Opinion · Positioning · September 1, 2026
Cybersecurity's Guidance Rally Fully Reversed by Tuesday. SanDisk's Pricing Rally Didn't.
Monday, CrowdStrike rose 5.77% on a new product launch layered on a raised outlook, and Fortinet and Palo Alto Networks rose with it in sympathy — a guidance-driven, sentiment-priced rally covered in Monday’s Opinion piece. SanDisk also rose Monday, 5.50%, but for a different reason: a Zacks Rank #1 upgrade citing a 17.1% rise in 60-day consensus earnings estimates, sitting on top of a real NAND-pricing supply shortage. Tuesday, crude oil jumped 5.46% and Treasury yields climbed on escalating U.S.-Iran tension, per same-day Motley Fool coverage this site cited in today’s News piece, and growth stocks sold off broadly. CrowdStrike, Palo Alto Networks and Fortinet gave back all of Monday’s gain and then some — each now sits below where it closed last Friday, August 28. SanDisk gave back only a slice of its own rally and remains net positive over the same four sessions. The difference is not luck. It is what each Monday rally was actually pricing.
1. Two rallies, indexed to the same starting point
All four names sat somewhere near where they closed last Thursday before Monday’s moves began. Indexing each to its own August 28 close removes the price-level differences between a $215 stock and a $1,537 one, and makes the comparison direct: three cybersecurity names each round-tripped through a rally and gave it all back within four sessions; the memory name kept most of its gain.
Each ticker’s own August 28 close indexed to 0%. Palo Alto Networks, CrowdStrike and Fortinet all rallied Monday on guidance and product news, then gave it back Tuesday on the oil-and-yields shock. SanDisk rallied Monday on an earnings-estimate upgrade tied to a physical NAND-pricing cycle and held most of the gain.
2. Why the multiple gets sold first when yields move
A Zacks piece cited in this site’s prior Opinion coverage put CrowdStrike at 32.97x forward price-to-sales against an 18.51x industry average; a same-week Motley Fool piece put Palo Alto Networks at roughly double its own five-year average valuation heading into its Q4 report. Both multiples are bets on a growth rate continuing, and both are unusually sensitive to the discount rate applied to future cash flows — which is exactly what rising Treasury yields change. SanDisk’s rally, by contrast, was priced off a 17.1% rise in near-term consensus earnings estimates tied to a physical supply shortage in NAND memory chips, not a re-rating of a distant growth story. When yields spike, the mechanism that gets repriced first is the multiple on distant cash flows, not the cash flow itself — and SanDisk’s rally had comparatively little multiple in it to begin with, even after its own run: the same coverage put the stock at roughly 7x forward earnings, down from roughly 30x at year-end.
This isn’t a claim that CrowdStrike’s or Palo Alto Networks’ underlying businesses got worse Tuesday — nothing in the sources I checked suggested a dated, company-specific reason for either decline. It is a claim about what kind of price move is durable. A rally built on “the market will pay more for the same future cash flows” is durable only as long as the discount rate cooperates. A rally built on “the near-term cash flows themselves just got revised up” survives a lot more.
Sized mechanically: CrowdStrike’s 32.97x forward price-to-sales multiple, if it compressed toward the 18.51x software-industry average Zacks cited, implies a meaningfully lower price even with revenue held flat — a scenario the table below sizes, not predicts.
| If CrowdStrike's forward P/S multiple compresses to… | Implied price | vs. Sept 1 close |
|---|---|---|
| 32.97x (today's multiple, unchanged) | $215.07 | — |
| 30.0x | $195.72 | −9.0% |
| 25.0x | $163.02 | −24.2% |
| 18.51x (software-industry average, per Zacks) | $120.72 | −43.9% |
Assumptions, stated plainly. This table applies a range of forward price-to-sales multiples — including the 18.51x software-industry average reported by Zacks Investment Research — to CrowdStrike’s September 1 close, holding forward revenue fixed at whatever level is implied by today’s 32.97x multiple. It is a mechanical sensitivity, not a forecast: full compression to the industry average has not happened and may never happen, and forward revenue itself will change as fiscal 2027 and 2028 play out, in either direction. Zacks’ own coverage separately notes CrowdStrike’s AI Detection and Response business grew annual recurring revenue at a rate that, if it continues, would argue for the multiple staying elevated rather than compressing toward a broader industry average that includes slower-growing peers.
What would change this read
WatchTwo things that would tell me this framework is wrong, or that it's about to apply somewhere new
1. Whether Tuesday's oil-and-yields move was a one-day spike or the start of a trend. A single-session shock reverses; a sustained climb in the 10-year would keep pressuring exactly these multiples, not just for one day. 2. Whether the NAND-pricing cycle itself shows signs of turning. SanDisk’s rally survived Tuesday because it wasn’t priced off sentiment — but a cyclical memory-pricing story can turn on its own dated catalyst, and when it does, SanDisk would be exposed the same way CrowdStrike was Tuesday, for a completely different reason.
I hold all four names discussed here: CrowdStrike (2 shares), Palo Alto Networks (5 shares), Fortinet (3 shares) and SanDisk (2 shares), and made no trades in any of them this week. The read I am taking from placing these four side by side is not a prediction about where yields go next. It is a reminder that when I ask why a position rallied, the honest answer — sentiment repricing a distant growth story, or a near-term number that actually moved — tells me a great deal about how much of that rally I should expect to still be there next week.