The cybersecurity complex ripped on August 28, 2026, in one of the largest single-day sector rallies of the year. CrowdStrike closed +20.5% to $227.96 the day after posting Q2 FY27 results, and the move dragged the rest of the group with it: Palo Alto Networks +12.8%, Zscaler +10.0%, SentinelOne +10.7%, and Fortinet +9.7%.
Put together, roughly $60 billion of market cap was added across the five names in a single session. The move is a textbook sector rerate: one bellwether prints strong numbers, the read-through lifts the entire complex — including names that haven’t reported yet.
The catalyst: CrowdStrike’s Q2 FY27
CrowdStrike reported after the close on August 26, and the two-day move added roughly $40 billion to its market cap, which now sits at $233.4 billion per Yahoo Finance. Trailing-twelve-month revenue is $5.4 billion, up 25.8% year over year. The stock is now trading at the high end of its 52-week range ($85.68 – $229.08), and the forward P/E screens at 153.9 — a rich multiple that only clears if the growth-and-margin story keeps compounding.
The rerate isn’t just about the print. It’s about narrative. A little over a year removed from the July 2024 Falcon content update incident, the market has been asking whether CrowdStrike could recover customer trust without permanent damage to gross retention. The answer this quarter — and in the sell-side reaction — is that the recovery is real, and that AI-native threat surfaces are creating new demand faster than remediation drag can fade.
The one-day scoreboard
| Ticker | Company | Aug 28 % move | Close | Market cap |
|---|---|---|---|---|
| CRWD | CrowdStrike | +20.5% | $227.96 | $233.4B |
| PANW | Palo Alto Networks | +12.8% | $382.85 | $312.0B |
| S | SentinelOne | +10.7% | $22.71 | $7.8B |
| ZS | Zscaler | +10.0% | $187.30 | $30.3B |
| FTNT | Fortinet | +9.7% | $172.78 | $126.8B |
Why the whole group rerated, not just CRWD
Three things happened at once.
1. AI-capex read-through. Nvidia’s Q2 FY27 print earlier in the week — $46.7B in reported revenue with a $54B Q3 guide — reinforced the narrative that hyperscaler AI spend is durable. That directly maps to more workloads, more identities, more east-west traffic, and more attack surface for cyber vendors to protect. Every incremental dollar of GenAI infrastructure implies incremental cyber budget.
2. CrowdStrike as a proxy read. When the market-cap leader in modern endpoint and identity security beats and raises after a hard year, the sell side revises up the demand curve for the whole category. Consensus revenue-growth estimates for peers get nudged higher; multiple assumptions get expanded. That is how you get a coordinated 10%+ rally in names that didn’t even report.
3. Positioning was light. Cyber names had been range-bound through the summer. SentinelOne, for instance, spent most of the last three months well below $22 before yesterday’s move to $22.71 — near the top of its 52-week range of $11.81 to $23.95. When a crowded short/underweight positioning meets a positive catalyst, moves are exaggerated. That is what “re-rating reaches the laggards” looks like on the tape.
A picture of the one-day move
Palo Alto Networks: the earnings still ahead
PANW is arguably the more interesting setup from here. The stock is up 107.8% year to date and trades within striking distance of its 52-week high of $398.88. Market cap is now $312 billion. On August 25 — three days before this rally — JPMorgan lifted its price target from $326 to $384 while keeping an Overweight rating, per Yahoo Finance’s news feed on the ticker.
The AI-security partnership Palo Alto disclosed this week — a multi-year deal tied to platformization — was already priced into some of the run. CEO Nikesh Arora also warned during industry commentary that the memory “supercycle” will eventually turn cyclical, an interesting hedge from a leader who otherwise benefits from an AI-durability narrative. Whether PANW’s fiscal Q4 print, due later this reporting cycle, can validate a target closer to $400 is the question that matters for the group.
The laggards catching up
Two names in this rally deserve their own paragraph.
Zscaler hasn’t even reported yet. Its fiscal Q4 print is scheduled for September 3, 2026, per Yahoo Finance’s earnings calendar. Consensus is calling for roughly 24.6% year-over-year revenue growth. Barclays raised its price target from $170 to $192 on August 25, and the stock closed at $187.30 — trading nearly to that new target. If ZS’s print delivers on the setup, the multiple can rerate again; if it misses, this pre-earnings gap is a classic squeeze that unwinds.
SentinelOne printed Q2 FY27 revenue of about $292 million, up 21% year over year, with roughly $56 million in net new ARR. AI-security ARR reportedly tripled year over year off a small base, and operating margin crossed 10% for the first time. The 10.7% move today reflects the market accepting that S is finally scaling into positive operating leverage — a story it has been trying to tell for two years. The stock is now near 52-week highs.
Fortinet: the firewall vendor that quietly reaccelerated
Fortinet is a different animal from the pure-play SaaS-security names. Its Q2 saw product revenue up 52% year over year and a raised full-year guide — a genuinely strong reacceleration for a firewall business that had been decelerating on refresh-cycle timing. Fortinet Federal also secured CMMC Level 2 certification this month, which opens more federal contract eligibility and reads-through as an incremental TAM unlock. FTNT closed at $172.78, market cap $126.8 billion, just under its 52-week high of $173.89.
What to watch from here
- Zscaler Q4 print (Sept 3). First test of whether the pre-earnings rally survives contact with actual numbers. Look at net new ARR, US federal deal count, and full-year FY27 guide.
- PANW fiscal Q4. Platformization deal counts and the FY27 billings guide are the two lines the sell side will grill on. A guide-down here would drag the whole group.
- Multiple compression risk. CRWD at 154x forward earnings and PANW near its 52-week high leave very little room for guidance disappointment.
- Read-through to identity peers. Okta ($OKTA), which reported earlier this week and rallied on strong cRPO, sits in the same demand pool. Watch whether OKTA’s own move consolidates or gives back — that will tell you whether the sector rerate has legs or is a short-covering pop.
Two questions matter for whether this is the start of a fresh cybersecurity leg-up or the top of a squeeze. First, does hyperscaler AI capex actually pull cyber budgets with it dollar-for-dollar, or is the read-through weaker than the sell side is modeling? Second, does the identity and endpoint category (CRWD, S, OKTA) hold pricing power as agentic AI reshapes the buying center from CISO-led to hybrid CISO/CIO decisions? Both are testable in the next two earnings cycles.
Sources
- Yahoo Finance — CRWD quote page
- Yahoo Finance — CRWD key statistics
- Yahoo Finance — PANW quote page
- Yahoo Finance — ZS quote page
- Yahoo Finance — SentinelOne quote page
- Yahoo Finance — Fortinet quote page
- Nvidia — Q2 FY26 earnings release (context on AI capex)
- CrowdStrike — July 2024 Falcon incident hub (context)
Disclosure: This article is for informational purposes only and is not investment advice.