sector-overview

​

What is a Sector Overview?

​

Why It Matters

• Context for stock picking: Individual company analysis is meaningless without industry context. A company growing 10% annually is impressive in a 3% growth industry but lagging in a 25% growth industry
• Top-down vs. bottom-up: Some of the most successful investment strategies start with identifying attractive industries before selecting specific stocks within them
• M&A advisory: Investment bankers advising on mergers need to map the competitive landscape, identify potential acquirers, and justify valuation multiples using industry benchmarks
• Client value: Institutional investors pay for sector expertise. An analyst who can explain industry dynamics and identify inflection points is far more valuable than one who only follows individual stocks

​

Key Concepts

​

Worked Example: US Cybersecurity Sector Overview

​

Market Size and Growth

CYBERSECURITY MARKET SIZING

Total Addressable Market (TAM):
  Global cybersecurity spending: $215B (2024)
  Source: Gartner, October 2024

  Growth: 14.3% CAGR 2024-2028, reaching $370B by 2028
  Source: IDC Worldwide Security Spending Guide, Q3 2024

Serviceable Addressable Market (SAM):
  Enterprise cybersecurity (excluding consumer antivirus): $185B
  Software + cloud-delivered security: $130B
  Source: Gartner, segmented from total spending

Serviceable Obtainable Market (SOM):
  Cloud-native security platforms (endpoint + network + identity
  + SIEM, delivered as SaaS): $65B
  This is the segment where the public company leaders compete
  Source: Analyst estimate based on company disclosures and IDC data

Key growth drivers:
  1. AI-powered attacks increasing threat sophistication (+2-3% CAGR)
  2. Regulatory compliance (SEC cyber rules, DORA in EU) (+1-2% CAGR)
  3. Cloud migration driving cloud security spend (+3-4% CAGR)
  4. Cyber insurance requirements mandating security tools (+1% CAGR)
  5. Platform consolidation replacing point products (+2-3% CAGR)

​

Industry Structure

​

Value Chain Analysis

WHERE VALUE ACCRUES IN CYBERSECURITY:

                      Revenue     Operating    Growth
                      Share       Margin       Rate
  ┌─────────────────────────────────────────────────┐
  │ Endpoint Security    20%        15-25%       18%  │
  │ (CrowdStrike, SentinelOne)                        │
  ├─────────────────────────────────────────────────┤
  │ Network Security     25%        20-30%       12%  │
  │ (Palo Alto, Fortinet, Zscaler)                    │
  ├─────────────────────────────────────────────────┤
  │ Identity & Access    15%        10-20%       22%  │
  │ (CyberArk, Okta, Microsoft Entra)                 │
  ├─────────────────────────────────────────────────┤
  │ Cloud Security       12%        5-15%        30%  │
  │ (Wiz, Orca, Palo Alto Prisma)                     │
  ├─────────────────────────────────────────────────┤
  │ SIEM / SecOps        15%        10-20%       15%  │
  │ (Splunk/Cisco, CrowdStrike, Palo Alto)            │
  ├─────────────────────────────────────────────────┤
  │ Other (data sec,     13%        Varies       20%  │
  │  email sec, GRC)                                   │
  └─────────────────────────────────────────────────┘

Highest-value segment: Cloud Security (30% growth, rapidly
expanding as enterprises adopt multi-cloud architectures)

Segment to watch: Identity (22% growth, recognized as
"the new perimeter" after high-profile breaches)

​

Competitive Landscape: Top 5 Public Companies

​

Competitive Dynamics

PLATFORM THESIS (Bull case for PANW):
- CISOs managing 30-50 vendors want simplification
- Palo Alto offers 70+ products across all categories
- Average customer uses 3.7 products (up from 2.3 in 2022)
- Platform deals ($1M+ ACV) growing 40% YoY
- Evidence: PANW growing despite lower product-level growth

BEST-OF-BREED THESIS (Bull case for CRWD):
- Endpoint security is mission-critical; compromise is unacceptable
- CrowdStrike's detection rate is 99.7% vs. 95-97% for platform
  endpoint products
- Enterprises consolidate within categories, not across them
- Evidence: CRWD growing 33% vs. PANW at 16%

​

Valuation Context

​

Investment Implications

1. CrowdStrike (CRWD): Growth leader at 33%. Trading at 22x NTM revenue — premium to the sector but justified by best-in-class growth and improving margins. Bull case: if endpoint + identity + cloud modules drive platform expansion, multiple re-rates to 25x+ ($420+). Bear case: growth decelerates to 20$240).
2. CyberArk (CYBR): Identity security is the fastest-growing subsegment. CYBR is the clear leader with no close competitor. Trading at 20x revenue — reasonable for 28% growth. Upcoming catalyst: FY2025 guidance at March analyst day.
3. Fortinet (FTNT): Value play within the sector. Highest margins (30% EBITDA), lowest multiple (12x revenue), and a product refresh cycle (FortiGate G series) that should re-accelerate hardware revenue. Risk: hardware is cyclical and product transitions can create revenue gaps.

​

Full Skill Workflow (From SKILL.md)

​

Phase 1: Define Scope

• Sector / subsector: What industry and how narrowly defined?
• Purpose: Client report, internal research, M&A pitch material, idea generation?
• Depth: High-level overview (5-10 pages) or deep dive (20-30 pages)?
• Angle: Neutral landscape vs. thematic thesis (e.g., “AI infrastructure buildout”)?
• Universe: Public companies only, or include private?
• Geography: US only, global, or specific regions?

​

Phase 2: Market Overview

• Total addressable market (TAM) with source and methodology
• Historical growth rate (5-year CAGR) with source
• Forecast growth rate and key growth assumptions
• Market segmentation by product, geography, end market, and customer type
• TAM/SAM/SOM framework with clear definitions and sourcing

• Fragmented vs. consolidated — top 5 and top 10 market share
• Value chain map — where does value (revenue and profit) accrue?
• Business model types (subscription, transaction, licensing, services, hardware)
• Barriers to entry (capital requirements, regulatory licenses, network effects, switching costs, brand, IP)

• Secular tailwinds (3-5 major structural trends driving long-term growth)
• Headwinds and risks (regulatory, competitive, technological)
• Technology disruption vectors (what could upend the industry in 5-10 years?)
• Regulatory developments (new laws, compliance requirements, enforcement trends)
• M&A activity and consolidation trends (deal volume, average size, strategic rationale)

​

Phase 3: Competitive Landscape

• Business description (2-3 sentences)
• Strategic positioning and competitive moat
• Recent developments (earnings, M&A, product launches)
• Valuation snapshot (P/E, EV/EBITDA, EV/Revenue)

• How do companies compete? (price, product, service, distribution, brand)
• Who is gaining share and why? Who is losing?
• Disruption risk from new entrants, adjacent players, or technology shifts
• Key competitive barriers and switching costs

​

Phase 4: Valuation Context

• Sector trading multiples: current vs. historical range (5-year or 10-year)
• Premium/discount drivers: what justifies above-average or below-average multiples?
• Recent M&A transaction multiples (last 3-5 years of relevant deals)
• Sector valuation relative to the broader market (S&P 500 premium/discount)
• Cross-sector comparison: how does this sector compare to adjacent sectors?

​

Phase 5: Investment Implications

• Where are the best risk/reward opportunities in the sector?
• What thematic bets can be expressed through specific stocks?
• Key bull vs. bear debates in the sector (present both sides fairly)
• Catalysts that could change the sector narrative (regulatory, technology, M&A)
• What would make you want to overweight or underweight the sector?

​

Phase 6: Deliver Output

• Word document or PowerPoint with:
  • Market overview and sizing (with sources)
  • Competitive landscape map
  • Company comparison table
  • Valuation summary (current + historical + M&A comps)
  • Key charts: market growth, share trends, valuation history
• Excel appendix with detailed company data, trading multiples, and M&A comps

​

Common Mistakes (and How to Avoid Them)

​

Daily Workflow Scenarios

​

Scenario 1: Building a Sector Overview for New Coverage Initiation

1. Week 1, Days 1-2: Market sizing. Pull TAM data from Gartner, IDC, and Forrester. Cross-reference and reconcile differences. Build the TAM/SAM/SOM framework.
2. Week 1, Days 3-5: Industry structure and value chain. Map all segments. Identify where revenue and profit concentrate. Research barriers to entry and competitive dynamics.
3. Week 2, Days 1-3: Competitive landscape. Build company profiles for all 12 coverage names plus 5-10 relevant private companies. Assemble the comparison table.
4. Week 2, Days 4-5: Valuation context. Pull historical trading multiples, M&A transaction comps, and sector vs. market premiums.
5. Week 3, Days 1-2: Investment implications. Identify top ideas, key debates, and catalysts. Draft recommendations.
6. Week 3, Days 3-5: Write and format the report. Create charts: market size waterfall, competitive positioning matrix, valuation scatter plot, share trend charts.

​

Scenario 2: Thematic Sector Update for Client Request

1. Day 1: Research the specific theme (AI in cybersecurity). How is AI changing attack vectors? How is it changing defense capabilities? What products are being built?
2. Day 2: Map which companies benefit most from AI (CrowdStrike’s Charlotte AI, Palo Alto’s Cortex XSIAM) and which are at risk (legacy signature-based vendors).
3. Day 3: Write the update. Structure: AI threat landscape, AI defense capabilities, company-by-company impact assessment, investment implications.
4. Day 4: Review and refine. Ensure every claim is sourced.
5. Day 5: Distribute to the client.

​

Scenario 3: Quick Sector Update After a Major M&A Announcement

1. Within 1 hour: Assess the deal: What was the price? What multiple was paid (EV/Revenue, EV/ARR)? How does this compare to recent deals?
2. Within 3 hours: Write a 2-page sector update: deal terms, implications for the competitive landscape, read-through for other cybersecurity stocks (does this make other companies more or less likely M&A targets?), and valuation implications (does this deal set a new floor for cybersecurity multiples?).
3. Same day: Distribute to sales team and clients.

​

Scenario 4: Sector Review for Annual Outlook Publication

1. Days 1-2: Review the past year: which predictions were right/wrong? What were the biggest surprises? How did the sector perform vs. the market?
2. Day 3: Refresh all data: market size, growth estimates, company financials, valuation multiples.
3. Days 4-5: Write the forward outlook: key themes for the coming year, top picks, key risks, catalyst calendar.
4. Day 6: Create charts and format the report.
5. Day 7: Review, refine, and publish.

​

Practice Exercise

• POS hardware and software
• Online ordering and delivery platforms
• Back-of-house technology (kitchen, inventory, workforce)
• Payments processing (restaurant-specific) Use publicly available data from Toast, Square (Block), Olo, PAR Technology, and industry reports. Show your methodology.

​

How to Add to Your Local Context

# Install the plugin
claude plugin install equity-research@financial-services-plugins

open ~/.claude/skills/equity-research/sector-overview.md

{
  "mcpServers": {
    "industry-data": {
      "command": "industry-data-mcp",
      "args": ["--sources", "statista,ibisworld,factset"]
    }
  }
}

​

Best Practices

• Charts are essential: Market size waterfall, competitive positioning matrix (2x2), valuation scatter plot, and share trend charts make the analysis visually compelling and scannable
• Sector overviews age fast: Note the date prominently and flag any data that may be stale. A sector report with 2-year-old market size data is misleading
• Distinguish TAM hype from reality: Many industries inflate TAM by including tangentially related markets. Be rigorous about what is actually addressable
• Tailor the “so what”: If the report is for an M&A client, focus on who could buy/sell and at what multiples. If for a portfolio manager, focus on which stocks offer the best risk/reward
• Map the value chain explicitly: Show where revenue and profit pools sit across the value chain. This is often the most insightful part of a sector analysis
• Include both bulls and bears: Present the key debate in the sector fairly. Analysts who only present one side lose credibility
• Source every number: Market size figures without a source are marketing, not analysis
• Update at least semi-annually: Sectors evolve. A report from 12 months ago may be materially out of date

​

Dependencies

• Industry research data (Gartner, IDC, Frost & Sullivan, or equivalent)
• Company financial data (SEC filings, Bloomberg, FactSet)

• PowerPoint for client-facing reports
• Excel for detailed company comparisons and valuation analysis
• Expert network for qualitative industry insights