Palo Alto Networks fell for a third straight day, and it took the rest of cybersecurity software with it

$PANW closed down 9.28% on Wednesday, its second straight double-digit-percentage decline since reporting fiscal Q4 earnings. The stock has now fallen from $382.13 on August 31 to $328.48, a two-session drop of 14.0%, by our own daily close data.

The earnings themselves beat estimates: adjusted EPS of $1.02 against $0.98 expected, and revenue of $3.41 billion against $3.35 billion expected, up 34% year over year. Palo Alto also announced it would acquire the AI startup Console to expand its agentic security tools. None of that stopped the stock from falling roughly 5% in the session the report landed in and continuing lower from there.

The rest of the group moved with it

None of $CRWD, $DDOG or $FTNT reported earnings this week. All three fell alongside Palo Alto anyway:

That's a tight, correlated move across four names with different products, different earnings calendars, and no shared news event this week beyond Palo Alto's report.

The same group rallied together nine days earlier

This isn't the first time this basket has moved as a bloc. On August 27, CrowdStrike and Okta both posted earnings beats — CrowdStrike's revenue rose 26% year over year with EPS ahead of estimates. In the same session, our data shows $CRWD up 20.5%, $PANW up 12.8%, $FTNT up 9.7% and $DDOG up 6.7%, even though only CrowdStrike and Okta (not part of the S&P 500) had actually reported.

So the same four stocks that rallied together on someone else's good earnings on August 27 sold off together on Palo Alto's report this week, regardless of the fact that Palo Alto's own numbers beat estimates. The group is trading less like four separate companies and more like a single cybersecurity-software basket that reprices on whichever member reports next.

What the sector number hides

Our Technology sector reading for September 2 shows a cap-weighted gain of 0.62%, lifted by $NVDA, $META, $MU and $ORCL. A reader looking only at that sector figure would have no way to see that a cluster of large security-software names inside it fell 4-9% the same day. That gap between the sector total and what happened inside it is the reason to look at the constituent level rather than stop at the sector average.

$NOW, which sells workflow software with some security-adjacent products, also fell 4.32% the same day, though we're treating that as a looser fit with the core group given its different business.

What we're not claiming

We aren't asserting a causal mechanism for the sympathy moves — no news event tied Datadog, CrowdStrike or Fortinet to Palo Alto's earnings report this week, and it's equally possible index and thematic-ETF flows (the cybersecurity ETF CIBR holds all four names) mechanically move the basket together regardless of each company's own fundamentals. We also aren't calling Palo Alto's post-earnings decline a verdict on the results themselves — a beat-and-selloff is a common pattern when a stock is already priced for a strong quarter, and we have no way to measure what the market had priced in beforehand.