Price cutoff: Friday, August 14, 2026 at the 4:00 p.m. ET U.S. regular-session close.
Research cutoff: Sunday, August 16, 2026.
Trade horizon: roughly 1–15 U.S. trading sessions.
Weekend note: U.S. cash markets are closed. There is no Sunday price action to manufacture, so every relative-performance number below is still anchored to Friday's close.
Today's answer: no clean catch-up buy yet
Sunday does not give this strategy a new price bar, and that matters.
The temptation on a weekend is to take Friday's biggest laggard, add a fresh headline, and call it a Monday opportunity. That is exactly the behavior this screen is supposed to avoid.
After re-running the same relative-laggard logic across the prior seven completed U.S. sessions, Fortinet (FTNT) and F5 (FFIV) remain the only two names that still pass the important structural tests:
- the peer relationship is real;
- the 10- and 20-session lag is still meaningful;
- recent fundamentals do not look broken;
- there is no obvious balance-sheet, dilution, legal, or guidance-cut explanation for the gap;
- and the divergence is still fresh enough to matter.
But neither passes the final test: price confirmation.
So the Sunday conclusion is deliberately boring: two legitimate watchlist names, zero clean entries before Monday trades.
Catch-up watchlist for Monday
| Rank | Candidate | Friday close | Genuine relationship | Current read | What would make it actionable |
|---|---|---|---|---|---|
| 1 | FTNT | $160.01 | Cybersecurity vs. CIBR / PANW / CRWD | Large 10/20-session deficit; Thursday's first turn failed Friday | Regular-session close above $165.75, then a second-session hold while beating CIBR; stronger above $168–$169 |
| 2 | FFIV | $403.20 | App/API security vs. CIBR and enterprise-security peers | Strong latest quarter, persistent medium-window lag, no short-window turn | Reclaim $420–$424, then hold roughly $424–$426 while outperforming CIBR |
These are observation and confirmation levels, not opening-bell buy instructions.
Relative performance: candidate minus benchmark
Negative means the candidate underperformed its benchmark over that window. Because markets were closed over the weekend, these numbers are unchanged from Friday's completed session.
| Pair | 1 session | 3 sessions | 5 sessions | 10 sessions | 20 sessions |
|---|---|---|---|---|---|
| FTNT minus CIBR | -0.74 pp | -0.84 pp | -1.56 pp | -9.66 pp | -8.83 pp |
| FFIV minus CIBR | -0.53 pp | -2.29 pp | -1.05 pp | -8.30 pp | -9.28 pp |
The shape is interesting but not bullish by itself.
Both stocks still have a large unresolved medium-term gap. That is what creates the potential catch-up opportunity. But both also lost relative ground Friday, which means the market has not yet started closing that gap in a durable way.
A catch-up trade is not simply “this stock is behind.” It is “this stock is behind for reasons that still look temporary, and the price has started proving the market agrees.” We do not have the second half yet.
Seven-session walk-forward: no new market day means no excuse to rewrite the rules
I re-ran the selection logic over the prior seven completed U.S. sessions: August 6, 7, 10, 11, 12, 13 and 14, using only information that would have been available at each point.
There is no new Sunday outcome to add. The useful result is therefore the same one Friday forced on the strategy:
Rule 1: one relative-strength day is not confirmation
FTNT gave the cleanest recent example. On Thursday it finally beat CIBR by more than a percentage point. Friday immediately reversed part of that improvement.
That is why the current strategy requires a closing reclaim plus a second regular session of continued relative strength. A single bounce is too easy to fake.
Rule 2: old gaps expire
A dramatic 20-session deficit can hang around even after a stock has already caught up over the more recent five- and 10-session windows.
The revised screen therefore requires at least one of the 5- or 10-session gaps to remain meaningfully unresolved. This freshness filter is what keeps stale names such as UPS, L3Harris and NXPI from repeatedly resurfacing just because an older selloff still affects the 20-day calculation.
Sunday decision
Because there is no new completed U.S. session, the revised method does not get a new pass/fail observation today. I am not changing it for the sake of publishing something different.
The next real test is Monday: can FTNT or FFIV actually reclaim a level and start taking performance back from the cybersecurity group?
1. Fortinet: great quarter, Friday still said “not yet”
Why this relationship is real
Fortinet belongs directly in the cybersecurity comparison. CIBR is a cybersecurity basket holding companies exposed to the same enterprise-security budgets, including Fortinet and several of its closest listed peers.
Fortinet's latest operating update is not the profile of a business that obviously deserves to be structurally broken away from the sector.
The company reported second-quarter revenue of $2.05 billion, up 26% year over year, product revenue up 52% to $773 million, and billings up 33% to $2.37 billion. It also raised its 2026 revenue outlook. Fortinet's July 30 10-Q gives the same quarter a primary-source filing behind the headline numbers.
That is why I still treat the underperformance as potentially temporary rather than assuming the market has discovered a fundamental collapse.
What the price is saying
FTNT closed Friday at $160.01, down 3.28%. Thursday had been the first meaningful relative-strength attempt, but Friday failed to extend it.
The most important observation is not that Fortinet fell. CIBR fell too. The problem is that FTNT still lost additional relative ground against the basket.
| Item | FTNT plan |
|---|---|
| Observation zone | Roughly $158–$162 |
| First reclaim | Regular-session close above $165.75 |
| Better confirmation | Hold the reclaim into a second session while continuing to beat CIBR; stronger through $168–$169 |
| Invalidation | Sustained close below roughly $154–$155 |
| Likely catalyst | Continued enterprise cyber spending, SASE/firewall demand, AI-security demand, post-Q2 estimate support |
| Main risks | Rich valuation, investor preference for faster-growing cyber peers, competitive pressure, broad growth-stock multiple compression |
Analyst, news and community temperature
Sell-side opinion is constructive but far from unanimous. Recent analyst pages show Buy ratings and much higher targets from firms such as Bank of America, TD Cowen and Truist, while other firms remain Neutral or negative. That disagreement fits the current setup: the operating numbers are good; valuation is the argument.
Retail discussion looks similar. Recent public Reddit threads are enthusiastic about the earnings beat and cybersecurity demand, but valuation is repeatedly the pushback. That is useful as a crowding check, not as a buy signal.
Monday verdict: FTNT remains first on the watchlist, but $165.75 and a second-session hold matter more than another bullish article about cybersecurity.
2. F5: the cleanest fundamental-versus-price mismatch, but still no turn
Why FFIV belongs in the same economic group
F5 operates at the application delivery, application security and API-security layer. Its products live inside the same enterprise infrastructure/security budget that drives several CIBR constituents.
The company's July quarter was strong. F5 reported 19% product-revenue growth and 11% total-revenue growth, marking eight consecutive quarters of double-digit product growth. Management also raised its fiscal-2026 revenue-growth outlook.
Analysts responded positively after earnings: JPMorgan raised its target to $515, RBC to $508, Piper Sandler to $461, while Barclays and Morgan Stanley stayed more measured. Again, the disagreement is not “the quarter was bad.” It is how much of the improvement deserves to be capitalized into the stock.
Why I still refuse to front-run it
FFIV closed Friday at $403.20, down 3.08%. It also fell Thursday, so the stock enters Monday with consecutive sessions of weak short-window behavior.
That is exactly the wrong shape for a catch-up entry even though the 10- and 20-session gaps remain attractive.
| Item | FFIV plan |
|---|---|
| Observation zone | Roughly $400–$410 |
| First reclaim | Close back above roughly $420–$424 while beating CIBR |
| Better confirmation | Hold roughly $424–$426 into a second regular session with positive cybersecurity breadth |
| Invalidation | Sustained close below roughly $400, with greater concern if the late-July support area fails decisively |
| Likely catalyst | App/API security demand, hybrid-cloud refresh, AI-driven enterprise-security spending, upward estimates |
| Main risks | Continued security-group rotation, hardware/product-cycle volatility, enterprise spending slowdown, broad technology de-rating |
Public Stocktwits discussion around FFIV has remained much quieter than the largest cybersecurity names, which is actually useful: this is not an obvious retail-momentum trade. But low chatter is not confirmation either.
Monday verdict: FFIV may have the better fundamental mismatch, but it has the worse short-window chart. I want the low $420s back before treating the lag as a trade rather than an observation.
Why the screen is not adding a third name just to fill the table
A few stocks still show attractive-looking long-window deficits, but they fail the revised rules.
| Rejected setup | Why it is rejected today |
|---|---|
| UPS vs. IYT | The 20-session gap remains visible, but the recent 5/10-session divergence has already narrowed materially. It is becoming a stale setup rather than a fresh laggard. |
| LHX vs. ITA | L3Harris rose Friday and has already repaired much of its short-window defense-sector lag. The older 20-day deficit overstates how much fresh catch-up remains. |
| NXPI vs. TXN | The long-window gap is still large, but the more recent relationship has already flattened or improved. It fails the freshness filter. |
| CAT vs. DE | The dramatic older gap has already been partly expressed in more recent performance. The screen no longer treats a large 20-day number as sufficient evidence. |
| CSCO / AMAT | Their recent moves are dominated by company-specific earnings and expectation resets, making a clean peer-lag thesis much harder to defend. |
A catch-up strategy needs a strong rejection process. Otherwise it quietly becomes “buy whatever is down.”
Monday's macro gate arrives before the open
The New York Fed has the August Empire State Manufacturing Survey scheduled for 8:30 a.m. ET Monday.
That is not usually as powerful as CPI or payrolls, but Monday is already carrying elevated rate and oil sensitivity after Friday's weak retail-sales report and continuing Middle East risk.
The broader S&P 500 finished Friday only slightly lower and remained close to record territory, while investors head into the new week increasingly focused on whether earnings can continue to justify current valuations.
For FTNT and FFIV, the rule is simple: premarket excitement is not enough. The strategy wants a regular-session reclaim after the macro release, followed by continued relative strength.
Bottom line
There is no clean catch-up buy today.
That is not a failure of the screen. It is the screen doing its job.
- FTNT remains the best unresolved candidate. The fundamentals are strong and the medium-term cyber gap is real, but Friday killed Thursday's first relative-strength attempt. $165.75, then a second-session hold, is the first meaningful proof.
- FFIV has an even cleaner “good quarter, weak relative tape” mismatch, but the stock has not started repairing. $420–$424, followed by another positive relative session, is the first zone that would change the conversation.
- The rest of the old watchlist stays rejected because the recent gaps are stale or company-specific news overwhelms the relative-value thesis.
The idea behind this report is not that every related asset eventually moves together. Sometimes one stock lags because the market is right.
The opportunity starts when a genuine peer lag remains, the fundamental reason for the relationship still holds, and the laggard begins taking performance back from the group. As of Sunday, FTNT and FFIV satisfy the first two conditions. Monday has to prove the third.
Educational disclaimer: This report is for informational and educational purposes only. It is not personalised financial advice, investment research or a recommendation to buy or sell any security. Relative underperformance can persist for long periods, and a lagging stock may be reflecting information that peers have not yet priced in.
Sources and recent reads
Market / Monday macro
- Reuters — S&P 500 ends lower as investors weigh data and Middle East tensions, Aug. 14
- Reuters — Wall Street Week Ahead: investors look to earnings to keep stocks afloat
- New York Fed — August 2026 economic indicators calendar
- Investor's Business Daily — weekend market setup and Monday watchlist
Price / relative-performance references
- MarketWatch — Fortinet's Friday session
- MarketWatch — F5's Friday session
- StockAnalysis — FTNT price history
- StockAnalysis — FFIV price history
- StockAnalysis — CIBR price history
Fortinet fundamentals / filings
- Fortinet Investor Relations — Q2 2026 earnings materials
- Fortinet — Q2 2026 financial-results summary
- Fortinet — Q2 2026 Form 10-Q
F5 fundamentals / analyst reaction
- F5 — Q3 FY2026 earnings release
- Benzinga — analyst target changes after F5's Q3 report
- TipRanks — F5 analyst forecast page
Analyst / community temperature
- TipRanks — Fortinet analyst forecasts
- Reddit — cybersecurity valuation discussion including Fortinet
- Reddit — Fortinet Q2 beat-and-raise discussion
- Stocktwits — FFIV public sentiment page
Community sources are included only as sentiment context, not as trade validation.