Which Cybersecurity Stock Will Outperform in 2025?

2024 had a lot of ups and downs for two of the world’s top cybersecurity companies, CrowdStrike (NASDAQ: CRWD) and Palo Alto Networks (NASDAQ: PANW). The former was involved in a highly publicized outage, while the latter made a radical change to its business strategy.

Both stocks ended 2024 with solid returns, with CrowdStrike the better performer. The question for investors, though, is: Which stock is likely to outperform in 2025?

During 2024, both CrowdStrike and Palo Alto experienced steep declines in their stock prices at certain points in the year. Palo Alto’s stock fell precipitously in late February after the company told investors that it was seeing “spending fatigue” among its customers who wanted to see better returns on their cybersecurity investments. It said that cobbled-together point solutions from various vendors were no longer giving organizations a lot of incremental benefit.

In order to deal with what it was seeing, the company made a bold decision to shift strategy. Moving forward, it would focus on shifting customers onto one of its three broader cybersecurity platforms and moving them away from point solutions. However, in order to expedite this platformization strategy, the company decided to give away additional services to its clients for free for a period of time.

The reason for this was because customers didn’t want to be paying for duplicate solutions at the same time. Meanwhile, these various point solutions had contracts with different ending points, so Palo Alto decided to entice customers to consolidate onto its platforms by letting them use its additional services for free while they have contracts with other cybersecurity companies.

Palo Alto management estimated that, on average, its strategy would be the equivalent of giving customers six months of free product capabilities. It expected this shift in strategy to pressure both its top-line revenue and billings growth over the next 12 to 18 months.

CrowdStrike management would reference Palo Alto on its own conference call weeks after this announcement, saying: “It’s the organization[s] trapped in these fragmented pseudo platforms riddled with bolt-on point products that are the ones suffering from fatigue.”

However, CrowdStrike’s stock would also plunge several months later after a botched update led to a worldwide outage of its cybersecurity platform that interfered with the operations of many of its customers. The outage gained worldwide media attention for the effect it had across various industries. Delta Air Lines was one of its most affected customers, as a time-consuming manual fix grounded its operations and cost it more than $500 million in canceled flights.