HACK vs BUG ETF comparison
HACK vs BUG
HACK holds 23 cybersecurity companies and also includes the defense contractors Northrop Grumman and General Dynamics, and BUG holds 30 companies that earn most of their revenue from cybersecurity, so it is the most focused of the three cyber funds. Both are cybersecurity funds, but they follow different indexes.
HACK follows the Nasdaq ISE Cyber Security Select Index, a short list of 23 names with weights of roughly 2% to 6%. BUG follows the Indxx Cybersecurity Index, which requires companies to earn at least half of their revenue from cybersecurity. HACK charges 0.60% and BUG charges 0.50%. This page lines up what each fund holds, how much they overlap, how each performed and what each costs, with the date next to every number.
HACK vs BUG, the short answer
HACK and BUG differ in what they hold and what they charge. Both are cybersecurity funds, but they follow different indexes. HACK follows the Nasdaq ISE Cyber Security Select Index, a short list of 23 names with weights of roughly 2% to 6%. BUG follows the Indxx Cybersecurity Index, which requires companies to earn at least half of their revenue from cybersecurity.
Expense ratios are 0.60% and 0.50%. NAV total returns, annualized (both to Sep 30, 2026): 1 year 39.41% vs 30.94%; 3 years 33.01% vs 23.96%; 5 years 14.84% vs 9.20%. Neither is better for everyone; the choice turns on which theme you want, how concentrated you are willing to be and what you already own.
Want the full picture of one fund before you compare? Read the complete guide for each fund: HACK guide and BUG guide. Each guide covers fees, holdings, yield, returns and taxes.
HACK vs BUG overlap, if you own both
HACK · ten largest holdings
As of Nov 10, 2026- 1Broadcom AVGO6.32%Only here
- 2CrowdStrike CRWD5.66%Both
- 3Cisco Systems CSCO5.50%Only here
- 4Palo Alto Networks PANW5.12%Both
- 5Netskope NTSK4.98%Both
- 6Northrop Grumman NOC4.96%Only here
- 7General Dynamics GD4.94%Only here
- 8Cloudflare NET4.93%Only here
- 9Rubrik RBRK4.92%Both
- 10Zscaler ZS4.53%Both
Ten largest total 51.9%
BUG · ten largest holdings
As of Nov 9, 2026- 1Okta OKTA8.59%Only here
- 2CrowdStrike CRWD7.30%Both
- 3Palo Alto Networks PANW6.57%Both
- 4Qualys QLYS6.22%Only here
- 5Netskope NTSK6.03%Both
- 6Rubrik RBRK5.58%Both
- 7Tenable TENB5.58%Only here
- 8Zscaler ZS5.42%Both
- 9Fortinet FTNT5.17%Only here
- 10Varonis Systems VRNS4.97%Only here
Ten largest total 61.4%
Shared by both · 5 companies
| Company | HACK weight | BUG weight | Gap |
|---|---|---|---|
| CrowdStrike CRWD | 5.66% | 7.30% | -1.64 pts |
| Palo Alto Networks PANW | 5.12% | 6.57% | -1.45 pts |
| Netskope NTSK | 4.98% | 6.03% | -1.05 pts |
| Rubrik RBRK | 4.92% | 5.58% | -0.66 pts |
| Zscaler ZS | 4.53% | 5.42% | -0.89 pts |
Only in HACK’s top ten: Broadcom, Cisco Systems, Northrop Grumman, General Dynamics, Cloudflare. Only in BUG’s top ten: Okta, Qualys, Tenable, Fortinet, Varonis Systems.
The twist
63.8% of the weight sits in stocks both funds hold (matched by ticker in issuer holdings dated Nov 10, 2026 and Nov 9, 2026), and 5 stocks appear in both top-ten lists. Holding both repeats most of the same exposure, so the second fund mostly adds weight to what you already own.
HACK vs BUG, one goal, which fund?
HACK vs BUG, where the money goes
HACK · Amplify, Nov 10, 2026
BUG · Global X, Nov 9, 2026
HACK vs BUG returns compared over 1, 3, 5 and 10 years
HACK vs BUG, what each fund costs a year
The data room
Every figure behind the HACK vs BUG cards above, with its source, date and evidence grade. Open the issuer documents before relying on any number.
HACK vs BUG key facts
Evidence grade: Issuer issuer page · Mixed issuer plus provider · 3rd party| Metric | HACK | BUG | Grade and source |
|---|
Portfolio characteristics
| Metric | HACK | BUG | Grade and source |
|---|
Net assets are dated Nov 9, 2026 for both funds (HACK $3.31B; BUG $2.07B). Figures an issuer page does not show are left out or marked Not captured, not estimated.
HACK vs BUG holdings and top ten
Click a tile · HACK: Amplify, Nov 10, 2026 · BUG: Global X, Nov 9, 2026Tile area is proportional to weight.
| # | Holding | Weight |
|---|
| # | Holding | Weight |
|---|
Top ten sums: HACK 51.9% · BUG 61.4%. 5 shared top-ten holdings. Weights change.
HACK vs BUG sector exposure
HACK: Nov 10, 2026 · BUG: Nov 9, 2026The sector mirror
Same funds, different lenses
Company size
HACK holds 23 stocks and BUG holds 30. BUG reports a weighted average market cap of $39.96B. Theme funds that weight by market value lean toward very large companies, while equal-weight designs give smaller companies more say.
What you actually own
HACK vs BUG performance
Matched dates, both to Sep 30, 2026All rows come from the issuer pages and are dated Sep 30, 2026 for both funds, so they compare like for like. NAV returns include fees; market price and index returns are shown beside them where the issuer published them. “Since inception” starts in different years (HACK 2014, BUG 2019). Past performance does not guarantee future results.
Growth of a hypothetical $10,000 · NAV total return, both to Sep 30, 2026
Both funds derived from issuer NAV total returns on matched dates (compounded). Fund expenses are already in NAV. Illustration, not a forecast.
HACK vs BUG yield, dividends and dividend growth
Yield and distribution facts| Measure | HACK | BUG |
|---|---|---|
| 30-day SEC yield | Not captured | -0.25% |
| Trailing 12-month | Not captured | Not captured |
| Paid, last 12 months | Not captured | Not captured |
| Frequency | Not captured | Semi-annual |
Funds like these pay little income. The 30-day SEC yield was not captured for HACK and -0.25% for BUG, and a figure near zero or below means fund costs use up most of the dividends the stocks pay. These funds are held for growth, not yield. Gaps are marked Not captured. See what is dividend yield and yield vs total return.
HACK vs BUG concentration and overlap
Ten largest positions · shared holdingsRank by rank, the ten largest holdings of each fund. Top five: HACK 27.6%, BUG 34.7%. Top ten: HACK 51.9%, BUG 61.4%.
HACK vs BUG trading and liquidity
Issuer fund pages · Nov 9, 2026The issuers report 30-day median bid/ask spreads of 0.13% for HACK and 0.06% for BUG. A spread of 0.05% is about $50 between the buy and sell price on $100,000, and smaller funds usually cost more to trade than larger ones. Funds with many foreign holdings can also trade at a premium or discount to NAV when overseas markets are closed. Use limit orders for large trades and avoid the first and last minutes of the session. See creation, redemption and trading.
HACK vs BUG expense ratio and fees in dollars
As stated by each issuer| Balance | HACK (0.60%) | BUG (0.50%) | Gap per year |
|---|---|---|---|
| $10,000 | $60 | $50 | $10 |
| $50,000 | $300 | $250 | $50 |
| $100,000 | $600 | $500 | $100 |
The expense ratio is taken from fund assets, not billed to you. Fees exclude the bid/ask spread, any premium or discount to NAV, brokerage commissions and taxes.
HACK vs BUG, how each fund picks its stocks
Index approach, in plain languageHACK · Nasdaq ISE Cyber Security Select Index
HACK tracks the Nasdaq ISE Cyber Security Select Index. It holds 23 cybersecurity companies and also includes the defense contractors Northrop Grumman and General Dynamics. It was launched in 2014, and the ten largest holdings total 51.9% of the fund. Index rules and rebalance dates are in the prospectus.
BUG · Indxx Cybersecurity Index
BUG tracks the Indxx Cybersecurity Index. It holds 30 companies that earn most of their revenue from cybersecurity, so it is the most focused of the three cyber funds. It was launched in 2019, and the ten largest holdings total 61.4% of the fund. Index rules and rebalance dates are in the prospectus.
Exact eligibility rules, caps and rebalance dates sit in each prospectus and index methodology; read them before relying on this summary.
HACK vs BUG, why yield and returns differ
Sector mix explains much of the gapBoth are cybersecurity funds, but they follow different indexes. HACK follows the Nasdaq ISE Cyber Security Select Index, a short list of 23 names with weights of roughly 2% to 6%. BUG follows the Indxx Cybersecurity Index, which requires companies to earn at least half of their revenue from cybersecurity.
Because each index sets its own rules, the funds hold different stocks at different weights, and that explains most of the gap in returns. A fund that puts more weight in its largest companies will follow those companies closely, while an evenly weighted fund behaves more like an average of many smaller ones. Fees matter less than holdings over short periods and more over long ones.
How to decide between HACK and BUG
A step-by-step frameworkStart with what separates them: Both are cybersecurity funds, but they follow different indexes. HACK follows the Nasdaq ISE Cyber Security Select Index, a short list of 23 names with weights of roughly 2% to 6%. BUG follows the Indxx Cybersecurity Index, which requires companies to earn at least half of their revenue from cybersecurity. Then check what you already own: the funds overlap by 63.8%, so holding both adds little.
- Step 1 · Theme: HACK is a cybersecurity fund and BUG is a cybersecurity fund.
- Step 2 · Concentration: the ten largest holdings are 51.9% of HACK and 61.4% of BUG.
- Step 3 · Cost: HACK 0.60% vs BUG 0.50%.
- Step 4 · Overlap with your core: the largest holdings also sit in S&P 500 funds, so use the Diversification Calculator against what you own.
Size the position against your whole portfolio. Theme funds are volatile, so they usually play a small, deliberate role beside a core fund.
HACK vs BUG for Canadian investors
Currency, withholding tax and account typeHACK and BUG are U.S.-listed and trade in U.S. dollars, so buying them from a Canadian account usually involves converting Canadian dollars, which adds a cost on entry and exit. A move in the U.S. dollar also changes your return in Canadian dollars.
Dividends from U.S.-listed funds are generally subject to U.S. withholding tax for Canadian holders, with treatment that depends on the account type. These funds pay little income, so the effect is small, but confirm the rules for your account with a tax professional. This is general education, not tax advice.
Risks of HACK and BUG
What can go wrongShared risks
- Theme funds are concentrated in one industry or idea, so they can fall much further than the broad market.
- Valuations can be high, and prices can drop sharply when growth or government spending expectations change.
- Returns can differ widely from one period to the next; a strong year often follows or precedes a weak one.
- Neither fund pays meaningful income, so the return depends on price.
Fund-specific risks
- HACK: ten largest holdings total 51.9% of the fund (Nov 10, 2026); 23 stocks.
- BUG: ten largest holdings total 61.4% of the fund (Nov 9, 2026); 30 stocks.
- HACK: holds only 23 stocks, so each position matters more. BUG: holds smaller pure-play companies, and its 3-year standard deviation of 38.6% is the highest reported in this group.
- Both: the funds track indexes with their own rules, so holdings change at each rebalance.
HACK vs BUG taxes and account placement
General education, not tax adviceBoth funds hold stocks and are taxed like other equity ETFs. Distributions are small, and gains are taxed when you sell, at rates that depend on how long you held the shares and on your own situation. Funds with foreign holdings may pay some foreign tax inside the fund.
For Canadian account types and withholding tax, see the Canadian section above. Confirm the rules for your account with a tax professional, and read how to build an ETF portfolio.
Other ETFs people compare
For context, not recommendationsInvestors comparing HACK and BUG often also look at the other funds in this group: HACK, CIBR, BUG, ITA, XAR and PPA. See the other cybersecurity and defense ETFs comparisons, the related thematic ETFs and the ETF research hub.
HACK vs BUG drawdown arithmetic
What a decline means in dollarsRecovery gain = decline ÷ (1 − decline). The scenarios use illustrative declines of 10%, 20% and 30% so you can see what a drop does to each fund. They are a rough guide to a bad year, not a worst-case figure. See the Position Size Calculator.
Tools to compare HACK vs BUG
Static weights from this pageIgnores taxes, spreads and holdings differences. ETF Fee Calculator.
Check shared exposure with the Diversification Calculator.
HACK vs BUG, which fits which job
Characteristics, not recommendationsHACK may suit investors who want…
A short cybersecurity list with some defense exposure.
Strengths
- Flatter top ten: 51.9% against 61.4%
- Led in 3 of 3 return windows (both to Sep 30, 2026)
- 23 holdings
- Exchange-traded and priced all day
Watch points
- Higher fee: 0.60% against 0.50%
- Narrow theme exposure
- Not a complete portfolio
BUG may suit investors who want…
Pure-play cybersecurity companies at the lowest fee of the three.
Strengths
- Lower fee: 0.50% against 0.60%
- 30 holdings
- Exchange-traded and priced all day
Watch points
- Heavier top ten: 61.4% against 51.9%
- Led in 0 of 3 return windows (both to Sep 30, 2026)
- Narrow theme exposure
- Not a complete portfolio
HACK vs BUG investor scenarios
Characteristics that fit, not recommendationsHACK vs BUG key terms
Plain-language definitions
HACK vs BUG, frequently asked questions
Answers use the figures and dates shown aboveIs HACK or BUG better?
In the HACK vs BUG question, neither is better for everyone. HACK and BUG differ in what they hold and what they charge. Both are cybersecurity funds, but they follow different indexes. HACK follows the Nasdaq ISE Cyber Security Select Index, a short list of 23 names with weights of roughly 2% to 6%. BUG follows the Indxx Cybersecurity Index, which requires companies to earn at least half of their revenue from cybersecurity.
Expense ratios are 0.60% and 0.50%. NAV total returns, annualized (both to Sep 30, 2026): 1 year 39.41% vs 30.94%; 3 years 33.01% vs 23.96%; 5 years 14.84% vs 9.20%. Neither is better for everyone; the choice turns on which theme you want, how concentrated you are willing to be and what you already own.
HACK vs BUG, what are the expense ratios?
HACK charges 0.60% and BUG charges 0.50%, which is $60 and $50 a year per $10,000.
HACK vs BUG, how much do the funds overlap?
On HACK vs BUG, about 63.8% of the weight is held by both funds, matched by ticker in issuer holdings dated Nov 10, 2026 and Nov 9, 2026. 16 stocks are held by both, and 5 appear in both top-ten lists.
HACK vs BUG, what does each ETF track?
HACK tracks the Nasdaq ISE Cyber Security Select Index. BUG tracks the Indxx Cybersecurity Index.
HACK vs BUG, what are the top holdings?
HACK (Nov 10, 2026): Broadcom 6.32%, CrowdStrike 5.66%, Cisco Systems 5.5%, Palo Alto Networks 5.12%, Netskope 4.98%. BUG (Nov 9, 2026): Okta 8.59%, CrowdStrike 7.3%, Palo Alto Networks 6.57%, Qualys 6.22%, Netskope 6.03%.
HACK vs BUG, which has performed better?
NAV total returns, annualized (both to Sep 30, 2026): 1 year 39.41% vs 30.94%; 3 years 33.01% vs 23.96%; 5 years 14.84% vs 9.20%. Past performance does not guarantee future results.
HACK vs BUG, can I own both?
On HACK vs BUG, you can. They overlap by about 63.8%. Holding both repeats most of the same exposure, so the second fund mostly adds weight to what you already own.
HACK vs BUG, do the funds pay dividends?
On HACK vs BUG, only small amounts. The 30-day SEC yield was not captured for HACK and -0.25% for BUG, so income is not the reason to hold either fund.
HACK vs BUG, how concentrated are the funds?
The ten largest holdings are 51.9% of HACK and 61.4% of BUG. The largest single holding is Broadcom at 6.32% in HACK and Okta at 8.59% in BUG.
HACK vs BUG, are they suitable for Canadian investors?
On HACK vs BUG, both are U.S.-listed and trade in U.S. dollars, so Canadians face currency conversion costs and U.S. withholding tax on the small dividends. Treatment differs across TFSA, RRSP and taxable accounts. This is general education, not tax advice.
HACK vs BUG documents and sources
Open the issuer documents before relying on any figureHACK · Amplify
BUG · Global X
Third-party sources
Amplify HACK fund page · Global X BUG fund page.
Methodology and limits
- HACK figures come from the Amplify fund page and BUG figures from the Global X fund page.
- Dates are shown beside each figure; the issuer documents are linked below.
- Holdings overlap is the sum of the smaller weight of each ticker held by both funds, using each issuer’s full holdings list (Nov 10, 2026 and Nov 9, 2026). Cash and futures are left out.
- Industry groups on this page are assigned by this site from each stock’s main business, using one scheme for every fund, so they will not match an issuer’s own sector table.
- Figures an issuer page does not show are marked Not captured, and nothing was filled from memory or from another fund.
- Growth of $10,000 is derived from annualized NAV total returns on matched dates; dollar values are approximate.
Educational research, not personalized investment, tax or legal advice, and not a recommendation to buy or sell any fund. Investing involves risk, including loss of principal. Past performance does not guarantee future results. Calculators are hypothetical illustrations. Fund data are provided as published by the sources named and may differ from current figures.