Price cutoff: Friday, August 14, 2026 at the 4:00 p.m. ET U.S. regular-session close.
Research cutoff: Monday, August 17, 2026 before the U.S. open.
Trade horizon: roughly 1–15 U.S. trading sessions.
Execution note: premarket price action does not count as confirmation in this screen.
Today's answer: two genuine laggards, no clean entry before the open
Monday gives this strategy a better test than the weekend did.
Nasdaq-100 futures were up roughly 0.5% early Monday, with semiconductors and several megacap technology names bid. Reuters reported Micron up about 3.5%, Broadcom about 1.2%, Amazon about 1.3% and Alphabet about 0.8% in premarket trading. That is useful because a risk-on technology tape removes one excuse from a lagging cybersecurity stock: if the group and the broader growth complex are firm, the laggard should eventually start participating.
But the regular session has not opened yet, and the August Empire State Manufacturing Survey is due at 8:30 a.m. ET. I am not turning a premarket quote into a catch-up signal one hour before a macro release.
So the hierarchy is unchanged but the test is sharper:
- Fortinet (FTNT) remains the best unresolved catch-up watch.
- F5 (FFIV) remains the second clean structural mismatch.
- There is no third name strong enough to add just to fill a table.
Both stocks still have intact operating stories and real cybersecurity exposure. Both still trail CIBR meaningfully over the medium windows. Neither has produced the two-session relative-strength confirmation the seven-session audit now requires.
Monday catch-up watchlist
| Rank | Candidate | Friday close | Genuine relationship | Current read | What would make it actionable |
|---|---|---|---|---|---|
| 1 | FTNT | $160.01 | Cybersecurity vs. CIBR / PANW / CRWD | Large 10/20-session deficit; Thursday's first turn failed Friday | Regular-session close above $165.75, then a second-session hold while beating CIBR; stronger through $168–$169 |
| 2 | FFIV | $403.20 | App/API security vs. CIBR and enterprise-security peers | Strong latest quarter, persistent 10/20-session lag, short-window repair failed late last week | Reclaim $420–$424, then hold roughly $424–$426 while outperforming CIBR |
These are observation and confirmation levels, not opening-bell buy instructions.
Relative performance: candidate minus benchmark
Because no new U.S. regular session has completed since Friday, the measured gaps are unchanged from Friday's close. Negative means the candidate underperformed its benchmark.
| Pair | 1 session | 3 sessions | 5 sessions | 10 sessions | 20 sessions |
|---|---|---|---|---|---|
| FTNT minus CIBR | -0.74 pp | -0.84 pp | -1.56 pp | -9.66 pp | -8.83 pp |
| FFIV minus CIBR | -0.53 pp | -2.29 pp | -1.05 pp | -8.30 pp | -9.28 pp |
The shape is exactly why these two survive the screen.
The 10- and 20-session deficits are still large enough to represent an unresolved relationship, while at least one of the fresher five- or 10-session gaps remains negative. That keeps them from failing the stale-gap filter.
But the one-session numbers are also negative. Friday did not show the beginning of a durable repair. It showed two laggards still acting like laggards.
Seven-session walk-forward: the stricter rule just avoided the failure it was designed for
I re-ran the decision logic across the prior seven completed U.S. sessions — August 6, 7, 10, 11, 12, 13 and 14 — using only information that would have been available at each cutoff.
There is no new Monday closing bar yet, so I am not pretending the sample has grown. What matters is whether the rules we tightened last week are still removing the obvious bad signals.
They are.
The clearest test was Fortinet
On Thursday, August 13, FTNT finally produced a meaningful positive relative day versus CIBR. The looser version of the method could have called that the turn.
Friday immediately disproved it: FTNT fell 3.28% to $160.01 and gave back relative ground. Requiring a second regular session prevented the first-day bounce from becoming a completed catch-up signal.
That is exactly the kind of failure the walk-forward was supposed to expose.
The freshness filter still removes stale setups
Older 20-session gaps remain visually dramatic in several names, but UPS, L3Harris, NXPI and Caterpillar have already repaired too much of their five- or 10-session relationship to qualify as fresh laggards.
So I am keeping the current method rather than inventing a new rule for Monday:
- real economic relationship;
- meaningful divergence across multiple windows;
- intact fundamentals;
- plausible catalyst;
- at least one fresh five- or 10-session gap;
- a closing reclaim;
- and a second regular session of continued relative strength.
The new diagnostic for today is simple: participation matters more when the broader tech tape is supportive. If cyber and growth stocks are firm after the open and FTNT or FFIV still cannot beat CIBR, that is evidence against the catch-up thesis, not an excuse to average down.
I am not publishing a raw hit rate from seven sessions. The sample is useful for killing bad rules, not manufacturing precision.
1. Fortinet: still the best unresolved gap, still missing proof
Why the relationship is genuine
This is not a hand-picked chart comparison. The First Trust Nasdaq Cybersecurity ETF CIBR owns Fortinet, alongside other cybersecurity companies exposed to the same enterprise-security budgets and AI-driven security demand.
Fortinet's latest business update still looks strong enough to reject the idea that the stock is simply lagging because the company is broken.
The company reported Q2 revenue of $2.05 billion, up 26% year over year, product revenue of $773 million, up 52%, and billings of $2.37 billion, up 33%. Management also raised its 2026 revenue-growth outlook.
Fortinet has also continued building products around AI-era security, including endpoint controls for AI usage and its agentic-AI-powered FortiSOC platform. That does not guarantee the stock catches up, but it keeps the underlying sector relationship intact.
Why Friday matters more than the strong quarter
FTNT closed Friday at $160.01, down 3.28%. Thursday had looked promising: the stock rose 2.86% and beat the cybersecurity basket. Friday failed to extend that move.
That sequence is more informative for a 1–15 session trade than another bullish earnings headline.
| Item | FTNT plan |
|---|---|
| Observation zone | Roughly $158–$162 |
| First reclaim | Regular-session close above $165.75 |
| Better confirmation | Hold the reclaim into a second session while continuing to outperform CIBR; stronger through $168–$169 |
| Invalidation | Sustained close below roughly $154–$155 |
| Likely catalyst | Continued enterprise cyber spending, SASE/firewall demand, AI-security demand, post-Q2 estimate support |
| Main risks | Valuation, investor preference for faster-growing cyber peers, competitive pressure, broad growth-stock multiple compression |
Analyst, news and community temperature
Wall Street remains constructive on execution but deeply split on valuation. Recent ratings span bullish targets such as Bank of America's $200, TD Cowen's $215 and Truist's $183, while JPMorgan has carried a much more negative view with a $100 target. That wide dispersion is useful context: there is no consensus that a good quarter automatically makes the stock cheap.
Public investor discussion looks similar. Recent Reddit threads praise the earnings beat, billings growth and cybersecurity tailwind, while valuation-focused discussions repeatedly question paying a high multiple when faster-growing peers exist. That is sentiment context, not trade validation.
Monday verdict: FTNT stays first, but I want the stock to earn back $165.75 in the regular session and then survive another day. If CIBR is strong and FTNT cannot do that, the lag becomes less attractive, not more.
2. F5: excellent operating momentum, but the chart still refuses to confirm it
Why FFIV belongs in the same economic group
CIBR also owns F5, and the business operates directly in application delivery, application security and API security. The same hybrid-cloud, AI infrastructure and cybersecurity budgets that support the basket matter to F5.
Its latest quarter was stronger than the relative tape suggests. F5 reported $865 million of revenue, up 11%, with product revenue up 19%. Systems revenue grew 32%, software revenue grew 7%, and non-GAAP operating margin reached 35%. Management raised fiscal-2026 revenue-growth guidance to roughly 9%–10% from 7%–8%.
The company has also been expanding AI-security integrations, including work with NVIDIA NeMo Guardrails and Google Cloud. Again, that is not a price signal; it simply makes the persistent sector lag harder to dismiss as a broken demand story.
Why the relative chart still wins the argument
FFIV had a three-day winning streak into Wednesday, but it fell 1.64% Thursday and another 3.08% Friday to $403.20.
That leaves it about 8.3 percentage points behind CIBR over 10 sessions and 9.3 points behind over 20 sessions. The short windows are negative too.
A good quarter can stay underpriced for weeks. I do not want to guess when the market changes its mind.
| Item | FFIV plan |
|---|---|
| Observation zone | Roughly $400–$410 |
| First reclaim | Close back above roughly $420–$424 while beating CIBR |
| Better confirmation | Hold roughly $424–$426 into a second regular session with positive cybersecurity breadth |
| Invalidation | Sustained close below roughly $400, with greater concern if the late-July support area fails decisively |
| Likely catalyst | App/API security demand, hybrid-cloud refresh, AI-driven enterprise-security spending, upward estimates |
| Main risks | Security-group rotation, product-cycle volatility, slower enterprise spending, broad technology de-rating |
Analyst and community temperature
Post-earnings analyst reaction is mixed but generally recognizes the stronger operating numbers. JPMorgan raised its target to $515, RBC to $508, and Piper Sandler to $461, while Barclays remained more cautious around $397 and Bank of America maintained a bearish $300 view.
Stocktwits activity around FFIV has been much quieter than the largest cybersecurity names. That makes this less of a retail-momentum setup, which I prefer for a relative-value watch — but low chatter is not a catalyst.
Monday verdict: FFIV has arguably the cleaner fundamental-versus-price mismatch, but the chart has not started repairing. The low $420s need to come back before I treat the lag as a trade rather than a research lead.
Why I am still refusing a third candidate
| Rejected setup | Why it fails today |
|---|---|
| UPS vs. IYT | The large 20-session deficit is increasingly stale; recent five- and 10-session divergence has narrowed too much. |
| LHX vs. ITA | Much of the defense catch-up has already occurred over the short and medium windows. The old 20-day deficit overstates the fresh opportunity. |
| NXPI vs. TXN | The long-window gap remains visible, but the recent relationship has already flattened or improved. |
| CAT vs. DE | The dramatic old gap has already started to mean-revert. It no longer passes the freshness test. |
| CSCO / AMAT | Their recent moves are dominated by company-specific earnings and expectation resets, so a clean peer-lag thesis is difficult to defend. |
This rejection list is not a weakness. A catch-up screen that always finds five stocks will eventually become a disguised dip-buying screen.
Monday's two gates: 8:30 data, then the regular session
The New York Fed calendar has the August Empire State Manufacturing Survey scheduled for 8:30 a.m. ET Monday. The U.S. cash market opens one hour later.
Reuters' early-Monday market snapshot shows a modest risk-on bias in technology, with Nasdaq futures leading the major indexes. That creates a clean test after the macro number:
- If the growth/cyber tape stays firm and FTNT starts taking relative performance back, the setup improves.
- If FTNT rallies in absolute terms but merely matches CIBR, that is beta, not catch-up.
- If CIBR rises and FTNT/FFIV continue to lag, the market is telling us the discount may deserve more time.
Premarket strength by itself changes none of the trigger levels above.
Bottom line
There is no clean catch-up buy before Monday's open.
That does not mean there is nothing to watch. Monday is actually the first useful live test since Friday:
- FTNT is still the best unresolved candidate. The business is strong, the CIBR relationship is real, and the medium-term gap is large. But Friday broke the first relative-strength attempt. $165.75, then a second-session hold, remains the proof.
- FFIV has a strong quarter and a real cyber/app-security catalyst, but its short-window tape is weaker. $420–$424, followed by another session holding the reclaim while beating CIBR, is the first meaningful repair.
- No third name clears the freshness and company-specific-news filters today. I would rather publish two real watches than three weak ones.
The core idea remains simple: do not buy the laggard because the gap is large. Buy attention only when the laggard starts taking performance back from the asset it should be moving with — and then proves the turn can survive a second day.
Educational disclaimer: This report is for informational and educational purposes only. It is not personalised financial advice, investment research or a recommendation to buy or sell any security. Relative underperformance can persist for long periods, and a lagging stock may be reflecting information that its peers have not yet priced in.
Sources and recent reads
Monday market / macro
- Reuters — Nasdaq futures gain as tech stocks climb, Aug. 17, 2026
- Federal Reserve Bank of New York — August 2026 Economic Indicators Calendar
Cybersecurity relationship / holdings
Fortinet
- Fortinet Investor Relations — Q2 2026 results and press releases
- Fortinet — Q2 2026 Form 10-Q
- Fortinet — FortiEndpoint capabilities for the AI era
- MarketWatch — Fortinet's Friday, Aug. 14 session
- TipRanks — Fortinet analyst forecasts
- Reddit — Fortinet versus CrowdStrike valuation discussion
F5
- F5 — Q3 FY2026 results and raised outlook
- F5 Newsroom — AI-security product and integration updates
- MarketWatch — F5's Friday, Aug. 14 session
- Investing.com — F5 analyst consensus and recent targets
- Benzinga — F5 analyst target changes after Q3
- Stocktwits — FFIV public sentiment page
Community sources are included only as sentiment context, not as trade validation.