Eleven for eleven green for a second straight week, and Okta and Zscaler both crossed into near-overbought territory (RSI 71.3 and 70.5) after back-to-back double-digit weeks. Nine of eleven names are now within about 3% of their 52-week highs. Okta announced a definitive agreement to acquire Permiso Security on September 21 — a real, dated catalyst inside this week's window, the first this board has had in the whole two-week run. Fortinet, CrowdStrike and Zscaler all posted double-digit weekly gains again; the desk's own deep dives on Zscaler, Fortinet and Okta, written September 22, are worth reading alongside this board for the fundamentals side of the story.

Data as-of the 2026-09-23 close. Prior scan: the September 18 cybersecurity scan (data as-of the 2026-09-18 close). The 7-day window here runs September 16 to September 23.

Okta and Zscaler are now the names to watch for extension risk. Okta's RSI crossed to 71.3 after a 9.16% week — its second straight double-digit week, and its 30-day window has ballooned to +56.8%. It is also 90.1% above its 200-day average, the widest cushion on this board by a wide margin. This week carries a genuine dated catalyst: Okta's own newsroom announced a definitive agreement to acquire Permiso Security on September 21, inside this window. Zscaler's RSI crossed to 70.5 on an 11.94% week — its second consecutive double-digit gain after last scan's 19.92% reclaim of its 200-day — and it now sits 27.8% above that average. Its trailing year is still the board's only negative print at -25.87%, so even after two strong weeks this reads as a repair still in progress, not a confirmed trend; the desk's September 22 deep dive on Zscaler is the place to read the fundamentals case behind that repair.

CrowdStrike added another 8.75% and is now 76.4% above its 200-day average with a 37.66% 30-day gain — the widest 200-day cushion on the board and still extending. Fortinet, the subject of another September 22 deep dive, gained 4.06% this week on top of last week's 8.82%, a milder but still positive continuation; a fresh pull carries a Fortinet earnings release dated inside this week, but the underlying URL path is stamped 2025 — a re-crawled stale page, not a new print, and no cause is claimed from it. Palo Alto Networks gained 4.70% and NET (Cloudflare) 8.53%, both extending intact long trends (61.6% and 53.1% over their 200-day averages, respectively).

BlackBerry finally caught up with the group: its 30-day window turned positive (+9.54%) for the first time in this stretch after a 9.69% week, though its RSI at 54.3 remains the lowest on the board and it is still the furthest name from its 52-week high at -38.34%. SentinelOne decelerated from last week's 13.97% gain to a milder 4.01%, while HACK and CIBR — the basket expressions of this same move — posted the smallest gains on the board at 3.86% and 3.70%, both still comfortably above their 200-day averages with strongly positive trailing years.

The structural picture across the whole board is now unusually clean. Nine of eleven names sit within about 3% of their 52-week highs — everyone except Zscaler (-36.36%) and BlackBerry (-38.34%), both of which are working through much larger prior drawdowns. Ten of eleven names carry positive trailing years and positive alpha; Zscaler remains the lone exception.

• OKTA crossed into near-overbought on a second straight double-digit week: RSI 61.5→71.3, price $182.37→$205.36, 7D 9.53%→9.16%, 30D 29.15%→56.8%. Announced a definitive agreement to acquire Permiso Security on September 21.
• ZS crossed into near-overbought on a second straight double-digit week: RSI 63.3→70.5, price $197.31→$214.45, 7D 11.94% (vs 19.92% last week), 30D 6.89%→21.81%; still 36.36% below its 52-week high despite the run.
• CRWD extended hard: RSI 60.4→68.9, price $237.65→$262.49, 7D 14.95%→8.75%, 30D 17.86%→37.66%.
• NET extended: RSI 57.9→65.4, price $323.60→$352.33, 7D 5.57%→8.53%, 30D 10.87%→25.68%.
• BB finally turned its month positive: RSI 48.4→54.3, price $7.99→$8.38, 7D 4.17%→9.69%, 30D -4.20%→9.54%.
• FTNT, PANW, S, HACK, BUG, CIBR all extended for a second straight scan, decelerating in weekly pace but still green: FTNT 7D 8.82%→4.06%; PANW 7D 9.96%→4.70%; S 7D 13.97%→4.01%; HACK 7D 7.98%→3.86%; BUG 7D 10.74%→4.83%; CIBR 7D 5.79%→3.70%.
• Regime unchanged: all eleven names remained above their 200-day averages for a second straight scan; ten of eleven still carry positive trailing years.

The rows are screen evidence. What makes this stretch unusual is that the screen and the structure keep agreeing: all eleven names sit above their 200-day averages, by 27.8% at the low end (ZS) and 90.1% at the high (OKTA), and nine of eleven are within about 3% of their 52-week highs.

Zscaler remains the one name to hold to a different standard. Its trailing year is still -25.87% and its excess return over the market is the board's only negative print at -41.64, even after two straight double-digit weeks. Reclaiming and extending above the 200-day is genuine repair, but a name still 36.36% below its 52-week high has real prior damage left to work through — treat the strength as repair in progress, consistent with the read in the desk's September 22 deep dive.

At the other end, Okta and Zscaler are now the two names where extension is the live risk: both crossed into the 70–80 near-overbought band this week after back-to-back double-digit gains. BlackBerry is still the one row lagging the group on structure — the lowest RSI (54.3) and the furthest from its 52-week high (-38.34%) — but its month finally turned positive, which is a lagging name catching up, not a broken one.

Capitulation (RSI below 25): None.

Oversold (RSI 25-40): None.

Neutral/Strong (RSI 40 and up): All eleven, spanning BB (54.3) to OKTA (71.3). Two names — OKTA and ZS — have now crossed the 70 line into near-overbought territory for the first time this stretch.

Conditions, not advice.

• Does Okta's or Zscaler's near-overbought reading resolve with a pullback, or does the run keep extending?
• Does Zscaler's trailing year turn positive, or does it stay this board's structural exception?
• Does BlackBerry's newly positive month mark a genuine catch-up, or a single week against the grain?

• Tape data (price, RSI, moving averages, returns, long-horizon): pre-computed summaries as of the 2026-09-23 close — cybersec.
• Prior-scan comparison values: 2026-09-18-cybersec.
• Okta's definitive agreement to acquire Permiso Security, dated September 21, from Okta's own newsroom — latest (fetched 2026-09-22).
• Fortinet earnings page checked and found to trace to a 2025 press release via its own URL path despite a September-dated crawl stamp — latest (fetched 2026-09-22). No cause is claimed from it.
• Deep dives referenced for fundamentals context, written 2026-09-22: 2026-09-22-zs-deep-dive, 2026-09-22-ftnt-deep-dive, 2026-09-22-okta-deep-dive (cited for verdicts only; no numbers from these files used as current).
• News pulls checked for the remaining names and found to carry only quote/overview pages with no dated content inside this week's window: PANW, CRWD, NET, S, BB, HACK, BUG, CIBR (all fetched 2026-09-15 through 2026-09-22). No cause is claimed for any of their moves.