BUG
Global X Cybersecurity ETF
Global X's cybersecurity fund — the global Digital Trust security and identity proxy.
Fund summary
Strategy
Global X's cybersecurity ETF — the pure Digital Trust security lens (Okta, CrowdStrike, Palo Alto Networks, Fortinet, Zscaler).
Stated focus
Cybersecurity technology, services, and systems — intrusion and attack prevention across systems, networks, applications, computers, and mobile devices.
Read full strategy
BUG tracks the Indxx Cybersecurity Index — a passive, global thematic index of up to 40 companies deriving at least 50% of revenue from cybersecurity. It is the cleanest single-instrument proxy for the Digital Trust security/identity layer, complementing CIBR (a narrower NASDAQ cybersecurity basket). Net assets ~$2.2B (issuer, 2026-10-13); inception 2019-10-25; expense ratio 0.50%. Holdings below are the mapped-company subset of the top-25 holdings file. BUG is issued by Global X, the ETF franchise of Mirae Asset Global Investments, and its mapped positions — Okta, CrowdStrike, Fortinet, Palo Alto Networks, and Zscaler among them — concentrate in the Digital Trust security and identity leaders. Its fourteen mapped positions span identity (Okta), endpoint and network security (CrowdStrike, Fortinet, Palo Alto Networks), zero-trust access (Zscaler), and vulnerability management (Tenable, Qualys), concentrated in the Digital Trust security leaders.
Top 10 holdings
As of Oct 26, 2026. Top holdings by weight among U.S.-listed issuers (stockanalysis.com); non-U.S.-listed positions may be omitted. Portfolio weights are not ownership percentages of the companies.
| # | Company | Ticker | Portfolio weight |
|---|---|---|---|
| 1 | Okta, Inc. Mapped | OKTA | 9.29% |
| 2 | CrowdStrike Holdings, Inc. Mapped | CRWD | 7.26% |
| 3 | Fortinet, Inc. Mapped | FTNT | 6.97% |
| 4 | Palo Alto Networks, Inc. Mapped | PANW | 6.72% |
| 5 | Zscaler, Inc. Mapped | ZS | 6.18% |
| 6 | Qualys, Inc. Mapped | QLYS | 6.11% |
| 7 | Rubrik, Inc. | RBRK | 5.79% |
| 8 | Netskope, Inc. | NTSK | 5.68% |
| 9 | Tenable Holdings, Inc. Mapped | TENB | 5.13% |
| 10 | Varonis Systems, Inc. Mapped | VRNS | 4.74% |
Holdings changes
- 2026-10-26: non-US lines now parsed (absent from the prior table only because exchange-prefixed symbols were dropped, not new positions): TYO:4704 3.39%, KOSDAQ:053800 0.88%, LON:NCC 0.71%, TYO:2326 0.63%, TYO:3692 0.56%
Known positions in mapped companies
| Company | Relationship | Portfolio weight | As of | Evidence |
|---|---|---|---|---|
| Zscaler, Inc. | Reported holding | 6.18% | Oct 26, 2026 | Source |
| VRNS | Reported holding | 4.74% | Oct 26, 2026 | Source |
| Tenable Holdings, Inc. | Reported holding | 5.13% | Oct 26, 2026 | Source |
| SentinelOne, Inc. | Reported holding | 4.05% | Oct 26, 2026 | Source |
| QLYS | Reported holding | 6.11% | Oct 26, 2026 | Source |
| Palo Alto Networks, Inc. | Reported holding | 6.72% | Oct 26, 2026 | Source |
| OneSpan Inc. | Reported holding | 0.87% | Oct 26, 2026 | Source |
| Okta, Inc. | Reported holding | 9.29% | Oct 26, 2026 | Source |
| Gen Digital Inc. | Reported holding | 3.29% | Oct 26, 2026 | Source |
| Fortinet, Inc. | Reported holding | 6.97% | Oct 26, 2026 | Source |
| CRWD | Reported holding | 7.26% | Oct 26, 2026 | Source |
| Check Point Software Technologies Ltd. | Reported holding | 3.44% | Oct 26, 2026 | Source |
| Akamai Technologies, Inc. | Reported holding | 3.01% | Oct 26, 2026 | Source |
| A10 Networks, Inc. | Reported holding | 2.12% | Oct 26, 2026 | Source |
Derived exposure
Counts cover distinct mapped companies only. They are not an allocation and do not describe the full portfolio.
Universes
Layers
- Zero Trust Security8 mapped companies
- Data Governance & Privacy2 mapped companies
- Critical Infrastructure Protection1 mapped company
- Compliance & GRC1 mapped company
- Identity & Access2 mapped companies
Timeline
- Oct 25, 2019
Global X Cybersecurity ETF begins operations
Source
Start here
Open questions
- Full 31-holding file not captured — the top-25 table (stockanalysis) covers all holdings >0.60% weight; the remaining 6 are sub-0.60% and unmapped.
- CYBR (CyberArk) is mapped but absent from the top-25 — verify whether BUG holds it (may be index-excluded or sub-0.6%).
- TENB (Tenable) is primary-tagged digital_sovereignty in company, not digital_trust — confirm intended classification.