# Cybersecurity ETFs: 7 funds, largest first

> ETFIQ covers 7 cybersecurity ETFs. The largest are CIBR ($17.3bn), HACK ($3.5bn) and BUG ($2.2bn); fees run 0.20% to 0.60%, as of Oct 12 to 21, 2026.

Data as of Oct 21, 2026. Rebuilt every trading night.

Data as of Oct 21, 2026 .

## Cybersecurity ETFs: what each one holds

See every cybersecurity ETF by what it holds, not by its name. Funds that hold the companies that sell security software and services: endpoint, network, identity and cloud security. 7 funds, largest first. Updated Oct 21, 2026. The typical fund carries 32% of its weight in S&P 500 names, the 24th most of the 53 themes with filed books.

7 US listed cybersecurity ETFs

$17.3bn The largest, CIBR

0.20% The cheapest, PSWD

+44.4% Best one year, WCBR

### The short answers

Least like the S&P 500 IHAK , iShares Cybersecurity and Tech ETF, 14.9% of its weight in S&P 500 companies. Closest pair PSWD and SPAM , 76% of their weight in the same companies.

### What these funds actually own

Between them the 7 funds' ten largest holdings name 33 companies, of which 14 appear in more than one. CrowdStrike Holdings, Inc. (Class A) is among the ten largest of 6 of them, at an average of 6.3% of the fund.

| Company | Among the ten largest of | Average weight where it is | Largest, and in which fund |
| --- | --- | --- | --- |
| CrowdStrike Holdings, Inc. (Class A) CRWD | 6 of 7 | 6.3% | 7.8% in CIBR |
| Palo Alto Networks, Inc. PANW | 6 of 7 | 5.9% | 7.1% in CIBR |
| Okta, Inc. OKTA | 6 of 7 | 5.5% | 6.3% in SPAM |
| Fortinet, Inc. FTNT | 5 of 7 | 6.2% | 8.0% in CIBR |
| Rubrik, Inc. (Class A) RBRK | 5 of 7 | 4.8% | 5.7% in PSWD |
| SENTINELONE INC CLASS A S | 4 of 7 | 4.6% | 5.5% in WCBR |
| Zscaler, Inc. ZS | 4 of 7 | 4.5% | 5.6% in IHAK |
| F5, Inc. FFIV | 3 of 7 | 4.2% | 4.5% in SPAM |
| Broadcom Inc. AVGO | 2 of 7 | 6.8% | 7.2% in CIBR |
| Cisco Systems, Inc. CSCO | 2 of 7 | 6.7% | 7.7% in CIBR |
| TENABLE HOLDINGS INC TENB | 2 of 7 | 5.4% | 6.1% in WCBR |
| QUALYS QLYS | 2 of 7 | 5.1% | 5.9% in IHAK |
| VARONIS SYSTEMS VRNS | 2 of 7 | 4.7% | 5.0% in IHAK |
| Cloudflare, Inc. (Class A) NET | 2 of 7 | 4.3% | 4.9% in HACK |
| OKTA, INC. | 1 of 7 | 7.5% | 7.5% in BUG |

The 15 most widely held of 33. Each row counts the ten largest holdings of each fund, so a fund missing from a row may still hold that company lower down. Weights are of the funds that name it, not of the theme.

### The 7 largest cybersecurity ETFs

ETFIQ covers 7 cybersecurity ETFs. The largest are CIBR ( $17.3bn ), HACK ( $3.5bn ) and BUG ( $2.2bn ); fees run 0.20% to 0.60% , as of Oct 12 to 21, 2026 .

- CIBR First Trust NASDAQ Cybersecurity ETF $17.3bn 0.58%

- HACK Amplify Cybersecurity ETF $3.5bn 0.60%

- BUG Global X Cybersecurity ETF $2.2bn 0.50%

- IHAK iShares Cybersecurity and Tech ETF $1.2bn 0.47%

- WCBR WisdomTree Cybersecurity Fund $103m 0.45%

- PSWD Xtrackers Cybersecurity Select Equity ETF $6m 0.20%

- SPAM Themes Cybersecurity ETF $5m 0.35%

| Ticker | Fund | Issuer | Net assets | In the S&P 500 | Active share | Total return 1Y | vs its benchmark 1Y | Fee |
| --- | --- | --- | --- | --- | --- | --- | --- | --- |
| CIBR | First Trust NASDAQ Cybersecurity ETF | First Trust | $17.3bn | 61.8% | 90.5% | +34.6% | not measured | 0.58% |
| HACK | Amplify Cybersecurity ETF | Amplify | $3.5bn | 44.4% | 95.3% | +40.0% | not measured | 0.60% |
| BUG | Global X Cybersecurity ETF | Global X | $2.2bn | 32.5% | 99.1% | +32.7% | not measured | 0.50% |
| IHAK | iShares Cybersecurity and Tech ETF | iShares | $1.2bn | 14.9% | 99.1% | +33.6% | not measured | 0.47% |
| WCBR | WisdomTree Cybersecurity Fund | WisdomTree | $103m | 34.0% | 98.9% | +44.4% | not measured | 0.45% |
| PSWD | Xtrackers Cybersecurity Select Equity ETF | Xtrackers | $6m | 28.1% | 98.9% | +26.4% | not measured | 0.20% |
| SPAM | Themes Cybersecurity ETF | Themes | $5m | 26.3% | 99.1% | +32.0% | not measured | 0.35% |

### How much of each pair is the same fund

The closest pair is PSWD and SPAM , which hold 76% of their weight in the same companies. The furthest apart is CIBR and IHAK at 34%. The middle pair of the 21 is 60%.

| | CIBR | HACK | BUG | IHAK | WCBR | PSWD | SPAM |
| --- | --- | --- | --- | --- | --- | --- | --- |
| CIBR | · | 56% | 45% | 34% | 53% | 45% | 45% |
| HACK | 56% | · | 64% | 49% | 64% | 59% | 60% |
| BUG | 45% | 64% | · | 62% | 74% | 64% | 64% |
| IHAK | 34% | 49% | 62% | · | 56% | 58% | 62% |
| WCBR | 53% | 64% | 74% | 56% | · | 66% | 65% |
| PSWD | 45% | 59% | 64% | 58% | 66% | · | 76% |
| SPAM | 45% | 60% | 64% | 62% | 65% | 76% | · |

Weight overlap adds the smaller of the two weights for every company both funds hold. Funds with a cut-short book are left out, not compared short.

### What each fund holds alone

| Fund | Largest holding it alone has | Weight | All of its own names |
| --- | --- | --- | --- |
| CIBR | Accenture plc ACN | 2.5% | 21.4% |
| HACK | Northrop Grumman Corp NOC | 4.7% | 9.3% |
| BUG | Arqit Quantum Inc | 0.3% | 0.8% |
| IHAK | CALIX NETWORKS CALX | 2.7% | 5.8% |
| PSWD | GDS HOLDINGS LTD 9698 | 2.7% | 9.7% |
| SPAM | Nebius Group NV NBIS | 6.4% | 6.8% |

### Questions people ask

How many cybersecurity ETFs are there? ETFIQ covers 7 US listed cybersecurity ETFs as of Oct 21, 2026. That is every one it can measure from the fund’s own published holdings. What is the largest cybersecurity ETF? CIBR , First Trust NASDAQ Cybersecurity ETF, at $17.3bn in net assets as of Oct 20, 2026, the largest of the 7 cybersecurity ETFs with a published size. What is the cheapest cybersecurity ETF? PSWD , Xtrackers Cybersecurity Select Equity ETF, at 0.20% a year by its prospectus filed Sep 25, 2026, the lowest fee of the 7 cybersecurity ETFs that publish one. Which cybersecurity ETF has performed best over the past year? WCBR , WisdomTree Cybersecurity Fund, at +44.4% total return over the year to Oct 21, 2026, the highest of the 7 cybersecurity ETFs with a full year of trading behind them. Past returns do not predict future ones. What do cybersecurity ETFs hold? Funds that hold the companies that sell security software and services: endpoint, network, identity and cloud security. Between them the 7 cybersecurity ETFs ETFIQ can read name 33 companies in their ten largest holdings, by holdings dated May 29, 2026 to Oct 21, 2026, most widely CrowdStrike Holdings, Inc. (Class A), which is among the ten largest of 6 of them. Do cybersecurity ETFs hold the same companies? It depends which two. Across the 21 pairs of the 7 cybersecurity ETFs with a full published book, by holdings dated May 29, 2026 to Oct 21, 2026, PSWD and SPAM hold 76% of their weight in the same companies, CIBR and IHAK hold 34%, and the middle pair holds 60%. Two funds sold on one theme are not the same fund.

### What the issuers say about this theme

The issuers behind these cybersecurity funds publish their own work on this theme. These are their pages and words, not ETFIQ’s. A fund company writing about a theme it sells is making a case.

| Issuer | What they publish | Kind |
| --- | --- | --- |
| First Trust | First Trust Investment Insights | Their research index |
| Amplify | Amplify Insights | Their research index |
| Global X | Global X Insights, including The Next Big Theme | Their research index |
| iShares | iShares Portfolio Insights | Their research index |
| WisdomTree | WisdomTree blog | Their research index |
| Themes | Themes ETFs: why cybersecurity | On this theme |

### Where to next

### Where these figures came from

ETFIQ links to the documents behind every figure; a link is not an endorsement.

ETFIQ is an independent publisher and makes no recommendations. Standards and sources

---

Source: ETFIQ, independent ETF data. Recomputed nightly from public filings and prices.
Cite: ETFIQ, Cybersecurity ETFs: what each one holds, data as of Oct 21, 2026. https://etfiq.com/themes/cyber
Licence: https://etfiq.com/license/ Figures ETFIQ computes are free to use with attribution: ETFIQ (etfiq.com). Issuer data stays under its owner's terms.
HTML: https://etfiq.com/themes/cyber