- Stock Market & Equities
Top 10 Halal Cybersecurity Stocks 2026

Cybersecurity is a quietly good sector for Shariah investors. The product is software, the revenue is subscription-based, and the strongest companies generate more cash than they can spend. None of that guarantees compliance, but it produces the balance sheet profile the AAOIFI screen is looking for. This list covers ten security and infrastructure names that pass in 2026, plus the well-known one that currently does not.
Quick Answer The top halal cybersecurity stocks for 2026 include Palo Alto Networks, Fortinet, Zscaler, Check Point, Okta, Qualys, Tenable, SentinelOne, F5 and VeriSign, all screened as compliant under AAOIFI Standard 21 in mid-2026. CrowdStrike screened as DOUBTFUL on the same data, and several adjacent infrastructure names including Cloudflare and Akamai failed the financial ratios. |
Table of Contents
- How these cybersecurity stocks were selected
- The top 10 halal cybersecurity stocks for 2026
- Why is CrowdStrike not on the list?
- Which security and infrastructure names fail?
- How to use this list
How these cybersecurity stocks were selected
Every name was screened against AAOIFI Standard 21: a business activity test first, then debt and interest-earning assets against market capitalisation at a 30% cap, and non-permissible income against revenue at 5%.
Security software passes the activity test easily. Protecting networks and identities is a permissible service with no prohibited component. The differentiator is almost entirely financial, and specifically whether a company funded its growth with convertible notes.
The top 10 halal cybersecurity stocks for 2026
| Ticker | Company | What it does and why it fits |
|---|---|---|
| PANW | Palo Alto Networks | Broad security platform across network, cloud and operations. |
| FTNT | Fortinet | Network security hardware and software; consistently profitable. |
| ZS | Zscaler | Cloud-native zero trust access. |
| CHKP | Check Point Software | Long-established security vendor with a net-cash balance sheet. |
| OKTA | Okta | Identity and access management. |
| QLYS | Qualys | Vulnerability management delivered as a service. |
| TENB | Tenable | Exposure and vulnerability management. |
| S | SentinelOne | AI-driven endpoint protection. |
| FFIV | F5 | Application delivery and security infrastructure. |
| VRSN | VeriSign | Domain name registry infrastructure; unusually high margins. |
Why is CrowdStrike not on the list?
CrowdStrike is the name most investors expect to see here, and on mid-2026 data it screened as DOUBTFUL rather than HALAL.
Doubtful is not the same as non-compliant. It means the company passes the business test but sits on the wrong side of a financial threshold for reasons that can reverse. In fast-growing software companies the usual culprits are convertible debt raised during the growth phase and a large interest-earning cash balance built up after a successful offering.
What you do with a doubtful holding is a scholarly question rather than a screening one. Some scholars advise avoiding it entirely; others permit holding while purifying the full non-permissible share of any income. Check the live verdict on the CRWD report before making a decision, and take the ruling question to a qualified scholar.
Which security and infrastructure names fail?
Several companies commonly bundled into cybersecurity screens did not pass in mid-2026.
| Company | Verdict | Typical reason |
|---|---|---|
| Cloudflare | NOT HALAL | Convertible notes large relative to market capitalisation. |
| Akamai | NOT HALAL | Convertible debt used to fund buybacks and acquisitions. |
| Gen Digital | NOT HALAL | Heavy acquisition debt from consumer security consolidation. |
| Rapid7 | NOT HALAL | Convertible notes against a small market capitalisation. |
| Varonis | NOT HALAL | Convertible debt exceeding the 30% threshold. |
The pattern is unmistakable. Convertible notes are the standard financing tool for mid-cap software, and they are interest-bearing debt under Standard 21. A company can be excellent, growing and entirely permissible in what it does, and still fail on this single item. For how the ratio is calculated, see how AAOIFI screening works.
How to use this list
Security software gives a halal portfolio exposure to enterprise technology spending without the hardware cyclicality of semiconductors, which is why it pairs well with the chip-heavy names that dominate most Shariah-screened tech lists.
Treat every name here as a research starting point rather than a buy signal. A stock passing the screen tells you it is permissible to own. It tells you nothing about whether the price is reasonable or whether the company suits your risk tolerance.
The habit that matters most is re-screening. Compliance is recalculated from each new filing, so a verdict from six months ago is history, not information. Check any ticker on the halal stock screener, where each name above links to its full Shariah report, or browse the top halal stocks for the wider compliant universe. For the mechanics behind the three ratios, see how AAOIFI screening works.
Frequently asked questions
Is Palo Alto Networks halal?
Yes. Palo Alto Networks screened as HALAL under AAOIFI Standard 21 in mid-2026. Security software is a permissible service and the company financial ratios sit inside the 30/30/5 limits. Verdicts are recalculated quarterly.
Is CrowdStrike halal?
On mid-2026 data CrowdStrike screened as DOUBTFUL, not halal and not outright non-compliant. The business is permissible; the issue is a financial ratio. Scholars differ on whether a doubtful holding may be kept with purification, so check the live verdict and ask a qualified scholar.
Why is Cloudflare not halal?
Cloudflare has issued convertible notes that are large relative to its market capitalisation. Those notes count as interest-bearing debt under AAOIFI Standard 21, pushing the debt ratio above the 30% limit despite a permissible business.
Are software stocks generally halal?
The business activity almost always passes, since selling software is permissible. The failures come from financing. Mid-cap software companies routinely raise convertible debt, which is interest-bearing and counts against the 30% debt limit.
Do cybersecurity stocks pay dividends I need to purify?
Most pay no dividend, so under the majority view there is nothing to purify. Where a dividend exists, multiply it by the non-compliant revenue percentage on the stock report, which for these companies is usually interest earned on cash.
Sources
AAOIFI Shari'ah Standard No. 21: Financial Paper (Shares and Bonds) — the two-stage business and financial screen applied to every name on this list.
Fiqh Council of North America — ruling on investing in stocks — fatwa confirming that shares in permissible, screened companies are halal to own.
The Past, Present, and Future of Shari'ah-Compliant Equities (INCEIF journal) — academic context on Islamic equity screening and index methodologies.
Download the Akinda app Screen thousands of global stocks and monitor Shariah compliance in real time. Website: akinda.io App: onelink.to/kpqkh6 |
Disclaimer
This article is for educational purposes only and is not financial or religious advice, and is not a recommendation to buy any security. Shariah compliance and financial data change over time; the verdicts here are AAOIFI-based snapshots taken in mid-2026. Verify current compliance on the screener and consult a qualified scholar before investing.