Check Point at 12 Times Earnings Is Not a Broken Cybersecurity Stock - It's an Irrational Overreaction

I always keep an eye out for irrational false narratives that frequently take the stock market by storm and lead to some terrific bargains - but also to some terrific duds. The current narrative around Check Point Software Technologies (NASDAQ: CHKP) is one of the more overwrought examples I've seen in a while. The consensus story, now repeated across analyst notes and financial pages, is that Check Point is a legacy cybersecurity company losing relevance, suffering go-to-market disruptions, and heading for a trough that may never fully recover. Shares tumbled 11.8% on the news of a soft Q3 guidance range. The market has treated this as structural decline rather than a quarterly hiccup in an otherwise extraordinary cash-generation machine.

I believe the market is overreacting, and not in the way that usually benefits patient capital allocators. Let me walk through the numbers.

Check Point reported Q2 2026 revenue of $674 million - a 1% year-over-year increase. That is undeniably slow growth. Security subscription revenues, however, rose 12% year over year to $333 million, showing the recurring revenue base is expanding even if top-line momentum has cooled. The remaining performance obligation - the backlog of contracted revenue yet to be recognized - sits at $2.6 billion, up 7% from a year ago. GAAP operating income was $185 million, or 27% of revenue. Non-GAAP operating income reached $260 million, representing 39% of total revenues. Free cash flow for the quarter was $161 million, or 24% of revenue.

What matters most here is not the 1% top-line growth but the fact that Check Point converts 24 cents of every dollar of revenue into free cash flow. On a trailing twelve-month basis, operating cash flow stands at $1.13 billion against capital expenditures of just $33 million. This is an asset-light software business with 86.4% gross margins and a return on invested capital of 24.1%. That is not a company in structural decay. That is a company generating cash faster than most investors realize because they are distracted by single-digit revenue growth.

Now let's address the Q3 guidance that sent shares tumbling. Check Point guided to $655 million to $685 million in Q3 revenue, below the analyst consensus of $696.5 million. EPS guidance was $2.43 to $2.53. Management expects Q3 to mark the trough and projects a strong Q4 rebound as go-to-market disruptions subside. That being the case, the sell-off appears excessive. The company updated full-year EPS guidance to $10.05 to $10.85. At today's price of $123.61, that implies forward earnings per share roughly in line with the midpoint of guidance. The trailing P/E is 12 times.

Here is the comparison that the market is ignoring. Check Point trades at 12 times trailing earnings. CrowdStrike - which currently reports negative earnings - trades at a market capitalization of $214 billion and a price-to-sales multiple of 42 times. Palo Alto Networks trades at 348 times earnings and 28 times sales. Zscaler, also unprofitable on a GAAP basis, trades at 8 times sales. Check Point trades at 4.6 times sales. You can argue that Check Point's growth profile does not justify the multiples its peers command. I would agree with that. But the market has swung so far in the other direction that Check Point now trades as though it faces existential threat, not merely a quarter of soft sales.

Comparisons between Check Point's current valuation and its peers' multiples are not just a data point - they are the central evidence that the consensus narrative is overextended. These peers trade at premiums because they are growing revenue at 20%, 30%, or 40% rates. Check Point is growing at roughly 5%. The valuation gap reflects that growth differential. That is fair. But the question is whether the gap has become so wide that Check Point's cash generation, balance sheet, and buyback program make it an attractive value play even at single-digit growth.

The balance sheet says it does. Check Point holds $4.2 billion in cash and marketable securities against $4.8 billion in total debt, leaving net debt of negative $572 million - effectively a net cash position. The current ratio stands at 167%. Return on equity is 37.6%. The company has no dividend - which is a legitimate complaint for income-focused investors - but the capital return mechanism is aggressive. Since the beginning of its share repurchase program, Check Point has bought back approximately 230 million shares for a total of $17.4 billion. In May 2026, the board authorized an additional $2 billion expansion. In Q2 alone, the company repurchased 2.5 million shares for $325 million.

That is the dividend substitute that matters here. Check Point has been returning cash to shareholders through buybacks at a scale that dwarfs most dividend programs in the cybersecurity sector. A $2 billion buyback authorization on a $12.6 billion market cap represents a 16% committed reduction in share count over time. Combined with the 24% FCF margin, the free cash flow yield on the enterprise value is approximately 9%, which is exceptional for any software company, let alone one in cybersecurity.

There are real risks worth acknowledging. Revenue growth is slow, and the go-to-market execution issues management described could persist longer than the Q3 trough and Q4 rebound scenario they are painting. The cybersecurity market is competitive, with Palo Alto Networks, CrowdStrike, and emerging players all vying for enterprise wallet share. Check Point's AI positioning - including the Network AI Firewall and AI Defense plane - is real but faces stiff competition from companies that have spent more aggressively on cloud-native security platforms. The company also drew from a $2 billion convertible notes offering in 2026, which is part of the $4.8 billion in total debt on the balance sheet. That said, the net cash position remains intact, and the convertible structure means debt repayment is interest-light.

The Israel factor deserves mention. Check Point is an Israeli company with significant R&D operations there. A new Israeli R&D tax incentive program enacted in March 2026 delivered a $28 million benefit in Q2 alone. Geopolitical risk in the region is a real tailwind for cybersecurity demand globally but also a structural concern for a company headquartered there. I consider this a neutral factor for now - the R&D tax benefit is a net positive, and the company's customer base is global enough that regional disruption would not be fatal. But it is a factor investors should hold in mind.

So where does this leave the thesis? The false narrative is that Check Point is a broken growth story. The reality is that it is a mature, cash-generative cybersecurity company trading at a deep value multiple relative to its earnings power, return on capital, and balance sheet strength. The Q3 guidance miss was a disappointment, but it does not invalidate a business that generates $1.1 billion in operating cash flow annually, trades at 12 times earnings, and is actively reducing its share count through aggressive buybacks.

I rate Check Point Software as a Buy. The 12-times trailing P/E, combined with a 24% free cash flow margin, a net cash balance sheet, and a $2 billion fresh buyback program, makes this a value play in a sector where value is increasingly rare. The risk is that slow revenue growth persists longer than management's Q4 rebound narrative suggests, compressing earnings power over time. But at this valuation, the market has already priced in a deterioration that the cash flow numbers do not support. In my opinion, the sell-off is an irrational overreaction to a quarterly guidance miss, and it presents a compelling entry point for investors willing to tolerate the absence of a dividend in exchange for massive share count reduction and cash generation at software-sector margins.