What was the SolarWinds 'Sunburst' cyberattack and why is it important for investors?

The SolarWinds 'Sunburst' attack was a sophisticated cyberattack discovered in 2020 where hackers compromised SolarWinds' software update system to distribute malware to thousands of organizations, including government agencies. The SEC's settlement with SolarWinds over this breach is significant because it establishes that companies can be held legally accountable not just for data breaches, but for inadequate security practices and misleading statements about their security posture. For investors, this creates a new regulatory environment where cybersecurity spending becomes mandatory rather than optional, potentially driving sustained growth for companies providing security and compliance solutions.

What is "Zero Trust architecture" and why does it matter?

Zero Trust architecture is a security approach based on the principle "never trust, always verify." Unlike traditional security models that trust users inside the network, Zero Trust requires verification from everyone trying to access resources, regardless of their location. With the SEC's increased focus on cybersecurity accountability, Zero Trust has become more important because it provides companies with stronger protection against breaches and a clear framework for documenting their security controls. Companies like Zscaler (ZS) that specialize in Zero Trust solutions help organizations implement this approach, potentially making them attractive investments as regulatory pressures increase.

What's the difference between cybersecurity and cybersecurity compliance?

Cybersecurity involves the technologies and practices that protect computer systems and data from attacks or unauthorized access. Cybersecurity compliance, on the other hand, focuses on meeting specific regulatory requirements and standards for security controls, policies, and disclosures. The SEC's recent actions signal that compliance is becoming just as important as security itself. Companies now need not only strong defenses but also the ability to document, verify, and report on those defenses. Several stocks in this group, like Qualys (QLYS), specialize in solutions that help automate compliance reporting, making them particularly relevant in this new regulatory landscape.

What does "exposure management" mean in cybersecurity?

Exposure management refers to the process of identifying, analyzing, and addressing potential security vulnerabilities across an organization's entire digital footprint. It goes beyond traditional vulnerability management by considering all possible ways an organization might be exposed to cyber threats. Companies like Tenable (TENB) specialize in this approach, helping organizations continuously discover assets, assess vulnerabilities, and prioritize remediation efforts. With the SEC now holding companies accountable for accurately disclosing their cybersecurity risks, exposure management tools have become essential for identifying and addressing potential weaknesses before they lead to breaches or regulatory issues.

Why is an ETF like CIBR included in this group of individual cybersecurity stocks?

CIBR (First Trust NASDAQ Cybersecurity ETF) provides diversified exposure to the entire cybersecurity sector, making it a complementary option to the individual stocks in this group. While individual companies offer targeted exposure to specific cybersecurity solutions, an ETF spreads risk across multiple companies. This can be valuable in a rapidly evolving sector where it's difficult to predict which specific technologies might emerge as leaders. Including CIBR gives investors a way to benefit from the overall growth trend in cybersecurity spending driven by regulatory changes without having to select individual winners. It's a more balanced approach that can work alongside investments in specific companies.

14 handpicked stocks

Cybersecurity Accountability

This carefully selected group of stocks represents companies at the forefront of cybersecurity defense and compliance solutions. As regulators increase scrutiny following the SolarWinds settlement, these businesses are positioned to meet the growing demand for breach detection, threat intelligence, and transparent reporting.

Han Tan | Market Analyst

Published on July 3

Top Picks from This Group

Here are a few of the assets in this group. Create an account to unlock the full list.

CrowdStrike Holdings, Inc.

CRWD

Current price

$496.80

Its Falcon platform is critical for endpoint security and threat intelligence, helping companies detect and accurately report on breaches as mandated ...

Its Falcon platform is critical for endpoint security and threat intelligence, helping companies detect and accurately report on breaches as mandated by the SEC.

Palo Alto Networks, Inc.

PANW

Current price

$209.30

Offers a comprehensive security platform that enables companies to build the robust, defensible security posture now required by regulators.

Fortinet Inc.

FTNT

Current price

$86.29

Provides integrated and automated cybersecurity solutions, helping organizations maintain and prove compliance with heightened disclosure standards.

Zscaler, Inc.

Current price

$307.58

Tenable Holdings Inc.

TENB

Current price

$29.52

Qualys, Inc.

QLYS

Current price

$130.78

Join Nemo FREE today and unlock every stock.

It only takes 60 seconds.

12 Month Growth Potential

Use the growth calculator to see how much investing in these assets could return over one year, based on aggregated analyst sentiment provided by Refinitive Ltd.

If you invested across these assets:

≈

In 12 months it might be worth:

$1,000.00

+39.84%

≈

About This Group of Stocks

Our Expert Thinking

The SEC's landmark SolarWinds settlement marks a pivotal shift in how companies must handle cybersecurity. This regulatory action transforms cybersecurity from a discretionary expense into a mandatory investment, creating sustained demand for security solutions that enable compliance, defense, and transparent disclosure.

What You Need to Know

These companies provide essential tools for breach detection, threat intelligence, exposure management, and compliance reporting. As publicly traded companies face increased scrutiny of their security posture and disclosures, demand for these specialized services is expected to grow substantially.

Why These Stocks

Each company in this theme was selected for its specific role in helping organizations meet heightened regulatory expectations. From endpoint security to zero-trust architecture, these stocks represent market leaders providing the critical infrastructure needed for cybersecurity accountability in this new regulatory environment.

Group Performance Snapshot

39.84%

Average 12 Month Profit

On average, analysts expect assets in this group to grow 39.84% over the next year.

11 of 14

Stocks Rated Buy by Analysts

11 of 14 assets in this group are rated Buy by professional analysts.

Source: Analyst sentiment is provided by Refinitiv Ltd, a global leader in financial market data with over 40k business clients. Refinitiv Ltd is an independent third party to Nemo. This is not advice.

Why You'll Want to Watch These Stocks

📈

Regulation-Driven Growth

The SEC's landmark SolarWinds settlement transforms cybersecurity from optional to mandatory, creating sustained demand for these companies' solutions. This regulatory catalyst could drive long-term growth independent of market conditions.

🔒

The New Corporate Must-Have

Companies worldwide are scrambling to improve their security posture and disclosure practices to avoid becoming the next SEC target. This urgent demand creates a powerful tailwind for cybersecurity providers focused on compliance and reporting.

💼

Budget-Proof Spending

When cybersecurity becomes a regulatory requirement rather than a discretionary expense, these companies gain protection from budget cuts. The transition from "nice-to-have" to "must-have" status could stabilize revenue even during economic uncertainty.

Get the full story on this Basket. Read our detailed article on its risks and potential.

Read Full Insight

Why Invest with Nemo Money?

🆓

Zero Commission

Trade stocks, ETFs, and more with zero commission. Keep more of your returns.

🔒

Trusted & Regulated

Part of Exinity Group 2015, serving over a million customers globally.

💰

6% Interest on Cash

Earn 6% AER on uninvested cash with daily interest payments.

Discover More Opportunities

Gold Miners (Record High Rally) Investment Guide

Gold prices have reached a record high as concerns over a U.S. government shutdown and potential interest rate cuts drive investors to seek safe-haven assets. This trend creates a potential investment opportunity in the companies that explore for and produce gold and other precious metals.

Government Shutdown Impact: Defensive Stocks Explained

A U.S. government shutdown has been triggered by a congressional budget impasse, creating economic uncertainty. This theme focuses on companies in defensive sectors that may prove resilient to the resulting market volatility and disruptions in federal spending.

Zillow Redfin Competitors | Market Disruption

The Federal Trade Commission is suing Zillow and Redfin, alleging their rental listing deal violates antitrust laws. This legal challenge could disrupt the online real estate market, creating opportunities for competing platforms to capture market share.

Frequently Asked Questions

Everything you need to know about the product and billing.