Cybersecurity Scan — October 16, 2026 Close

Scan

Cybersecurity Scan — October 16, 2026 Close

Watchlists 1
raw scan snapshot — prices as of scan date, not live 40 rows · screens, not recommendations prior scanresearch/scans/2026-10-09-cybersec.md

Cybersecurity reversed hard — all 11 names fell on the week and on Friday, 10 of them by 10% or more over seven sessions (Okta -19.33%, Palo Alto -18.33%, Cloudflare -17.91%, SentinelOne -17.85%, CrowdStrike -17.32%) — and the three names that were extended at RSI 70 or above a week ago now read 40.7 to 51.4. All 11 still close above their 200-day averages; ten of them sit on positive trailing years (+28.3% to +113.5%), and Zscaler (-30.7% on the year) is the repair.

Data as of the 2026-10-16 close (settled, Friday). The previous edition closed October 9; the seven-day column runs from that close to this one, so it is the change since then.

Quick Snapshot

Signal Reading
Overall 🟡 Sharp pullback inside intact trends: 0 of 11 up, all 11 above their 200-day averages, 8 of 11 under their 50-day averages. None is a washout; the lowest RSI is Cloudflare's 35.9.
Leaders BB (-9.54%), CIBR (-10.16%), HACK (-10.45%), the smallest declines
Laggards OKTA (-19.33%), PANW (-18.33%), NET (-17.91%)
Caveat Tape from pre-computed price summaries, 2026-10-16 close. News for every name was last pulled before Friday's session, so no cause for the move is on file; that is not the same as no cause.

What's Going On

Friday hit every name, from HACK's -4.21% to Okta's -10.2%. Okta fell on 2.07 times its average volume to $187.26 and RSI 41.5 (76.5 a week ago); it is still 58% above its 200-day on a +113.5% year and 20.31% under its high. SentinelOne (-7.66%), Palo Alto (-7.63%), Fortinet (-7.03%) and CrowdStrike (-7.02%) each lost about 7% on the day; Cloudflare lost 6.33%. The three funds fell less (HACK -4.21%, CIBR -4.55%, BUG -5.26%) but gave back last week's break above their base highs: HACK $117.09 against $128.84, BUG $44.34 against $49.62, CIBR $98.82 against $109.07 (CIBR traded 2.76 times its average volume on Friday).

The long view outranks the week. Fortinet (1Y +103.43%, 36.5% above its 200-day), CrowdStrike (+88.61%, 41.6%), Palo Alto (+66.42%, 31.2%) and Okta (+113.5%, 58%) are deep pullbacks in intact trends, 14.2% to 20.89% under their highs, not breakdowns. Whether they become flags depends on the 50-day: eight of 11 have already closed under it (Fortinet by only 0.2%), while Okta (+4.1%), Zscaler (+8%) and BUG (+0.6%) still hold it. Zscaler gave back 11.27% after last week's +18.89% (to $233.73) and sits at $207.38, RSI 51.4, 25.1% above its 200-day but -30.7% on the year and 38.46% under its high: a repair that has lost ground, though it is one of only two names up over 30 days (+8.25%; BlackBerry +5.5%). BlackBerry had the smallest weekly decline (-9.54%) after a -7.36% Friday and is 21.9% above its 200-day on a +78.32% year.

Cause not on file. News for the 11 was last pulled between October 3 and 16 (Palo Alto October 14, Cloudflare October 15, Zscaler October 16 UTC) or in June and September for the funds, all before Friday's session; the stock-event records for October 13-16 hold no cybersecurity entries; and the only company item in the October 13-16 captures is SentinelOne's $1.25 billion convertible notes offering (Connor Bates on X, October 13), which no receipt ties to the week. Palo Alto's October 14 page lists a Wells Fargo target raise to $525 from $475, and the stock still fell 18.33% on the week. Context only: positioning going into the week was heavy, with Connor Bates counting a record $950 million of September net inflows into cybersecurity funds (X, October 8); Bloomberg's Friday captures describe the S&P 500's biggest weekly loss since June on AI-trade worries, with oil at $110 a barrel; and the October 16 market conditions snapshot has equal-weight RSP +0.49% on the week against QQQ -5.52%.

What Changed Since Prior Scan

Ten up and one down on October 9 became zero up and eleven down. The names at RSI 70 or above went from three (Okta 76.5, Zscaler 72.9, Fortinet 72.7) to none, and the board's RSI range went from a top above 76 to 35.9-51.4. All eleven stayed above their 200-day averages both weeks. HACK, BUG and CIBR, which closed above their base highs a week ago, are back under them. Leaders rotated completely: Zscaler, Okta and Fortinet (the October 9 leaders) are now -11.27%, -19.33% and -13.16%, while BlackBerry went from last to first.

How To Read The Board

This is a price-and-momentum screen built from pre-computed price summaries: it shows where each name sits on the tape, not why it moved. RSI under 30 is a washout and 70 or above is extended; neither is a recommendation on its own. The structure label carries the long view and outranks the week: trend intact is above the 200-day average with a positive trailing year (a bad week here is a pullback); repair is above the 200-day but down on the year; trend under test is below the 200-day with a positive year (the 200-day is the line to retake); trend broken is below the 200-day and down on the year. A raw reading becomes a setup only when an intact trend pulls back, holds a level and turns up. No insider, fundamentals or options data is included.

Price Table

As of 2026-10-16. Price and SMA20 in dollars; RSI is a 14-day reading; all other columns in percent.

Stock Price RSI SMA20 vs SMA20 7D 30D 1Y vs SMA200 Signal
BB 8.06 44.1 8.72 -7.6 -9.54 5.5 78.32 21.9 🟢 Pullback, trend intact
CIBR 98.82 41.3 104.37 -5.3 -10.16 -1.48 32.08 21.1 🟢 Pullback, trend intact
HACK 117.09 42.8 123.28 -5 -10.45 -1.98 37.37 23.3 🟢 Pullback, trend intact
ZS 207.38 51.4 210.66 -1.6 -11.27 8.25 -30.7 25.1 🟡 Repair
BUG 44.34 43.8 46.92 -5.5 -11.46 -1.36 29.69 29.5 🟢 Pullback, trend intact
FTNT 169.13 40.7 181.92 -7 -13.16 -1.54 103.43 36.5 🟢 Pullback, trend intact
CRWD 227.39 39 259.85 -12.5 -17.32 -5.79 88.61 41.6 🟢 Pullback, trend intact
S 21.58 40.4 24.17 -10.7 -17.85 -6.86 28.3 25.7 🟢 Pullback, trend intact
NET 296.3 35.9 345.71 -14.3 -17.91 -8.73 40.16 22.3 🟢 Pullback, trend intact
PANW 342 37 390.96 -12.5 -18.33 -8.96 66.42 31.2 🟢 Pullback, trend intact
OKTA 187.26 41.5 210.2 -10.9 -19.33 -0.46 113.5 58 🟢 Pullback, trend intact

Tier Analysis

Capitulation (RSI under 25)

No names in this tier.

Oversold (RSI 25-40)

Stock RSI 1Y vs SMA200 Read
NET 35.9 40.16 22.3 Trend intact
PANW 37 66.42 31.2 Trend intact
CRWD 39 88.61 41.6 Trend intact

Neutral to strong (RSI 40+)

8 names; RSI in parentheses, full rows in the price table.

  • Trend intact: S (40.4), FTNT (40.7), CIBR (41.3), OKTA (41.5), HACK (42.8), BUG (43.8), BB (44.1)
  • Repair (above 200-day, down on the year): ZS (51.4)

Entry Zones

Levels are the 20-, 50- and 200-day averages from the summaries, in dollars. Each row is a condition, not an order.

Stock Entry zone ($) Condition
BB 6.61–8.37 Under the 50-day inside an intact trend; a close back above the 50-day is the trigger, the 200-day the floor.
CIBR 81.59–100.11 Under the 50-day inside an intact trend; a close back above the 50-day is the trigger, the 200-day the floor.
HACK 94.93–118.07 Under the 50-day inside an intact trend; a close back above the 50-day is the trigger, the 200-day the floor.
ZS 165.83–191.98 Repair, not yet a trend; a pullback that holds the 50-day after a higher high is the first entry, a close under the 200-day voids it.
BUG 44.08–46.92 Trend intact; entry on a pullback that holds the 50-day and closes back above the 20-day.
FTNT 123.87–169.39 Under the 50-day inside an intact trend; a close back above the 50-day is the trigger, the 200-day the floor.
CRWD 160.56–233.17 Under the 50-day inside an intact trend; a close back above the 50-day is the trigger, the 200-day the floor.
S 17.17–22.56 Under the 50-day inside an intact trend; a close back above the 50-day is the trigger, the 200-day the floor.
NET 242.25–319.92 Under the 50-day inside an intact trend; a close back above the 50-day is the trigger, the 200-day the floor.
PANW 260.68–373.27 Under the 50-day inside an intact trend; a close back above the 50-day is the trigger, the 200-day the floor.
OKTA 179.9–210.2 Trend intact; entry on a pullback that holds the 50-day and closes back above the 20-day.

Action Matrix

Stock Signal Action Notes
NET, PANW, CRWD 🟢 Pullback, trend intact 🔍 Watch (50-day reclaim) Lowest RSIs on the board (35.9 to 39); 2.5% to 8.4% under their 50-days. No flag yet.
FTNT, S, BB 🟢 Pullback, trend intact 🔍 Watch (50-day reclaim) Under their 50-days by 0.2% (FTNT), 4.3% (S) and 3.7% (BB).
OKTA 🟢 Pullback, trend intact 🔍 Watch (50-day hold) Worst week (-19.33%) and worst Friday (-10.2%, 2.07 times volume); still 4.1% above its 50-day.
ZS 🟡 Repair 🔍 Watch (50-day hold) 8% above its 50-day; the year is -30.7%. Not a trend yet.
HACK, CIBR 🟢 Pullback, trend intact 🔍 Watch Funds. Back under their base highs and 0.8% and 1.3% under their 50-days.
BUG 🟢 Pullback, trend intact 🔍 Watch (50-day hold) Fund. Back under its base high; 0.6% above its 50-day.

What To Watch Next

Watch Trigger Why it matters
OKTA, ZS, BUG Keep closing above the 50-day (OKTA 179.9, ZS 191.98, BUG 44.08) The only three still above it; losing it leaves all 11 under their 50-days.
FTNT, PANW, CRWD, NET Close back above the 50-day (FTNT 169.39, PANW 373.27, CRWD 233.17, NET 319.92) Decides whether the drop is a flag forming or a lower range.
NET, PANW, CRWD RSI under 30, or a close toward the 200-day (NET 242.25, PANW 260.68, CRWD 160.56) The nearest to a washout; price is still 22.3% to 41.6% above their 200-day lines.
HACK, BUG, CIBR Close back above the October 9 base highs ($128.84, $49.62, $109.07) Last week's break failed; a reclaim would restart it.
FTNT Scheduled to report October 28 after the close (estimated date) The first company print among the 11; Cloudflare is estimated for November 5, Palo Alto November 19, Zscaler November 24.

Sources

  • Tape data (price, RSI, averages, returns, long-horizon fields, Friday volume): pre-computed summary, 2026-10-16 close — cybersec.
  • Prior-week RSI, leaders, base highs and Zscaler price — the October 9 cybersecurity scan, 2026-10-09-cybersec.
  • Fund flows — Connor Bates on X, October 8 (https://x.com/ConnorJBates_/status/2108151697826799738), capture 2026-10-08-ConnorJBates_-cybersecurity-funds-saw-a-record-950-million-of--26799738. SentinelOne convertible offering — Connor Bates on X, October 13 (https://x.com/ConnorJBates_/status/2109989566975267077), capture 2026-10-13-ConnorJBates_-s-sentinelone-s-launches-1-25-bln-convertible-no-75267077.
  • Palo Alto target raise — Stock Analysis quote page (https://stockanalysis.com/stocks/panw/), from the Palo Alto news pull of 2026-10-14.
  • Friday market context — Bloomberg, "S&P 500 Suffers Worst Week Since June as AI Fears Hit Chipmakers" (https://www.bloomberg.com/news/articles/2026-10-16/s-p-500-steady-as-warsh-boosts-expectations-of-rate-hold), capture 2026-10-16-bloomberg-s-p-500-suffers-worst-week-since-june-as-ai-fears-hit-chipma-tmzzr4t96osi00; Bloomberg, "Brent Oil Taps $110 for First Time Since May as Risks Swirl" (https://www.bloomberg.com/news/articles/2026-10-16/oil-tops-110-for-first-time-since-may-as-supply-risk-grows), capture 2026-10-16-bloomberg-brent-oil-taps-110-for-first-time-since-may-as-risks-swirl-tn0e2pkgzaks00. Equal-weight versus Nasdaq-100 fund returns — October 16 market conditions snapshot, 2026-10-16-market-conditions.
  • News check (stocks<SYM>/news/latest.json, pull dates): FTNT 2026-10-09; PANW 2026-10-14; CRWD 2026-10-09; ZS 2026-10-16 (UTC, before Friday's session); NET 2026-10-15; S 2026-10-03; OKTA 2026-10-09; BB 2026-10-09; HACK 2026-06-21; BUG 2026-09-15; CIBR 2026-06-21. Event records (research/stock-events/`) checked for October 13-16: earnings records for DPZ, JPM, GS, C, WFC, JNJ, UNH, ABT, ASML, BAC, MS, TSM, IBKR and others, none a cybersecurity name; scheduled report dates from the FTNT, NET, PANW and ZS records. Article, X and filing captures for October 13-16 (articles, tweets, filings) were searched by company name; the only company hit is SentinelOne's offering. A news pull dated before a move does not cover it, and a pull with no item on the move is not proof of no cause.
10 events