Thoughts on cybersecurity stocks

I currently have a well diversified portfolio (I hope) with mostly well-known etf’s and a couple large cap stocks.

Since my private equity internship at a software fund, I became aware of the importance of cybersecurity, even more than I expected.

The advantages of these firms seems to be very promising:
– recurring revenue
– high switching cost
– high entry barriers
– scalable

So my question is, are you buying directly into cybersecurity stocks (such as Crowdstrike or Palo Alto Networks), or cybersecurity etf’s? Or is it already too late and is the hype slowing down a bit.

Curious to hear your opinions.