into cybersecurity names has reshaped technology sector leadership during mid-2026, reflecting investor appetite for recurring-revenue business models with defensive characteristics.
• With an expense ratio of 0.50% and approximately $1.23 billion in assets under management (AUM), BUG remains one of the most actively traded cybersecurity ETFs.

BUG ETF at a Glance

The Global X Cybersecurity ETF seeks to provide investment results that correspond generally to the price and yield performance, before fees and expenses, of the Indxx Cybersecurity Index. Launched in October 2019 and managed by Global X, a subsidiary of Mirae Asset Financial Group, BUG is a passively managed thematic equity ETF that invests in companies positioned to benefit from increased adoption of cybersecurity technology. The underlying index uses a modified market-cap-weighting methodology and requires constituent companies to derive a meaningful portion of revenue from cybersecurity activities.

As of mid-2026, the fund held approximately 32 securities with roughly 87% allocated to US-listed companies and the remainder spread across Israel, Japan, the United Kingdom, and South Korea. The portfolio is concentrated in the information technology sector, which accounts for nearly 100% of holdings. The top ten positions represent roughly 60% of net assets, reflecting moderate concentration. The largest allocations include Okta (identity and access management), Fortinet (network security and SASE), Palo Alto Networks (platform security), CrowdStrike (endpoint and cloud security), Tenable (vulnerability management), and Qualys (cloud-based security and compliance). The fund carries a net expense ratio of 0.50% and is classified as non-diversified. When reviewing the holdings, I also checked this using Tickeron’s AI Screener to see how the stock compares to others in the industry.

The Cybersecurity Landscape in 2026

The global cybersecurity market is experiencing a structural demand shift driven by the rapid deployment of artificial intelligence across enterprises. As organizations build out AI infrastructure — deploying large language models, autonomous agents, and increasingly complex cloud environments — the digital attack surface expands, creating new vulnerabilities that require sophisticated defense mechanisms. International Data Corporation (IDC) projects global security market growth of roughly 11.8% in 2026, with software categories such as Identity and Access Management, Endpoint Security, and Security Analytics accounting for more than half of spending.

Several macroeconomic and regulatory currents reinforce this theme. The FBI's Internet Crime Complaint Center now receives nearly 3,000 cybercrime complaints daily, with reported annual losses exceeding $20 billion. The average cost of a US data breach has climbed above $10 million. Gartner's 2026 CIO survey indicates that 84% of enterprises are increasing cybersecurity budgets, and security software consistently ranks among the last IT line items that C-suite executives plan to cut during periods of economic uncertainty. Meanwhile, the US government's Zero Trust architecture mandate continues to drive public-sector spending, with the global government cybersecurity market estimated at $84.6 billion for 2026.

Capital markets have reflected these dynamics through a pronounced rotation out of semiconductor stocks into cybersecurity names. After leading the AI rally for over two years, chipmakers faced valuation compression in mid-2026 as investors questioned whether hardware spending could sustain its blistering pace. Cybersecurity, with its subscription-based recurring revenue models, high switching costs, and non-discretionary demand profile, has attracted capital seeking both growth and relative defensiveness within the technology sector.

BUG's 2026 Performance Review

BUG has experienced a volatile but ultimately strong year in 2026. After declining approximately 17.6% during the first quarter on fears that advanced AI models could disrupt existing cybersecurity business models, sentiment shifted dramatically in May. The fund surged roughly 37% that month alone — its best monthly performance since inception — as quarterly earnings from Fortinet, Palo Alto Networks, and CrowdStrike reinforced the thesis that AI is a structural demand tailwind rather than a competitive threat. Fortinet's 20% single-day surge following its early May earnings report served as a sector-wide catalyst, with management highlighting that AI is expanding attack surfaces and driving more durable security spending.

During the most recent 30-day period, BUG has moved approximately 9% higher, reflecting ongoing investor conviction in the cybersecurity theme even as broader technology segments have cooled. The fund reached a 52-week high near $42.71 in mid-July before experiencing a modest pullback alongside general market volatility. Year-to-date, BUG has returned over 25%, outpacing the broader software sector but trailing some cybersecurity peers that employ equal-weight or more growth-oriented methodologies. One thing that stands out here is the performance dispersion within the portfolio.

Performance dispersion within the portfolio has been notable. Large-cap platform leaders such as Palo Alto Networks (up approximately 90% year-to-date) and Fortinet (nearly doubling) have driven the bulk of returns, while smaller holdings including Zscaler and Rapid7 have underperformed. This bifurcation reflects a market preference for scaled platform companies benefiting from vendor consolidation trends, versus point-solution providers facing competitive pressure.

Analyzing Individual Cybersecurity Stocks with Tickeron’s AI Screener

Investors seeking to identify individual cybersecurity stocks or evaluate related sectors beyond what ETFs capture may benefit from Tickeron’s AI Screener. This AI-powered stock and ETF discovery platform enables users to scan thousands of securities using technical indicators, fundamental metrics, volatility measures, AI-generated signals, market trends, price patterns, and customizable filters. By surfacing breakout candidates and trending securities more efficiently than manual screening, the AI Screener helps investors uncover opportunities across industries and market capitalizations. For those monitoring the cybersecurity space or exploring rotation themes within technology, the platform offers a data-driven starting point for deeper research. In my own work, this tool has become a regular part of the process when I want to compare names within the sector or spot emerging patterns quickly.

2026 Outlook and Key Factors to Monitor

Several structural factors are likely to influence BUG's trajectory through the remainder of 2026. The most important is whether enterprise AI security budgets begin to materialize as a distinct spending category. Goldman Sachs has projected that a measurable inflection in AI-specific security allocations could occur as early as the fourth quarter of 2026 or the first half of 2027, with platform incumbents such as Palo Alto Networks and CrowdStrike positioned to capture a disproportionate share of that spending.

Upcoming quarterly earnings reports from major holdings will serve as critical checkpoints. Fortinet reports in late July, and results across the sector will test whether the strong demand environment observed in the first half of the year remains intact. Valuation levels across the cybersecurity group have expanded considerably, leaving limited room for execution missteps. The forward price-to-earnings multiple for the Indxx Cybersecurity Index has risen to approximately 29 times, above its historical average but supported by double-digit earnings growth forecasts.

Monetary policy and interest rate expectations remain relevant. As a growth-oriented thematic ETF with a meaningful allocation to mid-cap and smaller-cap names that may not yet be profitable on a GAAP (Generally Accepted Accounting Principles) basis, BUG is sensitive to shifts in the discount rate applied to future earnings. Regulatory developments — including potential new cybersecurity disclosure requirements and data privacy frameworks — could create both compliance-driven demand tailwinds and operational costs for portfolio companies. Finally, capital flows into thematic ETFs will be worth monitoring, as institutional repositioning between semiconductor, software, and cybersecurity funds may continue to influence relative performance within the technology sector. I’m watching this closely as the second half unfolds.

Disclaimers and Limitations

Notable companies

Industry description

Market Cap

High and low price notable news

Volume