The Bottleneck Was Never the Finding

Everyone owns the glamorous parts of cyber. The unloved layer that actually stops breaches is mispriced.

There is a moment in every breach that the headlines skip. Not the part where an attacker finds the open door — that part is easy, and getting easier by the week. The part they skip is the three months before, when somebody on a security team already knew the door was open, had it buried in a list of nine thousand other open doors, and could not tell which one actually mattered until it was the one that got used.

Finding the vulnerability was never the hard part. Knowing which of the thousands in your specific environment will get you owned this week, and getting someone to close it before then — that is the hard part. That is the whole job. And it is the part the market has just decided no longer has any value. That decision is the opportunity.

I am initiating a large, (likely) multi-year core position in Tenable TENB 0.00%↑ at roughly $27 cost. I think it is a $100 stock inside of two to three years. The reason it is cheap is a clean, nameable error the market is making in real time — and underneath that error sits a category leader with a greenfield in front of it, a deliberately underinvested growth engine, and an AI roadmap, anchored by a partnership with Anthropic, that turns the thing everyone fears into the thing that pays.

THE MISREAD

AI is the demand, not the disruption

Eighteen months ago the frontier labs began shipping models that read source code and surface software flaws on their own. Anthropic’s Mythos is the one everyone cites. The market took one look — a model that scans, pointed at a company that scans — and concluded the machine eats the scanner. Vulnerability management is a melting ice cube. The sell-side put it in writing; the phrase circulating the desks is that the category is “secularly challenged.” The stock fell from a real software multiple to roughly three times sales.