Reason: Security names reversed course hard - CRWD and OKTA both re-extended (RSI back into the 60s, 30D gains of +19% and +27%) after cooling last read, which cybersec.md itself calls "the reversal story of the scan"; DDOG stayed the steadiest of the three; INTU bounced off its lows but remains death-crossed with a "broken" thesis flag.

Tape Read

Last read's sector-wide cooldown reversed itself within a week. CRWD's RSI climbed back to 62.9 (was 57.2) on a +18.61% 30-day print, and OKTA jumped further to 64.8 (was 62.2), now +26.77% over 30 days — cybersec.md frames this directly: "This is the reversal story of the scan. PANW's cooldown... has itself reversed... FTNT and CRWD both bounced alongside it. Security has gone from cooling off back to re-extending." DDOG stayed the steadiest of the group: RSI 57.7 (down slightly from 61.2), +16% 30D, thesis intact — never got as extended as CRWD/OKTA, so it didn't need this week's re-acceleration. INTU bounced meaningfully off its lows (RSI 45.2→52.7, +5.87% 7D, +9.51% 30D) but remains strong-down/death-crossed with its thesis still flagged "broken" — no structural reversal evidence yet. Source: 2026-07-17-cybersec + summaries/cloud-saas.json (no dedicated 2026-07-17 scan for the full cloud-saas watchlist).

• CRWD — WATCH: RSI 62.9 (up from 57.2), golden cross, +18.61% 30D — re-extended alongside the sector; per cybersec.md, part of "the reversal story of the scan."
• OKTA — WATCH: RSI 64.8 (up from 62.2), +26.77% 30D — re-accelerated further than CRWD; still a hold, not a fresh add at this extension.
• DDOG — PROMOTE: RSI 57.7, strong-up, golden cross, thesis intact, +16% 30D — the least-extended name in the basket, unchanged clean read.
• INTU — PASS: RSI 52.7 (up from 45.2), still collapse regime, thesis flagged broken, +5.87% 7D — a real bounce off the lows, but no reversal of the structural de-rate yet.

Lead pick: DDOG — still the cleanest, least-extended structure after CRWD/OKTA's sharp re-acceleration. CRWD/OKTA are both holds riding a genuine reversal, not fresh entries at these levels; INTU's bounce is the one to watch for whether it's the start of something or just digestion inside a broken chart.

Sources

• Tape data (price/RSI/SMA/returns): full-scan pre-computed summaries as of the 2026-07-17 close — *.