Themes / Group
Inactive · established relationshipLatest completed snapshot · Aug 20 · 16:27 ET

MARKET-DISCOVERED GROUP

Payment Software

THE TRADER READBroad relative move, confirmed beyond the cohort—but not by flow

11 of 12 measured session-normalized paths align to the downside across 9.0 effective names. Common-bar coverage spans 12 of 21 cohort members. CRWD is also moving with filing-linked members. Capital-flow agreement is 7%, so the basket is not yet clean. No verified headline preceded the measured move.

Price breadth3 up · 18 down-1.7% session-normalized median path
Capital-flow alignment7%Price breadth is not yet confirmed by flow
Activity nowCalmActivity score 13/100 · lift 0.8×
Evidence depth3 episodesLow sample—context, not a validated playbook
EVIDENCE CLOCK

What happened, in timestamp order

4 timed events · 09:30–15:55 ET
TIMING READNo verified timestamped headline was found within 24 hours of the first measured price move in the available common-bar window. The move currently reads as market-led or unexplained.
  1. 5-minute inferencePATH registered the first material downside path

    -1.71% session path at the threshold · PATH

  2. 5-minute inferenceOKTA registered a material downside path

    -1.65% session path at the threshold · OKTA

  3. 5-minute inferenceGTLB registered a material downside path

    -1.98% session path at the threshold · GTLB

  4. 5-minute inferenceFROG registered a material downside path

    -1.57% session path at the threshold · FROG

2 earlier filing context receipts

TUE, NOV 4DT filing documented shared operating contextproduct pipeline / R&D affecting expense · date precision only

WED, SEP 9PANW filing documented shared operating contextproduct pipeline / R&D affecting expense · date precision only

Headline times and retained activity confirmations are point-in-time evidence. Price order is inferred from aligned 5-minute bars. Filing evidence has date precision only and is context, not an intraday catalyst claim.
THEME CONSTRUCTION

Broad move or one-stock disguise?

Session-normalized 5m paths

Observed movement is broad across 9.0 effective names. PATH represents 19.0% of absolute path energy; 11 of 12 members align with the down relative path.

ConstructionBroad19.0% from the largest path
Effective names9.0 / 1212 of 21 cohort members had common bars
Direction breadth11/12 aligneddownside relative path · 1 counter-moving
Largest moverPATH 19.0%33.0% from the top two paths
PATH19.0%Aligned contributor · path -4.28% · basket -0.36pp
OKTA14.0%Aligned contributor · path -3.15% · basket -0.26pp
GTLB10.9%Aligned contributor · path -2.45% · basket -0.20pp
FROG10.6%Aligned contributor · path -2.38% · basket -0.20pp
PANW10.2%Aligned contributor · path -2.30% · basket -0.19pp
NTSK8.9%Aligned contributor · path -2.00% · basket -0.17pp
ESTC6.5%Aligned contributor · path -1.45% · basket -0.12pp
FTNT6.4%Aligned contributor · path -1.45% · basket -0.12pp
CLBT4.9%Aligned contributor · path -1.10% · basket -0.09pp
DT4.0%Aligned contributor · path -0.89% · basket -0.07pp
DDOG3.1%Aligned contributor · path -0.71% · basket -0.06pp
NTNX1.5%Counter-move · path +0.33% · basket +0.03pp
Top six names by movement share are shown. Movement share measures absolute 5-minute path energy; signed basket contribution is equal-weight. Neither is a portfolio weight or causal attribution.

01 · WHAT IS HAPPENING

The move, the flow and who is driving it

Price breadth, unusual activity and signed capital flow are separate observations
HOW THE PRICE MOVE SPREAD

Observed session sequence

5-minute bars · inferred
  1. PATH moved lower firstFirst member to clear the material path threshold · path -1.71%
  2. OKTA registered a material lower path0m after the first price move · path -1.65%
  3. GTLB registered a material lower path0m after the first price move · path -1.98%
  4. FROG registered a material lower path0m after the first price move · path -1.57%
  5. PANW registered a material lower path0m after the first price move · path -1.50%
  6. NTSK registered a material lower path0m after the first price move · path -1.30%

Sequence inferred from aligned 5-minute price paths; it is not a causal ordering.

RELATIVE CO-MOVEMENT

How the members are behaving together

Session-normalized
Sep 11 · 09:30 ETMove visible 09:40 ETSep 11 · 15:55 ET
Group median -1.73%Strongest relative path NTNXWeakest relative path PATH

Observed member paths normalized to the session. The dashed marker shows when the median move first cleared a material threshold; shading marks the latest 20% of the observed window.

02 · WHY IT MATTERS

Why now and where the move could travel

Context and lead/lag links are evidence, not proof of causation or a forecast
WHY NOW

Verified recent context

0 items

No verified recent catalyst is attached to this move. The relationship may be market-led rather than news-led.

WHY THIS GROUP EXISTS

Shared filing context

20/21 members covered

Moderate filing support: the strongest shared 10-Q/K outlook is operating setup (near-term outlook) across DDOG, FROG, FTNT, NTSK, PATH, RBRK, SAIL, SNOW, TENB, TWLO, VRNS, ZM.

product pipeline / R&D affecting expense

“Year Ended July 31, Year Ended July 31, 2026 2025 Change 2025 2024 Change Amount Amount Amount % Amount Amount Amount % (dollars in millions) Research and development $ 2,552 $ 1,984 $ 568 29 % $ 1,984 $ 1,810 $ 174 10 % Research and development expense increased for fiscal 2026 compared to fiscal 2025 primarily due to increased personnel costs, which increased by $429 million for fiscal 2026 compared to fiscal 2025, largely due to headcount growth, including from our acquisitions.”

PANW 10-K · 2026-09-10
credit / rates affecting interest expense

“Three Months Ended April 30, Nine Months Ended April 30, 2026 2025 Change 2026 2025 Change Amount Amount Amount % Amount Amount Amount % (dollars in millions) Interest expense $ — $ 1 $ (1) (100) % $ — $ 3 $ (3) (100) % Interest expense decreased for the three and nine months ended April 30, 2026 compared to the same periods in 2025 due to the maturity of our 2025 Notes in June 2025.”

PANW 10-Q · 2026-06-03
restructuring affecting expense

“Year Ended July 31, Year Ended July 31, 2026 2025 Change 2025 2024 Change Amount Amount Amount % Amount Amount Amount % (dollars in millions) General and administrative $ 899 $ 443 $ 456 103 % $ 443 $ 680 $ (237) (35) % General and administrative expense increased for fiscal 2026 compared to fiscal 2025 primarily due to increased personnel costs, which grew $253 million for fiscal 2026 compared to fiscal 2025, primarily due to accelerated vesting of certain equity awards in connection with our acquisitions in fiscal year 2026, employee severance charges in connection with our CyberArk acquisition, and headcount growth, including from our acquisitions.”

PANW 10-K · 2026-09-10
CONFIRMATION NETWORK

Outsiders and cross-asset links

1 outsiders confirming

No qualified cross-asset lead/lag link is available for this group.

Filing-linked outsiders test whether the move is spreading beyond the established cohort.

CRWDMoving with group

S · text peer

RPDNot confirming

TENB · text peer

AVPTNot confirming

VRNS · text peer

NABLNot confirming

VRNS · text peer

03 · WHO IS IN IT

Member participation

Unusual activity and daily price direction are shown separately
PANWTENBFROGZSOKTAZMSAILFTNTGTLBSRBRKVRNSESTCNTNXPATHSNOWCLBTDDOGNTSKTWLODT

8/21 active3 rising · 18 falling

MemberUnusual activityToday's moveRead now
PANWPalo Alto Networks, Inc.
Most unusual · 100/100
-2.3%
Aligned path contributorActive in 12% of observed group sessions
TENBTenable Holdings, Inc.
Elevated · 75/100
-5.9%
Active; unclassifiedActive in 24% of observed group sessions
FROGJFrog Ltd.
Elevated · 74/100
-1.5%
Aligned path contributorActive in 12% of observed group sessions
ZSZscaler, Inc.
Elevated · 70/100
+0.7%
Active; unclassifiedActive in 20% of observed group sessions
OKTAOkta, Inc.
Elevated · 70/100
-2.6%
Aligned path contributorActive in 16% of observed group sessions
ZMZoom Communications, Inc.
Elevated · 65/100
+0.1%
Active; unclassifiedActive in 8% of observed group sessions
SAILSailPoint, Inc.
Elevated · 64/100
-2.1%
Active; unclassifiedActive in 4% of observed group sessions
FTNTFortinet, Inc.
Elevated · 64/100
-1.7%
Aligned price + flowActive in 32% of observed group sessions
GTLBGitLab Inc.
Elevated · 59/100
-0.6%
Aligned path contributorActive in 12% of observed group sessions
SSentinelOne, Inc.
Quiet · 52/100
-0.4%
Watch / laggardActive in 24% of observed group sessions
RBRKRubrik, Inc.
Quiet · 51/100
-2.6%
Watch / laggardActive in 16% of observed group sessions
VRNSVaronis Systems, Inc.
Quiet · 50/100
-0.7%
Watch / laggardActive in 24% of observed group sessions
ESTCElastic N.V.
Quiet · 49/100
-0.1%
Watch / laggardActive in 12% of observed group sessions
NTNXNutanix, Inc.
Quiet · 48/100
+0.8%
Watch / laggardActive in 4% of observed group sessions
PATHUiPath, Inc.
Quiet · 45/100
-0.9%
Watch / laggardActive in 16% of observed group sessions
SNOWSnowflake Inc.
Quiet · 44/100
-0.2%
Watch / laggardActive in 16% of observed group sessions
CLBTCellebrite DI Ltd.
Quiet · 40/100
-1.0%
Watch / laggardActive in 12% of observed group sessions
DDOGDatadog, Inc.
Quiet · 40/100
-0.3%
Watch / laggardActive in 24% of observed group sessions
NTSKNetskope, Inc.
Quiet · 28/100
-2.5%
Watch / laggardActive in 0% of observed group sessions
TWLOTwilio Inc.
Quiet · 26/100
-1.8%
Watch / laggardActive in 24% of observed group sessions
DTDynatrace, Inc.
Quiet · 25/100
-0.7%
Watch / laggardActive in 24% of observed group sessions
View exact member values
TICKERCompanyRole nowTodayObserved historyTrader interpretation
PANWPalo Alto Networks, Inc.Most unusual-2.3%12% of 25 sessionsMost unusual activity in this snapshot; performance direction may differ.
TENBTenable Holdings, Inc.Participating-5.9%24% of 25 sessionsPrice participation is not yet confirmed by per-name flow.
FROGJFrog Ltd.Participating-1.5%12% of 25 sessionsPrice participation is not yet confirmed by per-name flow.
ZSZscaler, Inc.Participating+0.7%20% of 25 sessionsPrice participation is not yet confirmed by per-name flow.
OKTAOkta, Inc.Participating-2.6%16% of 25 sessionsPrice participation is not yet confirmed by per-name flow.
ZMZoom Communications, Inc.Participating+0.1%8% of 25 sessionsPrice participation is not yet confirmed by per-name flow.
SAILSailPoint, Inc.Participating-2.1%4% of 25 sessionsPrice participation is not yet confirmed by per-name flow.
FTNTFortinet, Inc.Participating-1.7%32% of 25 sessionsPrice participation with distributing signed flow.
GTLBGitLab Inc.Participating-0.6%12% of 25 sessionsPrice participation is not yet confirmed by per-name flow.
SSentinelOne, Inc.Quiet / lagging-0.4%24% of 25 sessionsNot participating yet; a breadth test or a genuine divergence.
RBRKRubrik, Inc.Quiet / lagging-2.6%16% of 25 sessionsNot participating yet; a breadth test or a genuine divergence.
VRNSVaronis Systems, Inc.Quiet / lagging-0.7%24% of 25 sessionsNot participating yet; a breadth test or a genuine divergence.
ESTCElastic N.V.Quiet / lagging-0.1%12% of 25 sessionsNot participating yet; a breadth test or a genuine divergence.
NTNXNutanix, Inc.Quiet / lagging+0.8%4% of 25 sessionsNot participating yet; a breadth test or a genuine divergence.
PATHUiPath, Inc.Quiet / lagging-0.9%16% of 25 sessionsNot participating yet; a breadth test or a genuine divergence.
SNOWSnowflake Inc.Quiet / lagging-0.2%16% of 25 sessionsNot participating yet; a breadth test or a genuine divergence.
CLBTCellebrite DI Ltd.Quiet / lagging-1.0%12% of 25 sessionsNot participating yet; a breadth test or a genuine divergence.
DDOGDatadog, Inc.Quiet / lagging-0.3%24% of 25 sessionsNot participating yet; a breadth test or a genuine divergence.
NTSKNetskope, Inc.Quiet / lagging-2.5%0% of 25 sessionsNot participating yet; a breadth test or a genuine divergence.
TWLOTwilio Inc.Quiet / lagging-1.8%24% of 25 sessionsNot participating yet; a breadth test or a genuine divergence.
DTDynatrace, Inc.Quiet / lagging-0.7%24% of 25 sessionsNot participating yet; a breadth test or a genuine divergence.

04 · HAS THIS HAPPENED BEFORE

Identity history versus measured outcomes

Structural recurrence is not the same as a validated trading outcome
POINT-IN-TIME LIVE OUTCOMES

Early observed follow-through

4/4 events completed
30 minutes-0.12%33% continuation · n=3Median MFE +0.67% · MAE -0.94%
60 minutes-0.79%0% continuation · n=3Median MFE +0.67% · MAE -0.94%
Session close+0.10%67% continuation · n=3Median MFE +0.67% · MAE -0.94%
Next-session close-0.61%33% continuation · n=3Median MFE +0.67% · MAE -0.94%
Only point-in-time live watcher observations and conservative same-day EOD observations are included. Later backfills and replay runs are excluded.
Low structural sample

Only 3 completed episodes across 25 active sessions; treat history as context, not a validated playbook. These episode counts describe recurrence; the outcome ledger above is the only forward-performance evidence.

Structural support63 daysHow often the cohort identity was observed
Completed episodes3Separate periods of broad group activity
Active sessions25Completed session observations, not trades
2026-07-28 → 2026-08-1711 active sessionsNo name was active through every recorded session
2026-07-09 → 2026-07-2310 active sessionsNo name was active through every recorded session
2026-06-24 → 2026-06-294 active sessionsNo name was active through every recorded session
MEMBER CONSISTENCY IN OBSERVED ACTIVE SESSIONS
FTNT32% · 2 episodes
DDOG24% · 3 episodes
DT24% · 2 episodes
S24% · 3 episodes
TENB24% · 2 episodes
TWLO24% · 2 episodes
VRNS24% · 2 episodes
ZS20% · 2 episodes
OKTA16% · 2 episodes
PATH16% · 2 episodes
RBRK16% · 2 episodes
SNOW16% · 2 episodes
CLBT12% · 2 episodes
ESTC12% · 2 episodes
FROG12% · 2 episodes
GTLB12% · 1 episode
PANW12% · 1 episode
ZM8% · 1 episode
NTNX4% · 1 episode
SAIL4% · 1 episode
NTSK0% · 0 episodes