Fortinet, a $118bn maker of FortiGate firewall appliances that also sells branch networking, endpoint and cloud-security software off one operating system, told investors on 29 July that its June quarter was the best in its recent history. Revenue rose 25.6% to $2.048bn, billings 33% to $2.37bn and product revenue 52% to $773m, with a record 33.7% GAAP operating margin. Free cash flow more than tripled to $966m. Management raised full-year guidance to billings of $9.35–9.55bn and revenue of $8.02–8.18bn. Revenue growth has now accelerated four quarters running, from 14.4%.

The stock has gone nowhere since. Across the seven largest listed pure-play security vendors, the past 30 days produced an equal-weighted gain of roughly 8.8% — and Fortinet is down 1.5%, second from last. The name that led, at +19.6%, was Zscaler, which has published no financial information since 26 May.

What actually moved them

The advance is not a slow accumulation on improving orders. All seven fell together between 6 July and 28 July, then rose together over the eleven sessions to 12 August by 17.8% equal-weighted. On 4 August every one of them gained between 3.1% and 8.6% with no security-sector news at all: the Nasdaq Composite rose 2.59% and information-technology shares 4% as investors rotated back into software after a month of selling semiconductors, with Palantir up 29% the same day. The other outsized session was 14 July, when IBM pre-announced revenue of $17.2bn against $17.9bn expected and chief executive Arvind Krishna said clients would pause new security deals until they knew what securing artificial intelligence would cost. Security shares rallied on that warning — CrowdStrike 12.1%, Okta 10.8%.

One housekeeping correction matters before any of the twelve-month figures are read. CrowdStrike's board approved a four-for-one forward stock split on 3 June, with split-adjusted trading from 2 July. Unadjusted price series show the shares down 48.5% over a year; adjusted, they are up 105.9%, and the group's twelve-month gain is 60.7%, not 38%.

Which businesses back the move

Three do. Fortinet is described above. Cloudflare, which runs a global edge network selling content delivery, denial-of-service protection and zero-trust access, grew revenue 35.9% to $696.1m — a fourth consecutive acceleration — with dollar-based net retention at 120%, remaining performance obligations up 38% to $2.73bn, and full-year guidance raised to $2.864–2.870bn on a beat of $696.1m against $664.7m expected. CrowdStrike, whose Falcon platform sells endpoint, cloud-workload and identity protection by subscription, grew 25.6% with record net-new annual recurring revenue of $255.8m, up 32%, as the customer-commitment packages issued after its 2024 outage rolled off.

Three are unresolved. Palo Alto Networks, the group's largest at $314bn, grew 31.1% to $3.00bn — but gross margin fell 5.3 points to 67.6%, it swung to a GAAP operating loss of $183m, and diluted shares rose from 713m to 744m. That is the CyberArk identity acquisition, not organic acceleration; roughly $1.6bn of its $8.1bn next-generation security recurring revenue came from deals. Rubrik, a data-security and cyber-recovery vendor and the group's newest listing, grows fastest at 39.0% but is decelerating from 51.2% a year ago. Zscaler holds 25.4% growth and improving 77.3% gross margins, but its shares fell more than 30% in May after soft fourth-quarter guidance and the departure of two sales leaders.

One contradicts. Okta, which sells corporate single sign-on and the Auth0 developer identity portfolio, grew 11.2% — its fifth straight quarter in an 11–13% band — with consensus modelling 10.0% growth next fiscal year. The shares are up 83% in three months. Operating margin genuinely improved, from -2.4% two years ago to 7.3%, but the growth rate has not moved.

Business verdict: CONFIRMS at Fortinet, Cloudflare and CrowdStrike; INCONCLUSIVE at Palo Alto, Rubrik and Zscaler; CONTRADICTS at Okta.

The valuation spread

Because gross margins run from 67.6% at Palo Alto to 80.5% at Rubrik, price-to-gross-profit is the fairer normaliser than price-to-sales, and four of the seven have no usable trailing earnings. Trailing multiples span 5.7-fold: Cloudflare 60.5x, CrowdStrike 59.2x, Palo Alto 41.2x, Fortinet 19.5x, Rubrik 17.2x, Zscaler 11.8x, Okta 10.6x. Every one compresses on forward figures. Fortinet is the only member whose advance is earnings rather than re-rating — 19.5x to 18.2x gross profit, 56.4x to 47.1x earnings, a 2.6% free-cash-flow yield. Palo Alto's trailing price-to-sales has roughly doubled from 14.8x in May to 29.6x. Cloudflare carries 259.5x forward earnings, though Goldman Sachs raised its target to $389 from $266 and BTIG to $382 after the August print.

Valuation verdict: CONTRADICTS for five of seven; CONFIRMS at Fortinet. The open cell is Zscaler, growing at CrowdStrike's rate for a fifth of the multiple.

On the tape, five names have held an uptrend with the 50-day average above the 200-day since May or June — Fortinet and Cloudflare both since 5 May, 65 trading sessions. Zscaler has not: it led the month while still below its 200-day average of $186.93. That is the tension in one line.

Demand is not the problem. Gartner forecasts global information-security spending of $244.2bn in 2026, up 13.3%, and among government technology chiefs cybersecurity is the top area for increased 2026 investment at 85%, ahead of artificial intelligence at 80%. The question is which of these seven collects it.

The setup

Where it stands — Fortinet delivered the group's best quarter and its worst month of price action; Zscaler led on no disclosure at all. Would confirm — Zscaler's July-quarter revenue lands at or above its $875–878m guide with billings growth restored. Would invalidate — Okta's 26 August print holds revenue growth at or below 11% while shares stay near highs. Watch next — Okta reports 26 August, Rubrik 27 August, Palo Alto 1 September, CrowdStrike 2 September. Valuation — Zscaler 11.8x trailing and 9.6x forward gross profit against CrowdStrike's 59.2x and 50.7x on the same 25.6% growth.