As the cybersecurity market emerges from a period of economic turbulence, the role of artificial intelligence (AI) is quickly evolving from a futuristic concept to a key driver of business transformation. A surge in interest in AI, particularly generative AI, has aligned with the sector’s recovery, fueled by strong earnings from major players like SentinelOne, CrowdStrike, Zscaler, and Palo Alto Networks.
But with AI’s rise comes a blend of promise and hype that requires a discerning look at its true impact.
A Market on the Rebound
The recent earnings reports from cybersecurity giants appear to indicate the market is experiencing a recovery after the challenges of the past few years. Despite these positive signals, however, not all companies are experiencing uniform growth. While some are rapidly gaining market share in the endpoint market, others are seeing more moderate expansion.
I spoke to SentinelOne CEO Tomer Weingarten, and he emphasized that the trajectory of the cybersecurity market hinges heavily on infrastructure modernization.
AI’s Role in the Cybersecurity Resurgence
The current AI boom, driven by innovations in generative AI, is contributing to the broader recovery of the cybersecurity market. Richard Stiennon, research analyst with IT-Harvest and author of Security Yearbook 2024, has praised AI for its transformative potential. However, the practical application of AI in the cybersecurity space is still a work in progress. AI-driven solutions are emerging, but many are still in their early stages, providing foundational capabilities such as automation and threat detection rather than fully autonomous systems.
Generative AI: Hype vs. Reality
While AI is undeniably reshaping cybersecurity, the generative AI boom is not without its share of hype. The current generative AI frenzy is very similar to the dot-com bubble of the late 1990s, where companies rushed to adopt the new technology without fully understanding its use cases. Just like organizations bought domains with no idea if or why they needed a website in the early days of the Internet, many organizations are jumping into generative AI without a clear strategy for how it will add value.
“There’s big hype and big fear of missing out,” Weingarten said. “If they’re not doing something with generative AI, organizations feel behind. I would argue you’re delayed if you adopt GenAI now and think that’s your solution.”As Weingarten points out, many current generative AI applications, such as natural language processing tools and chatbots, offer only superficial enhancements. These tools represent the “low-hanging fruit” of AI development. While useful, they are not the pinnacle of what AI can achieve.
“Many GenAI apps are super shallow right now. They’re taking the basic capabilities of large language models and trying to strap on classic applications to make them more user-friendly,” he said.
SentinelOne is trying a different tactic. “When we built Purple AI, we infused it as an automated backbone in all of our platforms. Instead of a chatbot interface approach, we said, let’s take another approach. PurpleAI is a brain that works on the backend, with you and alongside you—it is autonomous.”
And customers are embracing it. In the second quarter, more than 10 percent of subscription licenses sold by SentinelOne also included purchases of PurpleAI.
The Long-Term Implications of AI in Cybersecurity
As the hype around AI begins to settle, organizations are starting to grapple with its longer-term implications. AI, particularly in cybersecurity, is not a magic bullet. While AI can automate and enhance many processes, it is not a replacement for human oversight. AI can suggest and automate actions, but human governance remains crucial.
I connected with Richard Stiennon for his thoughts on the cross-sections of AI and cybersecurity. He shared, “There are four completely separate domains of AI security. The first, which the large vendors are jumping into, is the ability to explain machine outputs in natural language with the use of LLMs. This is only marginally beneficial and will be just another feature/capability. The second is using AI to automate SOC operations. Only a few startups are working on this agentic model, but it will have the biggest impact on cyber defense. The third is what I call DLP for AI. Basically, controlling the types of things employees can upload to a LLM vendor. And finally, vulnerability management and policy protections for internally deployed LLMs. This is a growing area but it is premature as the threats have not appeared yet.”
The future of AI in cybersecurity lies in refining these technologies to be more autonomous and contextually aware while maintaining a balance between automation and human intervention. As companies modernize their data infrastructure to accommodate AI, they will also need to embed security into every layer of their technology stack.
Hopefully, organizations will take a “secure by design” approach as they embrace AI, ensuring that security is not an afterthought but a fundamental part of their digital transformation strategy.
Balancing Promise with Caution
The cybersecurity market is on the upswing, buoyed by AI-driven innovations and a broader market recovery. However, the challenge for organizations will be in separating the real potential of AI from the surrounding hype.
As the dust settles, the organizations that succeed will be those that take a thoughtful, strategic approach to AI, integrating it in ways that add genuine value while maintaining the necessary human oversight to prevent unintended consequences. The future of cybersecurity is undeniably tied to AI, but as Weingarten stressed to me, it’s only the beginning of what this technology can achieve.
- Record-Breaking Patch Tuesday Is A Sign It’s Time To Rethink The Process - July 26, 2026
- ‘Pompeii: Out of Time’ Series Reframes History as Survival Story - July 21, 2026
- Most AI Problems Are Really Capitalism Problems - July 19, 2026
