Price cutoff: Friday, August 7, 2026 at the 4:00 p.m. ET U.S. close.
Trade horizon: roughly 1–15 U.S. trading sessions, beginning Monday, August 10.
The U.S. market is closed as this is written on Sunday. There is no new Sunday price signal to pretend exists.
Today's answer: no clean buy yet
The catch-up screen produced one new divergence worth serious attention: Fortinet (FTNT) versus the cybersecurity group. The gap is large enough, the business backdrop is strong enough, and the sector is moving well enough that I want FTNT on Monday's screen.
But I do not want to buy it just because it is behind.
That distinction is the whole point of this report. Fortinet has fallen for three straight sessions while the cybersecurity ETF CIBR has held up far better. Until FTNT shows that sellers are actually losing control, this is a watch setup, not a catch-up trade.
So I am not padding today's list with three mediocre names. There is no clean, confirmed new catch-up entry today. Fortinet is the closest.
Why Fortinet made it this far
Cybersecurity has turned into one of the stronger pockets of the market again. IBD highlighted the rebound in the group this week, with the HACK cybersecurity ETF breaking out and the industry ranking near the top of its groups. A separate research note covered by Business Insider argued that agentic AI is expanding the attack surface and should increase demand for security infrastructure; Fortinet was included among the companies positioned to benefit.
Fortinet's own Q2 numbers do not look like a broken-company story either. Adjusted EPS rose 41% to $0.90, revenue rose 26% to $2.05 billion, and billings rose 33% to $2.37 billion. The company also guided Q3 revenue and billings above the Wall Street estimates cited immediately after the report.
That is exactly the kind of backdrop I want for a catch-up candidate: the sector is strong, the company just beat expectations, and the stock is now lagging the group anyway.
The problem is the tape.
The gap: FTNT versus CIBR
Returns below are close-to-close through Friday. A negative number in the final column means FTNT underperformed CIBR over that window.
| Window | FTNT | CIBR | FTNT minus CIBR |
|---|---|---|---|
| 1 session | -0.29% | +1.51% | -1.80 pp |
| 3 sessions | -5.14% | -0.09% | -5.05 pp |
| 5 sessions | -1.43% | +6.56% | -7.99 pp |
| 10 sessions | +4.77% | +10.69% | -5.92 pp |
| 20 sessions | +1.35% | +6.50% | -5.15 pp |
The five-session divergence is the one that jumps out. CIBR gained more than 6% while FTNT actually slipped. More importantly, this is not a one-day statistical accident: the underperformance shows up across 3, 5, 10 and 20 sessions.
Friday's close was $159.64 for FTNT. The stock had reached roughly $168.29 on Tuesday before sliding Wednesday, Thursday and Friday. MarketWatch also flagged the Wednesday and Thursday sessions as underperformance versus direct competitors including CrowdStrike and Palo Alto Networks.
That makes the relationship real. It also makes the lack of stabilization real.
What would turn FTNT into a trade
| Item | Level / condition | Why it matters |
|---|---|---|
| Observation zone | $158–$161 | Current area after the three-session fade; useful for watching, not enough by itself to buy |
| First trigger | Reclaim roughly $164–$165 | Would recover Wednesday's breakdown area and show buyers are starting to absorb supply |
| Stronger confirmation | Push back above roughly $168.30 and hold | Would erase most of the three-day relative weakness and make the catch-up thesis much cleaner |
| Thesis invalidation | Sustained close below roughly $154–$155 | Puts the post-earnings breakout area at risk and suggests the market is repricing something more fundamental |
I would rather miss the first few dollars of a bounce than buy a stock simply because a spreadsheet says the peer gap is large.
If FTNT retakes the mid-$160s while CIBR and the broader cybersecurity group remain firm, the setup changes quickly. At that point the same divergence that is a warning today becomes potential fuel for a catch-up move.
News, analysts and investor mood
The fundamental news is much more constructive than the last three trading sessions imply. Q2 was a beat on earnings, revenue and billings, and the forward revenue/billings outlook came in above the estimates reported by IBD. AI-driven security demand is also giving the whole group a fresh narrative rather than leaving FTNT dependent on a company-specific story.
Wall Street is still divided, which matters. Aggregated analyst pages show far more Hold ratings than Buy ratings, and the target range is unusually wide. Late-July calls included a Buy with a $200 target from Bank of America and a Sell with a $100 target from JPMorgan. That disagreement tells me valuation remains the obvious objection even when execution is strong.
Retail sentiment is noisy rather than decisively useful. Stocktwits' indexed FTNT page recently showed bearish sentiment, while several small Reddit stock-analysis posts leaned aggressively bullish after earnings. I would not use either as a buy signal. What is useful is the emotional split: the business numbers invite optimism, but traders are clearly nervous about price/valuation after a large 2026 run.
That is another reason to demand price confirmation rather than guessing the bottom.
The seven-session audit: why I am waiting
I reran the rule using only information that would have been available at the close of each of the prior seven U.S. sessions: July 30, July 31, August 3, August 4, August 5, August 6 and August 7.
The useful lesson was not a magic percentage. It was timing.
Earlier in that window, FTNT was not meaningfully lagging the cyber basket. It actually outperformed CIBR over several five-session comparisons after earnings. The gap began to deteriorate later in the week, and only by Friday had it widened enough across multiple horizons to become a genuine relative-laggard signal.
An older version of this strategy would now say: “big gap, buy the laggard.” That is exactly the behavior I want to remove.
The revised rule now requires:
- A real economic/peer relationship, not two charts that happen to look similar.
- Meaningful lag across more than one of the 5-, 10- and 20-session windows.
- No guidance cut, balance-sheet problem, dilution, legal shock or obvious competitive break explaining the weakness.
- A supportive catalyst or estimate backdrop.
- Stabilization or a relative-strength reclaim after the gap appears.
FTNT passes the first four. It does not pass the fifth yet.
That is why today's result is wait.
Near misses I rejected
The screen found several visually tempting gaps. None cleared the full filter.
| Name | Benchmark | 1D gap | 3D gap | 5D gap | 10D gap | 20D gap | Why I rejected it today |
|---|---|---|---|---|---|---|---|
| GE Aerospace (GE) | RTX | -1.09 pp | -4.25 pp | -0.85 pp | -0.19 pp | -10.82 pp | Huge 20-day number, but the 5- and 10-day relationship has already converged. The recent weakness is too short-lived to call a clean persistent lag. |
| Johnson & Johnson (JNJ) | XLV | +0.13 pp | -0.52 pp | -0.80 pp | -3.49 pp | -2.13 pp | The gap is simply not large enough. |
| ASML (ASML) | SMH | +0.19 pp | +0.49 pp | -0.92 pp | -4.75 pp | +1.51 pp | ASML is already outperforming on the short windows; the catch-up has partly happened. |
| Northrop Grumman (NOC) | ITA | +0.38 pp | +3.59 pp | +0.74 pp | +0.99 pp | +1.03 pp | Not a laggard anymore. It is outperforming the defense basket across the measured windows. |
| Micron (MU) | Broad semiconductor group | — | — | — | — | — | Memory stocks had their own sector-specific pressure this week, including concern around future capacity. That makes broad-SMH underperformance explainable rather than a clean delayed move. |
This is the part of the process I care about most. A laggard is not automatically an opportunity. Sometimes it is just the market telling you something.
Monday plan
There is one simple thing to watch.
If FTNT recovers $164–$165 while CIBR stays firm, I will treat the setup much more seriously. A move through roughly $168.30 would be stronger confirmation that the post-earnings fade is finished rather than merely pausing.
If FTNT opens weak and loses the mid-$150s, the relative gap can get much larger and still be useless. I would not average down purely because the peer spread becomes more dramatic.
The broader market enters Monday from strength: the Nasdaq rose sharply Friday and cybersecurity was one of the better-performing industry groups during the week. That is supportive for a catch-up trade if the laggard starts participating. Until then, it is a reason to be more suspicious of the laggard, not less.
Sources and recent reads
Price / relative-performance data
- Fortinet price history — StockAnalysis
- First Trust Nasdaq Cybersecurity ETF (CIBR) history — StockAnalysis
- GE Aerospace history — StockAnalysis
- RTX history — StockAnalysis
- Johnson & Johnson history — StockAnalysis
- Health Care Select Sector SPDR (XLV) history — StockAnalysis
- ASML history — StockAnalysis
- VanEck Semiconductor ETF (SMH) history — StockAnalysis
- Northrop Grumman history — StockAnalysis
- iShares U.S. Aerospace & Defense ETF (ITA) history — StockAnalysis
Fortinet / cybersecurity fundamentals and news
- Fortinet Q2 2026 earnings coverage — Investor's Business Daily
- Fortinet Q2 2026 company release carried by Yahoo Finance / GlobeNewswire
- Cybersecurity ETF breakout and sector rebound — Investor's Business Daily
- Agentic-AI cybersecurity demand and stock picks — Business Insider
- FTNT underperformance on Aug. 5 — MarketWatch
- FTNT underperformance on Aug. 6 — MarketWatch
Analyst / investor temperature
- Fortinet analyst ratings and target history — StockAnalysis
- Fortinet consensus estimates — Investing.com
- FTNT retail-sentiment stream — Stocktwits
- Recent Reddit FTNT sentiment example
This is market research and education, not personal financial advice. Short-horizon setups can fail quickly on news, macro data and gaps. Verify live prices at the next U.S. market open and size risk accordingly.
