As data breaches and cyberattacks rise, cybersecurity exchange-traded funds (ETFs) are gaining traction.
The term cybersecurity originated in 1989, and today is defined as the measures taken to protect a computer or computer system against unauthorized access or cyberattack threats. These measures can include people, policies and processes.
The number of security incidents is increasing every year, as are the costs companies must pay. In fact, according to a 2024 research report from IBM (NYSE:IBM), the average cost of a single data breach event globally was US$4.48 million — up 10 percent over the previous year and the highest cost in the 19 years since the first report was issued.
These threats are unlikely to fade anytime soon. The forecast for the cybersecurity market is strong through 2030, with trends in the space including the threats posed by AI and quantum computing.
There are multiple ways to invest in the cybersecurity market, including cybersecurity ETFs, which offer a low-cost way to enter the space. ETF fees and expenses are typically lower than those associated with mutual funds or other types of actively managed financial instruments. What’s more, ETFs provide exposure to a basket of stocks, meaning investors can spread their risk around.
According to ETF.com, there are nine cybersecurity ETFs listed in the US. Here’s a closer look at the top four cybersecurity ETFs by assets under management (AUM). ETFs with assets under management above US$500 million are included in this list. All numbers and figures were current as of April 28, 2025.
1. First Trust NASDAQ Cybersecurity ETF (NASDAQ:CIBR)
AUM: US$8.00 billionExpense ratio: 0.59 percent
Launched in July 2015, this ETF tracks the NASDAQ CTA Cybersecurity Index (INDEXNASDAQ:NQCYBR) and includes companies categorized by the Consumer Technology Association as cybersecurity. The ETF’s 33 holdings are largely tech firms, but it also offers some exposure to the defense and aerospace sectors.
The First Trust NASDAQ Cybersecurity ETF’s top holdings include CrowdStrike Holdings (NASDAQ:CRWD) at a weight of 8.79 percent, Broadcom (NASDAQ:AVGO) at 7.78 percent, Palo Alto Networks (NYSE:PANW) at 7.58 percent and Cisco Systems (NASDAQ:CSCO) at 7.13 percent. Infosys (NYSE:INFY)
2. Amplify Cybersecurity ETF (ARCA:HACK)
AUM: US$1.89 billionExpense ratio: 0.6 percent
The oldest cybersecurity ETF on this list is the Amplify Cybersecurity ETF. Previously called ETFMG Prime Cyber Security ETF, this ETF began trading in November 2014 and tracks the ISE Cyber Security Index (INDEXNASDAQ:HXR). HACK is run by ETFMG, a lesser-known company among the goliath ETF managers, and it has had a 12.19 percent annualized return over the past five years.
The cybersecurity ETF has 25 holdings, and its top holdings by weight include Broadcom at 8.67 percent, CrowdStrike Holdings at 6.84 percent and Cisco Systems at 6.25 percent.
3. Global X Cybersecurity ETF (NASDAQ:BUG)
AUM: US$986.89 millionExpense ratio: 0.51 percent
The newest ETF on this list is the Global X Cybersecurity ETF, which was founded in October 2019. The ETF tracks a market-cap-weighted global index of companies selected based on revenue related to cybersecurity activities, as companies must generate at least 50 percent of their revenue from cybersecurity to be included.
The ETF has 23 holdings, with the top by weight being CrowdStrike at a weight of 7.8 percent, Fortinet (NASDAQ:FTNT) at a weight of 7.06 percent, Zscaler (NASDAQ:ZS) at 6.51 percent and Check Point Software Technologies (NASDAQ:CHKP) at 6.5 percent.
4. iShares Cybersecurity and Tech ETF (ARCA:IHAK)
AUM: US$909.79 millionExpense ratio: 0.47 percent
Last on this cybersecurity ETFs list is the iShares Cybersecurity and Tech ETF. Founded in June 2019, it tracks the NYSE FactSet Global Cyber Security Index (INDEXNYSEGIS:NYFSSEC) and has a focus on developed and emerging markets in the cybersecurity industry.
The iShares Cybersecurity and Tech ETF has 37 holdings, including Trend Micro Incorporated (TSE:4704) at a weight of 5.23 percent, Okta (NASDAQ:OKTA) at 5.1 percent, Crowdstrike Holdings at 4.82 and Check Point Software Technologies at 4.75 percent.
Securities Disclosure: I, Lauren Kelly, hold no direct investment interest in any company mentioned in this article.
