Cybersecurity · thematic · ETF deep dive
Global X Cybersecurity ETF BUG
A concentrated basket of cybersecurity pure-plays — Fortinet, Palo Alto, CrowdStrike, Okta — riding the structural, non-discretionary growth in security spending. High-multiple growth software, so it is rate- and sentiment-sensitive.
Price & momentum chart & stats through 2026-07-10
Data summary: last close $39.37 on 2026-07-10, 4% below the 52-week high of $40.85, 69% above the 52-week low of $23.30; trading above its 200-day average of $30.97. Trailing returns: YTD +32%, 1-year +10%, 3-year +68%, 5-year +36%.
What it holds
Top 10 holdings
| Holding | Ticker | Weight |
|---|---|---|
| Fortinet | FTNT | 7.8% |
| Okta | OKTA | 7.7% |
| Palo Alto Networks | PANW | 7.5% |
| CrowdStrike | CRWD | 6.9% |
| Tenable | TENB | 5.8% |
| Qualys | QLYS | 5.3% |
| Varonis Systems | VRNS | 5.3% |
| Akamai | AKAM | 5.0% |
| Rubrik | RBRK | 4.8% |
| Commvault Systems | CVLT | 4.6% |
Top-10 ≈ 61% of the fund (31 holdings total). Positions as of 2026-07-13, from the issuer fact sheet (source). Holdings drift daily; weights are a snapshot, not live.
Sector mix live, FMP
- Technology100.0%
- Communication Services0.0%
- Cash & Others0.0%
- Consumer Cyclical0.0%
- Consumer Defensive0.0%
What this fund is
BUG tracks the Indxx Cybersecurity Index: companies positioned to benefit from adoption of cybersecurity technology — the hardware and (mostly) software that protects networks, endpoints, identity and data.
It is modified-cap-weighted and concentrated in pure-plays, with per-name caps that keep the top holdings clustered around 5–8% and the top 10 near 60% of the fund.
The thesis is that security spending is structural and non-discretionary — breaches, regulation and now AI-driven threats make it one of the last IT line items a CFO cuts. But the constituents are high-multiple growth software, so the basket trades with rates and risk sentiment as much as with the theme.
The Synthos read
How the tracked themes this fund rides are reading right now — conviction-weighted net stance from independent expert voices in the Synthos knowledge base (management/officials laned out). Snapshot as of 2026-07-12.
| Tracked theme | Net stance (−100 to +100) | Recent drift | Reliability |
|---|---|---|---|
| AI software & agents Imperfect map: cybersecurity is not a standalone tracked theme, so BUG is bucketed with enterprise/AI software. AI is now both a threat vector and a product tailwind for these names, but read this as adjacency, not a clean signal. | up +86 Very Bullish | +46, turned more bullish 14 claims | Provisional |
Reliability tiers: Full ≥ 25 claims in the current window, Provisional 10–24, Insufficient < 10 (read as directional only). Net stance is a rate-of-change signal about the theme, not a price target for this fund and not advice. Themes can be right while the fund’s structure works against you.
Cost & structure
Expense ratio 0.50% (issuer, cross-checks against FMP).
1940-Act open-end ETF (Global X), inception 2019. Passive index-tracking, ~31 holdings.
Modified-cap-weighted with per-name caps to limit single-stock dominance.
Honest fit
The job it does
- Single-ticket access to the cybersecurity pure-plays as a group, capturing structural security-spend growth.
- Diversifies single-name risk in a category prone to violent single-stock moves (CrowdStrike, Palo Alto earnings gaps).
- Exposure to a spending line that is relatively defensive within software — hard to cut.
What it does not do
- Is not broad tech — top-10 ~60%, a single-theme software bet.
- Is not defensive in a valuation sense — these are high-multiple growth names that de-rate sharply when rates rise or sentiment sours.
- Is not an income fund — minimal dividends; it is a capital-appreciation thematic vehicle.
What would change this read (falsifiers)
- A rate up-cycle or growth-software de-rating compresses the multiples across the whole basket.
- Consolidation risk: if platform giants (Microsoft) absorb more security spend, the pure-plays lose share.
- AI could commoditize parts of the security stack faster than it grows the pie — a two-sided force for these names.