AI-Native Security and the Rise of Autonomous Defense Platforms

CrowdStrike and Palantir are solidifying their positions as leaders in the AI-native security space, while Zscaler faces a divergence between strong operational momentum in zero-trust and lagging market performance.

What changed

Recent developments highlight an acceleration in the shift toward autonomous security. CrowdStrike has launched new autonomous products and was explicitly named by Nvidia CEO Jensen Huang as its top security partner. Furthermore, Wedbush analysts issued an "Outperform" rating with a $250 price target for CrowdStrike, citing it as a lead bet in the cybersecurity space.

Palantir is expanding its footprint through the Cardinal program—a partnership with Method Security to deliver autonomous cyber systems via Palantir’s ontology—and a deepened partnership with Fujitsu to advance enterprise AI transformation. Additionally, Palantir is positioning itself to capture "AI work OpenAI cannot touch," backed by a strategic alliance with Nvidia.

Zscaler continues to report strong momentum in the zero-trust and AI security sectors during industry conferences, even as its stock has faced periods of underperformance relative to the broader sector.

Why it matters

The emergence of "agentic AI"—where AI agents perform autonomous actions—is expanding the enterprise attack surface. CrowdStrike’s move into autonomous products and its status as a preferred partner for Nvidia suggest that the market is seeking integrated, AI-native platforms to manage these specific risks; this reinforces the consolidation thesis by proving that standalone legacy tools are insufficient for modern AI infrastructures.\n
Palantir’s Cardinal program and its partnership with Fujitsu demonstrate the transition of cybersecurity from a standalone security function to a data-integration requirement. By using Palantir's ontology to deliver autonomous cyber systems, the platform becomes more "sticky" because it integrates security into the core operational data flow of the enterprise, making it harder for customers to swap out components.

Zscaler’s situation highlights a critical risk in the consolidation narrative: while its zero-trust technology remains fundamentally strong, the market is currently rewarding broader platforms (like CrowdStrike) that offer more comprehensive AI integration. This suggests that while Zscaler's technology is sound, the "consolidation" trend favors companies that can provide an all-in-one security suite over specialized point solutions.

Opposing sources and risks

Some evidence suggests a potential valuation bubble or market fatigue regarding Palantir; Michael Burry has characterized Palantir as an "AI FOMO Consultant," warning of a potential market cap crash. Additionally, Zscaler’s lagging performance compared to industry returns over the last six months indicates that investors may be rotating away from standalone zero-trust plays in favor of more integrated platforms.

What to watch

  • CrowdStrike's ability to maintain its "vendor of choice" status as enterprise adoption of agentic AI scales.
  • Palantir’s customer acquisition and expansion rates within the Cardinal program.
  • Zscaler’s ability to stabilize its growth guidance and improve free cash flow projections for FY2027.

Related Arbora context

  • concept-ai-driven-cybersecurity-demand-surge
  • concept-ai-software-platform-re-rating
  • concept-ai-infrastructure-data-center

Sources

This is research notes, not financial advice.