CIBR vs BUG ETF comparison
CIBR vs BUG
CIBR holds 45 cybersecurity companies, including large networking and IT services firms such as Cisco, Broadcom and Accenture, and BUG holds 30 companies that earn most of their revenue from cybersecurity, so it is the most focused of the three cyber funds. Both are cybersecurity funds, but they follow different indexes.
CIBR follows the Nasdaq CTA Cybersecurity Index, which weights by size and liquidity and admits large diversified technology companies. BUG follows the Indxx Cybersecurity Index, which requires companies to earn at least half of their revenue from cybersecurity. CIBR charges 0.58% and BUG charges 0.50%. This page lines up what each fund holds, how much they overlap, how each performed and what each costs, with the date next to every number.
CIBR vs BUG, the short answer
CIBR and BUG differ in what they hold and what they charge. Both are cybersecurity funds, but they follow different indexes. CIBR follows the Nasdaq CTA Cybersecurity Index, which weights by size and liquidity and admits large diversified technology companies. BUG follows the Indxx Cybersecurity Index, which requires companies to earn at least half of their revenue from cybersecurity.
Expense ratios are 0.58% and 0.50%. NAV total returns, annualized (both to Sep 30, 2026): 1 year 36.26% vs 30.94%; 3 years 31.92% vs 23.96%; 5 years 16.63% vs 9.20%. Neither is better for everyone; the choice turns on which theme you want, how concentrated you are willing to be and what you already own.
Want the full picture of one fund before you compare? Read the complete guide for each fund: CIBR guide and BUG guide. Each guide covers fees, holdings, yield, returns and taxes.
CIBR vs BUG overlap, if you own both
CIBR · ten largest holdings
As of Nov 9, 2026- 1CrowdStrike CRWD8.37%Both
- 2Cisco Systems CSCO7.55%Only here
- 3Palo Alto Networks PANW7.32%Both
- 4Broadcom AVGO7.29%Only here
- 5Fortinet FTNT6.06%Both
- 6Okta OKTA4.09%Both
- 7Cloudflare NET4.07%Only here
- 8Zscaler ZS3.91%Both
- 9Rubrik RBRK2.84%Both
- 10Accenture ACN2.83%Only here
Ten largest total 54.3%
BUG · ten largest holdings
As of Nov 9, 2026- 1Okta OKTA8.59%Both
- 2CrowdStrike CRWD7.30%Both
- 3Palo Alto Networks PANW6.57%Both
- 4Qualys QLYS6.22%Only here
- 5Netskope NTSK6.03%Only here
- 6Rubrik RBRK5.58%Both
- 7Tenable TENB5.58%Only here
- 8Zscaler ZS5.42%Both
- 9Fortinet FTNT5.17%Both
- 10Varonis Systems VRNS4.97%Only here
Ten largest total 61.4%
Shared by both · 6 companies
| Company | CIBR weight | BUG weight | Gap |
|---|---|---|---|
| CrowdStrike CRWD | 8.37% | 7.30% | +1.07 pts |
| Palo Alto Networks PANW | 7.32% | 6.57% | +0.75 pts |
| Fortinet FTNT | 6.06% | 5.17% | +0.89 pts |
| Okta OKTA | 4.09% | 8.59% | -4.50 pts |
| Zscaler ZS | 3.91% | 5.42% | -1.51 pts |
| Rubrik RBRK | 2.84% | 5.58% | -2.74 pts |
Only in CIBR’s top ten: Cisco Systems, Broadcom, Cloudflare, Accenture. Only in BUG’s top ten: Qualys, Netskope, Tenable, Varonis Systems.
The twist
43.6% of the weight sits in stocks both funds hold (matched by ticker in issuer holdings dated Nov 9, 2026), and 6 stocks appear in both top-ten lists. The funds overlap partly, so owning both doubles up on some names while adding others.
CIBR vs BUG, one goal, which fund?
CIBR vs BUG, where the money goes
CIBR · First Trust, Nov 9, 2026
BUG · Global X, Nov 9, 2026
CIBR vs BUG returns compared over 1, 3, 5 and 10 years
CIBR vs BUG, what each fund costs a year
The data room
Every figure behind the CIBR vs BUG cards above, with its source, date and evidence grade. Open the issuer documents before relying on any number.
CIBR vs BUG key facts
Evidence grade: Issuer issuer page · Mixed issuer plus provider · 3rd party| Metric | CIBR | BUG | Grade and source |
|---|
Portfolio characteristics
| Metric | CIBR | BUG | Grade and source |
|---|
Net assets are dated Nov 9, 2026 for both funds (CIBR $16.36B; BUG $2.07B). Figures an issuer page does not show are left out or marked Not captured, not estimated.
CIBR vs BUG holdings and top ten
Click a tile · CIBR: First Trust, Nov 9, 2026 · BUG: Global X, Nov 9, 2026Tile area is proportional to weight.
| # | Holding | Weight |
|---|
| # | Holding | Weight |
|---|
Top ten sums: CIBR 54.3% · BUG 61.4%. 6 shared top-ten holdings. Weights change.
CIBR vs BUG sector exposure
CIBR: Nov 9, 2026 · BUG: Nov 9, 2026The sector mirror
Same funds, different lenses
Company size
CIBR holds 45 stocks and BUG holds 30. BUG reports a weighted average market cap of $39.96B. Theme funds that weight by market value lean toward very large companies, while equal-weight designs give smaller companies more say.
What you actually own
CIBR vs BUG performance
Matched dates, both to Sep 30, 2026All rows come from the issuer pages and are dated Sep 30, 2026 for both funds, so they compare like for like. NAV returns include fees; market price and index returns are shown beside them where the issuer published them. “Since inception” starts in different years (CIBR 2015, BUG 2019). Past performance does not guarantee future results.
Growth of a hypothetical $10,000 · NAV total return, both to Sep 30, 2026
Both funds derived from issuer NAV total returns on matched dates (compounded). Fund expenses are already in NAV. Illustration, not a forecast.
CIBR vs BUG yield, dividends and dividend growth
Yield and distribution facts| Measure | CIBR | BUG |
|---|---|---|
| 30-day SEC yield | 0.05% | -0.25% |
| Trailing 12-month | Not captured | Not captured |
| Paid, last 12 months | Not captured | Not captured |
| Frequency | Not captured | Semi-annual |
Funds like these pay little income. The 30-day SEC yield was 0.05% for CIBR and -0.25% for BUG, and a figure near zero or below means fund costs use up most of the dividends the stocks pay. These funds are held for growth, not yield. Gaps are marked Not captured. See what is dividend yield and yield vs total return.
CIBR vs BUG concentration and overlap
Ten largest positions · shared holdingsRank by rank, the ten largest holdings of each fund. Top five: CIBR 36.6%, BUG 34.7%. Top ten: CIBR 54.3%, BUG 61.4%.
CIBR vs BUG trading and liquidity
Issuer fund pages · Nov 9, 2026The issuers report 30-day median bid/ask spreads of 0.07% for CIBR and 0.06% for BUG. A spread of 0.05% is about $50 between the buy and sell price on $100,000, and smaller funds usually cost more to trade than larger ones. Funds with many foreign holdings can also trade at a premium or discount to NAV when overseas markets are closed. Use limit orders for large trades and avoid the first and last minutes of the session. See creation, redemption and trading.
CIBR vs BUG expense ratio and fees in dollars
As stated by each issuer| Balance | CIBR (0.58%) | BUG (0.50%) | Gap per year |
|---|---|---|---|
| $10,000 | $58 | $50 | $8 |
| $50,000 | $290 | $250 | $40 |
| $100,000 | $580 | $500 | $80 |
The expense ratio is taken from fund assets, not billed to you. Fees exclude the bid/ask spread, any premium or discount to NAV, brokerage commissions and taxes.
CIBR vs BUG, how each fund picks its stocks
Index approach, in plain languageCIBR · Nasdaq CTA Cybersecurity Index
CIBR tracks the Nasdaq CTA Cybersecurity Index. It holds 45 cybersecurity companies, including large networking and IT services firms such as Cisco, Broadcom and Accenture. It was launched in 2015, and the ten largest holdings total 54.3% of the fund. Index rules and rebalance dates are in the prospectus.
BUG · Indxx Cybersecurity Index
BUG tracks the Indxx Cybersecurity Index. It holds 30 companies that earn most of their revenue from cybersecurity, so it is the most focused of the three cyber funds. It was launched in 2019, and the ten largest holdings total 61.4% of the fund. Index rules and rebalance dates are in the prospectus.
Exact eligibility rules, caps and rebalance dates sit in each prospectus and index methodology; read them before relying on this summary.
CIBR vs BUG, why yield and returns differ
Sector mix explains much of the gapBoth are cybersecurity funds, but they follow different indexes. CIBR follows the Nasdaq CTA Cybersecurity Index, which weights by size and liquidity and admits large diversified technology companies. BUG follows the Indxx Cybersecurity Index, which requires companies to earn at least half of their revenue from cybersecurity.
Because each index sets its own rules, the funds hold different stocks at different weights, and that explains most of the gap in returns. A fund that puts more weight in its largest companies will follow those companies closely, while an evenly weighted fund behaves more like an average of many smaller ones. Fees matter less than holdings over short periods and more over long ones.
How to decide between CIBR and BUG
A step-by-step frameworkStart with what separates them: Both are cybersecurity funds, but they follow different indexes. CIBR follows the Nasdaq CTA Cybersecurity Index, which weights by size and liquidity and admits large diversified technology companies. BUG follows the Indxx Cybersecurity Index, which requires companies to earn at least half of their revenue from cybersecurity. Then check what you already own: the funds overlap by 43.6%, so holding both is a real decision about how much of each theme you want.
- Step 1 · Theme: CIBR is a cybersecurity fund and BUG is a cybersecurity fund.
- Step 2 · Concentration: the ten largest holdings are 54.3% of CIBR and 61.4% of BUG.
- Step 3 · Cost: CIBR 0.58% vs BUG 0.50%.
- Step 4 · Overlap with your core: the largest holdings also sit in S&P 500 funds, so use the Diversification Calculator against what you own.
Size the position against your whole portfolio. Theme funds are volatile, so they usually play a small, deliberate role beside a core fund.
CIBR vs BUG for Canadian investors
Currency, withholding tax and account typeCIBR and BUG are U.S.-listed and trade in U.S. dollars, so buying them from a Canadian account usually involves converting Canadian dollars, which adds a cost on entry and exit. A move in the U.S. dollar also changes your return in Canadian dollars.
Dividends from U.S.-listed funds are generally subject to U.S. withholding tax for Canadian holders, with treatment that depends on the account type. These funds pay little income, so the effect is small, but confirm the rules for your account with a tax professional. This is general education, not tax advice.
Risks of CIBR and BUG
What can go wrongShared risks
- Theme funds are concentrated in one industry or idea, so they can fall much further than the broad market.
- Valuations can be high, and prices can drop sharply when growth or government spending expectations change.
- Returns can differ widely from one period to the next; a strong year often follows or precedes a weak one.
- Neither fund pays meaningful income, so the return depends on price.
Fund-specific risks
- CIBR: ten largest holdings total 54.3% of the fund (Nov 9, 2026); 45 stocks.
- BUG: ten largest holdings total 61.4% of the fund (Nov 9, 2026); 30 stocks.
- CIBR: about a quarter of the fund sits in large networking and IT companies whose results depend on more than security. BUG: holds smaller pure-play companies, and its 3-year standard deviation of 38.6% is the highest reported in this group.
- Both: the funds track indexes with their own rules, so holdings change at each rebalance.
CIBR vs BUG taxes and account placement
General education, not tax adviceBoth funds hold stocks and are taxed like other equity ETFs. Distributions are small, and gains are taxed when you sell, at rates that depend on how long you held the shares and on your own situation. Funds with foreign holdings may pay some foreign tax inside the fund.
For Canadian account types and withholding tax, see the Canadian section above. Confirm the rules for your account with a tax professional, and read how to build an ETF portfolio.
Other ETFs people compare
For context, not recommendationsInvestors comparing CIBR and BUG often also look at the other funds in this group: HACK, CIBR, BUG, ITA, XAR and PPA. See the other cybersecurity and defense ETFs comparisons, the related thematic ETFs and the ETF research hub.
CIBR vs BUG drawdown arithmetic
What a decline means in dollarsRecovery gain = decline ÷ (1 − decline). The scenarios use illustrative declines of 10%, 20% and 30% so you can see what a drop does to each fund. They are a rough guide to a bad year, not a worst-case figure. See the Position Size Calculator.
Tools to compare CIBR vs BUG
Static weights from this pageIgnores taxes, spreads and holdings differences. ETF Fee Calculator.
Check shared exposure with the Diversification Calculator.
CIBR vs BUG, which fits which job
Characteristics, not recommendationsCIBR may suit investors who want…
The largest cybersecurity fund, with big networking names.
Strengths
- Flatter top ten: 54.3% against 61.4%
- Led in 3 of 3 return windows (both to Sep 30, 2026)
- 45 holdings
- Exchange-traded and priced all day
Watch points
- Higher fee: 0.58% against 0.50%
- Narrow theme exposure
- Not a complete portfolio
BUG may suit investors who want…
Pure-play cybersecurity companies at the lowest fee of the three.
Strengths
- Lower fee: 0.50% against 0.58%
- 30 holdings
- Exchange-traded and priced all day
Watch points
- Heavier top ten: 61.4% against 54.3%
- Led in 0 of 3 return windows (both to Sep 30, 2026)
- Narrow theme exposure
- Not a complete portfolio
CIBR vs BUG investor scenarios
Characteristics that fit, not recommendationsCIBR vs BUG key terms
Plain-language definitions
CIBR vs BUG, frequently asked questions
Answers use the figures and dates shown aboveIs CIBR or BUG better?
In the CIBR vs BUG question, neither is better for everyone. CIBR and BUG differ in what they hold and what they charge. Both are cybersecurity funds, but they follow different indexes. CIBR follows the Nasdaq CTA Cybersecurity Index, which weights by size and liquidity and admits large diversified technology companies.
BUG follows the Indxx Cybersecurity Index, which requires companies to earn at least half of their revenue from cybersecurity. Expense ratios are 0.58% and 0.50%. NAV total returns, annualized (both to Sep 30, 2026): 1 year 36.26% vs 30.94%; 3 years 31.92% vs 23.96%; 5 years 16.63% vs 9.20%. Neither is better for everyone; the choice turns on which theme you want, how concentrated you are willing to be and what you already own.
CIBR vs BUG, what are the expense ratios?
CIBR charges 0.58% and BUG charges 0.50%, which is $58 and $50 a year per $10,000.
CIBR vs BUG, how much do the funds overlap?
On CIBR vs BUG, about 43.6% of the weight is held by both funds, matched by ticker in issuer holdings dated Nov 9, 2026. 20 stocks are held by both, and 6 appear in both top-ten lists.
CIBR vs BUG, what does each ETF track?
CIBR tracks the Nasdaq CTA Cybersecurity Index. BUG tracks the Indxx Cybersecurity Index.
CIBR vs BUG, what are the top holdings?
CIBR (Nov 9, 2026): CrowdStrike 8.37%, Cisco Systems 7.55%, Palo Alto Networks 7.32%, Broadcom 7.29%, Fortinet 6.06%. BUG (Nov 9, 2026): Okta 8.59%, CrowdStrike 7.3%, Palo Alto Networks 6.57%, Qualys 6.22%, Netskope 6.03%.
CIBR vs BUG, which has performed better?
NAV total returns, annualized (both to Sep 30, 2026): 1 year 36.26% vs 30.94%; 3 years 31.92% vs 23.96%; 5 years 16.63% vs 9.20%. Past performance does not guarantee future results.
CIBR vs BUG, can I own both?
On CIBR vs BUG, you can. They overlap by about 43.6%. The funds overlap partly, so owning both doubles up on some names while adding others.
CIBR vs BUG, do the funds pay dividends?
On CIBR vs BUG, only small amounts. The 30-day SEC yield was 0.05% for CIBR and -0.25% for BUG, so income is not the reason to hold either fund.
CIBR vs BUG, how concentrated are the funds?
The ten largest holdings are 54.3% of CIBR and 61.4% of BUG. The largest single holding is CrowdStrike at 8.37% in CIBR and Okta at 8.59% in BUG.
CIBR vs BUG, are they suitable for Canadian investors?
On CIBR vs BUG, both are U.S.-listed and trade in U.S. dollars, so Canadians face currency conversion costs and U.S. withholding tax on the small dividends. Treatment differs across TFSA, RRSP and taxable accounts. This is general education, not tax advice.
CIBR vs BUG documents and sources
Open the issuer documents before relying on any figureCIBR · First Trust
BUG · Global X
Third-party sources
First Trust CIBR fund page · Global X BUG fund page.
Methodology and limits
- CIBR figures come from the First Trust fund page and BUG figures from the Global X fund page.
- Dates are shown beside each figure; the issuer documents are linked below.
- Holdings overlap is the sum of the smaller weight of each ticker held by both funds, using each issuer’s full holdings list (Nov 9, 2026). Cash and futures are left out.
- Industry groups on this page are assigned by this site from each stock’s main business, using one scheme for every fund, so they will not match an issuer’s own sector table.
- Figures an issuer page does not show are marked Not captured, and nothing was filled from memory or from another fund.
- Growth of $10,000 is derived from annualized NAV total returns on matched dates; dollar values are approximate.
Educational research, not personalized investment, tax or legal advice, and not a recommendation to buy or sell any fund. Investing involves risk, including loss of principal. Past performance does not guarantee future results. Calculators are hypothetical illustrations. Fund data are provided as published by the sources named and may differ from current figures.