Zscaler and SentinelOne Jump 10% as Cyber Laggards Catch a Bid

Zscaler (ZS) rose 10.19% to $187.66 and SentinelOne (S) rose 10.53% to $22.67 on Thursday as the First Trust NASDAQ Cybersecurity ETF (NASDAQ: CIBR) gained 7.23% to $100.43, far outpacing the Invesco QQQ Trust's (NASDAQ: QQQ) 1.30% rise, according to market data as of 17:24 GMT on 27 August 2026.

Cybersecurity stocks did something on Thursday that they had not done for much of this cycle: the weakest names led. Zscaler Inc. (ZS) traded at $187.66, up 10.19% on the day from a prior close of $170.31, and SentinelOne Inc. (S) traded at $22.67, up 10.53% from $20.51, according to market data as of 17:24 GMT. Both moves came inside a sector-wide bid, not a single-company event.

The clearest evidence that this was a sector day rather than a market day sits in the exchange-traded funds. The First Trust NASDAQ Cybersecurity ETF (NASDAQ: CIBR) rose 7.23% to $100.43, after touching an intraday high of $100.59. The Invesco QQQ Trust (NASDAQ: QQQ), which tracks the Nasdaq 100 and is the broad benchmark for large-cap technology, rose 1.30% to $720.59. That leaves roughly 5.9 percentage points of outperformance for the cyber basket over the wider tech tape in a single session — an unusually wide spread for a group whose largest holdings are themselves Nasdaq constituents.

The spread, not the level, is the story

A 7% day in a diversified sector ETF is rare. CIBR holds dozens of names, so a move of that size requires the fund's constituents to rise together rather than one holding carrying the whole basket. When a broad sector fund gains several times what the index gains, the money is being allocated by theme, not by ticker.

Thursday's broader market was constructive but unremarkable by comparison. The S&P 500, via the SPDR S&P 500 ETF Trust (SPY), was up 0.80% at $772.24. The Dow 30 proxy (DIA) rose 0.37% to $536.19. The Nasdaq 100's 1.30% gain was the strongest of the three, consistent with a growth-led session — but cyber ran several lengths ahead of even that.

The pattern flagged by 24/7 Wall St is that the flows went hardest into the names the market had already discounted. That is a specific kind of rally. In a fundamentals-driven advance, the leaders extend. In a re-rating, the discount closes on the names carrying the widest one.

Why laggards move faster than leaders

Zscaler and SentinelOne sit at very different points on the size curve — Zscaler in the high-$180s per share, SentinelOne in the low $20s — yet they gained almost exactly the same percentage on the day, 10.19% and 10.53% respectively. That symmetry is characteristic of a basket trade. When investors decide a whole software category has been marked too cheap, the buying is spread by weight and exposure rather than by company-specific analysis, and the stocks with the most compressed multiples get the biggest percentage kick because there is more discount to unwind.

In dollar terms the day added roughly $17.35 per share to Zscaler and about $2.16 to SentinelOne. For a shareholder, the arithmetic is the same; for the market, the second is the more informative number, because a low-priced growth name is the kind of position that gets cut first in a de-rating and bought back last. Seeing it move with the group is what makes the session look like a genuine change in how the category is priced rather than a bounce in one crowded stock.

Worth noting the intraday behaviour, too. Zscaler traded as high as $190.00 and as low as $177.04 during the session, meaning the stock spent the day well above its prior close throughout — it opened into strength and stayed there. SentinelOne's range of $21.42 to $22.75 tells the same story, with the last print sitting near the top of the band. CIBR's range, $96.66 to $100.59, closed out at the high end as well. Rallies that hold their gains into the late tape are read differently from rallies that fade; this one held.

What the re-rating has to prove next

The bull case for buying the laggards in a security software group rests on a straightforward argument: enterprise security budgets are among the least discretionary lines in corporate IT spending, and the fastest-growing threat surface — identity, cloud workloads, endpoint agents, AI-driven attacks — maps onto exactly the products these companies sell. If that spending is durable, then a compressed multiple on a company still growing is a mispricing waiting to be corrected.

The bear case is that laggards are usually laggards for reasons that a one-day flow event does not fix: slowing net new revenue, longer sales cycles, pricing pressure from platform vendors that bundle security into a broader stack, or competitive share loss inside the very categories the theme is supposed to reward. A 10% day corrects sentiment. It does not correct a growth rate.

Three things will tell investors which version of Thursday they saw:

• Persistence. Whether CIBR holds a premium to QQQ over subsequent sessions, or gives the spread back. Single-day sector spreads this wide often mean-revert.
• Breadth inside the group. A durable re-rating shows up in the mid-cap and small-cap names as well as the mega-caps, and stays there.
• Company disclosure. Guidance, billings and net revenue retention are what convert a flow move into a valuation move. Until those land, Thursday is a repricing of expectations, not of results.

How to read a day like this without over-reading it

Sector rotations of this size are visible, tradable and frequently temporary. What separates a rotation from a re-rating is whether the buying is funded by money leaving another part of the market for a session, or by investors permanently raising the multiple they will pay for security software earnings. The distinction is invisible on the day and obvious a month later.

For long-term holders of CIBR or of individual names, the practical takeaway is narrower: the group's dispersion has widened, and the beta of the laggards to sector sentiment is very high. A 10% up day in a stock like SentinelOne implies the symmetrical down day is available too. Position size, not conviction about the theme, is what determines whether that volatility is survivable.

The theme itself is not in dispute. Security spending has been one of the more resilient lines in enterprise technology, and the market has repeatedly rewarded it. What Thursday tested is whether that resilience extends to the companies that had not been participating — and on the day's tape, at least, the answer was yes.

Key facts

• Zscaler (ZS): $187.66, +10.19% (as of 17:24 GMT, 27 Aug 2026)
• SentinelOne (S): $22.67, +10.53% (as of 17:24 GMT, 27 Aug 2026)
• First Trust NASDAQ Cybersecurity ETF (CIBR): $100.43, +7.23%, day high $100.59
• Nasdaq 100 proxy (QQQ): $720.59, +1.30% — sector ETF outperformed by ~5.9 points

Frequently asked questions

How much did Zscaler and SentinelOne rise on 27 August 2026?

As of 17:24 GMT on 27 August 2026, Zscaler (ZS) traded at $187.66, a gain of 10.19% from its prior close of $170.31, with an intraday range of $177.04 to $190.00. SentinelOne (S) traded at $22.67, up 10.53% from a prior close of $20.51, having ranged between $21.42 and $22.75 during the session.

Why does the CIBR versus QQQ gap matter?

CIBR is a diversified cybersecurity ETF; QQQ tracks the Nasdaq 100. CIBR rose 7.23% while QQQ rose 1.30%, roughly 5.9 percentage points of outperformance. Because CIBR holds many names, a move that size means the group rose together, which identifies the session as a sector-specific reallocation rather than a broad market rally.

What is a re-rating in stock market terms?

A re-rating is when investors change the valuation multiple they are willing to pay for a company's earnings or revenue, rather than reacting to new earnings themselves. In a re-rating, the stocks trading at the widest discount typically rise the most, because there is more compressed valuation to unwind than in the sector's leaders.

How did the wider market perform that day?

The advance was broad but modest outside cyber. The SPDR S&P 500 ETF (SPY) was up 0.80% at $772.24, the Dow 30 proxy (DIA) rose 0.37% to $536.19, and the Nasdaq 100 proxy (QQQ) gained 1.30% to $720.59. Growth led, but cybersecurity ran well ahead of even the strongest index.

Does a 10% one-day move mean these stocks are undervalued?

Not by itself. A single session of buying reprices sentiment, not fundamentals. Laggard valuations often reflect slowing growth, longer sales cycles or competitive pressure from vendors bundling security into broader platforms. Whether the move persists depends on subsequent company disclosure on growth, billings and retention, none of which changed on the day.

What should investors watch after a sector day like this?

Three things: whether CIBR sustains its premium over QQQ across following sessions rather than giving the spread back; whether the strength extends across mid- and small-cap security names and stays there; and whether upcoming company results support the higher multiple. Wide one-day sector spreads frequently mean-revert.

Sources

• Zscaler and SentinelOne Spike 10% as Cybersecurity Re-Rating Reaches the Laggards — 24/7 Wall St

Photo: Globetrotter19 · BY-SA 3.0 — source