Themes / Group
Inactive · established relationshipLatest completed snapshot · Aug 20 · 16:27 ET

MARKET-DISCOVERED GROUP

Payment Software

THE TRADER READBroad relative move, confirmed beyond the cohort—but not by flow

8 of 12 measured session-normalized paths align to the downside across 7.1 effective names. Common-bar coverage spans 12 of 21 cohort members. RPD, AVPT, CRWD are also moving with filing-linked members. Capital-flow agreement is 7%, so the basket is not yet clean. No verified headline preceded the measured move.

Price breadth4 up · 17 down-1.0% session-normalized median path
Capital-flow alignment7%Price breadth is not yet confirmed by flow
Activity nowCalmActivity score 13/100 · lift 0.8×
Evidence depth3 episodesLow sample—context, not a validated playbook
EVIDENCE CLOCK

What happened, in timestamp order

4 timed events · 09:30–15:55 ET
TIMING READNo verified timestamped headline was found within 24 hours of the first measured price move in the available common-bar window. The move currently reads as market-led or unexplained.
  1. 5-minute inferenceFROG registered the first material downside path

    -2.35% session path at the threshold · FROG

  2. 5-minute inferencePATH registered a material upside path

    +1.10% session path at the threshold · PATH

  3. 5-minute inferenceOKTA registered a material downside path

    -1.68% session path at the threshold · OKTA

  4. 5-minute inferenceDT registered a material upside path

    +0.99% session path at the threshold · DT

2 earlier filing context receipts

TUE, NOV 4DT filing documented shared operating contextproduct pipeline / R&D affecting expense · date precision only

TUE, JUN 2PANW filing documented shared operating contextproduct pipeline / R&D affecting expense · date precision only

Headline times and retained activity confirmations are point-in-time evidence. Price order is inferred from aligned 5-minute bars. Filing evidence has date precision only and is context, not an intraday catalyst claim.
THEME CONSTRUCTION

Broad move or one-stock disguise?

Session-normalized 5m paths

Observed movement is broad across 7.1 effective names. NTSK represents 22.2% of absolute path energy; 8 of 12 members align with the down relative path.

ConstructionBroad22.2% from the largest path
Effective names7.1 / 1212 of 21 cohort members had common bars
Direction breadth8/12 aligneddownside relative path · 1 counter-moving
Largest moverNTSK 22.2%38.5% from the top two paths
NTSK22.2%Aligned contributor · path -3.88% · basket -0.32pp
PANW16.3%Aligned contributor · path -2.84% · basket -0.24pp
FROG15.4%Aligned contributor · path -2.70% · basket -0.23pp
ESTC13.7%Aligned contributor · path -2.40% · basket -0.20pp
DDOG9.5%Aligned contributor · path -1.65% · basket -0.14pp
PATH8.0%Counter-move · path +1.40% · basket +0.12pp
OKTA5.7%Aligned contributor · path -1.00% · basket -0.08pp
CLBT5.3%Aligned contributor · path -0.92% · basket -0.08pp
NTNX1.8%Aligned contributor · path -0.32% · basket -0.03pp
GTLB0.9%Flat / inactive path · path -0.16% · basket -0.01pp
DT0.7%Flat / inactive path · path +0.12% · basket +0.01pp
FTNT0.4%Flat / inactive path · path +0.07% · basket +0.01pp
Top six names by movement share are shown. Movement share measures absolute 5-minute path energy; signed basket contribution is equal-weight. Neither is a portfolio weight or causal attribution.

01 · WHAT IS HAPPENING

The move, the flow and who is driving it

Price breadth, unusual activity and signed capital flow are separate observations
HOW THE PRICE MOVE SPREAD

Observed session sequence

5-minute bars · inferred
  1. FROG moved lower firstFirst member to clear the material path threshold · path -2.35%
  2. PATH registered a material higher path0m after the first price move · path +1.10%
  3. OKTA registered a material lower path0m after the first price move · path -1.68%
  4. DT registered a material higher path0m after the first price move · path +0.99%
  5. ESTC registered a material lower path15m after the first price move · path -0.68%
  6. PANW registered a material lower path20m after the first price move · path -0.96%

Sequence inferred from aligned 5-minute price paths; it is not a causal ordering.

RELATIVE CO-MOVEMENT

How the members are behaving together

Session-normalized
Aug 25 · 09:30 ETMove visible 09:40 ETAug 25 · 15:55 ET
Group median -0.96%Strongest relative path PATHWeakest relative path NTSK

Observed member paths normalized to the session. The dashed marker shows when the median move first cleared a material threshold; shading marks the latest 20% of the observed window.

02 · WHY IT MATTERS

Why now and where the move could travel

Context and lead/lag links are evidence, not proof of causation or a forecast
WHY NOW

Verified recent context

0 items

No verified recent catalyst is attached to this move. The relationship may be market-led rather than news-led.

WHY THIS GROUP EXISTS

Shared filing context

20/21 members covered

Moderate filing support: the strongest shared 10-Q/K outlook is operating setup (near-term outlook) across DDOG, FROG, FTNT, NTSK, PATH, RBRK, SAIL, SNOW, TENB, TWLO, VRNS, ZM.

product pipeline / R&D affecting expense

Three Months Ended April 30, Nine Months Ended April 30, 2026 2025 Change 2026 2025 Change Amount Amount Amount % Amount Amount Amount % (dollars in millions) Research and development $ 734 $ 494 $ 240 49 % $ 1,773 $ 1,480 $ 293 20 % Research and development expense increased for the three and nine months ended April 30, 2026 compared to the same periods in 2025 primarily due to increased personnel costs, which grew $192 million and $233 million for the three and nine months ended April 30, 2026 compared to the same periods in 2025, largely due to headcount growth, including headcount from our recent acquisitions.

PANW 10-Q · 2026-06-03
credit / rates affecting interest expense

Three Months Ended April 30, Nine Months Ended April 30, 2026 2025 Change 2026 2025 Change Amount Amount Amount % Amount Amount Amount % (dollars in millions) Interest expense $ — $ 1 $ (1) (100) % $ — $ 3 $ (3) (100) % Interest expense decreased for the three and nine months ended April 30, 2026 compared to the same periods in 2025 due to the maturity of our 2025 Notes in June 2025.

PANW 10-Q · 2026-06-03
demand / volume

periods in 2025 due to increased demand for our subscription and support offerings from our end-customers.

PANW 10-Q · 2026-02-18
CONFIRMATION NETWORK

Outsiders and cross-asset links

4 outsiders confirming

No qualified cross-asset lead/lag link is available for this group.

Filing-linked outsiders test whether the move is spreading beyond the established cohort.

RPDMoving with group

TENB · text peer

AVPTMoving with group

VRNS · text peer

CRWDMoving with group

S · text peer

NETMoving with group

ZS · text peer

03 · WHO IS IN IT

Member participation

Unusual activity and daily price direction are shown separately
PANWTENBFROGZSOKTAZMSAILFTNTGTLBSRBRKVRNSESTCNTNXPATHSNOWCLBTDDOGNTSKTWLODT

8/21 active4 rising · 17 falling

MemberUnusual activityToday's moveRead now
PANWPalo Alto Networks, Inc.
Most unusual · 100/100
-3.1%
Aligned path contributorActive in 12% of observed group sessions
TENBTenable Holdings, Inc.
Elevated · 75/100
-3.4%
Active; unclassifiedActive in 24% of observed group sessions
FROGJFrog Ltd.
Elevated · 74/100
-0.7%
Aligned path contributorActive in 12% of observed group sessions
ZSZscaler, Inc.
Elevated · 70/100
-4.3%
Active; unclassifiedActive in 20% of observed group sessions
OKTAOkta, Inc.
Elevated · 70/100
-0.2%
Aligned path contributorActive in 16% of observed group sessions
ZMZoom Communications, Inc.
Elevated · 65/100
-3.7%
Active; unclassifiedActive in 8% of observed group sessions
SAILSailPoint, Inc.
Elevated · 64/100
-1.3%
Active; unclassifiedActive in 4% of observed group sessions
FTNTFortinet, Inc.
Elevated · 64/100
+1.1%
Flow divergenceActive in 32% of observed group sessions
GTLBGitLab Inc.
Elevated · 59/100
-0.9%
Active; unclassifiedActive in 12% of observed group sessions
SSentinelOne, Inc.
Quiet · 52/100
-2.5%
Watch / laggardActive in 24% of observed group sessions
RBRKRubrik, Inc.
Quiet · 51/100
-5.5%
Watch / laggardActive in 16% of observed group sessions
VRNSVaronis Systems, Inc.
Quiet · 50/100
-0.4%
Watch / laggardActive in 24% of observed group sessions
ESTCElastic N.V.
Quiet · 49/100
-3.3%
Watch / laggardActive in 12% of observed group sessions
NTNXNutanix, Inc.
Quiet · 48/100
-0.4%
Watch / laggardActive in 4% of observed group sessions
PATHUiPath, Inc.
Quiet · 45/100
+0.5%
Watch / laggardActive in 16% of observed group sessions
SNOWSnowflake Inc.
Quiet · 44/100
-1.8%
Watch / laggardActive in 16% of observed group sessions
CLBTCellebrite DI Ltd.
Quiet · 40/100
-1.8%
Watch / laggardActive in 12% of observed group sessions
DDOGDatadog, Inc.
Quiet · 40/100
-1.2%
Watch / laggardActive in 24% of observed group sessions
NTSKNetskope, Inc.
Quiet · 28/100
-3.9%
Watch / laggardActive in 0% of observed group sessions
TWLOTwilio Inc.
Quiet · 26/100
+0.7%
Watch / laggardActive in 24% of observed group sessions
DTDynatrace, Inc.
Quiet · 25/100
+2.1%
Watch / laggardActive in 24% of observed group sessions
View exact member values
TICKERCompanyRole nowTodayObserved historyTrader interpretation
PANWPalo Alto Networks, Inc.Most unusual-3.1%12% of 25 sessionsMost unusual activity in this snapshot; performance direction may differ.
TENBTenable Holdings, Inc.Participating-3.4%24% of 25 sessionsPrice participation is not yet confirmed by per-name flow.
FROGJFrog Ltd.Participating-0.7%12% of 25 sessionsPrice participation is not yet confirmed by per-name flow.
ZSZscaler, Inc.Participating-4.3%20% of 25 sessionsPrice participation is not yet confirmed by per-name flow.
OKTAOkta, Inc.Participating-0.2%16% of 25 sessionsPrice participation is not yet confirmed by per-name flow.
ZMZoom Communications, Inc.Participating-3.7%8% of 25 sessionsPrice participation is not yet confirmed by per-name flow.
SAILSailPoint, Inc.Participating-1.3%4% of 25 sessionsPrice participation is not yet confirmed by per-name flow.
FTNTFortinet, Inc.Participating+1.1%32% of 25 sessionsPrice participation with distributing signed flow.
GTLBGitLab Inc.Participating-0.9%12% of 25 sessionsPrice participation is not yet confirmed by per-name flow.
SSentinelOne, Inc.Quiet / lagging-2.5%24% of 25 sessionsNot participating yet; a breadth test or a genuine divergence.
RBRKRubrik, Inc.Quiet / lagging-5.5%16% of 25 sessionsNot participating yet; a breadth test or a genuine divergence.
VRNSVaronis Systems, Inc.Quiet / lagging-0.4%24% of 25 sessionsNot participating yet; a breadth test or a genuine divergence.
ESTCElastic N.V.Quiet / lagging-3.3%12% of 25 sessionsNot participating yet; a breadth test or a genuine divergence.
NTNXNutanix, Inc.Quiet / lagging-0.4%4% of 25 sessionsNot participating yet; a breadth test or a genuine divergence.
PATHUiPath, Inc.Quiet / lagging+0.5%16% of 25 sessionsNot participating yet; a breadth test or a genuine divergence.
SNOWSnowflake Inc.Quiet / lagging-1.8%16% of 25 sessionsNot participating yet; a breadth test or a genuine divergence.
CLBTCellebrite DI Ltd.Quiet / lagging-1.8%12% of 25 sessionsNot participating yet; a breadth test or a genuine divergence.
DDOGDatadog, Inc.Quiet / lagging-1.2%24% of 25 sessionsNot participating yet; a breadth test or a genuine divergence.
NTSKNetskope, Inc.Quiet / lagging-3.9%0% of 25 sessionsNot participating yet; a breadth test or a genuine divergence.
TWLOTwilio Inc.Quiet / lagging+0.7%24% of 25 sessionsNot participating yet; a breadth test or a genuine divergence.
DTDynatrace, Inc.Quiet / lagging+2.1%24% of 25 sessionsNot participating yet; a breadth test or a genuine divergence.

04 · HAS THIS HAPPENED BEFORE

Identity history versus measured outcomes

Structural recurrence is not the same as a validated trading outcome
POINT-IN-TIME LIVE OUTCOMES

Early observed follow-through

4/4 events completed
30 minutes-0.12%33% continuation · n=3Median MFE +0.67% · MAE -0.94%
60 minutes-0.79%0% continuation · n=3Median MFE +0.67% · MAE -0.94%
Session close+0.10%67% continuation · n=3Median MFE +0.67% · MAE -0.94%
Next-session close-0.61%33% continuation · n=3Median MFE +0.67% · MAE -0.94%
Only point-in-time live watcher observations and conservative same-day EOD observations are included. Later backfills and replay runs are excluded.
Low structural sample

Only 3 completed episodes across 25 active sessions; treat history as context, not a validated playbook. These episode counts describe recurrence; the outcome ledger above is the only forward-performance evidence.

Structural support63 daysHow often the cohort identity was observed
Completed episodes3Separate periods of broad group activity
Active sessions25Completed session observations, not trades
2026-07-28 → 2026-08-1711 active sessionsNo name was active through every recorded session
2026-07-09 → 2026-07-2310 active sessionsNo name was active through every recorded session
2026-06-24 → 2026-06-294 active sessionsNo name was active through every recorded session
MEMBER CONSISTENCY IN OBSERVED ACTIVE SESSIONS
FTNT32% · 2 episodes
DDOG24% · 3 episodes
DT24% · 2 episodes
S24% · 3 episodes
TENB24% · 2 episodes
TWLO24% · 2 episodes
VRNS24% · 2 episodes
ZS20% · 2 episodes
OKTA16% · 2 episodes
PATH16% · 2 episodes
RBRK16% · 2 episodes
SNOW16% · 2 episodes
CLBT12% · 2 episodes
ESTC12% · 2 episodes
FROG12% · 2 episodes
GTLB12% · 1 episode
PANW12% · 1 episode
ZM8% · 1 episode
NTNX4% · 1 episode
SAIL4% · 1 episode
NTSK0% · 0 episodes