Eleven for eleven green, every RSI up, every 30-day window improved — the sharpest board-wide reversal this desk has seen in this group. Zscaler ran 19.92% and reclaimed its 200-day average for the first time in this stretch, CrowdStrike added 14.95% and SentinelOne 13.97%. Then the whole board fell on Friday, nine of eleven names between -1.50% and -4.03%, into quarterly options expiry. The week is a real move: every name on this board now sits above its 200-day average, and ten of eleven carry positive trailing years.

Data as-of the 2026-09-18 close. Prior scan: 2026-09-11-cybersec (data as-of the 2026-09-11 close). The 7-day window runs 2026-09-11 to 2026-09-18, so the comparisons below line up exactly with that scan.

Zscaler was the week. Price ran from $164.54 to $197.31, RSI from 45.8 to 63.3 — the board's highest print — and the stock went from 3.2% below its 200-day average to 17.2% above it. That is the single biggest structural change on this board: the one name the last scan called genuinely under test reclaimed its long trend in five sessions. Its trailing year is still deeply negative at -32.22%, so this is a broken name repairing, not a strong name extending, and one week does not finish that job. MarketWatch published a piece on September 17 flagging an analyst's view that Zscaler had missed the sector's rally this year and could get its moment; that ran inside the move, not ahead of it. The one dated company item in the window is a September 14 report that the company launched an AI-first security operations platform.

CrowdStrike added 14.95% to $237.65 and is now 14.8% above its 50-day and 61.7% above its 200-day, with the 30-day window swinging from -6.78% to +17.86%. Okta posted the strongest month on the board at +29.15% and the widest 200-day cushion at +71.5%. SentinelOne rose 13.97% and Palo Alto 9.96%, the latter repairing a 30-day window that the last scan called the board's worst (-14.56% to +1.06%). Fortinet added 8.82% with the strongest trailing year here at +109.70%.

What is missing is a cause. Every earnings print behind these names landed before this window opened — CrowdStrike on August 27, Palo Alto around September 1, Zscaler on September 3, with Okta and SentinelOne's quarters in late August. The most suggestive receipt is on Okta's file: a quote page describing a broad cybersecurity rally led by Okta and CrowdStrike. It carries a September 15 stamp, but that is the date the page was crawled, and the desk's own record of Okta's newest genuine article stops at August 31 — so it is a snapshot of a rally already in progress, not a dated trigger. The honest read is that the group re-rated together, hard, and the corpus does not name what started it.

Two names sat out. BlackBerry rose 4.17% but is the only row still below its 50-day, with a negative 30-day window (-4.20%) and a pull that has not refreshed since August 27. Cloudflare's +5.57% is the second-smallest gain, though it arrives on top of a +9.9% week at the last scan and a +44.43% three months — it is the least catch-up and the most continuation on this board.

The Friday close is the caveat on all of it. The Fed raised rates a quarter point on Wednesday, quarterly options expired Friday, and this board gave back between 1.50% and 4.03% on the day, Okta hardest. That does not undo a 19.92% week, but it is where next week starts.

Numbers for 09-18 come from this scan's price table; numbers for 09-11 come from the September 11 cybersecurity scan.

• ZS ran hardest and reclaimed its 200-day: RSI 45.8→63.3, price $164.54→$197.31, 7D -3.10%→+19.92%, 30D -7.21%→+6.89%; from 3.2% below its 200-day to 17.2% above.
• CRWD reversed: RSI 50.0→60.4, price $206.74→$237.65, 7D -2.98%→+14.95%, 30D -6.78%→+17.86%.
• S reversed: RSI 45.7→57.8, price $19.75→$22.51, 7D -0.65%→+13.97%, 30D -11.43%→+5.58%.
• PANW repaired the board's worst month: RSI 43.0→53.1, price $330.65→$363.58, 7D -0.78%→+9.96%, 30D -14.56%→+1.06%.
• OKTA posted the board's best month: RSI 58.0→61.5, price $166.50→$182.37, 7D -2.40%→+9.53%, 30D +13.03%→+29.15%.
• FTNT reversed: RSI 47.5→58.0, price $156.07→$169.84, 7D -0.14%→+8.82%, 30D -2.97%→+11.12%.
• BUG reversed: RSI 46.0→58.5, price $40.04→$44.34, 7D -3.21%→+10.74%, 30D -6.43%→+7.86%.
• HACK reversed: RSI 46.7→58.1, price $109.90→$118.67, 7D -0.77%→+7.98%, 30D -7.54%→+5.68%.
• CIBR reversed: RSI 48.3→57.1, price $94.40→$99.87, 7D -0.20%→+5.79%, 30D -5.97%→+4.53%.
• NET continued: RSI 55.5→57.9, price $306.53→$323.60, 7D +9.9%→+5.57%, 30D -1.58%→+10.87%.
• BB lagged: RSI 40.8→48.4, price $7.67→$7.99, 7D -0.39%→+4.17%, 30D -12.54%→-4.20%.
• Regime change: every 30-day window on this board was negative or flat last scan except Okta's. This scan, ten of eleven are positive.

The rows are screen evidence. What makes this week unusual is that the screen and the structure agree for once: all eleven names now sit above their 200-day averages, by 17.2% at the low end and 71.5% at the high, and ten of eleven carry positive trailing years, eight of them above 29%.

Zscaler is the exception and the reason to keep this board honest. Its year is -32.22% and its return relative to the market over that year is the worst here by a wide margin. It reclaimed the 200-day this week, which is genuine repair, but a name that is still 41.45% below its 52-week high after a 19.92% week has a lot of prior damage to work through. Treat its strength as a repair in progress, not a confirmed trend.

At the other end, nothing on this board is overbought yet — the highest print is 63.3 — but five names now sit 9.6% to 19.3% above their 50-day averages (S, NET, CRWD, ZS, OKTA), which is where give-backs usually start. Friday's red close across nine of eleven rows is the first test of that.

BlackBerry is the one row whose week does not fit: positive, but from below its 50-day, on the board's only negative 30-day window, and with a pull three weeks old. Its long numbers are fine (+90.24% year, 29.8% over its 200-day), so this reads as a lagging name in a strong group, not a broken one.

Capitulation (RSI below 25): None.

Oversold (RSI 25-40): None — and none last scan either, though the whole board sat between 40.8 and 58.0 then. The range has moved up bodily.

Neutral/Strong (RSI 40 and up): All eleven, spanning BB (48.4) to ZS (63.3). Six names print above 57, against a high of 58.0 last scan. Nothing has reached the 70 line where extension becomes the risk.

Conditions, not advice.

• What started the re-rate? No dated item inside the window covers a group-wide move of this size.
• Does Zscaler's 200-day reclaim survive a give-back week, and does its trailing year begin to turn?
• Is Friday's uniform red close expiry positioning or the start of the give-back the 50-day gaps invite?

• Tape data (price, RSI, moving averages, returns, long-horizon): full-scan pre-computed summaries as of the 2026-09-18 close — cybersec.
• Prior-scan comparison values: 2026-09-11-cybersec.
• Analyst view that Zscaler had missed the sector's rally, September 17 — 2026-09-17-marketwatch-this-is-the-only-cybersecurity-stock-that-can-post-big-gains--mktw-0005238557.
• Zscaler security-operations platform launch reported September 14, and the September 3 fourth-quarter results — latest (fetched 2026-09-17).
• Broad cybersecurity rally described on a quote page crawled September 15, against a newest genuine article of August 31 — latest (fetched 2026-09-15).
• Earnings cluster predating this week's window: CrowdStrike August 27 (2026-09-01-crwd-earnings, latest fetched 2026-09-17), Palo Alto (2026-09-01-panw-earnings, news fetched 2026-09-18), Zscaler (2026-09-02-zs-earnings, 2026-09-03-zs-earnings).
• News pulls checked and found to predate this week's window: FTNT (fetched 2026-09-01), S (fetched 2026-09-15, newest article 2026-08-28), BB (fetched 2026-08-27). NET's pull was fresh (fetched 2026-09-17) but returned quote and overview pages only. No cause is claimed for any individual move on this board.
• Federal Reserve quarter-point increase, September 16 — 2026-09-16-cnbc-fed-delivers-its-first-hike-in-3-years-plus-what-s-moving-st-108363844.