What Is BUG? Global X Cybersecurity ETF

BUG is the Global X Cybersecurity ETF, a thematic fund that holds companies building and managing digital security technology. It tracks the Indxx Cybersecurity Index and invests at least 80% of assets in firms tied to the theme, from network and cloud security to identity and data protection. The expense ratio is 0.50%.

Launched in October 2019, BUG targets investors who believe cybersecurity spending will keep rising as threats grow. It offers a pure-play way to own the theme in one ticker, rather than getting diluted exposure through a broad technology fund.

Approximate weights as of mid-2026; refresh quarterly from Global X's fund page. Each ticker links to its individual stock guide in Walnut.

BUG holds around 30 stocks, concentrated in pure-play security leaders. Recent top positions include Okta, Palo Alto Networks, Fortinet, CrowdStrike, Tenable, Qualys, Varonis, Zscaler, and Rubrik, spanning network security, endpoint protection, identity, and data security. The top 10 make up roughly 60% of the fund.

The tight roster and concentration mean BUG's performance leans heavily on a handful of names. It skews toward mid- and large-cap software companies whose core business is security, giving it a more focused profile than broader tech or defense funds.

BUG's main rivals are the First Trust Nasdaq Cybersecurity ETF (CIBR) and the Amplify Cybersecurity ETF (HACK). Both hold broader rosters that fold in larger, more diversified technology and defense firms, which can smooth returns but dilute the pure-play theme.

BUG runs a narrower, roughly 30-stock basket focused tightly on security specialists, so it is more concentrated and can move more sharply with the theme. Its 0.50% fee sits in the same range as those peers. Investors typically pick one cybersecurity ETF given the overlap.

BUG's returns are driven by the growth and valuations of its security-software holdings, which have been among the more volatile corners of technology. Strong secular demand for cyber defense has fueled rallies, while rate-driven selloffs in high-multiple software have caused steep drawdowns.

The long-term case rests on cybersecurity spending compounding as attacks, cloud adoption, and AI-era threats intensify. Whether that translates into fund returns depends on execution and valuation, both of which are uncertain. Past performance does not predict future results.

BUG fits investors who are bullish on rising cybersecurity spending and want concentrated, pure-play exposure they can hold as a small satellite. Its volatility and 0.50% fee make it less suited to being a core holding or a large portfolio weight.

Walnut is not an investment adviser, and this is not a recommendation to buy or sell BUG. Whether it belongs in your portfolio depends on your goals, risk tolerance, time horizon, and how much concentrated thematic risk you already carry.

BUG trades on the Nasdaq and can be purchased through any major brokerage, including Robinhood, Fidelity, Schwab, and Public, most of which support fractional shares so you can start small. Buy it with a market or limit order just as you would a stock.

You can also connect your existing broker to Walnut to track BUG inside a technology or thematic basket, watch how its weight drifts against your targets, and view it alongside the rest of your holdings in one place.

ETFs are passive bundles; thematic baskets in Walnut let you concentrate within them. If you hold BUG as a core position, these are the themes you might layer on as satellites.

BUG offers concentrated, pure-play exposure to cybersecurity at 0.50%, a higher fee that buys a focused basket you cannot get from a broad tech fund. With around 30 holdings it is volatile and theme-dependent. It works best as a small satellite for investors bullish on rising security spending, not as a core holding.

Whether BUG is worth buying today depends more on your time horizon and what you already hold than on any single call. We walk through valuation, concentration, and what would have to be true for it to outperform from here in is BUG a buy?

BUG yields ~0.1% as of mid-2026, paid by passing through the dividends of its underlying holdings. For the payout schedule, history, and how the distributions are taxed, see BUG dividend: yield and schedule.