I found this one backwards. I wasn’t screening for a sector story, I was pulling research on TENB for a piece, and when I went to check its technical setup I noticed it wasn’t alone. Six names show up top decile relative strength, trend confirmed, all within about 2 to 7% of their own 52 week highs, at the same time: TENB, CRWD, PANW, FTNT, OKTA, DDOG.
What the screen actually shows
| Ticker | RS | trend_ok | Dist 52W | RelVol | Mom | 1M% |
|---|---|---|---|---|---|---|
| DDOG | 93 | PASS | -6.6% | 0.59 | 5 | +4.0% |
| PANW | 92 | PASS | -2.8% | 0.96 | 5 | +24.1% |
| TENB | 90 | PASS | -2.1% | 0.94 | 6 | +30.0% |
| CRWD | 90 | PASS | -2.8% | 2.70 | 7 | +3.8% |
| FTNT | 91 | PASS | -2.2% | 0.66 | 5 | +6.7% |
| OKTA | 88 | PASS | -3.1% | 0.83 | 6 | +13.5% |
That’s a coherent basket, not one ticker running hot on its own story. And it’s worth naming who didn’t make the cut, since they’re nominally the same peer group. QLYS is a near miss (strong, but not flagged PASS on my screen). RPD and ZS are both still 56 to 64% below their own 52 week highs, they’re bouncing off depressed lows, not breaking out, a real distinction the ticker list alone won’t show you.
Why now, and the part that ties it together
Every individual name has its own story. TENB just landed FedRAMP High and Impact Level 5 authorization and got named Gartner’s company to beat for AI powered exposure assessment. But the reason six names move at once instead of one is usually structural, and here I think it’s genuine: more code is shipping, more of it is AI generated, more of it ends up in production with vulnerabilities nobody audited by hand. Tenable’s own management put a number on it on their last call, CVE counts potentially going from around 300,000 to 3 to 6 million. Whether or not that exact figure holds up, the direction of the argument is hard to argue with. Exposure management, endpoint security, identity, observability, they’re all downstream of the same growing surface area. That’s the case for the basket, not just the ticker.
The valuation ladder, group-wide
Same peer ladder from the TENB piece, laid out for the whole group:
| Ticker | TTM growth | Fwd P/E | Note |
|---|---|---|---|
| RPD | +1.2% | 6.7x | Growth stalled, off the leadership list entirely right now |
| QLYS | +10.2% | 21.2x | Near miss on the breakout, prices like TENB |
| TENB | +7-10% | 21.6x | In the basket, priced like QLYS today |
| OKTA, FTNT | mid teens | not pulled individually yet | In the basket, need the same depth of work TENB got before I’d size either one |
| ZS | +24.6% | 33.9x | Off the breakout list, real multiple though |
| PANW | +19.5% | 91.2x | In the basket, already at category-leader multiple |
| CRWD | +23.2% | 152.6x | In the basket, already at category-leader multiple, and the one running hot on volume |
The honest read: PANW and CRWD are already priced like category leaders, growth to match. TENB is priced like a mid-tier grower and is the one with real re-rating room if its growth actually moves up a tier, which is exactly the case I built for it separately. FTNT, OKTA, DDOG sit somewhere in between and I don’t have a confident individual read on any of them yet.
Where this leaves me
The basket-level signal is real: six names, same direction, mostly on clean volume, backed by a structural argument (more attack surface, not just a rally in risk appetite) rather than pure multiple expansion. TENB is the one I’ve actually underwritten, on the specific case that its growth has room to move from the QLYS tier toward the ZS tier and its optionality toward a PANW or CRWD multiple is backed by things already happening (the Tenable One mix shift, the FedRAMP unlock), not just hoped for. The other five are on my list to do the same work on before I’d put a number on any of them individually. For now, the group holding together on quiet volume is itself the useful information, and CRWD’s volume spike is the one thing I’m actually watching daily.
Let’s see where this leads
Investment Gems 
Leave a comment